$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: UcB8q8bkYJ6jtpKgIZ1b4oqavMHMm4cws1p2H39Jjak= Subject key identifier: FC:5C:CA:E3:E9:D1:AC:E4:F3:4F:AE:2F:F7:C7:9C:87:DA:69:A3:06 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 01CC Signing time: Wed 29 Jul 2026 05:10:04 +0000 Manifest this update: Wed 29 Jul 2026 05:10:04 +0000 Manifest next update: Wed 05 Aug 2026 05:10:04 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: WVLBg+dAe0Q5xA70qfWxf9SDo5rv5GHa1rx1lspPGY0=) 2: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Y5OchRYZWCfXmYyEmnL2P8kc7yv28yWNLEvFTKE+MGg=) 3: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 7eQsc3jFfyJA5G5xsvQGlnjUsJ7FXLyXJQcnFpGfOuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 05:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Jul 29 05:10:04 2026 GMT Not After : Aug 5 05:10:04 2026 GMT Subject: CN=6a698b2c-3d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:39:dc:b0:cc:cd:da:51:3b:fd:b3:c5:a7: fe:dd:47:74:bc:85:cb:4f:b7:40:7f:6d:08:11:5b: d7:6d:6e:9f:51:d9:61:9d:71:18:fe:04:52:42:52: dc:08:73:e3:43:50:5a:10:73:ba:fd:c5:c3:47:7a: b1:0b:a6:76:65:c6:e8:47:a0:d0:81:99:8d:bd:e4: d3:e1:70:67:b6:dc:9e:9a:c2:d3:ca:83:5f:b4:4e: 2b:b5:82:28:07:7b:53:0c:07:d8:04:6d:2b:dc:a7: 4e:6a:40:4a:65:26:25:88:36:36:10:5d:77:3e:9d: bf:b3:99:52:c1:b0:83:dc:bc:08:58:eb:02:86:48: 51:1b:1b:e7:8a:de:2e:1a:46:22:dd:5d:d0:eb:35: b5:21:67:c3:ca:06:48:5d:d2:5f:3e:7d:27:e8:80: 31:d4:b8:80:08:68:9a:f8:35:2a:36:5c:36:5c:92: 21:f2:e1:03:b2:e1:2b:0c:21:81:00:b3:80:87:53: 52:32:74:81:71:2d:8e:4b:3c:ae:ef:ba:1b:e5:ad: 56:b0:81:12:0e:24:3f:b6:d1:b1:ca:31:f9:c6:72: 09:9e:92:4c:f1:d1:9f:45:00:f8:81:ad:0c:61:a1: 14:6f:07:cb:82:f0:ba:cb:3d:67:33:69:e8:85:f4: cb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5C:CA:E3:E9:D1:AC:E4:F3:4F:AE:2F:F7:C7:9C:87:DA:69:A3:06 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:31:b7:3a:15:8d:90:99:75:d4:e6:6d:a7:8f:55:8e:ee:fa: 5d:d5:7a:59:d6:e2:e1:05:2e:91:ab:55:f3:9d:d9:5b:ff:97: b0:8c:77:72:df:7d:f1:bb:3a:21:eb:fc:52:51:09:60:1c:02: d8:f9:97:39:39:c4:13:10:45:f8:9e:da:a0:fe:be:46:e5:8c: 8a:f0:d3:d5:f2:3a:e1:2b:0a:90:9d:f3:80:65:df:f5:c6:1b: b7:f9:24:5a:3d:7f:53:0e:71:00:83:25:50:a6:54:ca:e0:e8: d5:3c:16:e1:83:4d:8a:ff:ad:06:2a:e0:40:e5:5c:61:37:c7: ed:cc:54:14:65:d0:02:4c:8a:7b:94:87:d6:10:c6:20:c0:4b: 70:ed:5b:88:35:c0:be:f7:21:db:0a:f2:8e:14:ea:5e:07:b3: 94:46:f4:41:86:82:5d:2e:e4:81:72:6d:e9:56:80:53:aa:96: 4a:c3:a3:7c:69:0e:a4:c5:c7:a7:2a:7c:8f:54:8d:3a:c2:b7: 46:a5:03:b2:32:96:07:3d:d0:14:ba:b2:59:85:17:49:18:bf: d4:77:4d:b0:99:48:fb:3b:da:9d:19:4d:d6:df:38:85:a2:9f: 59:5b:c3:65:d1:8a:3e:91:23:38:bd:5e:a3:32:05:be:27:52: 6e:e9:a0:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjYwNzI5MDUxMDA0WhcNMjYwODA1MDUxMDA0WjAYMRYwFAYD VQQDEw02YTY5OGIyYy0zZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8053LDMzdpRO/2zxaf+3Ud0vIXLT7dAf20IEVvXbW6fUdlhnXEY/gRSQlLc CHPjQ1BaEHO6/cXDR3qxC6Z2ZcboR6DQgZmNveTT4XBnttyemsLTyoNftE4rtYIo B3tTDAfYBG0r3KdOakBKZSYliDY2EF13Pp2/s5lSwbCD3LwIWOsChkhRGxvnit4u GkYi3V3Q6zW1IWfDygZIXdJfPn0n6IAx1LiACGia+DUqNlw2XJIh8uEDsuErDCGB ALOAh1NSMnSBcS2OSzyu77ob5a1WsIESDiQ/ttGxyjH5xnIJnpJM8dGfRQD4ga0M YaEUbwfLgvC6yz1nM2nohfTLcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxcyuPp 0azk80+uL/fHnIfaaaMGMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlTG3OhWNkJl11OZtp49Vju76XdV6Wdbi4QUukatV853ZW/+XsIx3ct998bs6 Iev8UlEJYBwC2PmXOTnEExBF+J7aoP6+RuWMivDT1fI64SsKkJ3zgGXf9cYbt/kk Wj1/Uw5xAIMlUKZUyuDo1TwW4YNNiv+tBirgQOVcYTfH7cxUFGXQAkyKe5SH1hDG IMBLcO1biDXAvvch2wryjhTqXgezlEb0QYaCXS7kgXJt6VaAU6qWSsOjfGkOpMXH pyp8j1SNOsK3RqUDsjKWBz3QFLqyWYUXSRi/1HdNsJlI+zvanRlN1t84haKfWVvD ZdGKPpEjOL1eozIFvidSbumg2Q== -----END CERTIFICATE-----Generated at Wed Jul 29 12:55:27 2026 by rpki-client