$ rpki-client -vvf rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft File: 9b6dYfb-pOZW1P0BVPgkg5zAExo.mft (raw, json) Hash identifier: Y3fkNrsSKyEG8R4N4BkI5Z053Ks0EjPyWyHTIAfBD4Y= Subject key identifier: FC:7F:FB:EB:1F:7E:7C:BC:20:25:4F:08:58:B6:84:5D:7E:42:0B:E2 Authority key identifier: F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A Certificate issuer: /CN=A917F9C3/serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft Manifest number: 29 Signing time: Mon 27 Jul 2026 11:08:55 +0000 Manifest this update: Mon 27 Jul 2026 11:08:55 +0000 Manifest next update: Mon 03 Aug 2026 11:08:55 +0000 Files and hashes: 1: 9b6dYfb-pOZW1P0BVPgkg5zAExo.crl (hash: kTdSdEZ+/dpIz4oWcMwIbT8dUDRe1oOOLcGTiCpP6x0=) 2: 6C5753D84AB911F18A4D3DF6BB833773.roa (hash: kOOEqXmo4LVDDcxbv65Mt49e9oFCFpEfHfLmkIbPCDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F9C3, serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A Validity Not Before: Jul 27 11:08:55 2026 GMT Not After : Aug 3 11:08:55 2026 GMT Subject: CN=6a673c47-c7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:76:13:a1:72:ad:20:98:6d:3d:7b:87:ca: cd:90:38:95:5f:7d:67:42:3b:4a:0e:21:16:23:ee: b4:4c:f4:80:55:99:ed:b8:25:61:7b:94:07:12:59: 66:1d:63:d8:47:46:0e:c3:9d:0c:62:53:4a:8f:e3: 7e:a7:96:2f:48:51:6c:1b:1a:6b:d1:8a:d3:0b:fc: 61:b5:24:5c:86:a7:12:a9:f6:32:8a:68:56:f4:d5: 01:ad:cd:a6:4d:ff:aa:54:95:af:ab:f2:fc:c2:2f: d5:f1:83:33:36:3e:df:83:f3:8a:1f:0b:7b:94:21: 81:a4:50:cf:50:9b:e5:8e:6e:d2:2c:58:c9:02:fa: d4:20:79:a8:24:5a:d0:c3:9a:58:d4:a3:b1:eb:c6: 6c:7c:58:e2:8f:83:e1:56:35:0e:b4:88:9f:c6:c1: e8:b2:5d:70:4c:f3:8e:af:ed:d5:7c:89:5f:75:9e: bb:1a:61:27:61:8e:35:2b:98:dc:67:59:9a:6b:bb: cc:c3:22:02:68:f3:a3:9a:8f:46:6e:f9:bf:e3:2f: d1:ca:4e:7a:88:68:0e:db:2c:99:b4:4c:71:37:b4: 6e:08:48:3f:31:ef:80:9d:e7:9c:c2:bb:79:42:09: 89:2f:2e:09:27:3c:2e:02:2a:ba:0f:4e:f5:00:ed: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7F:FB:EB:1F:7E:7C:BC:20:25:4F:08:58:B6:84:5D:7E:42:0B:E2 X509v3 Authority Key Identifier: keyid:F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d2:87:d1:f1:9e:00:c8:88:7c:bf:ea:2d:4c:38:43:fe:65: c8:9e:5d:65:c8:79:c4:bf:77:f7:fe:a1:13:64:76:89:8b:07: e5:9b:25:43:c2:40:26:7c:23:ba:2d:4b:19:f7:f1:9a:5c:91: f2:df:89:7f:51:b1:b3:f4:4b:96:a0:d9:56:80:c7:ef:e5:d3: 94:3f:2d:52:99:d9:97:fc:5f:fa:75:0b:0a:c9:95:40:38:4c: fc:d9:46:dc:8c:f8:ce:4b:e3:44:5e:d8:e5:22:1e:e9:60:b4: 75:45:0f:2c:bc:76:a9:ee:ad:c4:0f:13:76:a1:1d:bb:11:24: f7:6e:10:3d:3b:34:47:3e:70:a7:39:9d:21:d4:81:60:29:60: fd:6d:01:4f:a6:4a:fe:40:23:66:91:4f:e5:14:33:4b:50:06: 4b:07:be:03:33:74:81:4c:f4:73:17:28:a1:d0:ff:d4:3a:df: 74:18:b8:a9:1f:aa:6a:b1:d4:0f:37:15:bd:a5:02:84:a9:68: ad:ac:3e:e4:f6:d9:20:45:cd:c5:44:f0:79:0f:71:e5:50:26: 84:8c:39:c2:9a:54:1b:99:0c:38:25:c1:4a:79:80:1a:30:47: 9f:f7:dd:20:04:b4:7e:f3:04:c2:18:95:ba:e7:83:5b:ee:b0: 62:a5:f3:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjlDMzExMC8GA1UEBRMoRjVCRTlENjFGNkZFQTRFNjU2RDRGRDAxNTRGODI0ODM5 Q0MwMTMxQTAeFw0yNjA3MjcxMTA4NTVaFw0yNjA4MDMxMTA4NTVaMBgxFjAUBgNV BAMTDTZhNjczYzQ3LWM3YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ0nYToXKtIJhtPXuHys2QOJVffWdCO0oOIRYj7rRM9IBVme24JWF7lAcSWWYd Y9hHRg7DnQxiU0qP436nli9IUWwbGmvRitML/GG1JFyGpxKp9jKKaFb01QGtzaZN /6pUla+r8vzCL9XxgzM2Pt+D84ofC3uUIYGkUM9Qm+WObtIsWMkC+tQgeagkWtDD mljUo7Hrxmx8WOKPg+FWNQ60iJ/GweiyXXBM846v7dV8iV91nrsaYSdhjjUrmNxn WZpru8zDIgJo86Oaj0Zu+b/jL9HKTnqIaA7bLJm0THE3tG4ISD8x74Cd55zCu3lC CYkvLgknPC4CKroPTvUA7XITAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/H/76x9+ fLwgJU8IWLaEXX5CC+IwHwYDVR0jBBgwFoAU9b6dYfb+pOZW1P0BVPgkg5zAExow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGOUMzLzc4OEU3QzQ2NEFC NzExRjE4NkYyN0UzQUJBODMzNzczLzliNmRZZmItcE9aVzFQMEJWUGdrZzV6QUV4 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWI2ZFlmYi1wT1pXMVAwQlZQZ2tnNXpBRXhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG OUMzLzc4OEU3QzQ2NEFCNzExRjE4NkYyN0UzQUJBODMzNzczLzliNmRZZmItcE9a VzFQMEJWUGdrZzV6QUV4by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAs0ofR8Z4AyIh8v+otTDhD/mXInl1lyHnEv3f3/qETZHaJiwflmyVDwkAmfCO6 LUsZ9/GaXJHy34l/UbGz9EuWoNlWgMfv5dOUPy1SmdmX/F/6dQsKyZVAOEz82Ubc jPjOS+NEXtjlIh7pYLR1RQ8svHap7q3EDxN2oR27EST3bhA9OzRHPnCnOZ0h1IFg KWD9bQFPpkr+QCNmkU/lFDNLUAZLB74DM3SBTPRzFyih0P/UOt90GLipH6pqsdQP NxW9pQKEqWitrD7k9tkgRc3FRPB5D3HlUCaEjDnCmlQbmQw4JcFKeYAaMEef990g BLR+8wTCGJW654Nb7rBipfOn -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:10 2026 by rpki-client