$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json) Hash identifier: IT0gP7P8I4B0JLKEilyEa2OtCy8jjcqyihzGpBt0iyU= Subject key identifier: 18:BC:24:87:43:0D:62:5D:34:F0:F5:AA:2B:98:70:A0:F4:48:CC:FA Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Certificate serial: 086A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft Manifest number: 0862 Signing time: Sun 26 Jul 2026 21:29:23 +0000 Manifest this update: Sun 26 Jul 2026 21:29:22 +0000 Manifest next update: Sun 02 Aug 2026 21:29:22 +0000 Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: 5WLzNkLqUYskNtzsaq0J2hebSeyHIPz68VyOLALlF1U=) 2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: bh9ab/euQ6z8B/L2XgiWVFQe1HHd439JaCqfvm92Ja8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2154 (0x86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Validity Not Before: Jul 26 21:29:22 2026 GMT Not After : Aug 2 21:29:22 2026 GMT Subject: CN=6a667c32-8b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:77:ad:ce:19:a7:cd:c8:cd:0a:00:c5:51: f7:fb:e6:b4:be:9b:55:5e:27:04:28:a0:b1:e4:3f: ba:76:c8:fe:88:5d:a3:f7:4c:4f:a0:fe:c2:1c:0b: c9:1c:a4:14:fa:e7:af:a8:53:c4:3e:81:31:9a:4a: a8:de:34:f3:45:7a:32:dd:78:ef:07:31:64:7d:65: 49:75:dc:77:08:c4:c1:43:de:cb:2a:5c:e4:38:a5: 5f:a2:1e:24:24:c7:d1:8a:e1:41:0b:7c:6c:eb:6a: 70:20:f6:f9:fd:2c:ff:57:58:69:09:53:a2:a8:35: e0:b7:b4:c8:ca:03:f7:5c:07:e0:c4:6f:7d:03:00: 84:77:15:14:72:9b:b5:4e:a7:68:7c:2e:8f:07:7d: b5:c1:69:11:61:09:cd:ca:8a:9f:fa:6d:6f:ea:a1: e1:df:26:bd:f7:fe:06:b5:86:08:95:01:e5:3f:fa: 5e:82:b1:5b:eb:77:3a:b2:2b:88:72:b6:31:09:6d: 0e:78:9c:09:d4:17:ad:f0:6c:f8:42:c8:bc:ba:2c: cb:f7:dc:5a:50:0d:2d:3d:78:0f:3d:42:40:1a:ea: d0:4d:5a:65:e4:b6:ba:73:dd:02:bb:f8:85:9d:93: e7:9d:33:06:9a:30:4a:38:5f:87:a2:11:2a:d0:d3: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BC:24:87:43:0D:62:5D:34:F0:F5:AA:2B:98:70:A0:F4:48:CC:FA X509v3 Authority Key Identifier: keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:8a:63:f8:d2:96:2e:77:66:ef:a1:aa:9c:e4:ad:b2:4b:6e: 78:1c:4f:fd:61:89:6a:2d:0c:7c:6d:35:a3:51:ad:76:9e:b3: 21:d3:2f:19:f9:8e:8e:cf:88:03:ff:f4:39:c4:e4:30:85:1c: c9:02:c0:8e:8e:65:75:d8:9d:d3:2d:c5:b7:58:a7:38:93:8c: 4e:ad:52:40:c6:69:18:bc:dc:9c:8a:db:c5:86:aa:4a:60:5a: ac:54:9a:6a:a8:3f:f1:3c:51:67:23:ed:2e:02:92:7e:a8:19: c5:ca:9a:a1:33:c1:3c:33:64:cd:0c:6b:b0:34:9a:3e:2c:33: e4:e3:bb:f3:eb:56:4c:b5:f7:d0:8d:ae:16:f5:79:66:5b:c6: c2:ee:b2:8b:82:79:36:54:88:7c:6e:d6:ff:5a:ad:55:5f:00: 7e:0c:00:5b:44:67:f5:2c:ad:04:07:a2:74:9f:eb:27:ac:c1: a0:ea:98:e3:0f:e5:fb:bd:d8:e1:c3:95:77:7c:83:a4:a5:63: 9d:d9:bf:b4:4b:b1:06:5c:34:49:92:63:f4:68:05:01:54:b6: 3e:dc:7c:73:65:32:c0:e7:30:e8:3f:94:0e:4f:50:4b:b5:ef: e4:82:a6:7e:17:09:ef:94:86:9c:81:f6:55:1f:49:b0:ea:fd: 5c:06:89:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw QjhFMzcxNkMwHhcNMjYwNzI2MjEyOTIyWhcNMjYwODAyMjEyOTIyWjAYMRYwFAYD VQQDEw02YTY2N2MzMi04YjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1R13rc4Zp83IzQoAxVH3++a0vptVXicEKKCx5D+6dsj+iF2j90xPoP7CHAvJ HKQU+uevqFPEPoExmkqo3jTzRXoy3XjvBzFkfWVJddx3CMTBQ97LKlzkOKVfoh4k JMfRiuFBC3xs62pwIPb5/Sz/V1hpCVOiqDXgt7TIygP3XAfgxG99AwCEdxUUcpu1 TqdofC6PB321wWkRYQnNyoqf+m1v6qHh3ya99/4GtYYIlQHlP/pegrFb63c6siuI crYxCW0OeJwJ1Bet8Gz4Qsi8uizL99xaUA0tPXgPPUJAGurQTVpl5La6c90Cu/iF nZPnnTMGmjBKOF+HohEq0NPEYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBi8JIdD DWJdNPD1qiuYcKD0SMz6MB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf ZmUtcWFNQi10QndMampjV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz4pj+NKWLndm76GqnOStsktueBxP/WGJai0MfG01o1Gtdp6zIdMvGfmOjs+I A//0OcTkMIUcyQLAjo5lddid0y3Ft1inOJOMTq1SQMZpGLzcnIrbxYaqSmBarFSa aqg/8TxRZyPtLgKSfqgZxcqaoTPBPDNkzQxrsDSaPiwz5OO78+tWTLX30I2uFvV5 ZlvGwu6yi4J5NlSIfG7W/1qtVV8AfgwAW0Rn9SytBAeidJ/rJ6zBoOqY4w/l+73Y 4cOVd3yDpKVjndm/tEuxBlw0SZJj9GgFAVS2Ptx8c2UywOcw6D+UDk9QS7Xv5IKm fhcJ75SGnIH2VR9JsOr9XAaJSA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:07 2026 by rpki-client