$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: pS/w05IZDgWf9VOg20dUK5fUh3f+QCpprAoP67Esr2g= Subject key identifier: D8:2F:4D:13:29:55:94:95:7C:E7:30:DB:94:8B:21:80:C7:43:CF:6C Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 112A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 1111 Signing time: Tue 28 Jul 2026 17:23:12 +0000 Manifest this update: Tue 28 Jul 2026 17:23:11 +0000 Manifest next update: Tue 04 Aug 2026 17:23:11 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: Fhg1pMltdr0piJqz9ozKS0hSAduVWzwtveaOM4zx/ww=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: YTLM/IZw3IIR4MorBonKso+E+SL2P2Fu9vwyg8zdQ0M=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: mkc5tQXX6CS1iIsQT2pt5gTX2uoC5kqfFh3pHjgWeEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4394 (0x112a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Jul 28 17:23:11 2026 GMT Not After : Aug 4 17:23:11 2026 GMT Subject: CN=6a68e580-766f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2e:b2:9c:cc:10:8f:7c:29:e3:e1:ce:06:aa: 38:bc:40:77:6c:41:d7:a9:83:56:25:c3:54:21:59: 78:23:0d:46:f2:3b:b8:6e:0b:c1:18:8f:2c:7c:05: 66:48:40:6d:70:77:d1:45:fa:6c:64:40:d1:ea:02: 42:b7:c9:e0:a6:fc:d4:32:0a:c8:74:bf:23:72:9e: 53:89:07:03:9e:1c:f7:9d:f4:e8:10:b3:24:1d:99: 82:ff:19:c4:7d:26:99:c4:0e:e0:34:b4:80:71:d6: c4:1f:0c:0b:a9:00:41:b6:7c:e2:ec:a7:ab:d9:12: 59:b6:d4:93:66:df:13:45:e9:a3:48:b0:82:43:96: 1e:80:cc:6b:0d:a3:59:36:b3:14:cd:b8:af:bc:d9: b4:6c:09:06:19:5c:44:d9:a9:80:b8:8e:79:0a:92: 31:97:bb:8e:75:04:c9:28:4e:4a:3c:3f:63:46:2f: e3:2c:73:c1:58:20:c7:50:4e:e9:03:ad:bb:7f:c9: f8:e2:89:ad:e2:40:16:9d:6e:64:57:83:8c:3f:f7: cb:e7:ba:ab:19:02:97:5c:5f:ba:46:71:e4:89:e6: 0e:b2:ea:f5:02:c7:9e:db:cb:9d:b7:04:83:51:0b: 5d:d4:90:b3:b8:38:32:36:6f:b1:37:ea:12:b3:2d: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2F:4D:13:29:55:94:95:7C:E7:30:DB:94:8B:21:80:C7:43:CF:6C X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:3b:7a:28:41:29:ca:34:e8:58:1c:83:d0:df:42:df:78:a8: 0b:4b:70:2f:8e:b4:04:7c:e5:af:ee:9e:bb:d3:e0:42:ba:1a: 55:32:f4:65:93:31:03:70:e5:f9:cf:fa:5f:5b:0b:94:56:3b: 6f:40:bb:6b:46:b1:40:f4:bd:4a:35:e0:62:b3:a7:22:ea:18: 15:14:33:7a:82:07:6f:73:3d:b7:d7:d6:c7:2c:88:83:3c:68: 6a:75:43:75:72:23:58:b5:0d:d5:fd:42:32:ce:92:b4:8b:a5: 55:52:ce:b2:6f:9a:7b:35:4a:7a:05:a9:f7:d9:65:8c:04:4e: ad:17:0b:23:90:f8:f4:8e:45:1d:16:cf:81:af:9e:58:ef:ba: ef:00:b4:91:51:9f:73:6c:bd:68:3b:b0:9c:49:b5:c9:63:b5: 7e:3b:df:4b:06:5a:04:2c:8e:c7:ae:cd:31:eb:30:35:73:e1: a8:88:3c:19:75:19:af:3d:e4:0a:71:8f:6a:24:ea:9a:43:65: e7:56:36:2d:50:ff:54:25:6b:1a:b4:ab:96:db:6c:81:bf:bb: 2e:56:94:2b:08:53:42:dd:e4:17:82:62:4d:7b:7f:e9:7d:d1: ae:eb:04:28:a1:48:cf:70:25:6a:2f:95:4c:84:9e:f5:b5:fa: 6a:fa:5e:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICESowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjYwNzI4MTcyMzExWhcNMjYwODA0MTcyMzExWjAYMRYwFAYD VQQDEw02YTY4ZTU4MC03NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoC6ynMwQj3wp4+HOBqo4vEB3bEHXqYNWJcNUIVl4Iw1G8ju4bgvBGI8sfAVm SEBtcHfRRfpsZEDR6gJCt8ngpvzUMgrIdL8jcp5TiQcDnhz3nfToELMkHZmC/xnE fSaZxA7gNLSAcdbEHwwLqQBBtnzi7Ker2RJZttSTZt8TRemjSLCCQ5YegMxrDaNZ NrMUzbivvNm0bAkGGVxE2amAuI55CpIxl7uOdQTJKE5KPD9jRi/jLHPBWCDHUE7p A627f8n44omt4kAWnW5kV4OMP/fL57qrGQKXXF+6RnHkieYOsur1Asee28udtwSD UQtd1JCzuDgyNm+xN+oSsy1a4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgvTRMp VZSVfOcw25SLIYDHQ89sMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqzt6KEEpyjToWByD0N9C33ioC0twL460BHzlr+6eu9PgQroaVTL0ZZMxA3Dl +c/6X1sLlFY7b0C7a0axQPS9SjXgYrOnIuoYFRQzeoIHb3M9t9fWxyyIgzxoanVD dXIjWLUN1f1CMs6StIulVVLOsm+aezVKegWp99lljAROrRcLI5D49I5FHRbPga+e WO+67wC0kVGfc2y9aDuwnEm1yWO1fjvfSwZaBCyOx67NMeswNXPhqIg8GXUZrz3k CnGPaiTqmkNl51Y2LVD/VCVrGrSrlttsgb+7LlaUKwhTQt3kF4JiTXt/6X3RrusE KKFIz3Alai+VTISe9bX6avpe5Q== -----END CERTIFICATE-----Generated at Tue Jul 28 23:11:51 2026 by rpki-client