$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: ammgxipaRFpntfqB62ItWH1rE2boH9Xt4a/mIGqTgOs= Subject key identifier: 1B:46:1D:A7:B9:87:04:F7:23:DF:47:7B:50:3B:60:F6:75:6D:F8:EE Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 120C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 1201 Signing time: Tue 28 Jul 2026 17:14:21 +0000 Manifest this update: Tue 28 Jul 2026 17:14:21 +0000 Manifest next update: Tue 04 Aug 2026 17:14:21 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: FuS+0IsA8EgXxZB4R03xOdSjrdTFaVG3wl4ds1xV/+Q=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: RlrWnPy3I+hL88VTB83v1hpmck9uNtm5upq6PTxUzuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4620 (0x120c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Jul 28 17:14:21 2026 GMT Not After : Aug 4 17:14:21 2026 GMT Subject: CN=6a68e36d-339d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:dc:a2:4c:b4:f7:63:7a:f2:96:a1:c4:3c: b4:41:b3:76:8d:c9:d7:11:f7:f2:4a:f8:ae:70:e9: 17:c9:98:a8:ea:7e:db:90:08:98:4e:50:16:9f:f2: 8f:b2:54:35:c0:37:99:1b:47:31:0b:a0:a5:07:ff: b8:d4:91:3b:0f:4c:ef:19:eb:bc:1b:4c:d8:a2:52: 4b:44:17:36:17:a5:79:f3:c2:75:87:17:57:9a:16: 72:0c:bc:98:ce:cb:1c:3b:4c:48:f5:cf:a4:41:37: 2c:47:4b:21:d7:8f:0f:22:97:f8:8b:0a:eb:d7:b4: 1a:5d:7f:e1:08:0e:d7:ca:fa:ce:fe:51:c4:4d:9a: 07:a2:2f:f4:ed:ba:f3:1d:1a:d4:71:b3:4b:80:b7: 64:9b:95:1f:c7:fd:1d:d8:e1:df:9c:13:c9:12:e2: 80:07:fb:40:9d:54:c0:ae:84:b3:d0:cf:8d:e4:96: 51:c7:91:95:51:aa:13:21:d2:5f:bf:e8:cc:9b:24: dc:5d:3f:d0:ef:0a:ca:88:5b:3e:49:0d:99:45:95: 5b:65:eb:f5:95:a5:6b:1e:a2:93:67:aa:c9:42:c4: 18:c6:a9:3b:78:c6:f7:f7:c5:63:91:e7:53:af:aa: e6:c8:55:50:7e:6a:58:ef:f1:d7:00:ed:70:82:6b: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:46:1D:A7:B9:87:04:F7:23:DF:47:7B:50:3B:60:F6:75:6D:F8:EE X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c7:da:81:35:80:5e:94:7c:fa:7f:3f:af:08:cc:16:20:35: 13:10:06:c0:55:15:83:69:98:75:f7:8d:d9:d3:4d:99:f0:57: 34:b4:80:33:5c:13:bb:dc:5b:6c:ce:5d:1b:07:93:2f:04:8c: ff:79:4d:67:36:30:16:7d:55:26:12:b9:46:2c:94:f2:39:de: eb:3c:17:c2:52:39:f3:29:32:ef:06:94:ab:05:7a:d1:23:b1: 84:ee:b7:83:16:82:52:71:ee:77:32:63:97:66:a1:e1:f3:23: 0d:56:6b:b3:93:c2:45:d5:77:b8:cf:f8:85:09:27:2e:bc:dd: b0:28:2e:28:2d:dc:29:14:17:e3:60:18:70:62:1d:1d:6d:12: 46:eb:e8:ac:78:bc:43:35:4e:59:af:5f:8b:97:a4:39:92:d1: 75:ec:02:0b:e0:3c:14:21:c4:69:27:cf:11:5e:63:f9:21:2f: 66:0b:c6:ef:7b:b9:b1:f6:07:7d:37:25:a4:ce:84:1e:01:3c: dd:5b:d9:f6:bf:41:70:7b:19:85:3b:80:a9:18:4d:99:bd:48: 81:9d:ab:43:a8:31:59:47:e5:4d:ee:3d:25:7c:e1:5f:3d:b5: 9c:af:04:b1:b3:73:90:da:a8:20:8d:45:13:2c:df:52:46:49: b6:42:83:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjYwNzI4MTcxNDIxWhcNMjYwODA0MTcxNDIxWjAYMRYwFAYD VQQDEw02YTY4ZTM2ZC0zMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4Hcoky092N68pahxDy0QbN2jcnXEffySviucOkXyZio6n7bkAiYTlAWn/KP slQ1wDeZG0cxC6ClB/+41JE7D0zvGeu8G0zYolJLRBc2F6V588J1hxdXmhZyDLyY zsscO0xI9c+kQTcsR0sh148PIpf4iwrr17QaXX/hCA7XyvrO/lHETZoHoi/07brz HRrUcbNLgLdkm5Ufx/0d2OHfnBPJEuKAB/tAnVTAroSz0M+N5JZRx5GVUaoTIdJf v+jMmyTcXT/Q7wrKiFs+SQ2ZRZVbZev1laVrHqKTZ6rJQsQYxqk7eMb398VjkedT r6rmyFVQfmpY7/HXAO1wgmv4ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtGHae5 hwT3I99He1A7YPZ1bfjuMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcMfagTWAXpR8+n8/rwjMFiA1ExAGwFUVg2mYdfeN2dNNmfBXNLSAM1wTu9xb bM5dGweTLwSM/3lNZzYwFn1VJhK5RiyU8jne6zwXwlI58yky7waUqwV60SOxhO63 gxaCUnHudzJjl2ah4fMjDVZrs5PCRdV3uM/4hQknLrzdsCguKC3cKRQX42AYcGId HW0SRuvorHi8QzVOWa9fi5ekOZLRdewCC+A8FCHEaSfPEV5j+SEvZgvG73u5sfYH fTclpM6EHgE83VvZ9r9BcHsZhTuAqRhNmb1IgZ2rQ6gxWUflTe49JXzhXz21nK8E sbNzkNqoII1FEyzfUkZJtkKDmw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:43:35 2026 by rpki-client