$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft File: lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft (raw, json) Hash identifier: caIS9epAdEwSYwRB1IakVsdiMrX5QP/zg2hbl98i2T4= Subject key identifier: 5F:38:75:11:95:42:E4:13:AC:79:83:1D:9D:B3:4E:52:05:28:52:99 Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft Manifest number: 065A Signing time: Sun 26 Jul 2026 23:32:00 +0000 Manifest this update: Sun 26 Jul 2026 23:31:59 +0000 Manifest next update: Sun 02 Aug 2026 23:31:59 +0000 Files and hashes: 1: lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl (hash: ynQFplaOY16Z0Qekr/nNV2lx3k11JKuZja9DyLiTGzI=) 2: 37F43E66A27311EFA8731822C4F9AE02.roa (hash: uvL2gNEthqGV41KwTfLQpnni0nIuRN7IKI+1/XnuE+o=) 3: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (hash: 7N+kBhMTPa/IDmaHS5j88uMau/dBXAyZziXt2IYR/Jg=) 4: 53BCB840EA4211EB846B8757C4F9AE02.roa (hash: 8A4Wb2KJcDqzfgpVuNBZcnB+OO/NHwZAcOnGRk55RA8=) 5: 368F5308A27311EFA8731822C4F9AE02.roa (hash: KBf8JxajMdMMi2+GI03db8VLySuC8cD1rgByqAKzBds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Validity Not Before: Jul 26 23:31:59 2026 GMT Not After : Aug 2 23:31:59 2026 GMT Subject: CN=6a6698f0-12c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fd:fa:40:94:b7:0f:b5:55:56:6b:b7:92:2a: a4:b5:39:7a:9f:e2:da:9e:6d:65:0a:67:89:89:a4: 30:bb:21:22:ac:51:ee:34:d7:2c:6a:76:f3:44:bb: 1f:fc:b3:fe:82:c9:38:6c:c3:1a:85:32:19:7f:7e: 99:3a:0c:03:ed:8b:83:c4:98:c7:dd:4a:00:08:92: 6b:a6:91:18:2f:33:5d:b2:80:95:2a:81:3c:b2:be: 1e:91:d5:23:71:51:ba:38:57:eb:21:d7:14:29:99: d8:ce:e6:ac:9c:b5:f8:27:32:80:6b:3d:33:c6:78: 20:75:55:57:ec:59:f8:3e:ff:5d:dd:1e:11:08:a9: 60:d2:96:ee:b5:9e:80:75:d7:e6:b1:d4:ca:32:5f: 91:ad:31:eb:6c:e9:ec:be:26:31:64:27:36:ff:f5: fc:62:e9:cb:fe:4e:dc:e1:c8:d2:d8:0c:f8:3a:1e: 27:df:6f:f5:f6:e8:08:ea:88:77:a4:4b:6a:7f:71: dd:0c:06:95:39:59:92:81:67:64:e2:3f:98:24:3c: b8:07:fa:26:5f:2e:c2:23:86:e2:bc:1b:dd:f0:cd: 87:58:6e:d0:e2:b1:34:b3:f2:29:72:ad:24:0a:db: 2e:57:e3:fa:5a:df:28:5d:eb:09:cb:f5:49:70:fe: a1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:38:75:11:95:42:E4:13:AC:79:83:1D:9D:B3:4E:52:05:28:52:99 X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:cf:c0:18:4f:93:a1:bf:66:5f:a9:63:c7:32:1f:9f:24:e1: 1d:2b:f4:5b:2a:eb:09:e4:54:b7:31:10:df:a9:15:71:3e:95: 7f:84:96:78:29:f1:61:88:ef:b3:95:2b:43:d0:e8:e6:a2:1a: 08:d6:fb:b2:03:42:41:50:9e:98:bc:36:82:32:82:d7:9c:8b: b0:0d:ac:32:33:f4:df:fb:28:be:7c:19:7c:2c:e4:bb:80:a9: 7f:d3:f8:72:18:ed:7e:bc:bb:c0:d8:50:57:7b:cc:cc:2c:47: fa:0b:88:e3:4c:cd:d2:b5:e8:d7:a7:99:7b:2f:ea:c3:81:55: 0a:cd:96:5e:c7:e7:16:d4:08:90:e6:99:98:62:5e:c5:c5:24: e3:4e:5c:ae:93:8e:a2:6d:1b:80:9a:61:40:6d:a7:56:dc:62: fd:30:01:2c:ee:b7:2f:31:90:af:84:2e:9d:19:b0:4f:15:3e: 6e:65:f7:7d:6d:49:08:b0:6f:d4:47:7c:1c:0e:1a:03:74:09: cc:11:03:88:d5:4d:4c:ef:fc:e0:dd:63:85:44:0a:fb:cf:28: 49:57:72:50:49:72:4d:96:e1:23:b1:8b:1e:49:19:b3:c6:88: 23:41:14:2b:de:21:af:f2:03:b2:59:f0:70:10:de:36:13:ee: e1:08:36:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjYwNzI2MjMzMTU5WhcNMjYwODAyMjMzMTU5WjAYMRYwFAYD VQQDEw02YTY2OThmMC0xMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/36QJS3D7VVVmu3kiqktTl6n+Lanm1lCmeJiaQwuyEirFHuNNcsanbzRLsf /LP+gsk4bMMahTIZf36ZOgwD7YuDxJjH3UoACJJrppEYLzNdsoCVKoE8sr4ekdUj cVG6OFfrIdcUKZnYzuasnLX4JzKAaz0zxnggdVVX7Fn4Pv9d3R4RCKlg0pbutZ6A ddfmsdTKMl+RrTHrbOnsviYxZCc2//X8YunL/k7c4cjS2Az4Oh4n32/19ugI6oh3 pEtqf3HdDAaVOVmSgWdk4j+YJDy4B/omXy7CI4bivBvd8M2HWG7Q4rE0s/Ipcq0k CtsuV+P6Wt8oXesJy/VJcP6h8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF84dRGV QuQTrHmDHZ2zTlIFKFKZMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ2RS80Q0JGRjRBRURGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQ cDRranZtWm40VTlzVER0SDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASc/AGE+Tob9mX6ljxzIfnyThHSv0WyrrCeRUtzEQ36kVcT6Vf4SWeCnxYYjv s5UrQ9Do5qIaCNb7sgNCQVCemLw2gjKC15yLsA2sMjP03/sovnwZfCzku4Cpf9P4 chjtfry7wNhQV3vMzCxH+guI40zN0rXo16eZey/qw4FVCs2WXsfnFtQIkOaZmGJe xcUk405crpOOom0bgJphQG2nVtxi/TABLO63LzGQr4QunRmwTxU+bmX3fW1JCLBv 1Ed8HA4aA3QJzBEDiNVNTO/84N1jhUQK+88oSVdyUElyTZbhI7GLHkkZs8aII0EU K94hr/IDslnwcBDeNhPu4Qg2eg== -----END CERTIFICATE-----Generated at Tue Jul 28 17:19:24 2026 by rpki-client