$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: q1YB2kw0Nh7WKINDWNOE6M0FgKaSkFR7nq2/uTv+qBk= Subject key identifier: 0F:CE:4B:7D:B0:11:C9:C3:88:C8:F8:2B:AD:67:F1:FA:E1:BB:59:64 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 0153 Signing time: Wed 29 Jul 2026 06:31:17 +0000 Manifest this update: Wed 29 Jul 2026 06:31:16 +0000 Manifest next update: Wed 05 Aug 2026 06:31:16 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: I2t0w2cZooBlr/E7bGIqxRTwbpZnA/kzx8rUPRX1yEc=) 2: C4C01E3800D111F19FE1BBA3726F56BC.roa (hash: 7TdxN5pwG9InxHjLBF8NeXCwHbUoryPl86+yQHm4dE0=) 3: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 06:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Jul 29 06:31:16 2026 GMT Not After : Aug 5 06:31:16 2026 GMT Subject: CN=6a699e34-e840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:cd:09:79:c8:7f:13:1a:00:ee:d2:94:ff: a6:4d:7f:2d:60:c1:d3:7c:67:98:8c:03:e8:ef:01: c9:7a:70:49:e0:5f:aa:1e:b1:b9:73:fa:50:dd:ca: c3:12:fd:1f:76:d5:42:1e:ae:f4:b5:b8:a3:c6:6a: 06:0a:f2:4d:39:1d:b7:f8:2a:84:37:21:41:82:6b: c5:bd:b9:c4:6c:74:6f:9d:84:94:ec:cf:f1:dd:d4: fe:7d:94:5b:48:89:69:5f:dd:30:0c:b4:c5:95:4b: 01:19:eb:ba:6e:16:2c:5e:47:c9:c1:ad:d6:f7:87: 0a:03:3b:cf:cc:ae:45:21:ee:4b:c5:7b:67:66:02: b9:93:0b:53:c3:87:1d:7e:4c:ee:eb:19:6c:ae:2c: d3:0a:dc:a1:72:a6:6e:5e:6e:85:40:58:26:0f:eb: 1d:25:00:69:53:08:fa:b4:9b:44:f0:0a:48:a2:48: ce:3c:c1:ac:57:1c:9d:87:95:2d:10:d6:a1:1b:58: 0e:65:4e:f5:d7:58:b6:2e:3b:1a:04:ce:d0:39:35: f9:65:70:75:34:07:26:23:92:cb:da:ba:61:df:e6: 09:7f:34:7b:8e:5f:97:5f:d1:34:0f:7d:44:54:41: d4:f2:53:a0:29:6f:2c:a6:40:49:d2:69:8c:c3:41: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CE:4B:7D:B0:11:C9:C3:88:C8:F8:2B:AD:67:F1:FA:E1:BB:59:64 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:21:fc:de:20:ec:34:a2:9c:3e:4e:c8:58:cf:49:06:66:95: 94:b2:3c:de:84:50:33:42:76:07:b5:86:8c:25:9c:57:d0:a6: 74:b7:9e:b3:34:57:a8:f1:41:01:22:75:ce:d9:79:28:e9:e6: 7b:31:d0:ce:75:33:21:4e:e3:95:1b:8d:0e:dd:1b:7d:20:a3: 75:19:fc:41:fe:69:4d:9c:ba:3e:c3:91:26:8e:f6:00:d7:88: 8c:5b:b9:82:e0:d9:65:fc:80:ed:dc:aa:60:46:16:5b:49:06: 38:9f:43:b4:cc:47:40:82:cf:1f:1c:08:2b:eb:d2:71:f1:15: 65:a7:e9:2c:64:a4:da:19:d7:2b:d2:31:8a:87:38:d3:f2:6e: 8e:55:e4:06:82:36:15:de:e0:6f:55:19:6f:34:ac:d0:58:33: 38:88:75:c4:fe:86:b8:d1:37:f7:71:63:f4:d8:e1:46:1d:49: 82:e3:0e:d0:ff:6b:cf:3c:69:1e:2f:c4:4a:fd:da:01:da:de: 8f:ff:c3:a1:e1:8b:f6:2d:50:80:b8:90:94:01:24:df:cf:8a: 5b:98:69:f4:36:9e:2d:9c:3d:52:bf:a0:91:e6:b3:11:11:f5: 22:fc:68:f9:17:e5:84:5f:67:7e:dd:e8:e2:35:2e:7d:cd:a1: 1e:f7:5d:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjYwNzI5MDYzMTE2WhcNMjYwODA1MDYzMTE2WjAYMRYwFAYD VQQDEw02YTY5OWUzNC1lODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18bNCXnIfxMaAO7SlP+mTX8tYMHTfGeYjAPo7wHJenBJ4F+qHrG5c/pQ3crD Ev0fdtVCHq70tbijxmoGCvJNOR23+CqENyFBgmvFvbnEbHRvnYSU7M/x3dT+fZRb SIlpX90wDLTFlUsBGeu6bhYsXkfJwa3W94cKAzvPzK5FIe5LxXtnZgK5kwtTw4cd fkzu6xlsrizTCtyhcqZuXm6FQFgmD+sdJQBpUwj6tJtE8ApIokjOPMGsVxydh5Ut ENahG1gOZU7111i2LjsaBM7QOTX5ZXB1NAcmI5LL2rph3+YJfzR7jl+XX9E0D31E VEHU8lOgKW8spkBJ0mmMw0E7vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/OS32w EcnDiMj4K61n8frhu1lkMB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXCH83iDsNKKcPk7IWM9JBmaVlLI83oRQM0J2B7WGjCWcV9CmdLeeszRXqPFB ASJ1ztl5KOnmezHQznUzIU7jlRuNDt0bfSCjdRn8Qf5pTZy6PsORJo72ANeIjFu5 guDZZfyA7dyqYEYWW0kGOJ9DtMxHQILPHxwIK+vScfEVZafpLGSk2hnXK9Ixioc4 0/JujlXkBoI2Fd7gb1UZbzSs0FgzOIh1xP6GuNE393Fj9NjhRh1JguMO0P9rzzxp Hi/ESv3aAdrej//DoeGL9i1QgLiQlAEk38+KW5hp9DaeLZw9Ur+gkeazERH1Ivxo +RflhF9nft3o4jUufc2hHvddYQ== -----END CERTIFICATE-----Generated at Wed Jul 29 10:15:53 2026 by rpki-client