$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: JhlNLlHSpIeubBHaRLTOdtEM+BrCvvfZi+i8FMnr8LU= Subject key identifier: A9:F2:C6:91:1C:B4:94:FF:EB:44:DD:FA:C6:A6:21:81:12:A0:DB:3C Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0DA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D7B Signing time: Sun 26 Jul 2026 18:16:45 +0000 Manifest this update: Sun 26 Jul 2026 18:16:45 +0000 Manifest next update: Sun 02 Aug 2026 18:16:45 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: XzFaFxrZK5qRiExbynNVMBjkd54jeyJDQcatSCyLAWI=) 2: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: y1B49VYXe0SRw82YvaswxQk2lKZMwXfDS055uUW8x9s=) 3: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: pMlh6GaUpQCHOF5jp4VeA1i4PMVxZyqL5Xz+a1jzwLQ=) 4: 4AD97410632C11EE96048122C4F9AE02.roa (hash: mpeuILXtK20evHO15vrz42Wl9KtS1A8R8Bhu34AGTf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3490 (0xda2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Jul 26 18:16:45 2026 GMT Not After : Aug 2 18:16:45 2026 GMT Subject: CN=6a664f0d-895c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f7:5d:66:92:1e:67:f2:06:17:73:8e:df:16: 6d:85:69:9e:4a:d1:f9:b4:c2:c2:77:22:20:ac:a2: d0:d8:cd:bc:be:98:09:1c:2f:11:c4:f3:e8:ab:18: 98:30:46:ab:93:65:f7:7e:43:c1:0d:74:fc:d0:ee: 86:2b:e1:37:a0:e6:e3:72:11:01:8d:f3:4e:b1:7f: f4:90:49:42:60:bf:d5:02:0c:87:c4:03:a2:48:18: d1:fb:71:61:73:ef:52:d9:cb:55:c6:11:31:b4:18: a2:11:83:f7:49:b6:b6:e0:75:e2:d2:6a:1b:87:e7: 29:da:e9:52:5a:bf:7d:cc:d6:08:40:02:5b:2e:65: 8b:8f:6e:c7:65:2f:22:b5:c5:da:ea:32:08:a8:e3: 39:30:88:49:b1:d9:2f:a3:12:06:f9:33:a8:07:09: 03:7a:b8:ff:4d:07:58:a8:ae:4b:d5:dc:9b:35:bd: cc:d3:94:02:dc:e4:ad:d5:64:ec:02:04:e6:59:6f: 2a:d6:6a:65:58:88:bd:d5:87:98:5c:a3:46:a4:e1: 21:d5:15:80:40:4b:e3:01:e6:09:80:70:e8:b6:2c: af:2e:d9:e8:d7:c0:92:03:a2:ef:04:56:a3:43:8b: 8b:53:d7:e4:2a:dc:57:47:a7:07:c4:ea:9a:d1:bf: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:C6:91:1C:B4:94:FF:EB:44:DD:FA:C6:A6:21:81:12:A0:DB:3C X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:25:95:0b:10:71:4e:cb:04:21:19:51:73:88:21:53:22:d0: 67:6d:c5:66:43:9b:05:6c:56:2a:2c:cc:01:87:9f:06:87:c0: ec:35:1e:f6:a6:90:85:80:7b:19:01:cd:ba:96:70:92:d4:38: bb:9b:7e:d6:31:58:0c:f9:ab:d9:8e:69:53:d4:dd:27:0b:0c: d9:d3:47:83:ea:9d:74:51:b0:08:06:36:b2:1f:2d:d2:9b:6f: 49:ca:3b:c9:e6:94:22:f7:c3:4e:d6:cf:51:a9:5c:65:d2:d5: 8b:17:ca:d6:87:30:4c:8e:a0:f0:c4:08:10:e3:b2:8d:15:1d: 75:77:b3:a3:42:f7:76:a1:8e:f9:1f:6a:c6:e0:ae:94:a2:18: 42:d7:3d:ff:67:50:39:b9:70:31:f7:e5:09:e0:e4:74:e4:6c: b0:a7:88:0c:95:c9:3f:10:aa:70:a2:ac:d7:58:dc:b9:ab:9b: f1:57:42:0f:63:f1:0e:15:df:09:68:d4:33:6f:40:cf:ac:30: a5:32:e4:51:65:54:50:da:26:c7:64:d7:22:9d:59:68:29:f4: dc:59:a1:ae:90:38:88:71:92:c6:07:20:5c:f2:5b:ba:3e:86: ac:a9:67:3a:b3:81:b0:8a:1a:fa:f8:89:98:22:d8:60:a3:07: ad:ad:c8:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwNzI2MTgxNjQ1WhcNMjYwODAyMTgxNjQ1WjAYMRYwFAYD VQQDEw02YTY2NGYwZC04OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjPddZpIeZ/IGF3OO3xZthWmeStH5tMLCdyIgrKLQ2M28vpgJHC8RxPPoqxiY MEark2X3fkPBDXT80O6GK+E3oObjchEBjfNOsX/0kElCYL/VAgyHxAOiSBjR+3Fh c+9S2ctVxhExtBiiEYP3Sba24HXi0mobh+cp2ulSWr99zNYIQAJbLmWLj27HZS8i tcXa6jIIqOM5MIhJsdkvoxIG+TOoBwkDerj/TQdYqK5L1dybNb3M05QC3OSt1WTs AgTmWW8q1mplWIi91YeYXKNGpOEh1RWAQEvjAeYJgHDotiyvLtno18CSA6LvBFaj Q4uLU9fkKtxXR6cHxOqa0b/PhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnyxpEc tJT/60Td+samIYESoNs8MB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHSWVCxBxTssEIRlRc4ghUyLQZ23FZkObBWxWKizMAYefBofA7DUe9qaQhYB7 GQHNupZwktQ4u5t+1jFYDPmr2Y5pU9TdJwsM2dNHg+qddFGwCAY2sh8t0ptvSco7 yeaUIvfDTtbPUalcZdLVixfK1ocwTI6g8MQIEOOyjRUddXezo0L3dqGO+R9qxuCu lKIYQtc9/2dQOblwMfflCeDkdORssKeIDJXJPxCqcKKs11jcuaub8VdCD2PxDhXf CWjUM29Az6wwpTLkUWVUUNomx2TXIp1ZaCn03FmhrpA4iHGSxgcgXPJbuj6GrKln OrOBsIoa+viJmCLYYKMHra3IAA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:38:31 2026 by rpki-client