$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json) Hash identifier: OwsSW1dXRqCLminQ+SJA+FUI8PAxJA/2Cg4s3uKc+EA= Subject key identifier: 19:A7:1D:68:FF:75:A0:32:5C:81:70:37:E1:FA:A9:8A:CF:28:FD:44 Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Certificate serial: 401D8D1300D9F822D567408B6484EDF5206A8641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft Manifest number: 07E2 Signing time: Tue 28 Jul 2026 02:19:38 +0000 Manifest this update: Tue 28 Jul 2026 02:14:38 +0000 Manifest next update: Wed 29 Jul 2026 04:10:38 +0000 Files and hashes: 1: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=) 2: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: flJTPZ46b4mt9qzWDdfIDdppJpcYKfDqIn9TjegEbok=) 3: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=) 4: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=) 5: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=) 6: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=) 7: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: xERVrictgFmFfgzmKAb0d8XFK4/vA4x4Rq1sHXCezl8=) 8: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 04:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1d:8d:13:00:d9:f8:22:d5:67:40:8b:64:84:ed:f5:20:6a:86:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F Validity Not Before: Jul 28 02:14:38 2026 GMT Not After : Jul 29 04:10:38 2026 GMT Subject: CN=19A71D68FF75A0325C817037E1FAA98ACF28FD44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3f:5b:e1:63:14:2b:97:dd:62:c8:ff:17:bb: 08:11:4d:81:67:e3:f8:f5:a1:5d:53:b0:25:c0:5c: 94:3c:59:99:07:3f:96:74:ef:d3:ad:00:a3:2c:a3: 4c:b7:f8:26:fe:87:2e:17:93:e2:71:5c:cd:0e:29: a5:22:aa:1a:77:13:44:1a:be:0d:dd:0d:dc:92:19: 87:98:19:5b:6e:a8:c6:57:de:3a:e7:90:0c:05:1c: 96:df:0c:3f:7d:c9:eb:24:92:a9:c2:4d:96:70:ca: f6:ee:5b:54:37:b0:f2:63:35:46:ba:98:c4:40:05: 9b:42:82:0b:27:ee:be:12:5e:f7:f2:f6:df:3b:ab: 22:4c:71:5b:96:72:7b:40:7d:8a:5c:a3:8e:08:25: 94:f5:e7:51:27:e0:a8:69:01:f8:59:b6:c3:04:85: 4d:8a:f4:27:c3:fa:19:67:5f:79:2c:e1:0d:70:11: 6c:1c:c2:64:46:2f:93:4a:1a:a8:03:70:a2:58:cb: 18:1a:94:d3:22:86:d5:51:4c:a9:a7:fd:4c:c8:c3: bb:e5:db:5f:65:dd:dd:72:d2:dd:6b:38:78:c4:fe: 8d:ec:0d:f4:24:1f:ab:c0:b8:cf:26:e7:32:79:e6: 02:2a:1d:bb:56:93:e6:df:6b:90:2d:dc:ca:39:0a: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A7:1D:68:FF:75:A0:32:5C:81:70:37:E1:FA:A9:8A:CF:28:FD:44 X509v3 Authority Key Identifier: keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:20:49:d9:19:a3:d9:f0:c7:98:c7:3d:8e:95:33:dc:bb:af: 89:30:d2:a9:d3:78:b7:c3:f5:17:42:9b:30:f9:41:f0:66:21: d2:4d:43:d4:ce:1e:11:77:96:f4:29:93:d0:9e:27:d6:bc:a4: c0:01:8e:62:77:21:4d:c2:b3:5b:02:8d:43:49:10:43:20:c4: be:b0:4d:60:7e:9e:4d:8d:b5:17:77:5f:7f:7a:7d:3c:56:5f: 85:3d:1d:7d:74:00:f9:7e:4c:f6:42:5a:d9:bd:9e:be:70:4d: 72:fa:a8:48:0a:96:d6:18:5c:5b:2c:42:ad:e1:d7:54:2a:7c: 39:26:c5:5e:9c:b6:98:e6:fe:7a:5b:e6:6c:2f:0a:f5:68:5c: 85:ee:61:49:18:68:4b:fa:65:3b:f1:7d:bb:ad:94:16:bd:a9: 10:c1:a9:61:cf:34:bb:e4:25:c9:a6:94:ed:ad:fe:5d:ef:4b: c9:52:b0:32:98:bd:5c:6e:ef:2a:06:81:c4:39:7a:6c:20:de: c2:8b:4f:e7:d2:ef:0e:6b:fc:4a:48:9d:d0:ee:ad:ee:8b:1c: 1e:fa:c5:1b:85:bd:cf:97:b8:13:34:34:5e:12:f2:a8:53:05: b2:bd:85:06:7d:84:68:1f:1d:03:1d:d9:5f:08:27:ed:4d:93: 51:63:15:f2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQB2NEwDZ+CLVZ0CLZITt9SBqhkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3 RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI2MDcyODAyMTQzOFoX DTI2MDcyOTA0MTAzOFowMzExMC8GA1UEAxMoMTlBNzFENjhGRjc1QTAzMjVDODE3 MDM3RTFGQUE5OEFDRjI4RkQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOo/W+FjFCuX3WLI/xe7CBFNgWfj+PWhXVOwJcBclDxZmQc/lnTv060Aoyyj TLf4Jv6HLheT4nFczQ4ppSKqGncTRBq+Dd0N3JIZh5gZW26oxlfeOueQDAUclt8M P33J6ySSqcJNlnDK9u5bVDew8mM1RrqYxEAFm0KCCyfuvhJe9/L23zurIkxxW5Zy e0B9ilyjjggllPXnUSfgqGkB+Fm2wwSFTYr0J8P6GWdfeSzhDXARbBzCZEYvk0oa qANwoljLGBqU0yKG1VFMqaf9TMjDu+XbX2Xd3XLS3Ws4eMT+jewN9CQfq8C4zybn MnnmAiodu1aT5t9rkC3cyjkKHCsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQZpx1o /3WgMlyBcDfh+qmKzyj9RDAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5 OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5 VUo0OUtYQjhYNFcxOXIyMjguY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvMy9CMThGOTg5OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZG Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAQyBJ2Rmj2fDHmMc9jpUz3LuviTDSqdN4t8P1F0KbMPlB8GYh 0k1D1M4eEXeW9CmT0J4n1rykwAGOYnchTcKzWwKNQ0kQQyDEvrBNYH6eTY21F3df f3p9PFZfhT0dfXQA+X5M9kJa2b2evnBNcvqoSAqW1hhcWyxCreHXVCp8OSbFXpy2 mOb+elvmbC8K9Whche5hSRhoS/plO/F9u62UFr2pEMGpYc80u+QlyaaU7a3+Xe9L yVKwMpi9XG7vKgaBxDl6bCDewotP59LvDmv8Skid0O6t7oscHvrFG4W9z5e4EzQ0 XhLyqFMFsr2FBn2EaB8dAx3ZXwgn7U2TUWMV8g== -----END CERTIFICATE-----Generated at Tue Jul 28 20:35:27 2026 by rpki-client