$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft File: dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json) Hash identifier: ZhpXtHHGt9Qq6Q2IMFSw7PxBJMrXN7OYs0RKa8iFZWU= Subject key identifier: 98:0B:60:F1:23:33:19:7D:E1:87:AA:28:95:4F:B0:89:87:01:D2:B3 Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft Manifest number: 0388 Signing time: Mon 27 Jul 2026 02:02:15 +0000 Manifest this update: Mon 27 Jul 2026 02:02:15 +0000 Manifest next update: Mon 03 Aug 2026 02:02:15 +0000 Files and hashes: 1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: OsAO6CBGwz1l5uw8OQSDVt0wZN6SVRGSXvL/3P8mjEU=) 2: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: HpPZhZVSwGrzf4zGYjjyQ7ueOCim2ZvtK0gkwPhEOmI=) 3: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: PAqkmFF7NdZLc+WBtc68ZNEhsmCDHgoBRZN4pVqjKP8=) 4: 7F78A06E6BBD11F18D81D59C7947A888.roa (hash: eg0ecmCsbK5JnVphz+icPr5TGD+NYgXexf2SF0w1KKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Jul 27 02:02:15 2026 GMT Not After : Aug 3 02:02:15 2026 GMT Subject: CN=6a66bc27-e153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:53:96:81:1f:a9:23:8c:9c:7c:72:49:18:62: 1a:41:29:8b:60:d2:b7:53:26:c0:75:d3:06:29:15: 44:7b:6c:2c:b2:77:2c:ac:e3:ea:ee:e9:8d:b1:e5: f5:96:26:f9:12:a6:ed:5e:bc:34:74:c7:3c:d0:11: 94:33:dc:df:9f:74:a6:e7:d5:ac:ff:ab:2c:45:8a: 6a:bf:9f:cc:80:04:04:a7:eb:b8:20:52:81:04:2a: da:b7:bc:3c:bc:45:13:90:bc:3a:24:31:01:91:fe: 41:03:3c:f0:bd:86:87:bf:ee:b4:8e:a1:27:25:80: e0:1b:9c:b1:7d:7d:bd:5b:6b:65:d9:15:a1:e0:0f: be:9b:ca:c2:2b:df:93:3b:f5:94:09:bc:a1:7d:85: a8:ce:89:76:09:64:0f:c7:52:5c:21:c6:3d:cb:f7: fb:3e:64:dd:03:4e:e2:2a:aa:b7:32:e7:43:e0:c7: d9:b7:63:92:eb:b7:84:c0:4a:5a:3c:11:3e:f6:84: d0:56:7b:2d:bd:7c:49:f0:02:24:c3:e5:c6:f8:cf: 6b:6c:59:6e:f9:dd:99:88:ec:0a:bd:ef:fb:d5:a1: 7c:5e:7c:d0:d8:60:57:0d:de:1b:57:91:3c:ac:af: c0:a3:ee:6e:26:9a:ef:90:db:d2:b0:fe:59:a0:81: 50:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0B:60:F1:23:33:19:7D:E1:87:AA:28:95:4F:B0:89:87:01:D2:B3 X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c1:bc:47:89:b8:19:72:24:4e:0c:ad:12:55:92:0d:fc:bc: 2f:53:6f:71:45:26:d7:f0:98:30:b6:f6:b5:ca:32:61:cf:17: f0:f0:68:43:85:99:ee:b8:aa:9d:5c:65:41:2e:fd:27:f1:a5: 42:e6:35:ec:b4:ae:4d:1d:03:44:43:4d:4d:2d:7f:8d:89:9e: a3:3d:84:ac:4a:ce:ad:67:13:31:23:dd:8c:c0:49:5d:0b:56: 80:51:5f:e4:0d:f3:01:ad:f5:d6:96:70:25:fc:d4:1c:a7:9d: 67:0d:7d:62:28:d9:2d:2b:3c:7f:19:6d:9e:01:be:99:6a:a2: 34:a0:8a:55:a4:8e:ed:07:24:55:84:7e:08:2c:76:61:e2:ff: dc:a5:8c:32:49:70:64:c8:0b:31:71:3d:48:f0:45:75:36:75: 8f:1b:0e:e6:c6:98:ce:cd:fd:ac:14:19:4f:be:f9:8e:f0:0b: fa:f6:58:e3:f3:a3:63:d6:a6:c5:63:6e:84:5d:eb:ee:c8:83: 4a:d2:34:9a:95:0f:48:e6:88:2a:ee:57:13:7e:39:3e:bc:cc: 65:6d:72:00:a9:1f:2d:3c:31:33:d4:68:0e:28:7c:3f:14:4c: 08:e7:45:09:70:b1:d6:e6:98:fc:35:41:77:2d:48:95:a0:a0: 46:9d:73:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjYwNzI3MDIwMjE1WhcNMjYwODAzMDIwMjE1WjAYMRYwFAYD VQQDEw02YTY2YmMyNy1lMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVOWgR+pI4ycfHJJGGIaQSmLYNK3UybAddMGKRVEe2wssncsrOPq7umNseX1 lib5EqbtXrw0dMc80BGUM9zfn3Sm59Ws/6ssRYpqv5/MgAQEp+u4IFKBBCrat7w8 vEUTkLw6JDEBkf5BAzzwvYaHv+60jqEnJYDgG5yxfX29W2tl2RWh4A++m8rCK9+T O/WUCbyhfYWozol2CWQPx1JcIcY9y/f7PmTdA07iKqq3MudD4MfZt2OS67eEwEpa PBE+9oTQVnstvXxJ8AIkw+XG+M9rbFlu+d2ZiOwKve/71aF8XnzQ2GBXDd4bV5E8 rK/Ao+5uJprvkNvSsP5ZoIFQIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJgLYPEj Mxl94YeqKJVPsImHAdKzMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zMENDMDg0QTA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJr by1LMGVjZWtESmtDT0RhNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcMG8R4m4GXIkTgytElWSDfy8L1NvcUUm1/CYMLb2tcoyYc8X8PBoQ4WZ7riq nVxlQS79J/GlQuY17LSuTR0DRENNTS1/jYmeoz2ErErOrWcTMSPdjMBJXQtWgFFf 5A3zAa311pZwJfzUHKedZw19YijZLSs8fxltngG+mWqiNKCKVaSO7QckVYR+CCx2 YeL/3KWMMklwZMgLMXE9SPBFdTZ1jxsO5saYzs39rBQZT775jvAL+vZY4/OjY9am xWNuhF3r7siDStI0mpUPSOaIKu5XE345PrzMZW1yAKkfLTwxM9RoDih8PxRMCOdF CXCx1uaY/DVBdy1IlaCgRp1zOA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:25:58 2026 by rpki-client