$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft File: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json) Hash identifier: 2gm2fus7Nf8fUI5WM7XCE1/oxowcPUjplCtxUrRE3Ws= Subject key identifier: 1B:38:CE:4D:B4:9D:5A:7F:5F:AD:5C:AE:DA:37:9A:C3:E5:1E:33:6B Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Certificate serial: 1A9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft Manifest number: 1A26 Signing time: Tue 28 Jul 2026 16:26:03 +0000 Manifest this update: Tue 28 Jul 2026 16:26:02 +0000 Manifest next update: Tue 04 Aug 2026 16:26:02 +0000 Files and hashes: 1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: +aKi/YzRuvW8F+6vQl8C6Xrja1rk/ibBJyI+uaNE8I4=) 2: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: YkCRNqQCS8jVIHV+a7IJFYqulDisT+tl/2C+71L8pZ0=) 3: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: oitbivbdUYSMdXh7VLPNdxq472u6AbzxgvTVwLHL+so=) 4: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: cMSDuBT3kjpyehv0+lJ2MFU5CMopK6TVvtYRY4GXdzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6815 (0x1a9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Validity Not Before: Jul 28 16:26:02 2026 GMT Not After : Aug 4 16:26:02 2026 GMT Subject: CN=6a68d81b-2852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:f3:d0:ec:49:cb:a4:19:e0:2a:90:eb:1a: 11:52:59:d7:a7:78:67:02:41:29:89:34:ed:2b:43: 8b:f9:62:56:7a:fd:fe:ca:b8:35:b9:ac:c9:93:af: 29:63:b3:d5:ed:d4:cd:93:1b:97:8e:a9:5b:e5:23: 57:e0:2c:c0:16:f9:52:b6:61:37:c1:fe:94:40:5d: c0:73:07:77:a4:7d:f4:fa:84:6f:0e:41:8f:0e:33: d5:ad:94:09:17:20:29:e5:7e:bc:40:92:be:4d:60: a8:dd:b4:f3:25:bd:b6:fb:55:fe:ba:ad:88:7f:e6: 85:d0:ab:dd:3f:5f:5b:ea:28:e6:dc:cb:ce:04:97: d5:73:1a:50:e1:fe:fd:46:0d:11:81:5e:c6:91:fb: fa:fe:94:12:a6:d4:b0:28:4c:96:bc:8e:4b:4e:18: 87:9f:45:3e:cf:7f:c2:9a:af:e4:b7:8b:64:1f:53: f4:07:16:33:b1:cf:31:85:4a:2a:9e:91:f7:9f:00: 8d:e1:ed:fa:d8:0b:81:1a:43:cc:17:88:fb:88:73: 71:4d:34:0b:4c:be:be:19:f2:45:e0:0f:a0:2d:05: 12:f6:4f:3c:58:cc:dd:d7:94:79:b6:6d:fb:e1:66: 25:b8:14:68:31:d8:67:29:d2:c4:38:25:42:d6:00: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:38:CE:4D:B4:9D:5A:7F:5F:AD:5C:AE:DA:37:9A:C3:E5:1E:33:6B X509v3 Authority Key Identifier: keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f0:9a:cb:ea:25:50:a2:02:be:31:34:a8:5b:75:0e:a8:83: 97:b4:2d:09:31:7e:f4:13:ed:a6:a6:e4:43:b3:53:49:7c:77: 5d:bb:58:e8:a1:2b:96:db:5f:58:f2:12:e2:f3:cf:41:95:46: ec:7b:55:4d:b1:51:dc:b8:b1:e4:41:31:c5:cf:e7:27:4c:14: f1:c7:da:45:94:5b:e7:c8:43:6d:1d:64:a9:2b:12:0d:74:3e: 1a:41:a3:8e:0f:52:4c:b7:f0:6c:8f:fc:6c:de:a4:40:c3:7c: 68:75:79:e3:18:81:2d:d0:6d:c3:9a:de:00:4d:ae:18:d6:1c: 65:79:e0:77:a0:29:ac:b3:78:24:ea:cf:03:43:a0:b4:45:27: a9:f7:cf:5e:86:a7:44:62:8c:78:ef:cc:54:0a:0d:7b:70:f7: d8:0c:f6:8e:d8:e8:64:29:3e:58:45:5b:5a:7d:9b:21:a8:dd: 34:40:58:0c:b9:5e:05:b7:87:be:15:9b:c0:10:c0:43:c7:7b: cd:a4:1b:19:cc:91:6a:53:48:b3:9c:fc:dd:d5:84:a0:36:3d: c2:d3:a7:ec:5a:cf:f3:98:70:af:8b:b5:ee:8c:eb:4a:f5:60: c1:46:d7:e4:55:6f:3a:65:cd:b4:15:84:b4:db:8c:2c:7d:e9: c3:b3:e6:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMTMxMTAvBgNVBAUTKEU1NjcyQkJGMThDNENGRUJEM0Y0NzJEMTNCNDg3NzEz NzJEMzRFREYwHhcNMjYwNzI4MTYyNjAyWhcNMjYwODA0MTYyNjAyWjAYMRYwFAYD VQQDEw02YTY4ZDgxYi0yODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcTz0OxJy6QZ4CqQ6xoRUlnXp3hnAkEpiTTtK0OL+WJWev3+yrg1uazJk68p Y7PV7dTNkxuXjqlb5SNX4CzAFvlStmE3wf6UQF3Acwd3pH30+oRvDkGPDjPVrZQJ FyAp5X68QJK+TWCo3bTzJb22+1X+uq2If+aF0KvdP19b6ijm3MvOBJfVcxpQ4f79 Rg0RgV7Gkfv6/pQSptSwKEyWvI5LThiHn0U+z3/Cmq/kt4tkH1P0BxYzsc8xhUoq npH3nwCN4e362AuBGkPMF4j7iHNxTTQLTL6+GfJF4A+gLQUS9k88WMzd15R5tm37 4WYluBRoMdhnKdLEOCVC1gB7uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBs4zk20 nVp/X61crto3msPlHjNrMB8GA1UdIwQYMBaAFOVnK78YxM/r0/Ry0TtIdxNy007f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMxMy8zQzM0RUMwQTc3 NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXotdlQ5SExSTzBoM0UzTFRU dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVXY3J2eGpFei12VDlITFJPMGgzRTNMVFR0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMxMy8zQzM0RUMwQTc3NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXot dlQ5SExSTzBoM0UzTFRUdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlfCay+olUKICvjE0qFt1DqiDl7QtCTF+9BPtpqbkQ7NTSXx3XbtY6KErlttf WPIS4vPPQZVG7HtVTbFR3Lix5EExxc/nJ0wU8cfaRZRb58hDbR1kqSsSDXQ+GkGj jg9STLfwbI/8bN6kQMN8aHV54xiBLdBtw5reAE2uGNYcZXngd6AprLN4JOrPA0Og tEUnqffPXoanRGKMeO/MVAoNe3D32Az2jtjoZCk+WEVbWn2bIajdNEBYDLleBbeH vhWbwBDAQ8d7zaQbGcyRalNIs5z83dWEoDY9wtOn7FrP85hwr4u17ozrSvVgwUbX 5FVvOmXNtBWEtNuMLH3pw7PmNw== -----END CERTIFICATE-----Generated at Wed Jul 29 05:00:16 2026 by rpki-client