$ rpki-client -vvf rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft File: haeIySXAhvfi-8AHHZ6SmOwCPlk.mft (raw, json) Hash identifier: GgOCsJYpKJSW0mZDGb4QJ+U8d2UAPuk6eAec7iputy4= Subject key identifier: 42:74:78:46:F3:FA:EA:90:AC:8B:F4:F7:EC:BD:9E:03:90:64:42:83 Authority key identifier: 85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59 Certificate issuer: /CN=A9163FDD/serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft Manifest number: 2B Signing time: Mon 27 Jul 2026 11:06:22 +0000 Manifest this update: Mon 27 Jul 2026 11:06:22 +0000 Manifest next update: Mon 03 Aug 2026 11:06:22 +0000 Files and hashes: 1: haeIySXAhvfi-8AHHZ6SmOwCPlk.crl (hash: Oq6MB0HkExZDgfM+ehFM8GOVhl19SKAgatTaZzzZl5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163FDD, serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59 Validity Not Before: Jul 27 11:06:22 2026 GMT Not After : Aug 3 11:06:22 2026 GMT Subject: CN=6a673bae-a1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:9d:91:27:2d:7c:24:a6:c1:6e:9e:27:9d: 85:6c:dc:55:af:44:97:3b:ba:9c:c1:3b:a2:11:8d: 2e:f6:90:49:7b:f7:5a:99:66:96:c2:24:1e:15:67: 36:c1:86:12:63:46:29:fa:35:e4:d0:b6:24:5a:ee: d8:bd:b3:11:d2:94:27:aa:4e:64:7a:20:19:9f:12: 83:7d:10:80:69:2b:15:74:a0:67:2d:e2:18:ce:d6: e2:a3:ee:66:7a:6c:a5:ad:18:47:b2:25:14:63:dc: fb:66:e2:a5:de:9f:12:40:83:d1:ca:83:f1:b2:80: a6:2c:1c:f0:03:31:1a:7b:48:fb:40:80:1a:6d:fa: 2d:52:d4:02:34:69:4d:8f:eb:82:60:93:db:1c:9c: 40:9c:9f:0a:78:23:31:44:a2:0f:05:90:5f:a0:d6: 78:ae:0b:a5:65:d5:8d:00:f6:06:95:66:3a:78:b7: e5:01:06:81:db:5e:3c:2e:cd:47:be:ae:8c:46:aa: 02:ca:85:9d:09:95:9e:6b:59:ba:c1:4d:32:59:90: a1:db:77:f1:b3:5d:3a:d6:8a:4c:08:d7:9b:c0:ad: 4a:fb:8c:98:97:6b:21:5c:8d:94:a3:01:6f:2b:6a: 1b:3f:56:6c:4e:e2:2f:05:73:6b:65:1b:e8:73:04: 88:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:74:78:46:F3:FA:EA:90:AC:8B:F4:F7:EC:BD:9E:03:90:64:42:83 X509v3 Authority Key Identifier: keyid:85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:de:e0:30:10:d1:d3:83:a7:f8:d4:09:f3:80:55:18:e7:23: d8:04:20:a3:ee:97:81:fa:31:94:ba:a4:5d:bc:87:6f:51:08: e9:59:34:eb:b0:a4:3b:7d:41:28:16:94:95:72:98:c4:da:38: 5a:38:12:46:39:5a:0d:eb:71:eb:ed:bf:a0:e3:ca:b2:e6:87: 79:59:8f:e5:50:32:66:e3:0c:df:38:ec:02:33:c9:59:af:bd: 01:de:18:54:25:67:9f:41:66:15:24:f1:df:42:ad:f1:1b:8d: 67:e1:3e:1d:ff:5e:53:0f:d2:c9:b7:82:6f:d0:ec:3a:47:a7: 7c:c8:d9:1c:67:4d:a2:74:14:ed:a7:dd:75:95:a6:5d:40:b0: 38:5c:13:3a:68:d6:f4:52:bb:eb:66:3d:34:dd:a2:a7:09:98: e0:6f:e3:27:10:96:17:6d:77:50:81:cb:43:5d:17:ef:d1:fe: cf:7d:ad:8d:b3:ea:15:37:f8:c9:f0:09:81:31:61:d4:da:8e: b5:04:87:4f:14:21:6c:92:fb:c7:9a:7f:64:4b:0f:56:eb:d3: c9:a3:5a:82:e2:43:59:28:6c:eb:9d:8b:25:8f:55:0f:f4:e2: 38:82:6b:e3:03:5f:e5:52:19:dd:3d:cf:85:71:75:0e:30:32: 94:90:29:ec -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0ZERDExMC8GA1UEBRMoODVBNzg4QzkyNUMwODZGN0UyRkJDMDA3MUQ5RTkyOThF QzAyM0U1OTAeFw0yNjA3MjcxMTA2MjJaFw0yNjA4MDMxMTA2MjJaMBgxFjAUBgNV BAMTDTZhNjczYmFlLWExY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwm52RJy18JKbBbp4nnYVs3FWvRJc7upzBO6IRjS72kEl791qZZpbCJB4VZzbB hhJjRin6NeTQtiRa7ti9sxHSlCeqTmR6IBmfEoN9EIBpKxV0oGct4hjO1uKj7mZ6 bKWtGEeyJRRj3Ptm4qXenxJAg9HKg/GygKYsHPADMRp7SPtAgBpt+i1S1AI0aU2P 64Jgk9scnECcnwp4IzFEog8FkF+g1niuC6Vl1Y0A9gaVZjp4t+UBBoHbXjwuzUe+ roxGqgLKhZ0JlZ5rWbrBTTJZkKHbd/GzXTrWikwI15vArUr7jJiXayFcjZSjAW8r ahs/VmxO4i8Fc2tlG+hzBIiPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQnR4RvP6 6pCsi/T37L2eA5BkQoMwHwYDVR0jBBgwFoAUhaeIySXAhvfi+8AHHZ6SmOwCPlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzRkRELzNGNDhCMEI0NDdC NTExRjFBMzJGNDUyQUFCODMzNzczL2hhZUl5U1hBaHZmaS04QUhIWjZTbU93Q1Bs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGFlSXlTWEFodmZpLThBSEhaNlNtT3dDUGxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz RkRELzNGNDhCMEI0NDdCNTExRjFBMzJGNDUyQUFCODMzNzczL2hhZUl5U1hBaHZm aS04QUhIWjZTbU93Q1Bsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAF3uAwENHTg6f41AnzgFUY5yPYBCCj7peB+jGUuqRdvIdvUQjpWTTrsKQ7fUEo FpSVcpjE2jhaOBJGOVoN63Hr7b+g48qy5od5WY/lUDJm4wzfOOwCM8lZr70B3hhU JWefQWYVJPHfQq3xG41n4T4d/15TD9LJt4Jv0Ow6R6d8yNkcZ02idBTtp911laZd QLA4XBM6aNb0UrvrZj003aKnCZjgb+MnEJYXbXdQgctDXRfv0f7Pfa2Ns+oVN/jJ 8AmBMWHU2o61BIdPFCFskvvHmn9kSw9W69PJo1qC4kNZKGzrnYslj1UP9OI4gmvj A1/lUhndPc+FcXUOMDKUkCns -----END CERTIFICATE-----Generated at Wed Jul 29 04:48:23 2026 by rpki-client