$ rpki-client -vvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft File: he9PUr5sDQk3OGmpACI4YoIz6-8.mft (raw, json) Hash identifier: 3S29dcsQMyCWtFTWyz4LIaMxmBT+loxX9UNqVZspKGo= Subject key identifier: 6A:12:3D:5F:AB:5A:0E:86:C9:16:E3:0A:79:19:B0:5B:17:46:2E:AD Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF Certificate issuer: /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft Manifest number: 064E Signing time: Sun 26 Jul 2026 23:30:52 +0000 Manifest this update: Sun 26 Jul 2026 23:30:52 +0000 Manifest next update: Sun 02 Aug 2026 23:30:52 +0000 Files and hashes: 1: he9PUr5sDQk3OGmpACI4YoIz6-8.crl (hash: XtBwpccb8vSPydvn55E5MiT6O7b552ENKQw0ekWXgrk=) 2: 82A9E362DEC111EB9010BE6AC4F9AE02.roa (hash: r63sbdb81aS0Y3D1jhysh8/CnvmDL9CRF/6oUTPKQNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF Validity Not Before: Jul 26 23:30:52 2026 GMT Not After : Aug 2 23:30:52 2026 GMT Subject: CN=6a6698ac-e2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:f0:4c:c2:3c:38:97:d1:26:75:0f:e9:b8: a5:39:d0:81:9a:df:1c:12:bb:c2:d8:79:08:c6:9b: 13:eb:97:3d:3e:14:5d:6c:68:4c:5d:0a:ff:a3:fd: de:b7:78:b6:ca:8e:ba:12:98:ed:fc:28:7c:24:6d: 77:78:ae:3d:fd:af:c1:1a:b3:fa:a3:89:27:85:a7: 79:4a:39:aa:d3:d1:8f:c4:20:93:ed:10:27:27:2e: 9b:39:95:2a:06:3e:07:b2:a2:93:4c:01:4d:f5:da: 2b:fc:d2:54:70:aa:86:94:f9:d6:0b:eb:90:ed:68: e2:f7:db:15:b5:b8:69:e5:f3:99:af:ee:11:d6:ee: 39:09:97:64:e4:37:d1:67:90:ff:b9:c0:dc:f0:f0: b5:8d:cc:ed:cf:bd:a2:2e:bb:5c:e4:72:e3:e9:cf: 86:52:cd:2b:fd:5d:ee:8b:6e:4e:8a:a0:44:86:ce: 61:48:11:74:8a:b5:3f:cf:42:35:4f:15:38:6a:08: 39:aa:40:fb:e8:6a:f4:7e:2a:f8:67:ec:30:9c:7a: 21:ed:a7:c2:c4:28:31:37:3a:4d:79:88:1a:56:a8: c0:7a:5b:e7:4c:3c:ac:86:ee:10:18:1c:cf:83:d9: 9a:e4:62:74:a2:29:a3:cc:00:01:d9:2b:95:b3:aa: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:12:3D:5F:AB:5A:0E:86:C9:16:E3:0A:79:19:B0:5B:17:46:2E:AD X509v3 Authority Key Identifier: keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:45:a1:6c:1d:34:3c:1b:7a:af:7a:35:33:13:20:66:ae:e9: b0:6d:03:3b:81:0b:0f:cb:22:f0:cf:15:b3:83:ec:c6:32:ea: 82:b1:3c:58:09:81:34:c8:b6:35:79:51:c4:be:05:eb:f5:a1: f1:4b:3e:f1:47:51:88:2a:d9:f5:5f:b5:dd:0a:b4:22:61:58: a5:de:8f:e0:9c:2e:83:be:21:fd:67:dd:19:0e:45:b6:a0:df: 52:f9:0e:d9:5a:81:40:50:35:d8:dd:f4:fb:c5:14:79:f0:8f: 1a:8d:1e:b2:5c:9a:98:4c:98:88:27:32:a8:54:bb:69:46:09: 4b:7a:d3:c6:b1:e3:fc:f9:c8:4e:6f:c4:eb:12:7b:ac:56:91: 48:f8:47:f6:e5:0b:4b:df:41:3e:98:da:b4:89:3d:2d:7a:6a: a8:7a:98:d9:32:1c:d8:54:7c:0e:a7:8b:f8:1c:ff:0c:ff:c6: 77:c2:de:22:9a:88:cd:fd:a6:44:1f:4f:2a:3f:95:ce:5c:ee: fd:89:77:7a:aa:c5:f8:fd:84:20:69:f1:56:3b:09:81:10:65: e3:ce:b1:9a:fd:07:71:55:58:7a:32:36:06:f6:82:5d:5e:29: 7e:7d:38:40:8e:95:20:91:29:a0:fa:33:01:0c:70:c6:fe:5b: 9a:72:d7:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyMTgxMTAvBgNVBAUTKDg1RUY0RjUyQkU2QzBEMDkzNzM4NjlBOTAwMjIzODYy ODIzM0VCRUYwHhcNMjYwNzI2MjMzMDUyWhcNMjYwODAyMjMzMDUyWjAYMRYwFAYD VQQDEw02YTY2OThhYy1lMmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwvwTMI8OJfRJnUP6bilOdCBmt8cErvC2HkIxpsT65c9PhRdbGhMXQr/o/3e t3i2yo66Epjt/Ch8JG13eK49/a/BGrP6o4knhad5Sjmq09GPxCCT7RAnJy6bOZUq Bj4HsqKTTAFN9dor/NJUcKqGlPnWC+uQ7Wji99sVtbhp5fOZr+4R1u45CZdk5DfR Z5D/ucDc8PC1jcztz72iLrtc5HLj6c+GUs0r/V3ui25OiqBEhs5hSBF0irU/z0I1 TxU4agg5qkD76Gr0fir4Z+wwnHoh7afCxCgxNzpNeYgaVqjAelvnTDyshu4QGBzP g9ma5GJ0oimjzAAB2SuVs6rLsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoSPV+r Wg6GyRbjCnkZsFsXRi6tMB8GA1UdIwQYMBaAFIXvT1K+bA0JNzhpqQAiOGKCM+vv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTIxOC9EODU3QTEzRURF QkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RRazNPR21wQUNJNFlvSXo2 LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlOVBVcjVzRFFrM09HbXBBQ0k0WW9JejYtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTIxOC9EODU3QTEzRURFQkYxMUVCOUFBNjNCNkFDNEY5QUUwMi9oZTlQVXI1c0RR azNPR21wQUNJNFlvSXo2LTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvEWhbB00PBt6r3o1MxMgZq7psG0DO4ELD8si8M8Vs4PsxjLqgrE8WAmBNMi2 NXlRxL4F6/Wh8Us+8UdRiCrZ9V+13Qq0ImFYpd6P4Jwug74h/WfdGQ5FtqDfUvkO 2VqBQFA12N30+8UUefCPGo0eslyamEyYiCcyqFS7aUYJS3rTxrHj/PnITm/E6xJ7 rFaRSPhH9uULS99BPpjatIk9LXpqqHqY2TIc2FR8DqeL+Bz/DP/Gd8LeIpqIzf2m RB9PKj+Vzlzu/Yl3eqrF+P2EIGnxVjsJgRBl486xmv0HcVVYejI2BvaCXV4pfn04 QI6VIJEpoPozAQxwxv5bmnLXzw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:56:37 2026 by rpki-client