$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft File: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft (raw, json) Hash identifier: RDR0H2bITROICRUuyiWbkewTJtOG1d5V4RlWLbCV5Lo= Subject key identifier: E4:F4:2A:29:E6:B5:A8:D1:65:AB:DA:6E:78:46:70:D9:31:0B:AB:27 Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 Certificate issuer: /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft Manifest number: 67 Signing time: Thu 23 Jul 2026 09:59:51 +0000 Manifest this update: Thu 23 Jul 2026 09:59:51 +0000 Manifest next update: Thu 30 Jul 2026 09:59:51 +0000 Files and hashes: 1: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl (hash: bPgIBVUlPExAGmXo/kU+a9u7e2CpQxkvK7U7K7b1yGo=) 2: 2235EF78F12011F0BFBF3F154E6F56BC.roa (hash: PdAz+4W9gV7DG5blKrt0fnM9lwbclCTxlZE4svm7VgA=) 3: F5568448F11C11F0AC52AD484D6F56BC.roa (hash: FSRnxAS3d/oxWCt/mXgTvn1rm5+e0wMamnNqPiiIkGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Validity Not Before: Jul 23 09:59:51 2026 GMT Not After : Jul 30 09:59:51 2026 GMT Subject: CN=6a61e617-b419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:7c:44:7d:7a:33:55:b0:d9:f9:ba:0e:52: d2:06:c2:e2:79:7e:cc:9a:8f:95:87:d4:2b:b7:29: 0e:a3:7d:4e:4b:8f:93:7e:64:e1:22:b1:71:e4:bf: 29:4b:c9:d6:26:c9:22:21:f5:6e:2e:71:3f:9b:09: 44:73:ad:75:6a:65:91:c0:b1:64:21:df:06:ba:63: d8:60:2d:13:b2:d8:5b:36:52:a4:cc:16:59:29:75: fb:ea:ec:79:ed:ba:2b:75:01:00:16:31:b4:e0:e8: 07:fb:fa:eb:11:e7:a4:d8:24:2e:fa:20:3d:c4:21: b2:e3:5b:bb:1b:0e:ad:63:16:21:b2:a9:62:1b:91: 8e:88:f2:98:2b:0f:3e:a2:1c:60:c3:b6:78:37:49: 3f:da:62:3c:61:76:5b:36:26:a4:0d:08:2c:8d:90: 7e:89:0e:1f:d3:b7:da:f1:88:05:17:9e:5b:de:7d: 9a:41:09:db:f6:ad:5e:a7:aa:b9:e1:d6:e9:2d:90: 4e:6f:b2:2e:61:80:95:da:21:b6:5e:f6:65:06:6b: f6:93:b0:16:94:42:dd:de:d1:15:72:2d:bd:7c:12: 0b:27:e3:93:12:4a:73:7b:40:ad:f4:b9:18:89:0d: ea:39:2f:98:8f:88:69:3c:eb:1e:26:71:e8:e3:a3: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F4:2A:29:E6:B5:A8:D1:65:AB:DA:6E:78:46:70:D9:31:0B:AB:27 X509v3 Authority Key Identifier: keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:49:8e:1a:ab:82:37:fa:d3:d4:ef:b6:0c:a2:66:5b:ae:82: c6:39:fd:dc:af:bc:58:24:f5:0a:ae:20:26:fc:b0:3b:21:de: 19:86:26:1e:52:b2:e7:04:73:65:75:01:a9:71:06:ef:d5:96: 4e:3b:f3:a2:94:de:52:da:a2:e6:df:17:f3:4a:98:c3:2b:ad: b0:f0:4e:80:42:b2:1b:ed:bc:a8:f9:27:6c:e1:82:b3:99:08: 86:cf:cb:4b:dc:01:a4:bd:f6:7e:4d:58:f4:6f:56:a3:aa:22: 8a:d9:49:4b:2e:57:2a:aa:17:f2:ea:40:35:d9:04:f9:e4:fc: 7b:21:01:36:72:95:10:42:44:25:af:97:a9:ba:72:7c:6e:90: 57:f6:28:ce:7f:2b:5e:d7:1f:26:a6:b0:14:15:42:0b:6f:c8: b1:f9:0d:c8:70:4f:4e:1b:2f:17:4c:85:5d:d1:88:57:85:7d: 5f:80:84:d9:e4:bc:9a:d4:ba:64:48:ce:84:23:ef:06:b4:f4: 06:bd:bb:e8:77:a0:b0:f4:3c:36:4a:0b:de:55:57:2f:4f:7b: 1d:cf:5c:f1:e9:3f:20:cc:98:aa:cf:dd:8f:09:f7:fd:6b:70: 2c:2d:5f:af:29:8d:07:43:01:24:35:13:6c:87:82:6e:1b:fe: d1:cc:fe:ac -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NkIwQzExMC8GA1UEBRMoRDVCMTY3Njg5MTRBODBDOTMxMjQ2Mjk2MTBDQzQwNTAy QUFFRDBFOTAeFw0yNjA3MjMwOTU5NTFaFw0yNjA3MzAwOTU5NTFaMBgxFjAUBgNV BAMTDTZhNjFlNjE3LWI0MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5xHxEfXozVbDZ+boOUtIGwuJ5fsyaj5WH1Cu3KQ6jfU5Lj5N+ZOEisXHkvylL ydYmySIh9W4ucT+bCURzrXVqZZHAsWQh3wa6Y9hgLROy2Fs2UqTMFlkpdfvq7Hnt uit1AQAWMbTg6Af7+usR56TYJC76ID3EIbLjW7sbDq1jFiGyqWIbkY6I8pgrDz6i HGDDtng3ST/aYjxhdls2JqQNCCyNkH6JDh/Tt9rxiAUXnlvefZpBCdv2rV6nqrnh 1uktkE5vsi5hgJXaIbZe9mUGa/aTsBaUQt3e0RVyLb18Egsn45MSSnN7QK30uRiJ Deo5L5iPiGk86x4mcejjo5LRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5PQqKea1 qNFlq9pueEZw2TELqycwHwYDVR0jBBgwFoAU1bFnaJFKgMkxJGKWEMxAUCqu0Okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QjBDL0I2MTM4NkU2RjEx QzExRjBBMzhGMjg0NzRENkY1NkJDLzFiRm5hSkZLZ01reEpHS1dFTXhBVUNxdTBP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJGbmFKRktnTWt4SkdLV0VNeEFVQ3F1ME9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 QjBDL0I2MTM4NkU2RjExQzExRjBBMzhGMjg0NzRENkY1NkJDLzFiRm5hSkZLZ01r eEpHS1dFTXhBVUNxdTBPay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCjSY4aq4I3+tPU77YMomZbroLGOf3cr7xYJPUKriAm/LA7Id4ZhiYeUrLnBHNl dQGpcQbv1ZZOO/OilN5S2qLm3xfzSpjDK62w8E6AQrIb7byo+Sds4YKzmQiGz8tL 3AGkvfZ+TVj0b1ajqiKK2UlLLlcqqhfy6kA12QT55Px7IQE2cpUQQkQlr5epunJ8 bpBX9ijOfyte1x8mprAUFUILb8ix+Q3IcE9OGy8XTIVd0YhXhX1fgITZ5Lya1Lpk SM6EI+8GtPQGvbvod6Cw9Dw2SgveVVcvT3sdz1zx6T8gzJiqz92PCff9a3AsLV+v KY0HQwEkNRNsh4JuG/7RzP6s -----END CERTIFICATE-----Generated at Fri Jul 24 13:11:05 2026 by rpki-client