$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: RJPE/NC6mj3Yun65sqCIfTJL6SGvH2lRYM0eO3HTPTM= Subject key identifier: 4C:44:DE:A4:89:1E:52:FC:B8:3F:55:7B:2B:FD:2E:83:7E:36:E8:A7 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 0223 Signing time: Thu 23 Jul 2026 04:36:42 +0000 Manifest this update: Thu 23 Jul 2026 04:36:42 +0000 Manifest next update: Thu 30 Jul 2026 04:36:42 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: Uy6LbvvgM/EInhMekt90Zt0xhwmGfdUu3E3mNC4XzJ0=) 2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: NLqzgNFavgTlNRmtQJjQn4BF1LQ5ql0PYZJVK2eWqBQ=) 3: C93C3BD2BF1211F0825A8B67C4F9AE02.roa (hash: n9/IQR0BwLZbi9yJcCTUnntLY2aytZXC8mDV+WP0G4o=) 4: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: ByWsIE/4rVUD5qRgH7zOnv47Eu0MEqBdDSj3mKfG9BU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Jul 23 04:36:42 2026 GMT Not After : Jul 30 04:36:42 2026 GMT Subject: CN=6a619a5a-c9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:76:da:42:21:6b:8b:de:28:86:39:f8:ff: 88:cb:e4:bf:5b:72:8a:a6:9e:eb:ad:bf:40:d1:d6: ba:7a:f1:8f:7e:45:91:16:48:aa:8e:4a:61:6f:cd: d6:9c:54:aa:34:8b:be:de:00:0b:b5:a3:7f:4d:04: 59:13:91:ea:37:a8:46:4e:77:b3:48:be:61:6f:89: b0:1b:91:54:74:4b:da:6d:a5:ac:bb:22:fc:25:49: b0:7f:ca:cb:8f:7a:ee:e3:05:7b:d1:b8:10:44:85: 8b:45:f7:51:73:18:85:99:28:b6:15:73:a4:15:af: c8:6b:71:f9:f1:36:16:39:65:83:f4:0f:84:d6:98: 5b:29:a0:bc:eb:54:4f:e4:c8:9c:9e:84:35:94:0b: 7e:d0:74:d5:7d:90:81:30:d8:b0:94:0e:b4:6d:4d: 5e:93:bb:24:4b:98:72:43:dc:1c:57:b9:31:c6:fc: fe:7b:fb:03:e7:16:ef:ca:1e:10:08:e8:a3:f3:27: d2:c4:ce:5f:c8:b7:ee:df:65:a3:a7:d7:66:ca:0d: b7:65:12:17:f3:fe:3b:43:62:6c:58:06:72:6a:64: b0:83:af:48:1c:0f:df:41:41:7a:95:21:02:a6:b0: 50:41:d9:55:21:51:8b:bb:6b:32:e1:62:f1:e6:0d: 66:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:44:DE:A4:89:1E:52:FC:B8:3F:55:7B:2B:FD:2E:83:7E:36:E8:A7 X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f7:f5:3d:33:c2:9b:c7:91:62:79:c1:93:cf:3a:78:2f:13: 46:d0:93:ac:a6:df:25:40:cc:2a:62:02:70:8f:7c:73:c8:6b: 51:a7:85:58:50:76:ac:f4:b8:de:e3:5b:c8:3e:da:71:6b:a5: e5:10:00:d0:50:e6:39:ed:61:ad:89:61:d7:eb:be:a2:ca:2d: 00:9d:c7:d2:07:80:ea:1b:1e:f7:a8:0d:6e:da:c1:cd:25:f8: 6c:9c:aa:b4:29:b1:4b:09:ff:d5:7d:7a:37:58:c6:9e:9c:5c: 72:55:4b:e6:a9:4c:42:6d:e0:73:31:a2:bc:1e:b4:51:e6:75: ba:8f:9a:36:8a:36:4c:2f:92:0a:b6:a6:d8:b0:0c:21:8f:7b: 59:78:b4:03:fc:e7:8c:80:23:92:87:cd:c5:43:ab:f6:29:16: c0:b3:6c:5b:f0:f8:29:d2:67:e5:45:c5:e8:b0:b6:9e:18:5b: 74:b9:33:29:4a:20:24:cc:f3:94:63:0b:ff:b1:bb:d6:25:95: 3a:d2:bc:15:79:33:86:a5:e7:d4:48:f3:54:07:a3:0e:4d:89: 57:7b:c8:77:78:5f:62:84:85:c4:d1:c0:23:18:8b:32:aa:fc: ef:02:58:bd:a9:68:9f:2c:ac:56:5b:25:e4:64:c2:ec:6b:d3: 64:1d:b8:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjYwNzIzMDQzNjQyWhcNMjYwNzMwMDQzNjQyWjAYMRYwFAYD VQQDEw02YTYxOWE1YS1jOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhp22kIha4veKIY5+P+Iy+S/W3KKpp7rrb9A0da6evGPfkWRFkiqjkphb83W nFSqNIu+3gALtaN/TQRZE5HqN6hGTnezSL5hb4mwG5FUdEvabaWsuyL8JUmwf8rL j3ru4wV70bgQRIWLRfdRcxiFmSi2FXOkFa/Ia3H58TYWOWWD9A+E1phbKaC861RP 5MicnoQ1lAt+0HTVfZCBMNiwlA60bU1ek7skS5hyQ9wcV7kxxvz+e/sD5xbvyh4Q COij8yfSxM5fyLfu32Wjp9dmyg23ZRIX8/47Q2JsWAZyamSwg69IHA/fQUF6lSEC prBQQdlVIVGLu2sy4WLx5g1mAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExE3qSJ HlL8uD9Veyv9LoN+NuinMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdPf1PTPCm8eRYnnBk886eC8TRtCTrKbfJUDMKmICcI98c8hrUaeFWFB2rPS4 3uNbyD7acWul5RAA0FDmOe1hrYlh1+u+osotAJ3H0geA6hse96gNbtrBzSX4bJyq tCmxSwn/1X16N1jGnpxcclVL5qlMQm3gczGivB60UeZ1uo+aNoo2TC+SCram2LAM IY97WXi0A/znjIAjkofNxUOr9ikWwLNsW/D4KdJn5UXF6LC2nhhbdLkzKUogJMzz lGML/7G71iWVOtK8FXkzhqXn1EjzVAejDk2JV3vId3hfYoSFxNHAIxiLMqr87wJY valonyysVlsl5GTC7GvTZB24Hg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:52 2026 by rpki-client