$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft File: kIoYD5SUlgetwBExSb6IKuqo6I8.mft (raw, json) Hash identifier: yXas4ikV5/bSA9R4Da3nnR9cxPmJgAwhUdrA5Ja5BEY= Subject key identifier: 33:50:28:D0:5F:3D:45:36:BC:EF:85:00:A3:DF:29:7B:54:14:4F:74 Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft Manifest number: 0276 Signing time: Wed 29 Jul 2026 03:07:38 +0000 Manifest this update: Wed 29 Jul 2026 03:07:38 +0000 Manifest next update: Wed 05 Aug 2026 03:07:38 +0000 Files and hashes: 1: kIoYD5SUlgetwBExSb6IKuqo6I8.crl (hash: 9BAmy9O8d4pe/SkbmIvYYghQGzP/mmt5Myv+LMf4imI=) 2: E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa (hash: z04Vftmrg2QbTvPdZ6E5RXhqc7guf0iEptckFIG+yc8=) 3: CC0BA4E0E17F11EFA4CE224CC4F9AE02.roa (hash: txSvzTPr2599JY/devjyQjZpXUdF6ZNG1hcHHYqrLIA=) 4: 9BE6554CB72411EF98F7D577C4F9AE02.roa (hash: OGuYh+AxdFGbpXMOTasU8EIj52mT5htTsl1m4is8Y4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Validity Not Before: Jul 29 03:07:38 2026 GMT Not After : Aug 5 03:07:38 2026 GMT Subject: CN=6a696e7a-5d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:35:16:7f:2f:de:eb:57:08:9b:23:1a:a9: db:35:ba:9d:14:a7:2f:e2:ee:37:97:3a:41:3f:9b: d3:e3:0f:ca:fc:24:ac:cf:b7:2d:6f:fc:ee:53:c5: 84:2d:04:7d:23:bb:e1:f9:ae:9d:57:12:d9:d4:4c: c9:ab:b3:9b:51:70:dc:9e:4d:2b:f8:1f:c3:b5:13: 5a:bc:11:ee:04:b5:4e:57:aa:ed:d5:bc:62:df:c8: 9d:2e:6c:b2:d4:ea:69:b9:c2:ef:bf:f7:f2:a3:6f: 79:c1:9d:e0:03:83:d2:10:83:e8:6d:c7:9d:57:9e: f0:eb:14:30:32:4a:93:e1:9f:1a:8b:0a:51:1e:d7: df:bc:dc:14:e1:36:9b:93:28:c2:b0:01:e3:01:4e: bf:46:3d:07:87:20:1f:19:02:6b:af:f1:b6:eb:17: d3:7a:46:4b:97:4c:f5:7d:5f:55:b5:f5:5d:87:cf: 95:20:ff:f1:fc:ee:74:04:32:eb:4e:ed:a7:65:91: c5:dd:18:3c:39:f0:40:f9:7e:b3:de:3f:f6:77:3f: 3c:f3:64:6e:31:14:e5:c0:a2:e5:2d:3f:8d:73:74: 1f:fb:f2:5d:27:12:a3:cf:da:00:cd:17:43:95:a5: 1c:2b:62:a5:7c:7f:b0:7f:a3:97:5b:4c:2e:89:df: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:50:28:D0:5F:3D:45:36:BC:EF:85:00:A3:DF:29:7B:54:14:4F:74 X509v3 Authority Key Identifier: keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:51:cf:68:14:1d:fa:c3:8e:5d:eb:3a:b5:b8:f9:67:95:7f: d4:ec:3a:83:5a:39:09:bd:d5:6d:0c:23:c6:af:0f:4c:e0:90: f2:15:47:43:d1:28:9c:f9:31:68:36:6a:6e:dd:3c:84:ec:6a: 57:ec:f5:0d:29:22:7c:80:84:f4:d0:9e:02:57:74:a0:ff:ed: d9:36:ee:0b:fd:8e:66:51:28:cc:11:be:dc:2f:e3:78:66:4c: 45:19:c5:bc:59:2d:18:9d:3d:e6:b5:77:dc:b9:19:96:49:a0: c9:58:03:a2:4f:0f:f1:73:d4:bd:33:fa:12:1b:aa:6e:7d:47: af:55:22:32:21:16:29:a9:72:0a:16:62:8b:38:2f:70:77:6c: 22:ed:83:a2:9c:9c:97:bd:43:ed:7f:93:10:f0:90:3d:56:3b: 5b:54:55:e8:cf:b4:0a:2b:0e:90:f1:63:c9:26:6c:8e:33:3f: ed:55:7a:fe:a7:83:63:21:d9:32:7d:af:dd:01:c7:7d:b5:b3: bc:a2:89:72:23:9a:22:d7:a6:45:2b:97:ca:08:1e:0c:f5:f0: 4d:6d:b8:27:2b:1e:a6:5f:24:9d:94:df:d8:bb:50:7d:a1:d0: ef:04:d6:09:88:47:24:ab:39:15:d9:4f:5f:92:d7:8b:05:c1: cf:1e:97:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDNjMxMTAvBgNVBAUTKDkwOEExODBGOTQ5NDk2MDdBREMwMTEzMTQ5QkU4ODJB RUFBOEU4OEYwHhcNMjYwNzI5MDMwNzM4WhcNMjYwODA1MDMwNzM4WjAYMRYwFAYD VQQDEw02YTY5NmU3YS01ZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZY1Fn8v3utXCJsjGqnbNbqdFKcv4u43lzpBP5vT4w/K/CSsz7ctb/zuU8WE LQR9I7vh+a6dVxLZ1EzJq7ObUXDcnk0r+B/DtRNavBHuBLVOV6rt1bxi38idLmyy 1OppucLvv/fyo295wZ3gA4PSEIPobcedV57w6xQwMkqT4Z8aiwpRHtffvNwU4Tab kyjCsAHjAU6/Rj0HhyAfGQJrr/G26xfTekZLl0z1fV9VtfVdh8+VIP/x/O50BDLr Tu2nZZHF3Rg8OfBA+X6z3j/2dz8882RuMRTlwKLlLT+Nc3Qf+/JdJxKjz9oAzRdD laUcK2KlfH+wf6OXW0wuid/evwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNQKNBf PUU2vO+FAKPfKXtUFE90MB8GA1UdIwQYMBaAFJCKGA+UlJYHrcARMUm+iCrqqOiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M2My80RDExMzE5Q0Q4 NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxnZXR3QkV4U2I2SUt1cW82 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJb1lENVNVbGdldHdCRXhTYjZJS3VxbzZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M2My80RDExMzE5Q0Q4NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxn ZXR3QkV4U2I2SUt1cW82STgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi1HPaBQd+sOOXes6tbj5Z5V/1Ow6g1o5Cb3VbQwjxq8PTOCQ8hVHQ9EonPkx aDZqbt08hOxqV+z1DSkifICE9NCeAld0oP/t2TbuC/2OZlEozBG+3C/jeGZMRRnF vFktGJ095rV33LkZlkmgyVgDok8P8XPUvTP6Ehuqbn1Hr1UiMiEWKalyChZiizgv cHdsIu2Dopycl71D7X+TEPCQPVY7W1RV6M+0CisOkPFjySZsjjM/7VV6/qeDYyHZ Mn2v3QHHfbWzvKKJciOaItemRSuXyggeDPXwTW24Jysepl8knZTf2LtQfaHQ7wTW CYhHJKs5FdlPX5LXiwXBzx6XSQ== -----END CERTIFICATE-----Generated at Wed Jul 29 04:47:11 2026 by rpki-client