$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json) Hash identifier: nw8ab5C0ON9aSi82VfjU+W13yHdLIZGTjfJJJVuz4Ug= Subject key identifier: C7:CC:97:61:A8:A6:A3:CC:84:25:04:B3:D0:7E:CD:42:E9:34:CB:A2 Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft Manifest number: 018A Signing time: Thu 23 Jul 2026 06:32:25 +0000 Manifest this update: Thu 23 Jul 2026 06:32:25 +0000 Manifest next update: Thu 30 Jul 2026 06:32:25 +0000 Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: WEQn3BZlxxlg4rxW8FnaPOPjm/Tt2kOHVoRK5QMtYUs=) 2: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: wTJyMr91GllJkZWLd+qrpsF1jIX1E/NLLlPclqDy6ZQ=) 3: 79A1CFF0F2F311F08CC9D9AA476F56BC.roa (hash: RG0OKbgyfMnZsT4Mffpyz2So5ShlFuRTqS038sdC92A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Validity Not Before: Jul 23 06:32:25 2026 GMT Not After : Jul 30 06:32:25 2026 GMT Subject: CN=6a61b579-36ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:76:3e:f1:fb:1e:a8:73:7b:58:00:4f:f8: 18:4e:07:a1:2f:43:db:7b:ab:67:da:f6:7c:47:d2: 56:ea:83:dd:8d:2e:d7:a8:70:9e:38:08:f3:9c:69: 00:56:cd:f6:82:8d:07:d3:31:55:d7:88:eb:c4:7d: bd:e2:95:93:1d:87:09:04:ba:64:96:70:92:ef:05: 70:88:8c:b9:30:89:a0:15:e8:9b:bf:43:91:c1:82: c9:8c:d7:a8:cb:67:c6:13:a8:ae:dd:d2:71:49:8e: 38:52:cb:d5:95:1e:e5:ed:50:bd:44:7f:11:e1:48: 1d:14:0c:1c:49:52:9b:eb:38:59:50:32:ae:2f:48: ea:53:83:34:2b:d3:57:2d:58:6e:64:4d:0d:f0:3b: 22:9a:b8:e4:59:9f:2e:84:0e:7b:9e:6e:33:20:ab: 42:48:c2:0d:b6:fa:08:55:05:8a:d4:64:80:25:06: 2d:4c:4b:e4:f5:02:b7:df:6a:3b:c3:76:f4:35:a9: 42:2f:e7:f6:c7:fb:30:56:e7:2b:ce:a9:37:de:a7: eb:a8:e4:30:41:ae:5a:f2:94:d6:93:e5:8a:ff:00: be:91:5b:0a:0a:4d:31:1b:93:7a:3b:4c:ac:cd:e3: c5:64:9e:35:3c:07:68:b1:45:73:c0:31:90:a8:ba: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CC:97:61:A8:A6:A3:CC:84:25:04:B3:D0:7E:CD:42:E9:34:CB:A2 X509v3 Authority Key Identifier: keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:98:85:a2:32:3a:d1:23:3e:60:dc:46:a5:cd:96:56:67:f5: 68:2d:1f:a4:d8:0b:b0:f1:7e:8a:31:66:36:47:69:89:7c:cc: e1:a9:dd:86:81:13:66:08:c7:49:9f:69:83:1f:d5:09:11:77: 87:4a:37:b7:65:59:15:22:11:80:7f:45:b8:98:15:9e:34:db: 69:9f:86:5e:a6:42:33:25:05:38:f5:0d:40:43:dd:50:d8:3e: fc:50:4c:f5:76:62:ed:22:4e:96:e6:d3:13:9a:37:68:68:0b: 08:f1:af:e0:81:e1:aa:9d:f9:7d:6b:76:b0:a0:e4:a6:5e:67: 82:84:16:d1:e9:5e:40:4e:b3:a4:5c:8e:c1:7a:c9:c3:6f:50: 03:8b:1e:eb:e7:b3:38:88:f5:d8:64:41:4e:be:93:75:12:3c: b7:0f:cf:ef:52:14:db:ed:96:37:a0:5a:4a:59:92:d4:43:c6: 66:6e:f2:b0:c4:0f:80:e3:35:bc:3b:d4:d1:45:87:bd:93:68: 22:5d:c0:64:29:c5:c3:c5:12:da:8f:80:cf:31:d3:3a:8c:de: 92:78:8e:fb:19:25:f2:63:c9:bb:ec:3f:57:ab:cb:cf:a9:82: 6b:82:30:7b:74:35:d6:21:3a:6d:58:8c:20:00:2f:27:5f:eb: ff:fc:f7:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIyMkUxMTAvBgNVBAUTKDI0MkFCOTFGQTdDN0E2NEFDRTc3RDlCNEY2NjFFMjhD MEIxNUI4RTAwHhcNMjYwNzIzMDYzMjI1WhcNMjYwNzMwMDYzMjI1WjAYMRYwFAYD VQQDEw02YTYxYjU3OS0zNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweJ2PvH7Hqhze1gAT/gYTgehL0Pbe6tn2vZ8R9JW6oPdjS7XqHCeOAjznGkA Vs32go0H0zFV14jrxH294pWTHYcJBLpklnCS7wVwiIy5MImgFeibv0ORwYLJjNeo y2fGE6iu3dJxSY44UsvVlR7l7VC9RH8R4UgdFAwcSVKb6zhZUDKuL0jqU4M0K9NX LVhuZE0N8DsimrjkWZ8uhA57nm4zIKtCSMINtvoIVQWK1GSAJQYtTEvk9QK332o7 w3b0NalCL+f2x/swVucrzqk33qfrqOQwQa5a8pTWk+WK/wC+kVsKCk0xG5N6O0ys zePFZJ41PAdosUVzwDGQqLoAgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfMl2Go pqPMhCUEs9B+zULpNMuiMB8GA1UdIwQYMBaAFCQquR+nx6ZKznfZtPZh4owLFbjg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84MzQxNUIzNjM3 OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBrck9kOW0wOW1IaWpBc1Z1 T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pDcTVINmZIcGtyT2Q5bTA5bUhpakFzVnVPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjIyRS84MzQxNUIzNjM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBr ck9kOW0wOW1IaWpBc1Z1T0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOpiFojI60SM+YNxGpc2WVmf1aC0fpNgLsPF+ijFmNkdpiXzM4andhoETZgjH SZ9pgx/VCRF3h0o3t2VZFSIRgH9FuJgVnjTbaZ+GXqZCMyUFOPUNQEPdUNg+/FBM 9XZi7SJOlubTE5o3aGgLCPGv4IHhqp35fWt2sKDkpl5ngoQW0eleQE6zpFyOwXrJ w29QA4se6+ezOIj12GRBTr6TdRI8tw/P71IU2+2WN6BaSlmS1EPGZm7ysMQPgOM1 vDvU0UWHvZNoIl3AZCnFw8US2o+AzzHTOozekniO+xkl8mPJu+w/V6vLz6mCa4Iw e3Q11iE6bViMIAAvJ1/r//z38A== -----END CERTIFICATE-----Generated at Fri Jul 24 11:30:56 2026 by rpki-client