$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: UGnd5Cuu/5sryxBxWUrS8Ia8pYz8+qnBsKAuzq44K34= Subject key identifier: F5:31:CA:82:24:CF:DF:89:47:D0:89:0D:C1:85:B3:E2:C0:34:8C:6D Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 131A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1BE2 Signing time: Tue 28 Jul 2026 17:06:50 +0000 Manifest this update: Tue 28 Jul 2026 17:06:50 +0000 Manifest next update: Tue 04 Aug 2026 17:06:50 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: xyN8vqnqE2JmTB7pf9DCJGz8sppND8WAPK2PfDAYCho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4890 (0x131a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: Jul 28 17:06:50 2026 GMT Not After : Aug 4 17:06:50 2026 GMT Subject: CN=6a68e1aa-5e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:67:c7:f5:ea:64:f8:ec:e8:79:56:00:49: dc:19:2c:93:59:a9:a2:17:50:6b:e1:c3:6a:77:8f: 96:ca:34:1d:64:8e:70:5e:cd:84:aa:0e:9c:f8:34: cc:01:34:0b:a3:c7:77:94:1f:79:05:03:48:bc:30: 10:8a:89:8e:d3:78:9a:a8:e1:1a:37:98:97:67:55: 66:95:df:53:49:33:7b:4d:63:4b:33:2e:1b:53:ba: a9:19:9d:0e:b2:d8:6f:2f:f9:f2:73:5f:db:ca:39: 1e:8c:e8:29:5d:b6:41:30:4f:fd:b6:ff:2e:79:a5: dd:75:6b:46:c3:9a:71:a0:d8:40:f1:1c:24:c1:da: 4d:a4:e8:07:21:1c:b7:12:80:df:4b:55:e5:58:f7: a1:4d:41:8f:58:c0:a2:0c:26:76:a3:1b:20:4d:a8: 4e:4a:c9:df:2f:01:e9:35:e0:e7:23:8d:28:70:94: cd:d8:bd:63:b8:e8:56:97:56:1f:3b:fe:5e:bb:7b: 5a:1d:be:9d:78:d9:fb:52:23:95:da:98:e4:5a:2f: 62:c7:08:36:3f:4d:0d:91:9b:0c:0b:0b:50:2a:fc: 59:dc:e2:1d:2d:86:f5:36:91:6b:78:10:af:52:02: 3c:4f:06:75:11:df:93:bb:a8:d7:4c:14:46:ec:2c: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:31:CA:82:24:CF:DF:89:47:D0:89:0D:C1:85:B3:E2:C0:34:8C:6D X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:71:2f:3b:66:92:22:15:ca:19:10:9e:9c:df:f6:7d:58:86: be:61:c9:aa:0f:b2:d2:17:74:78:af:64:19:a6:f9:f5:17:10: 5b:5d:b9:09:ce:82:82:19:97:49:4f:02:f9:24:5c:4a:5f:53: e5:b2:02:45:32:14:ea:af:57:c6:b5:e8:05:57:9a:ab:6b:18: 5e:02:ac:c1:34:18:93:06:b0:fa:5d:96:68:46:90:4d:c5:75: 97:93:82:7b:02:5c:e3:91:10:41:17:99:b0:06:59:a9:c4:0c: b4:67:c9:89:a8:23:cf:57:49:5e:96:73:4e:4e:01:4f:cc:4a: a1:8a:45:69:84:8a:d9:6f:49:ce:c0:49:06:b4:7b:71:31:79: cf:e4:6c:4a:d9:d8:9c:2b:ca:85:1f:dd:f5:01:ec:19:6c:9f: 70:69:47:e2:a6:a6:c9:c0:b5:a4:d2:a0:0b:62:1b:9a:30:e3: b0:0b:92:d9:a9:47:fb:fe:08:5e:0a:f5:22:0b:d1:e4:ca:f3: 6e:61:33:a2:63:a4:0e:92:4b:a2:ce:db:df:72:9f:51:25:2d: 79:36:85:8c:ad:43:58:04:d1:53:85:d0:8f:e8:f1:ae:d8:32: 85:7f:14:33:ef:e6:b0:3c:ad:45:5e:24:9e:e1:1d:de:c1:6e: 62:b6:15:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICExowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjYwNzI4MTcwNjUwWhcNMjYwODA0MTcwNjUwWjAYMRYwFAYD VQQDEw02YTY4ZTFhYS01ZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZZnx/XqZPjs6HlWAEncGSyTWamiF1Br4cNqd4+WyjQdZI5wXs2Eqg6c+DTM ATQLo8d3lB95BQNIvDAQiomO03iaqOEaN5iXZ1Vmld9TSTN7TWNLMy4bU7qpGZ0O sthvL/nyc1/byjkejOgpXbZBME/9tv8ueaXddWtGw5pxoNhA8RwkwdpNpOgHIRy3 EoDfS1XlWPehTUGPWMCiDCZ2oxsgTahOSsnfLwHpNeDnI40ocJTN2L1juOhWl1Yf O/5eu3taHb6deNn7UiOV2pjkWi9ixwg2P00NkZsMCwtQKvxZ3OIdLYb1NpFreBCv UgI8TwZ1Ed+Tu6jXTBRG7Cwf6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUxyoIk z9+JR9CJDcGFs+LANIxtMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGXEvO2aSIhXKGRCenN/2fViGvmHJqg+y0hd0eK9kGab59RcQW125Cc6CghmX SU8C+SRcSl9T5bICRTIU6q9XxrXoBVeaq2sYXgKswTQYkwaw+l2WaEaQTcV1l5OC ewJc45EQQReZsAZZqcQMtGfJiagjz1dJXpZzTk4BT8xKoYpFaYSK2W9JzsBJBrR7 cTF5z+RsStnYnCvKhR/d9QHsGWyfcGlH4qamycC1pNKgC2IbmjDjsAuS2alH+/4I Xgr1IgvR5MrzbmEzomOkDpJLos7b33KfUSUteTaFjK1DWATRU4XQj+jxrtgyhX8U M+/msDytRV4knuEd3sFuYrYV9A== -----END CERTIFICATE-----Generated at Tue Jul 28 23:43:24 2026 by rpki-client