$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: puTCrkgDuv82+X/baApvEfy/qhA+fvfRh0RwsVArMV8= Subject key identifier: 7D:43:A2:25:8B:1B:C7:D9:85:A2:FB:6A:80:88:D6:37:1F:7B:40:68 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 09B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 098D Signing time: Tue 28 Jul 2026 20:24:28 +0000 Manifest this update: Tue 28 Jul 2026 20:24:28 +0000 Manifest next update: Tue 04 Aug 2026 20:24:28 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: gEHnVgkwHoWYnLBxWplHetIsXajzM/+jkXKnAKmFn8o=) 2: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: 1/1W8qYx2zRT+SB1jArsVcARbCr/b03bu7LoiR2N3yc=) 3: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: jyCcQPHB1GYl8fSSLexidNgFWzesxj3u8rWectLDfq0=) 4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 4FteVAZhXJnMTtQSuLVXL/Dj2oifA5aqn3kTr1yXK2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Jul 28 20:24:28 2026 GMT Not After : Aug 4 20:24:28 2026 GMT Subject: CN=6a690ffc-eee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:73:20:59:70:51:ef:15:a8:b7:8b:4c:1e: 33:9b:24:f2:68:21:f7:81:c4:c6:1a:76:0f:fe:bd: 98:1a:5c:ce:93:3c:b1:db:5f:97:2e:45:7b:09:e9: ad:72:83:fd:f8:85:f5:84:52:4e:5a:7f:f4:c2:df: 20:1e:3a:91:b2:1d:84:e7:89:48:db:b5:bf:32:fb: 71:77:85:2e:2f:7e:a7:96:2a:df:e2:11:1c:83:78: fe:d0:d3:37:8a:db:01:66:15:19:6d:42:52:bc:aa: 99:d6:11:e1:fb:f5:f9:05:f7:27:1c:07:08:fa:0f: b8:8c:31:a3:c4:af:f8:7e:b5:22:8e:75:82:2b:96: 78:67:d9:cc:43:8a:bb:89:bb:97:0d:ff:83:70:b4: 11:57:85:29:ad:49:ba:ec:2f:51:63:82:de:f0:21: 6a:d3:72:34:aa:9a:58:bc:ae:0a:d4:2d:06:2b:14: 27:2c:e8:d5:40:cb:7d:77:3f:40:85:75:7c:c6:e8: 25:1b:c5:cd:a7:7e:02:7e:19:28:9a:84:c4:e8:68: 94:cf:14:e8:f2:91:35:89:72:0a:d0:a1:16:2a:0d: 36:bd:5a:1d:00:45:0f:a4:11:a4:1d:21:d6:2d:e7: b2:76:b5:23:d2:7e:8d:cd:6f:7f:70:39:c1:13:5b: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:43:A2:25:8B:1B:C7:D9:85:A2:FB:6A:80:88:D6:37:1F:7B:40:68 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d9:66:93:de:29:24:a2:06:ae:83:a3:aa:a5:cd:e5:64:e4: 35:d0:eb:6f:0e:1c:ff:58:a5:65:5a:54:f6:34:6b:4e:3b:3e: b3:f4:12:5d:07:ae:d1:46:88:9a:42:ff:9a:2b:e9:f1:c7:3b: e4:65:06:a4:b6:63:d5:01:99:8c:17:15:94:d2:84:96:18:4b: 42:b2:72:ea:9c:c8:dd:22:19:3c:8e:91:a9:f3:15:0d:d1:70: 05:82:0b:1e:d9:0a:22:61:14:fb:23:96:e8:27:3a:1a:1d:78: 75:41:d3:cf:35:cb:48:82:88:0e:4e:94:5a:35:88:db:f6:89: 7f:fb:f3:33:19:2f:b9:4e:5d:91:96:c5:b6:e7:ae:23:a3:e9: bd:98:bd:2b:ec:b5:ab:c7:93:7c:07:f9:37:f0:3c:07:39:4a: 68:e2:22:62:2f:5f:63:5b:cb:fd:56:1a:ac:31:73:c5:99:ba: 2a:dd:1e:7d:7d:ad:f7:c0:1e:94:32:d8:69:55:6c:6f:1e:2b: 3d:c2:06:8a:d8:5e:0c:cb:0d:a5:d5:d5:1a:c1:b2:31:8f:f7: 0b:fc:70:a7:e4:cf:09:f6:3d:5e:a9:de:78:6c:67:4b:94:02: 5c:cc:94:c8:8f:af:58:28:02:b7:19:a0:b0:08:44:14:b3:d4: b8:0e:d6:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjYwNzI4MjAyNDI4WhcNMjYwODA0MjAyNDI4WjAYMRYwFAYD VQQDEw02YTY5MGZmYy1lZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkBJzIFlwUe8VqLeLTB4zmyTyaCH3gcTGGnYP/r2YGlzOkzyx21+XLkV7Cemt coP9+IX1hFJOWn/0wt8gHjqRsh2E54lI27W/Mvtxd4UuL36nlirf4hEcg3j+0NM3 itsBZhUZbUJSvKqZ1hHh+/X5BfcnHAcI+g+4jDGjxK/4frUijnWCK5Z4Z9nMQ4q7 ibuXDf+DcLQRV4UprUm67C9RY4Le8CFq03I0qppYvK4K1C0GKxQnLOjVQMt9dz9A hXV8xuglG8XNp34CfhkomoTE6GiUzxTo8pE1iXIK0KEWKg02vVodAEUPpBGkHSHW LeeydrUj0n6NzW9/cDnBE1t/zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1DoiWL G8fZhaL7aoCI1jcfe0BoMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAANlmk94pJKIGroOjqqXN5WTkNdDrbw4c/1ilZVpU9jRrTjs+s/QSXQeu0UaI mkL/mivp8cc75GUGpLZj1QGZjBcVlNKElhhLQrJy6pzI3SIZPI6RqfMVDdFwBYIL HtkKImEU+yOW6Cc6Gh14dUHTzzXLSIKIDk6UWjWI2/aJf/vzMxkvuU5dkZbFtueu I6PpvZi9K+y1q8eTfAf5N/A8BzlKaOIiYi9fY1vL/VYarDFzxZm6Kt0efX2t98Ae lDLYaVVsbx4rPcIGitheDMsNpdXVGsGyMY/3C/xwp+TPCfY9XqneeGxnS5QCXMyU yI+vWCgCtxmgsAhEFLPUuA7Wxw== -----END CERTIFICATE-----Generated at Wed Jul 29 01:17:40 2026 by rpki-client