$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: X6Hc2qEnaCf0P4diOO4yN7OJ+7Goyx0Ef0Xu37AL6Hw= Subject key identifier: 44:27:90:F4:C0:18:84:C8:46:F7:DF:CA:9E:97:D0:41:0B:31:07:40 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 038D Signing time: Mon 27 Jul 2026 01:58:13 +0000 Manifest this update: Mon 27 Jul 2026 01:58:13 +0000 Manifest next update: Mon 03 Aug 2026 01:58:13 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: 0uhiqkzWXAMVHZwY5aCA3TPJ4i9d/Ows5Y2IoyxnlhA=) 2: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: S96e2L/6aXmXiFJ00QZgjPrWRuJuyQ7qqjj+2N0NuLQ=) 3: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: FYMzyNcEn5qwGYhJASILxE4oZoESG/51dhB+oC1Em0M=) 4: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: SiY7LuS+ZlIJQnelc/yqPh4vr6EgWEyfHgpapGWLzMQ=) 5: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: kqpliSLk4gpJx/EOT2g+xNj5gqC5mlAWqnW//7mPB5E=) 6: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: /voKyazUys3+SCuvprRad6peYAmU9/zZXHb+lbxgXpY=) 7: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: WEjLCi1DlMb0pJbL9Z4xrjtw1122zr6GBemO2jaZ1hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Jul 27 01:58:13 2026 GMT Not After : Aug 3 01:58:13 2026 GMT Subject: CN=6a66bb35-0661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:a0:0e:ec:d6:96:3b:4d:ef:f5:7a:80:25: 4b:39:9e:6b:a9:a7:1c:07:ea:12:da:70:d4:70:4a: df:79:fb:a7:b6:a8:32:59:44:00:5d:f2:ef:cc:21: 35:65:2c:33:8d:43:3d:a3:63:2a:fe:b8:1a:0b:e4: c8:09:59:84:ac:4c:70:a9:3b:25:b7:bf:eb:e1:fd: 6c:84:75:e7:80:fe:e3:51:83:ad:8b:d0:2b:5c:83: a5:81:2d:e3:e8:0c:99:56:16:43:9d:7b:a0:dc:8c: 2b:81:ea:8b:c8:e3:25:40:bf:d4:09:51:9d:13:c8: 73:3c:a1:31:3f:39:00:73:49:60:07:cb:27:6c:06: c5:4b:48:a0:a0:12:2e:d5:7d:79:fb:2b:34:6e:75: bc:10:a0:e5:3c:d5:91:47:02:98:b3:99:98:6a:b7: 13:42:40:42:65:42:93:03:35:e6:c4:97:27:f7:c9: b0:4c:bd:a4:9a:fa:e3:be:34:c3:e2:9c:bb:a1:a1: 1a:06:f2:0f:e7:d3:42:15:fe:85:3e:01:0e:6a:ae: be:98:d7:4a:c4:eb:81:d8:6b:f5:c4:94:91:82:07: f4:78:0d:3b:8c:9d:e2:63:53:a4:f9:21:9f:b7:aa: b8:5b:83:5d:2d:60:ef:48:0b:22:d3:de:a8:31:63: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:27:90:F4:C0:18:84:C8:46:F7:DF:CA:9E:97:D0:41:0B:31:07:40 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:98:a0:72:f8:81:52:4b:bb:95:0c:e6:83:79:e3:ea:30:0d: 0a:db:1b:50:c7:cf:09:4c:a0:7e:48:d1:45:a3:ee:f1:39:2b: 03:ec:8a:cd:11:5c:32:7d:03:e1:d2:ae:ce:0c:93:28:27:7b: 2d:f5:a3:d1:7b:7d:ca:f5:89:ef:f1:c8:cd:9e:c5:70:17:21: 44:9c:f2:06:30:e6:f6:98:7c:f9:7a:d4:fa:57:8e:dc:a6:9d: f7:95:c6:c8:b7:96:e8:11:70:50:53:2c:2d:ae:df:05:dc:9f: e1:c0:bb:86:a7:87:07:42:99:85:a1:03:15:94:59:93:4e:a8: 74:84:1c:de:3a:f1:73:8b:37:ec:8a:48:46:be:62:df:63:81: 24:89:32:44:47:74:d8:fa:70:c5:35:f5:f2:7b:fd:99:b5:5e: 11:e2:29:dd:2b:4a:37:d9:d8:11:d5:99:32:44:96:23:ed:c1: 5c:34:e0:8c:66:03:cf:9a:e6:e8:54:44:01:3c:96:37:1b:cd: 66:8e:99:f1:81:db:3a:48:11:ed:38:e5:06:52:ef:c9:d7:9b: 60:ca:fe:75:80:b9:91:c6:a3:26:6f:f3:dd:6f:e0:0a:87:d2: 98:f9:2f:ef:79:03:61:6c:9f:7f:c5:aa:2c:c7:30:32:60:d9: a7:33:92:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwNzI3MDE1ODEzWhcNMjYwODAzMDE1ODEzWjAYMRYwFAYD VQQDEw02YTY2YmIzNS0wNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq+gDuzWljtN7/V6gCVLOZ5rqaccB+oS2nDUcErfefuntqgyWUQAXfLvzCE1 ZSwzjUM9o2Mq/rgaC+TICVmErExwqTslt7/r4f1shHXngP7jUYOti9ArXIOlgS3j 6AyZVhZDnXug3IwrgeqLyOMlQL/UCVGdE8hzPKExPzkAc0lgB8snbAbFS0igoBIu 1X15+ys0bnW8EKDlPNWRRwKYs5mYarcTQkBCZUKTAzXmxJcn98mwTL2kmvrjvjTD 4py7oaEaBvIP59NCFf6FPgEOaq6+mNdKxOuB2Gv1xJSRggf0eA07jJ3iY1Ok+SGf t6q4W4NdLWDvSAsi096oMWPgZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQnkPTA GITIRvffyp6X0EELMQdAMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMZigcviBUku7lQzmg3nj6jANCtsbUMfPCUygfkjRRaPu8TkrA+yKzRFcMn0D 4dKuzgyTKCd7LfWj0Xt9yvWJ7/HIzZ7FcBchRJzyBjDm9ph8+XrU+leO3Kad95XG yLeW6BFwUFMsLa7fBdyf4cC7hqeHB0KZhaEDFZRZk06odIQc3jrxc4s37IpIRr5i 32OBJIkyREd02PpwxTX18nv9mbVeEeIp3StKN9nYEdWZMkSWI+3BXDTgjGYDz5rm 6FREATyWNxvNZo6Z8YHbOkgR7TjlBlLvydebYMr+dYC5kcajJm/z3W/gCofSmPkv 73kDYWyff8WqLMcwMmDZpzOS0w== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:50 2026 by rpki-client