$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: fJtYqGr7Zpp5VbNNe9jUfaqdPjGTSU4xuBCpvIzLHm8= Subject key identifier: C4:C4:D9:47:13:2E:4B:86:28:03:91:A9:4A:32:B6:BD:38:82:06:9A Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 0212 Signing time: Mon 27 Jul 2026 04:29:42 +0000 Manifest this update: Mon 27 Jul 2026 04:29:41 +0000 Manifest next update: Mon 03 Aug 2026 04:29:41 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: KdrUZoAYSTDbJU59KIVjBmgcvdNyLFjVCS5xmADUigs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Jul 27 04:29:41 2026 GMT Not After : Aug 3 04:29:41 2026 GMT Subject: CN=6a66deb6-861e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5b:61:43:4a:cc:d8:6e:a7:13:17:ab:79:b7: 8c:76:73:99:a0:f2:4f:d5:d0:08:c3:d0:dc:a8:2c: 1a:64:a6:bd:6d:2b:2b:0c:0e:f0:85:43:71:08:77: 64:e1:8b:ed:37:ff:c4:a4:ed:59:2b:6a:d1:16:6b: 97:3a:50:2c:9f:37:48:fa:8f:69:43:37:80:b1:ca: fc:d9:2a:38:cb:49:66:da:06:8c:92:7a:72:33:63: 26:71:2c:48:ef:4a:b3:aa:eb:18:a8:12:2c:f9:5b: bb:d8:1f:df:53:2f:9e:cb:fd:9b:8e:dd:70:4b:df: 25:a3:16:63:fe:0e:3b:b2:b5:ab:25:a0:08:51:2d: 47:6b:36:75:95:81:9d:d8:7c:4c:d7:7b:dc:31:e8: 7e:7d:f5:63:9a:e9:00:1e:ba:41:79:48:80:4c:4d: b2:79:f6:76:c3:8d:28:bd:91:80:75:81:3f:ef:1f: 86:57:a7:b4:2a:29:fa:ed:91:29:bc:1f:32:e8:aa: 78:28:f2:a0:39:cd:96:cf:55:b7:1c:42:98:be:4a: 3b:69:e5:1e:c8:78:99:0d:38:44:81:41:11:b5:30: 5a:84:8c:6c:db:34:cd:a3:85:77:17:29:5c:63:c7: 62:01:fa:4d:5a:8a:58:ae:3d:09:08:bd:3b:c2:31: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C4:D9:47:13:2E:4B:86:28:03:91:A9:4A:32:B6:BD:38:82:06:9A X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:17:18:10:40:64:f5:c1:39:a0:1f:b1:a6:88:f7:ed:42:3c: 35:89:0a:4e:9a:04:58:e6:d0:bd:b7:14:78:7f:cb:5f:aa:c2: 12:a7:6a:28:1c:44:22:ac:cc:38:4d:fa:9f:1c:49:c1:68:89: c5:c4:1d:c7:eb:57:0d:79:2e:83:a2:69:65:b0:83:f5:0d:1d: be:e7:6c:42:10:93:04:fb:9b:85:f9:28:0b:b6:73:96:f0:f4: cb:e1:de:00:9e:e1:a8:df:49:0f:2b:db:da:31:c3:4c:03:de: 92:c7:b9:a2:6e:2a:b1:24:7e:68:69:9c:89:88:34:cf:eb:2d: 16:07:28:11:23:7b:8e:95:7b:95:45:94:bf:f7:6c:f4:0a:e9: 1d:24:b4:f1:14:b9:18:df:18:a1:bb:85:c1:24:47:59:1a:06: 36:ae:24:5a:14:20:33:83:fb:fe:56:59:a0:6b:06:b7:de:dd: a4:d2:1f:55:25:f9:a3:6d:b8:4f:84:8c:8f:fd:0b:4b:17:3d: 25:43:52:01:25:9f:6c:ed:0c:d0:1a:ca:86:0f:56:84:ab:70: d9:74:65:0e:d6:d3:0d:13:c5:ee:a0:4c:84:86:e8:e7:b6:a4: e6:f3:45:b6:f9:b9:73:cf:3d:c5:69:73:8f:52:bd:54:03:98: f8:b3:66:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjYwNzI3MDQyOTQxWhcNMjYwODAzMDQyOTQxWjAYMRYwFAYD VQQDEw02YTY2ZGViNi04NjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01thQ0rM2G6nExerebeMdnOZoPJP1dAIw9DcqCwaZKa9bSsrDA7whUNxCHdk 4YvtN//EpO1ZK2rRFmuXOlAsnzdI+o9pQzeAscr82So4y0lm2gaMknpyM2MmcSxI 70qzqusYqBIs+Vu72B/fUy+ey/2bjt1wS98loxZj/g47srWrJaAIUS1HazZ1lYGd 2HxM13vcMeh+ffVjmukAHrpBeUiATE2yefZ2w40ovZGAdYE/7x+GV6e0Kin67ZEp vB8y6Kp4KPKgOc2Wz1W3HEKYvko7aeUeyHiZDThEgUERtTBahIxs2zTNo4V3Fylc Y8diAfpNWopYrj0JCL07wjGRdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTE2UcT LkuGKAORqUoytr04ggaaMB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnRcYEEBk9cE5oB+xpoj37UI8NYkKTpoEWObQvbcUeH/LX6rCEqdqKBxEIqzM OE36nxxJwWiJxcQdx+tXDXkug6JpZbCD9Q0dvudsQhCTBPubhfkoC7ZzlvD0y+He AJ7hqN9JDyvb2jHDTAPekse5om4qsSR+aGmciYg0z+stFgcoESN7jpV7lUWUv/ds 9ArpHSS08RS5GN8YobuFwSRHWRoGNq4kWhQgM4P7/lZZoGsGt97dpNIfVSX5o224 T4SMj/0LSxc9JUNSASWfbO0M0BrKhg9WhKtw2XRlDtbTDRPF7qBMhIbo57ak5vNF tvm5c889xWlzj1K9VAOY+LNmuA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:48:27 2026 by rpki-client