$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: 1Hep4tTcWX0/UrJkvLgHRKXhSaqcbnM94oBGax5hYU8= Subject key identifier: E2:E2:3E:2B:BD:C9:AF:22:DB:70:70:82:07:33:B6:0D:92:8D:8F:7A Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 0113 Signing time: Thu 23 Jul 2026 08:01:20 +0000 Manifest this update: Thu 23 Jul 2026 08:01:20 +0000 Manifest next update: Thu 30 Jul 2026 08:01:20 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: WjJlIpWX+AELJqhFPMcCQnznJSRHacKAisBQ3wrHAPQ=) 2: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: emwrRh6MHxR/MKG/kZ4kbsedosRabW/yCqw67x249ko=) 3: A679A90E6ACA11F19C5D49226847A888.roa (hash: HlE4/rCdBHaYQMrVtMYhseWs8raS1AuMlQ1WnzgrFwc=) 4: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: KaHspWR0HemZK0q9LOChU8le2zgj9l3UI0kexYlJ+/g=) 5: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: PannZ6VHlnMlbIAiTwMXrhZQx+rOzoDIuG7Svi8FR6k=) 6: C8171E8EC04D11F081466417C4F9AE02.roa (hash: F2rHWA0aG3jOYck+BArfetJHmQYT8RWz4zDyWgQQ0/Q=) 7: D87376860A1511F09D97420DC4F9AE02.roa (hash: 8lzuSsXoeVTLO94cZnbjFM82UzyIWVo6xrDZpzd/rnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Jul 23 08:01:20 2026 GMT Not After : Jul 30 08:01:20 2026 GMT Subject: CN=6a61ca50-e3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e6:ea:aa:8f:c0:0c:4f:74:0a:c4:9b:b4:8f: cd:d3:05:99:ea:54:76:b1:fa:08:b9:31:60:b8:92: ce:24:03:b5:80:b6:58:48:8a:bf:19:60:53:a0:86: ff:28:99:c1:c4:02:39:8e:1b:f9:b6:f0:bd:95:2f: 43:e3:02:f6:ed:8b:d6:f3:e2:22:bc:27:0d:8f:47: ce:fe:a0:63:0d:e8:4f:e0:f1:ac:3c:e2:6e:46:4d: 08:95:c0:af:0c:16:66:76:ea:ef:d8:b2:60:7a:ba: 89:3d:cd:9f:68:a6:52:ab:35:5e:c5:68:98:1c:e1: a9:eb:15:ed:59:07:2b:56:81:5c:da:e6:53:69:66: 90:7b:04:3e:d2:52:66:c8:01:d5:0d:cd:a7:e9:18: 90:3c:44:0e:d0:23:f4:41:10:28:0b:f4:e7:04:fe: 75:b3:26:bb:91:5c:b0:ac:f1:b9:78:8b:6a:fd:a0: d3:9c:0e:c3:44:08:36:c7:b4:49:bf:fc:e9:be:9f: aa:02:2a:8a:ab:a5:9c:81:53:89:de:a9:76:56:5c: d3:e6:32:c8:b9:f8:72:42:e8:40:0c:ab:8a:04:3f: 57:1e:a9:c9:f2:18:9a:1b:65:3c:7b:2a:5c:65:a0: ab:1e:39:44:41:9f:02:35:6d:17:2f:a4:50:9c:19: 4c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E2:3E:2B:BD:C9:AF:22:DB:70:70:82:07:33:B6:0D:92:8D:8F:7A X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9e:73:d6:70:d3:47:02:b1:77:9a:07:db:96:a6:2a:60:ad: 93:7f:6c:d2:91:2f:79:4b:ec:84:97:8e:40:5d:f6:71:dc:ff: d7:e8:c1:b3:e2:16:42:21:7d:c7:40:51:81:62:d9:61:7c:e9: 26:32:7c:15:83:19:a4:08:05:fe:38:97:2c:06:5d:61:05:78: 65:69:2e:d6:4b:45:61:31:68:5c:1f:69:2a:c2:1b:49:0d:d8: 48:74:fb:e0:3f:5d:b5:31:ff:e9:64:35:f2:93:06:08:a9:c1: 91:60:0c:75:b6:49:3b:42:4d:11:eb:35:24:11:05:ee:d7:6c: 9c:ca:b1:c0:c3:ac:6e:ac:68:bb:81:d6:84:cd:d7:ad:78:c2: ef:67:ab:ab:78:02:43:30:2e:21:83:6d:3c:90:e0:f3:13:b3: 5c:e0:45:78:76:ea:b7:20:38:44:b5:88:eb:34:1a:f4:31:11: 88:37:17:56:3c:e5:5b:ea:fa:c6:60:31:73:a6:cb:a7:57:30: 64:3c:41:1d:34:49:5f:b0:b7:c5:e4:c2:94:59:ad:c0:77:88: 4b:4d:74:97:f4:d9:34:d7:68:d7:0f:19:fa:bc:65:50:0c:68: 6f:e9:a4:9e:a5:dc:9c:d6:08:f9:4b:69:ea:88:eb:7f:28:d9: 5e:a7:8f:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjYwNzIzMDgwMTIwWhcNMjYwNzMwMDgwMTIwWjAYMRYwFAYD VQQDEw02YTYxY2E1MC1lM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ebqqo/ADE90CsSbtI/N0wWZ6lR2sfoIuTFguJLOJAO1gLZYSIq/GWBToIb/ KJnBxAI5jhv5tvC9lS9D4wL27YvW8+IivCcNj0fO/qBjDehP4PGsPOJuRk0IlcCv DBZmdurv2LJgerqJPc2faKZSqzVexWiYHOGp6xXtWQcrVoFc2uZTaWaQewQ+0lJm yAHVDc2n6RiQPEQO0CP0QRAoC/TnBP51sya7kVywrPG5eItq/aDTnA7DRAg2x7RJ v/zpvp+qAiqKq6WcgVOJ3ql2VlzT5jLIufhyQuhADKuKBD9XHqnJ8hiaG2U8eypc ZaCrHjlEQZ8CNW0XL6RQnBlMTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLiPiu9 ya8i23Bwggcztg2SjY96MB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9DNDU2MTAyRTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpR UGhDdVdFc1JpYUZjOVdCMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXp5z1nDTRwKxd5oH25amKmCtk39s0pEveUvshJeOQF32cdz/1+jBs+IWQiF9 x0BRgWLZYXzpJjJ8FYMZpAgF/jiXLAZdYQV4ZWku1ktFYTFoXB9pKsIbSQ3YSHT7 4D9dtTH/6WQ18pMGCKnBkWAMdbZJO0JNEes1JBEF7tdsnMqxwMOsbqxou4HWhM3X rXjC72erq3gCQzAuIYNtPJDg8xOzXOBFeHbqtyA4RLWI6zQa9DERiDcXVjzlW+r6 xmAxc6bLp1cwZDxBHTRJX7C3xeTClFmtwHeIS010l/TZNNdo1w8Z+rxlUAxob+mk nqXcnNYI+Utp6ojrfyjZXqePRg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:19 2026 by rpki-client