$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft File: 1AsQwSJMYeDTGML8YAOTeOz3LQA.mft (raw, json) Hash identifier: O2MrxBNYDG3Mr9d0iRkfhSAz93HT00QxaS6VDISQo/I= Subject key identifier: 42:85:F0:88:CD:00:68:13:7A:EE:F0:00:20:40:B7:1F:58:BB:96:64 Authority key identifier: D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 Certificate issuer: /CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Certificate serial: 0BB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft Manifest number: 0BA8 Signing time: Sun 26 Jul 2026 19:29:29 +0000 Manifest this update: Sun 26 Jul 2026 19:29:28 +0000 Manifest next update: Sun 02 Aug 2026 19:29:28 +0000 Files and hashes: 1: 1AsQwSJMYeDTGML8YAOTeOz3LQA.crl (hash: VL2m/y+KKLxlzvNBdSjPh3oFqQsW/3C+JwCBRd8CcnQ=) 2: AD35C0044EA511EAAB9DBE7DC4F9AE02.roa (hash: ++OmRdpWu3XIPu43iBXnmAM59CLsJ6ZGIdHZAm0yrgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3000 (0xbb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167C20, serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00 Validity Not Before: Jul 26 19:29:28 2026 GMT Not After : Aug 2 19:29:28 2026 GMT Subject: CN=6a666019-0d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:7e:82:b8:d4:0c:f2:63:48:3f:9c:8c:08: 22:08:53:5d:e1:cc:58:46:f9:c8:00:20:a5:36:89: 99:fd:8d:32:1b:93:bf:16:9f:f9:21:96:4c:c6:68: a3:ad:d5:67:0c:24:12:33:64:6a:b3:41:5c:0d:81: 85:aa:51:9c:3f:94:51:4d:16:c1:9c:16:cc:bb:71: 9b:bf:b0:93:cf:89:b7:6d:8b:50:24:a8:76:21:52: 6e:dc:97:e2:4d:3c:ce:8c:0b:92:ff:aa:b9:39:b1: c8:c4:18:0e:c8:ad:28:e2:e8:f5:c2:4f:aa:10:37: b2:e8:72:b3:e7:da:1c:d0:83:c8:fa:b2:2b:a0:39: 16:01:cb:aa:21:ad:8d:54:e2:2a:f4:43:00:d1:ad: 0c:f9:63:23:7f:56:4d:fb:30:88:94:a2:94:62:8b: 92:04:3b:4d:3d:60:ce:bd:10:7b:52:20:e9:cc:82: 25:e6:e7:0f:3e:cb:90:fe:27:3a:e6:0a:85:7f:be: 8a:96:bc:92:58:23:35:f7:8b:46:44:ac:cd:b4:1f: 66:65:a3:39:be:89:82:64:7a:91:31:79:c6:ca:1b: c9:02:18:e0:04:c6:a9:2b:53:0f:d8:ba:80:66:68: 32:b9:f1:d8:de:86:33:e7:2d:47:75:23:fd:b5:e9: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:85:F0:88:CD:00:68:13:7A:EE:F0:00:20:40:B7:1F:58:BB:96:64 X509v3 Authority Key Identifier: keyid:D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:2f:17:89:7a:e1:29:35:df:d1:23:3b:64:47:d4:65:ec:92: 41:ec:54:0e:d0:a9:55:4c:8e:1e:4a:88:5d:fd:76:9c:07:d7: 70:11:99:b3:32:73:ef:5f:19:d2:57:c0:32:14:80:a8:32:01: 7c:cd:74:f5:88:55:c0:45:cd:fd:03:97:14:17:d3:bb:ad:83: 63:fe:de:85:65:9c:ae:24:53:fd:c7:2b:03:c8:41:05:85:2f: 36:50:27:62:d2:d1:2f:1d:9a:82:71:85:df:a2:6e:5c:e1:40: fb:49:7d:22:f3:ae:3b:e9:42:1f:cc:86:a1:37:c0:95:2b:50: b3:e0:fe:7f:13:81:4b:e0:79:aa:7a:e3:5b:47:19:d3:87:86: bf:60:58:49:05:66:91:ea:7f:33:e7:97:1d:9f:fd:08:b1:b1: 19:01:56:e5:03:16:6b:70:0d:29:7f:d6:00:78:12:c1:23:8a: ea:d4:73:3f:ef:22:36:86:c5:f0:9b:46:90:07:c9:e8:23:e2: fb:95:23:2e:ae:62:22:39:6f:22:c0:71:b8:86:93:52:ce:93: ac:10:c7:9d:81:a4:13:bc:66:bd:38:9e:3c:12:cd:06:b7:32: 54:ae:53:f5:37:0f:fb:70:63:61:66:1f:56:4a:37:4d:e4:a2: ef:43:48:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDMjAxMTAvBgNVBAUTKEQ0MEIxMEMxMjI0QzYxRTBEMzE4QzJGQzYwMDM5Mzc4 RUNGNzJEMDAwHhcNMjYwNzI2MTkyOTI4WhcNMjYwODAyMTkyOTI4WjAYMRYwFAYD VQQDEw02YTY2NjAxOS0wZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fh+grjUDPJjSD+cjAgiCFNd4cxYRvnIACClNomZ/Y0yG5O/Fp/5IZZMxmij rdVnDCQSM2Rqs0FcDYGFqlGcP5RRTRbBnBbMu3Gbv7CTz4m3bYtQJKh2IVJu3Jfi TTzOjAuS/6q5ObHIxBgOyK0o4uj1wk+qEDey6HKz59oc0IPI+rIroDkWAcuqIa2N VOIq9EMA0a0M+WMjf1ZN+zCIlKKUYouSBDtNPWDOvRB7UiDpzIIl5ucPPsuQ/ic6 5gqFf76KlrySWCM194tGRKzNtB9mZaM5vomCZHqRMXnGyhvJAhjgBMapK1MP2LqA ZmgyufHY3oYz5y1HdSP9tekoBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKF8IjN AGgTeu7wACBAtx9Yu5ZkMB8GA1UdIwQYMBaAFNQLEMEiTGHg0xjC/GADk3js9y0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0MyMC84NjU3MUMxMDRF QTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVllRFRHTUw4WUFPVGVPejNM UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBc1F3U0pNWWVEVEdNTDhZQU9UZU96M0xRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0MyMC84NjU3MUMxMDRFQTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVll RFRHTUw4WUFPVGVPejNMUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAi8XiXrhKTXf0SM7ZEfUZeySQexUDtCpVUyOHkqIXf12nAfXcBGZszJz718Z 0lfAMhSAqDIBfM109YhVwEXN/QOXFBfTu62DY/7ehWWcriRT/ccrA8hBBYUvNlAn YtLRLx2agnGF36JuXOFA+0l9IvOuO+lCH8yGoTfAlStQs+D+fxOBS+B5qnrjW0cZ 04eGv2BYSQVmkep/M+eXHZ/9CLGxGQFW5QMWa3ANKX/WAHgSwSOK6tRzP+8iNobF 8JtGkAfJ6CPi+5UjLq5iIjlvIsBxuIaTUs6TrBDHnYGkE7xmvTiePBLNBrcyVK5T 9TcP+3BjYWYfVko3TeSi70NIIg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:50:00 2026 by rpki-client