$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json) Hash identifier: I/n0mroGJNOiobQXZ3DWAqefX9Cp4w31WZLjnxty2oQ= Subject key identifier: 14:AE:9F:83:94:84:8F:1F:29:12:95:34:8E:1E:9A:BA:FB:16:D7:07 Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Certificate serial: 3596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft Manifest number: 356F Signing time: Tue 28 Jul 2026 15:08:09 +0000 Manifest this update: Tue 28 Jul 2026 15:08:08 +0000 Manifest next update: Tue 04 Aug 2026 15:08:08 +0000 Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: i7mBR0F9+UpKndX3jlVtGJPIo6j1ZTXLsr3U4s9vyUw=) 2: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=) 3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=) 4: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13718 (0x3596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Validity Not Before: Jul 28 15:08:08 2026 GMT Not After : Aug 4 15:08:08 2026 GMT Subject: CN=6a68c5d9-1c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b8:51:c0:2b:ec:58:a6:74:60:ae:a3:83:ef: cc:1f:49:c6:1d:ac:15:ff:eb:cf:70:b0:ad:94:ae: 72:be:ef:42:5e:a2:8a:1b:08:98:d2:f3:8a:3a:62: 7a:7a:1c:7c:90:95:1d:ae:77:c6:91:4e:71:28:6d: e1:f3:cc:91:30:c3:a7:81:4f:80:c5:da:24:1f:fa: 3a:ec:a9:ba:f2:01:16:af:14:4c:97:9e:ad:ea:8e: 4b:4e:61:7b:94:a0:64:d9:ae:0c:e3:9f:52:97:3c: 96:4d:a2:f7:ab:44:ae:48:3b:6b:fb:e2:31:25:ad: f3:7b:d6:20:32:65:96:43:a5:75:f1:a1:fd:9d:ec: a5:11:43:ef:61:68:17:68:83:2c:e8:48:3c:42:9f: 16:45:91:92:c4:13:cb:41:5d:d0:ca:da:cc:bd:2e: c1:d4:73:70:dd:2d:a2:2d:78:ee:a9:4d:6c:b3:02: 79:a4:1d:b7:14:80:7e:5c:ab:2e:2d:13:59:1d:8d: 23:de:45:8b:bd:f2:6e:1a:04:04:54:05:3a:f9:a0: 18:27:09:16:b1:95:ea:14:cb:8d:9d:28:92:82:e4: 26:1a:92:e2:30:7b:b2:16:72:06:d0:f0:47:7f:bd: aa:98:fe:cf:ac:12:8c:48:bd:6e:7d:3d:d2:71:78: 7a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AE:9F:83:94:84:8F:1F:29:12:95:34:8E:1E:9A:BA:FB:16:D7:07 X509v3 Authority Key Identifier: keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1f:53:4f:7f:a4:07:43:1a:9e:b3:d0:22:72:c5:c8:6b:49: 70:a1:83:4f:85:7c:93:6f:c4:a9:39:30:e8:2c:df:3b:5e:29: 7b:fe:59:6e:54:7a:87:4d:33:d9:29:85:61:e8:9e:62:f3:c4: 85:0c:de:b7:48:1f:de:6a:b7:e1:69:c9:ad:c0:f1:f0:55:ef: cc:92:46:16:86:de:b7:61:95:ad:b0:7d:79:67:12:9d:a9:98: a8:8d:c2:d0:d9:c4:8d:00:1d:a0:2e:06:87:0b:29:b1:51:70: 76:b6:0e:9c:fc:c3:87:31:07:d9:7f:06:59:f7:a9:f3:ec:01: f4:22:9b:2d:ad:66:5c:8f:c2:f6:bb:19:14:6d:55:f8:93:c3: eb:0e:24:75:9c:4c:3c:1b:11:03:c0:23:33:bc:e5:aa:f2:be: 7d:a6:d5:94:e6:08:f2:1e:10:49:61:11:68:7b:a7:96:8f:cb: 63:6f:02:d0:7a:2f:bd:ab:a3:6a:ea:88:72:3e:b2:1b:31:6b: be:61:a1:35:30:7f:2c:09:9f:6b:e8:eb:00:6d:d0:7f:14:85: 7b:ad:37:29:c5:0f:4c:06:35:d0:b3:9f:e9:e6:c9:c5:50:75: 4b:7d:b1:55:38:3e:9b:1e:88:71:55:65:1c:91:c2:cf:65:88: f1:f3:1d:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz MTE4NTgwMEIwHhcNMjYwNzI4MTUwODA4WhcNMjYwODA0MTUwODA4WjAYMRYwFAYD VQQDEw02YTY4YzVkOS0xYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rhRwCvsWKZ0YK6jg+/MH0nGHawV/+vPcLCtlK5yvu9CXqKKGwiY0vOKOmJ6 ehx8kJUdrnfGkU5xKG3h88yRMMOngU+AxdokH/o67Km68gEWrxRMl56t6o5LTmF7 lKBk2a4M459SlzyWTaL3q0SuSDtr++IxJa3ze9YgMmWWQ6V18aH9neylEUPvYWgX aIMs6Eg8Qp8WRZGSxBPLQV3QytrMvS7B1HNw3S2iLXjuqU1sswJ5pB23FIB+XKsu LRNZHY0j3kWLvfJuGgQEVAU6+aAYJwkWsZXqFMuNnSiSguQmGpLiMHuyFnIG0PBH f72qmP7PrBKMSL1ufT3ScXh6mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSun4OU hI8fKRKVNI4emrr7FtcHMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ UVNLV19ycHM1dGd4R0ZnQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeh9TT3+kB0ManrPQInLFyGtJcKGDT4V8k2/EqTkw6CzfO14pe/5ZblR6h00z 2SmFYeieYvPEhQzet0gf3mq34WnJrcDx8FXvzJJGFobet2GVrbB9eWcSnamYqI3C 0NnEjQAdoC4GhwspsVFwdrYOnPzDhzEH2X8GWfep8+wB9CKbLa1mXI/C9rsZFG1V +JPD6w4kdZxMPBsRA8AjM7zlqvK+fabVlOYI8h4QSWERaHunlo/LY28C0Hovvauj auqIcj6yGzFrvmGhNTB/LAmfa+jrAG3QfxSFe603KcUPTAY10LOf6ebJxVB1S32x VTg+mx6IcVVlHJHCz2WI8fMdXw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:17:33 2026 by rpki-client