$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft File: ghhST3oWtYwNm3OUAxk5fuT8pv0.mft (raw, json) Hash identifier: WXvDAi6FbDN9liciPJceI/qg++eX7S3OizT3vaPX18U= Subject key identifier: 55:BC:15:AD:20:B0:63:0F:7D:1F:EC:81:F8:71:A0:23:4A:34:F9:4E Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft Manifest number: 08A8 Signing time: Tue 28 Jul 2026 20:57:36 +0000 Manifest this update: Tue 28 Jul 2026 20:57:35 +0000 Manifest next update: Tue 04 Aug 2026 20:57:35 +0000 Files and hashes: 1: ghhST3oWtYwNm3OUAxk5fuT8pv0.crl (hash: oNxLgU9MOrTlpv9sbHbSJR8pv2dohrlbQA7C/NaPom8=) 2: 431106B2125611ED9FB5292EC4F9AE02.roa (hash: HC1HlngI6XYoexa+iP3Lsv/hSItkWBl0CdvwYSY1Yh0=) 3: FD10505CC75011EFBA3D195BC4F9AE02.roa (hash: o4pPobBwjt8OFkaZBIgV8zZzFKBhPJBPQIzcgJ7nHNM=) 4: 816A256CF57311EA86849119C4F9AE02.roa (hash: 0r9XfnUOK88lrdHrVj5W9qn3Uab5Rf0RHHQdbv15M8Q=) 5: 81E94F18F57311EA86849119C4F9AE02.roa (hash: o7hslMVigOY231eahjNEQ0NYOJaFI9mq6NC5ziX7dQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD Validity Not Before: Jul 28 20:57:35 2026 GMT Not After : Aug 4 20:57:35 2026 GMT Subject: CN=6a6917bf-deff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:5c:53:6a:d1:23:e1:19:05:79:e2:84:43: a2:2b:f9:5c:d6:fe:dd:3b:d5:ee:c9:ed:d8:f6:a7: ce:95:6b:4c:5b:08:d0:c9:87:ff:77:14:e0:7b:ae: 4c:23:99:ae:c7:83:06:72:61:47:49:c3:46:7f:94: 1f:a2:00:3d:fc:ea:04:99:e4:9b:ac:0f:5d:fa:72: 74:b0:31:20:e5:84:5b:8f:ac:43:d4:8c:3a:05:cb: 9e:00:5e:50:15:2d:64:63:0f:09:04:5f:3e:f8:be: ef:88:14:48:10:91:90:bb:d7:a0:17:33:90:e9:ad: 11:b1:a7:43:ec:c4:d4:23:1c:93:a8:01:9b:4f:7a: b1:1d:0f:c7:95:f7:f5:b7:f9:00:80:d9:07:1d:90: ed:5c:d2:4f:93:35:13:f6:f3:44:46:89:d3:d1:76: 33:7a:53:af:87:7a:e6:cd:31:d0:c3:40:ae:96:cb: 15:c8:42:5c:6d:b6:17:38:95:01:19:85:a6:66:cc: 78:9d:5d:81:09:d8:01:e6:cc:ac:33:ca:97:05:7a: d6:01:3c:33:9a:34:a5:f5:0c:5c:ad:9b:c9:83:5c: 69:fc:b6:e6:51:45:9a:59:e5:e2:53:e1:c1:3a:34: 44:05:2f:77:f8:c5:2f:2d:45:ea:ed:bc:13:73:43: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BC:15:AD:20:B0:63:0F:7D:1F:EC:81:F8:71:A0:23:4A:34:F9:4E X509v3 Authority Key Identifier: keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:24:e8:bb:7b:28:0b:10:5f:94:54:41:6b:68:ea:2b:60:cf: 9b:35:e5:95:4f:b4:dd:ae:d9:04:af:19:c0:59:e4:08:f7:7e: 6a:3f:00:cd:bd:bb:0f:9e:da:cf:cf:35:bd:fc:4e:19:5d:be: 3d:59:22:13:71:8c:80:0b:e9:47:62:2d:d8:8b:70:cc:b2:9a: 65:c9:df:60:0c:a7:a1:d7:cb:57:7a:ab:7a:6a:84:4b:da:f8: a1:f6:d0:c8:0a:f6:01:df:f0:bb:5d:11:72:8c:02:65:52:b4: 21:28:ca:03:77:36:de:77:86:cd:15:89:d1:11:9c:a4:a6:d9: af:b8:c0:69:20:64:aa:2e:b2:6a:be:ca:32:fb:53:31:ce:08: cd:23:cb:5c:c0:56:63:69:d4:0f:ec:7e:aa:8d:04:e6:f7:51: 04:40:69:96:2d:df:a5:b9:c9:da:7d:51:d0:85:2f:2d:59:10: 34:2d:ae:b9:af:78:1b:b5:19:55:52:29:71:1b:6e:72:e1:f2: f0:c0:c2:27:34:77:e2:ce:9a:73:25:fa:30:fb:73:4c:11:47: c1:67:8c:bd:96:7b:02:9b:03:d2:a5:57:d0:eb:9c:32:a2:69: 6a:49:e6:0b:85:d4:42:89:22:f0:bb:64:19:0b:e9:35:e3:fc: c9:93:f9:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFRTIxMTAvBgNVBAUTKDgyMTg1MjRGN0ExNkI1OEMwRDlCNzM5NDAzMTkzOTdF RTRGQ0E2RkQwHhcNMjYwNzI4MjA1NzM1WhcNMjYwODA0MjA1NzM1WjAYMRYwFAYD VQQDEw02YTY5MTdiZi1kZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6pcU2rRI+EZBXnihEOiK/lc1v7dO9Xuye3Y9qfOlWtMWwjQyYf/dxTge65M I5mux4MGcmFHScNGf5QfogA9/OoEmeSbrA9d+nJ0sDEg5YRbj6xD1Iw6BcueAF5Q FS1kYw8JBF8++L7viBRIEJGQu9egFzOQ6a0RsadD7MTUIxyTqAGbT3qxHQ/Hlff1 t/kAgNkHHZDtXNJPkzUT9vNERonT0XYzelOvh3rmzTHQw0CulssVyEJcbbYXOJUB GYWmZsx4nV2BCdgB5sysM8qXBXrWATwzmjSl9QxcrZvJg1xp/LbmUUWaWeXiU+HB OjREBS93+MUvLUXq7bwTc0ME5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFW8Fa0g sGMPfR/sgfhxoCNKNPlOMB8GA1UdIwQYMBaAFIIYUk96FrWMDZtzlAMZOX7k/Kb9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVFMi8wMkIyNzM4OEY1 NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZd05tM09VQXhrNWZ1VDhw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doaFNUM29XdFl3Tm0zT1VBeGs1ZnVUOHB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVFMi8wMkIyNzM4OEY1NzIxMUVBOUEyNDc5MTdDNEY5QUUwMi9naGhTVDNvV3RZ d05tM09VQXhrNWZ1VDhwdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAASTou3soCxBflFRBa2jqK2DPmzXllU+03a7ZBK8ZwFnkCPd+aj8Azb27D57a z881vfxOGV2+PVkiE3GMgAvpR2It2ItwzLKaZcnfYAynodfLV3qremqES9r4ofbQ yAr2Ad/wu10RcowCZVK0ISjKA3c23neGzRWJ0RGcpKbZr7jAaSBkqi6yar7KMvtT Mc4IzSPLXMBWY2nUD+x+qo0E5vdRBEBpli3fpbnJ2n1R0IUvLVkQNC2uua94G7UZ VVIpcRtucuHy8MDCJzR34s6acyX6MPtzTBFHwWeMvZZ7ApsD0qVX0OucMqJpaknm C4XUQoki8LtkGQvpNeP8yZP5sQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:27:49 2026 by rpki-client