$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json) Hash identifier: yvzJc+6SrS9uyGNRx7xlkCm88Oh0o6Lelj1Lr8kchTk= Subject key identifier: 97:7C:5D:77:2A:D9:CC:D4:E3:A0:94:0C:D4:DC:B2:37:AC:01:B7:59 Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft Manifest number: 02A9 Signing time: Mon 27 Jul 2026 02:55:56 +0000 Manifest this update: Mon 27 Jul 2026 02:55:55 +0000 Manifest next update: Mon 03 Aug 2026 02:55:55 +0000 Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: MLbscZZnAiW2mbgtQUgo1y78BkW/meQxa2d1toqsG+I=) 2: 95873DC401B511F1AABC9C3D6E6F56BC.roa (hash: JMpkHDzDVK/usfbHjSL6Kqnw95uZaR659+4yGn0oEJc=) 3: 0A03942001B311F1BDE34C726D6F56BC.roa (hash: 4okKosxS6IEGC1+htR6SIJMkssQ9kfQRZTp5TOGcyNo=) 4: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: ALR7tiUN9OO7R8fFOreHtqwUwWbttRypaQgzgT65w2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Validity Not Before: Jul 27 02:55:55 2026 GMT Not After : Aug 3 02:55:55 2026 GMT Subject: CN=6a66c8bc-f918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:22:7e:f4:a3:08:90:50:ac:53:3d:c2:d2: 9f:e8:d3:df:e8:37:04:fe:f9:39:cc:e7:c9:b4:fa: c4:81:3a:a4:94:ca:c6:2b:41:22:80:6a:db:c3:4e: 92:2e:f0:56:e5:84:46:c0:ea:ec:b0:58:97:36:ef: 99:37:1e:cc:17:c1:32:65:1d:37:90:e4:c1:d2:23: 66:f8:1a:49:3f:b6:a8:ca:d0:97:c4:3c:7a:3c:a1: e9:fa:fa:3b:da:d1:1d:7e:73:b0:82:e3:73:0c:e2: 02:b7:d1:f0:63:a3:fc:50:9c:ac:10:7d:bc:cc:d6: 9f:fd:a0:ba:d6:e9:80:48:15:cf:88:66:d1:04:57: 06:1a:03:55:99:c8:dd:e7:5c:22:41:01:1e:ca:38: 62:31:81:c4:f9:03:02:07:b6:0b:94:c5:2e:b6:07: 0b:b0:e0:b5:6b:06:6a:1f:24:df:2a:41:a3:38:9d: 74:1c:10:55:a5:5f:34:26:02:f9:fa:3c:31:03:f6: ea:08:cc:9c:a3:ea:5c:2d:84:f3:28:1b:6e:9d:70: f0:72:ab:e9:0c:dc:f6:e7:da:50:dd:71:44:90:63: 87:71:78:2c:a1:34:4d:a9:4e:f8:a1:87:8b:c0:55: 19:1f:29:b0:57:50:c9:b1:07:79:cc:70:d2:cc:57: 4d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7C:5D:77:2A:D9:CC:D4:E3:A0:94:0C:D4:DC:B2:37:AC:01:B7:59 X509v3 Authority Key Identifier: keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:b9:04:37:45:e9:ec:8d:ef:02:ef:9b:b6:19:1b:24:2a:21: 00:ee:62:33:f9:12:0c:61:67:5c:58:b2:4e:4a:c1:cd:68:fa: db:96:18:8a:72:91:95:eb:41:ad:52:fe:e0:da:bd:6b:6a:5a: 86:c6:38:17:b2:3a:2b:80:8f:49:a8:bf:2c:99:53:da:bd:10: d4:7f:4f:ad:76:1c:d8:b0:10:12:5f:38:c6:5b:89:a5:20:ff: 27:9c:78:ca:60:5f:17:37:45:a6:2d:9e:e2:df:d8:28:6d:1f: 0e:0d:91:af:7f:08:c7:41:1d:d7:7b:dc:2a:ee:d2:2f:fd:97: ce:eb:2a:cb:bd:7b:24:ca:5e:e8:14:31:64:ad:f7:39:84:35: 33:bd:fb:f0:8a:d6:03:45:66:46:6c:79:f9:19:1b:c8:d3:1a: ce:d9:42:6f:dd:e4:54:e3:c6:38:f9:f0:d5:84:fa:07:9d:da: 7e:34:8e:f7:c8:57:b1:20:42:1a:00:c9:bf:f0:2e:e9:b0:ba: 6a:be:13:5e:b0:38:6b:95:50:95:fd:4e:29:7a:55:fc:76:d3: 26:70:13:ef:10:69:2c:df:eb:c6:1a:b9:39:7e:64:ee:ab:4d: df:e9:48:0e:e4:df:ee:f5:30:db:77:8a:59:be:3a:28:e5:ae: 2f:f2:13:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5 QzUxMjIyRTYwHhcNMjYwNzI3MDI1NTU1WhcNMjYwODAzMDI1NTU1WjAYMRYwFAYD VQQDEw02YTY2YzhiYy1mOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAov4ifvSjCJBQrFM9wtKf6NPf6DcE/vk5zOfJtPrEgTqklMrGK0EigGrbw06S LvBW5YRGwOrssFiXNu+ZNx7MF8EyZR03kOTB0iNm+BpJP7aoytCXxDx6PKHp+vo7 2tEdfnOwguNzDOICt9HwY6P8UJysEH28zNaf/aC61umASBXPiGbRBFcGGgNVmcjd 51wiQQEeyjhiMYHE+QMCB7YLlMUutgcLsOC1awZqHyTfKkGjOJ10HBBVpV80JgL5 +jwxA/bqCMyco+pcLYTzKBtunXDwcqvpDNz259pQ3XFEkGOHcXgsoTRNqU74oYeL wFUZHymwV1DJsQd5zHDSzFdNlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJd8XXcq 2czU46CUDNTcsjesAbdZMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI UnVhRU8yRW8zU0NjVVNJdVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaLkEN0Xp7I3vAu+bthkbJCohAO5iM/kSDGFnXFiyTkrBzWj625YYinKRletB rVL+4Nq9a2pahsY4F7I6K4CPSai/LJlT2r0Q1H9PrXYc2LAQEl84xluJpSD/J5x4 ymBfFzdFpi2e4t/YKG0fDg2Rr38Ix0Ed13vcKu7SL/2Xzusqy717JMpe6BQxZK33 OYQ1M7378IrWA0VmRmx5+RkbyNMaztlCb93kVOPGOPnw1YT6B53afjSO98hXsSBC GgDJv/Au6bC6ar4TXrA4a5VQlf1OKXpV/HbTJnAT7xBpLN/rxhq5OX5k7qtN3+lI DuTf7vUw23eKWb46KOWuL/ITqw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:21:13 2026 by rpki-client