$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft File: cnOFPaBj78uOxUSwMg1acHuUwIk.mft (raw, json) Hash identifier: yAbhQZsIZuDRJPbRqdbyT+3KQbcfRv5MMwvTcZpdVPg= Subject key identifier: 96:82:DC:2F:DA:75:06:FC:6B:18:73:57:E6:8B:37:84:90:DC:28:8C Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft Manifest number: 2EBD Signing time: Tue 28 Jul 2026 15:46:09 +0000 Manifest this update: Tue 28 Jul 2026 15:46:08 +0000 Manifest next update: Tue 04 Aug 2026 15:46:08 +0000 Files and hashes: 1: cnOFPaBj78uOxUSwMg1acHuUwIk.crl (hash: s0mf5Bdj24ZGf6/S3quIxdXCmQ/BHQoYLkMYxYWRzJM=) 2: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (hash: 1/JNtgxrsCQgMCZg/xoCtiLGpLNRukBhGSMeMiBFJLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824, serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Validity Not Before: Jul 28 15:46:08 2026 GMT Not After : Aug 4 15:46:08 2026 GMT Subject: CN=6a68cec1-1e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:60:10:8d:ba:fa:d2:b1:57:44:c5:4e:df: ac:b4:7e:60:32:9b:0e:ce:d6:ae:9e:55:b6:a9:cf: 68:c5:c8:e6:47:95:a3:e0:78:ab:8b:11:50:96:86: be:25:d9:40:1d:61:0c:3f:80:04:89:e4:e5:69:2a: 23:ee:66:83:21:41:74:92:ec:f1:15:ff:f1:cf:57: b2:5a:51:e0:c7:11:2c:74:64:bc:f7:ee:c1:6d:60: 28:31:8b:0c:0b:5f:3e:48:a6:16:66:51:1f:37:d5: 45:38:7c:cf:e6:5e:4d:1f:a1:ec:29:bc:b6:6f:e7: cb:46:b3:c2:81:3e:4f:b1:3a:e3:d0:33:a0:d1:52: cf:0a:e4:86:30:ee:42:83:d5:9e:61:ac:13:04:4c: 30:9c:31:45:d3:47:fa:58:1e:b4:d1:2b:8e:66:e3: 57:95:ec:52:ea:eb:49:00:85:d4:b2:ff:a0:71:36: be:3e:5f:bb:23:26:23:b7:63:1b:16:6d:03:ea:55: 85:7f:aa:77:30:28:ca:44:4c:3a:10:65:c5:fb:f7: b2:2a:91:f5:5b:b9:e0:7b:82:b7:d8:e6:a4:44:a0: 40:e2:86:4c:87:81:f7:12:23:6c:7a:60:3f:df:d1: 13:d5:5f:87:0a:d4:35:2b:f3:3c:72:23:99:f5:b3: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:82:DC:2F:DA:75:06:FC:6B:18:73:57:E6:8B:37:84:90:DC:28:8C X509v3 Authority Key Identifier: keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e2:af:f2:46:c6:d6:bc:dc:75:b5:b6:82:84:26:34:e9:e7: 3a:f0:14:59:b6:6d:bb:26:dd:85:8a:91:f3:59:d8:0e:c4:9e: fe:d0:35:ad:08:54:f2:8d:9b:85:47:03:6a:70:76:d6:ea:1a: 8d:c6:3d:62:06:70:3e:31:f5:5c:3f:46:3d:b6:fd:0f:48:63: ce:ec:f4:cc:40:7d:cb:68:d8:0b:13:4f:9d:68:66:b1:3a:c5: 07:1f:ee:d6:67:62:21:ad:b9:25:87:b1:31:cc:68:1c:88:59: 7c:43:53:53:f7:17:08:3e:9b:8a:21:62:17:78:1e:11:54:e1: 50:75:47:09:a1:e7:d6:a2:f6:dd:13:db:fc:94:22:83:4e:16: 9e:4f:1d:2c:a7:94:f3:42:15:1a:e9:6b:d1:1b:4e:63:96:b7: f1:0b:57:38:07:64:09:ee:2a:b0:b2:56:24:d5:fc:4f:f2:3c: 76:e6:4a:92:94:76:83:6e:0d:5f:c7:fc:ad:54:69:e4:ac:60: 9d:30:86:1e:00:0b:04:af:f1:4b:ef:7f:d1:b1:dc:14:f2:08: ad:d8:40:1f:d2:2b:57:75:60:4c:f4:71:cd:88:04:fe:03:ac: 15:6e:17:67:7c:79:2e:9a:26:ec:66:c7:c8:83:40:88:f5:ec: d8:88:c5:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDcyNzM4NTNEQTA2M0VGQ0I4RUM1NDRCMDMyMEQ1QTcw N0I5NEMwODkwHhcNMjYwNzI4MTU0NjA4WhcNMjYwODA0MTU0NjA4WjAYMRYwFAYD VQQDEw02YTY4Y2VjMS0xZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4BgEI26+tKxV0TFTt+stH5gMpsOztaunlW2qc9oxcjmR5Wj4HirixFQloa+ JdlAHWEMP4AEieTlaSoj7maDIUF0kuzxFf/xz1eyWlHgxxEsdGS89+7BbWAoMYsM C18+SKYWZlEfN9VFOHzP5l5NH6HsKby2b+fLRrPCgT5PsTrj0DOg0VLPCuSGMO5C g9WeYawTBEwwnDFF00f6WB600SuOZuNXlexS6utJAIXUsv+gcTa+Pl+7IyYjt2Mb Fm0D6lWFf6p3MCjKREw6EGXF+/eyKpH1W7nge4K32OakRKBA4oZMh4H3EiNsemA/ 39ET1V+HCtQ1K/M8ciOZ9bMfdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJaC3C/a dQb8axhzV+aLN4SQ3CiMMB8GA1UdIwQYMBaAFHJzhT2gY+/LjsVEsDINWnB7lMCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4dU94VVN3TWcxYWNIdVV3 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuT0ZQYUJqNzh1T3hVU3dNZzFhY0h1VXdJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzgyNC9CQTBFRkU1MkZEMjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4 dU94VVN3TWcxYWNIdVV3SWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkOKv8kbG1rzcdbW2goQmNOnnOvAUWbZtuybdhYqR81nYDsSe/tA1rQhU8o2b hUcDanB21uoajcY9YgZwPjH1XD9GPbb9D0hjzuz0zEB9y2jYCxNPnWhmsTrFBx/u 1mdiIa25JYexMcxoHIhZfENTU/cXCD6biiFiF3geEVThUHVHCaHn1qL23RPb/JQi g04Wnk8dLKeU80IVGulr0RtOY5a38QtXOAdkCe4qsLJWJNX8T/I8duZKkpR2g24N X8f8rVRp5KxgnTCGHgALBK/xS+9/0bHcFPIIrdhAH9IrV3VgTPRxzYgE/gOsFW4X Z3x5Lpom7GbHyINAiPXs2IjF9Q== -----END CERTIFICATE-----Generated at Tue Jul 28 21:44:55 2026 by rpki-client