$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json) Hash identifier: wH3vBTZeMfVONAbUNcbQa5YQNAtHg+tXpt555itwyXY= Subject key identifier: E9:AE:8F:08:CE:57:7C:92:B5:4D:1C:B6:83:ED:66:53:80:3B:44:2E Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft Manifest number: 78 Signing time: Thu 23 Jul 2026 08:01:23 +0000 Manifest this update: Thu 23 Jul 2026 08:01:23 +0000 Manifest next update: Thu 30 Jul 2026 08:01:23 +0000 Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: E1tNpW6ZC7jVaUqouL4PJviyJYYkMiXG4o3hHXgyG9M=) 2: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=) 3: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Jul 23 08:01:23 2026 GMT Not After : Jul 30 08:01:23 2026 GMT Subject: CN=6a61ca53-0ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:f6:9a:bf:61:ef:be:11:3f:7e:52:b5:ff: 8c:a8:de:d5:72:f6:8c:f5:37:c6:23:53:a9:8d:e2: 03:2e:60:08:6c:99:3e:b7:6e:64:1a:53:70:87:80: ab:7d:6c:27:36:f2:7c:62:28:21:d3:40:ad:38:26: 1d:ea:c8:b9:54:29:4c:05:29:6f:ba:c6:ca:ff:3c: 63:09:83:b8:2f:dc:17:0c:b7:e9:76:ca:db:66:7c: 0b:81:e5:48:66:33:d6:d6:2b:91:5d:79:80:a3:b7: 6c:ba:80:8a:db:bb:22:9e:9e:7e:aa:87:81:30:ba: 12:11:7d:11:90:32:5f:98:b0:83:f6:9e:c2:d3:8c: 76:25:07:cd:af:65:08:e7:a0:74:27:f6:99:3c:b5: d0:33:5f:37:b6:34:8d:73:94:64:84:d7:7e:87:8b: 4a:00:e6:54:ae:60:fb:01:be:97:53:82:fe:69:de: 87:c7:cb:db:57:25:75:49:06:ee:ba:5c:9c:5f:04: 20:44:32:39:59:e0:ce:0f:6f:a2:a7:d0:1e:ed:4b: b2:0d:69:3a:a8:fc:01:23:09:c0:95:4b:23:7b:96: 2d:b4:d9:28:1c:34:11:5a:c8:83:84:37:83:4e:2b: 54:c7:2d:f0:b2:de:e2:4a:1b:a1:41:65:ab:dc:ac: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AE:8F:08:CE:57:7C:92:B5:4D:1C:B6:83:ED:66:53:80:3B:44:2E X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:85:56:a1:19:bc:4c:43:1b:dd:79:00:a8:30:da:df:b4:bc: 30:00:7d:a3:ba:60:5a:49:3b:f3:ed:d8:7f:d1:f6:82:57:9f: 2e:00:5e:dc:a5:ce:14:9a:b8:9c:4e:37:1e:31:37:c8:6f:ef: 96:65:99:7a:df:c9:3c:25:6f:92:0d:df:6a:66:05:27:b6:0d: 6b:2b:af:8f:a1:85:9d:93:4f:f9:f4:9b:db:73:0b:d9:02:eb: bd:00:6b:96:79:9a:b1:db:9d:0b:dd:1d:29:fb:98:79:65:bd: bf:b0:0a:e3:37:d9:55:75:83:56:9e:97:ba:32:e8:44:48:37: 00:bc:5d:b3:2f:cd:17:47:66:ac:09:a6:ff:a3:49:34:31:93: 2e:91:ae:74:92:e6:a0:04:85:9b:e9:57:25:a0:08:0f:3a:0f: 85:c7:b8:30:6e:b4:83:98:94:eb:78:2d:03:80:20:ee:f6:b3: 99:1d:49:9e:42:44:87:2b:62:d6:ec:64:36:64:ac:c0:59:3b: 45:55:68:65:27:17:c3:b1:f9:39:09:19:29:53:b6:f2:5d:d6: 30:fa:1d:c5:29:51:1b:f0:c8:ff:06:e2:8d:f5:a5:d6:0f:3a: 76:5e:e4:80:de:b1:a2:22:57:78:79:60:74:68:f9:8c:49:d9: 0b:b8:a5:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDBDNThDNjk2OUVFNjRDNDE5MUFBQjY2OTYzRjQwOUQ0 NUFFQUY2OTgwHhcNMjYwNzIzMDgwMTIzWhcNMjYwNzMwMDgwMTIzWjAYMRYwFAYD VQQDEw02YTYxY2E1My0wYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAll32mr9h774RP35Stf+MqN7VcvaM9TfGI1OpjeIDLmAIbJk+t25kGlNwh4Cr fWwnNvJ8Yigh00CtOCYd6si5VClMBSlvusbK/zxjCYO4L9wXDLfpdsrbZnwLgeVI ZjPW1iuRXXmAo7dsuoCK27sinp5+qoeBMLoSEX0RkDJfmLCD9p7C04x2JQfNr2UI 56B0J/aZPLXQM183tjSNc5RkhNd+h4tKAOZUrmD7Ab6XU4L+ad6Hx8vbVyV1SQbu ulycXwQgRDI5WeDOD2+ip9Ae7UuyDWk6qPwBIwnAlUsje5YttNkoHDQRWsiDhDeD TitUxy3wst7iShuhQWWr3KwLlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmujwjO V3yStU0ctoPtZlOAO0QuMB8GA1UdIwQYMBaAFAxYxpae5kxBkaq2aWP0CdRa6vaY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9GQjI4RDlGMERD OUMxMUYwODE3RTg5NjFBMkVFNTI4RS9ERmpHbHA3bVRFR1JxclpwWV9RSjFGcnE5 cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9GQjI4RDlGMERDOUMxMUYwODE3RTg5NjFBMkVFNTI4RS9ERmpHbHA3bVRF R1JxclpwWV9RSjFGcnE5cGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY4VWoRm8TEMb3XkAqDDa37S8MAB9o7pgWkk78+3Yf9H2glefLgBe3KXOFJq4 nE43HjE3yG/vlmWZet/JPCVvkg3famYFJ7YNayuvj6GFnZNP+fSb23ML2QLrvQBr lnmasdudC90dKfuYeWW9v7AK4zfZVXWDVp6XujLoREg3ALxdsy/NF0dmrAmm/6NJ NDGTLpGudJLmoASFm+lXJaAIDzoPhce4MG60g5iU63gtA4Ag7vazmR1JnkJEhyti 1uxkNmSswFk7RVVoZScXw7H5OQkZKVO28l3WMPodxSlRG/DI/wbijfWl1g86dl7k gN6xoiJXeHlgdGj5jEnZC7il/g== -----END CERTIFICATE-----Generated at Fri Jul 24 00:16:47 2026 by rpki-client