$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json) Hash identifier: euuR/xVJOS0Dr+txY2g/+8d7qoWD0xg9sdrv/vNHG+U= Subject key identifier: 87:1A:CC:71:50:2A:26:9B:E5:C3:08:AD:30:65:8C:1A:42:1B:A6:45 Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft Manifest number: 0474 Signing time: Mon 27 Jul 2026 01:06:39 +0000 Manifest this update: Mon 27 Jul 2026 01:06:38 +0000 Manifest next update: Mon 03 Aug 2026 01:06:38 +0000 Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: 9C7mQ4qXyJeUrV3aPXiOJfo99xNXn7iFr0heYKzwkAE=) 2: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: FAyF1EHDkfSrZaB9JsF96pk4KSSTdNSXhRevgQNdj7Q=) 3: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: EU7Pv67dHPUPsN4Pf/6t9QQbrokUpqyuX1Cdd8unPqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Validity Not Before: Jul 27 01:06:38 2026 GMT Not After : Aug 3 01:06:38 2026 GMT Subject: CN=6a66af1f-b0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:42:0e:07:21:4c:e9:2e:47:42:3f:94:4a: 00:2c:c6:de:d0:3d:4f:97:fa:76:7d:1f:ba:a5:54: 42:f9:1b:ed:f1:d8:41:93:0a:7c:3a:f2:84:78:1c: 9c:cf:f1:88:d7:21:95:99:a9:ff:3c:a6:31:2f:a1: b1:ab:e9:aa:7a:34:df:0f:4c:e1:ab:15:4c:6c:fe: 8c:62:4e:8a:b3:ad:cc:2e:13:85:a8:11:9a:45:33: 1b:20:3b:cf:f8:3a:6f:73:2a:66:4f:24:5e:bc:fa: a2:2a:8a:a0:9f:e4:49:d2:c3:25:11:f2:ca:ca:8e: d5:b7:2c:a2:ad:72:1f:50:d2:0e:67:ca:2f:8e:52: 4a:f2:1b:5e:f3:ed:d1:b5:b6:ed:e0:31:e5:2d:f5: c8:a6:5c:25:83:37:d3:4c:b2:37:b6:cd:67:9b:a1: b7:09:fc:d8:df:e8:b3:7e:1f:90:cf:c1:ed:fe:5d: 94:45:a3:c2:e0:6b:df:20:de:f0:d6:e0:bc:22:83: d6:47:c7:a9:58:c7:99:a9:2d:61:8e:08:13:b7:d9: ba:a4:1d:02:63:e1:df:77:62:63:bd:dc:9a:68:7c: 0e:3e:34:96:ed:8a:a6:84:79:c2:cc:fb:4f:be:57: 4c:c0:8c:b8:bd:9b:53:62:40:6c:34:ce:49:6a:aa: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1A:CC:71:50:2A:26:9B:E5:C3:08:AD:30:65:8C:1A:42:1B:A6:45 X509v3 Authority Key Identifier: keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e8:71:d1:ec:88:6e:f0:ad:17:84:51:e8:f7:b3:53:83:27: cf:5d:4c:2b:3a:6d:80:4a:a9:03:07:d9:8e:6e:87:4d:63:6d: cb:dc:01:5b:48:c0:2a:fe:86:f8:23:65:d3:c4:25:eb:da:4e: 03:2d:e2:74:e1:ad:80:54:73:6d:89:22:cb:ce:b1:52:50:66: 12:b7:40:74:71:0a:e0:d2:ce:df:2a:3f:d5:04:fb:66:2d:e0: 4b:23:bd:4a:e4:e8:2e:b1:26:9a:a5:38:b9:32:6c:95:45:10: 26:b5:2f:c5:e9:85:17:43:a1:38:46:23:30:71:15:cb:d9:62: 32:79:d6:49:17:c9:7a:33:fa:f8:89:cf:90:32:c4:82:1f:35: 1c:3f:af:b1:1e:8c:a9:a4:67:eb:45:0b:2a:40:b7:f8:d3:1e: 40:97:09:38:6e:67:8b:f0:79:d7:f2:f6:c5:b7:f5:8d:a3:38: 27:40:29:d8:04:ff:90:f8:a7:22:d5:d4:14:87:71:72:26:7a: 03:be:9d:19:d3:2f:1b:e0:ee:3b:31:d8:64:16:42:e5:d9:bf: 85:a0:e2:df:56:5f:7b:e2:5d:dd:1a:25:5a:e5:55:5e:a0:84: f6:e3:49:12:1f:a4:62:87:0a:30:e7:59:9e:ca:e5:fb:7f:11: d8:e3:63:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2 MDk1QTQ1Q0QwHhcNMjYwNzI3MDEwNjM4WhcNMjYwODAzMDEwNjM4WjAYMRYwFAYD VQQDEw02YTY2YWYxZi1iMGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhPpCDgchTOkuR0I/lEoALMbe0D1Pl/p2fR+6pVRC+Rvt8dhBkwp8OvKEeByc z/GI1yGVman/PKYxL6Gxq+mqejTfD0zhqxVMbP6MYk6Ks63MLhOFqBGaRTMbIDvP +DpvcypmTyRevPqiKoqgn+RJ0sMlEfLKyo7VtyyirXIfUNIOZ8ovjlJK8hte8+3R tbbt4DHlLfXIplwlgzfTTLI3ts1nm6G3CfzY3+izfh+Qz8Ht/l2URaPC4GvfIN7w 1uC8IoPWR8epWMeZqS1hjggTt9m6pB0CY+Hfd2JjvdyaaHwOPjSW7YqmhHnCzPtP vldMwIy4vZtTYkBsNM5Jaqp6BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcazHFQ Kiab5cMIrTBljBpCG6ZFMB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNCNS8zOUQ3NjcyMDlCNkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBz bG91cTRITWpmQ1pnbGFSYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiehx0eyIbvCtF4RR6PezU4Mnz11MKzptgEqpAwfZjm6HTWNty9wBW0jAKv6G +CNl08Ql69pOAy3idOGtgFRzbYkiy86xUlBmErdAdHEK4NLO3yo/1QT7Zi3gSyO9 SuToLrEmmqU4uTJslUUQJrUvxemFF0OhOEYjMHEVy9liMnnWSRfJejP6+InPkDLE gh81HD+vsR6MqaRn60ULKkC3+NMeQJcJOG5ni/B51/L2xbf1jaM4J0Ap2AT/kPin ItXUFIdxciZ6A76dGdMvG+DuOzHYZBZC5dm/haDi31Zfe+Jd3RolWuVVXqCE9uNJ Eh+kYocKMOdZnsrl+38R2ONj9A== -----END CERTIFICATE-----Generated at Tue Jul 28 21:39:59 2026 by rpki-client