$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: rBb0sz6O6/XqB4ES0oFxRShLRWJgb+F4YbP1Bjoxyu0= Subject key identifier: 79:66:EB:44:9F:7C:2D:C8:DA:8E:CB:61:30:D3:3B:6F:92:94:28:F4 Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 091D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 0905 Signing time: Wed 22 Jul 2026 20:45:12 +0000 Manifest this update: Wed 22 Jul 2026 20:45:12 +0000 Manifest next update: Wed 29 Jul 2026 20:45:12 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: 8F/1tDRAiDb4DjSqvXSYkU7NE4D6LakPjqSUw4deCNk=) 2: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=) 3: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: L4cLpZwwCZ10zCVLhR1vyw0wh/3vcnCO5sVsoXu+2hs=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2333 (0x91d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Jul 22 20:45:12 2026 GMT Not After : Jul 29 20:45:12 2026 GMT Subject: CN=6a612bd8-85be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:f4:9f:b6:04:56:d6:4d:e0:ab:32:54:0a: 64:7d:1f:26:75:ef:8c:a3:e4:fe:06:06:fc:54:fc: 57:b1:f7:19:91:c3:4c:3d:86:84:d0:60:27:ed:08: f1:80:27:51:e7:7e:5c:b5:7e:27:b6:50:48:91:35: d6:fc:0d:37:70:2b:4e:e2:cd:e1:8b:1a:10:af:a2: fb:35:ed:24:01:be:35:d0:9b:fb:e6:ab:51:80:91: b9:3f:95:a4:ea:a6:e0:9d:d1:96:44:d5:f0:a2:8e: 77:76:3e:3d:43:c0:2a:42:cc:0b:2a:56:9f:de:01: 4e:53:9f:59:55:b9:17:b3:83:29:a8:23:86:e5:64: 69:e0:38:f8:c7:fc:38:ad:12:4d:5c:1f:e0:c7:e2: 2f:b8:9a:f8:3f:b5:c2:a4:d2:e5:45:b2:b2:ed:18: 9a:9d:5e:e3:3f:b6:02:39:1f:62:be:e9:ac:3c:ad: 0a:ed:45:a2:89:ea:c1:8a:a7:9e:3b:31:c1:fb:50: e3:8b:3b:91:8a:4c:cb:cf:4d:54:d4:88:96:76:e8: 53:86:d5:12:86:e1:7a:9d:fe:3f:b9:6c:99:7f:85: 13:62:81:f0:01:3b:e4:f6:ff:99:63:b3:58:d5:b6: 07:a9:a6:bd:51:84:f4:58:3e:dc:3d:d0:1d:5f:b3: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:66:EB:44:9F:7C:2D:C8:DA:8E:CB:61:30:D3:3B:6F:92:94:28:F4 X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:7b:d1:37:a5:21:3e:3c:89:05:b5:9c:b6:2b:5d:58:c4:35: c9:c7:55:b4:89:2f:f3:e3:79:36:91:d8:96:6f:1f:e6:0e:b1: e7:3a:1f:da:64:bb:1a:6e:12:9d:dc:7d:fb:fd:1a:d2:d7:2d: ff:ba:78:0d:71:58:be:01:47:40:a5:ad:53:f5:4e:9f:81:78: 66:2f:59:83:c9:4c:a1:aa:42:c9:29:53:a5:b8:49:8d:c3:70: c7:11:52:22:2b:91:f3:90:67:63:f7:95:76:3c:cc:e0:38:1f: 34:c2:ec:f4:9b:dd:18:4c:e9:b8:8b:57:ff:fd:52:63:42:45: 12:f1:69:c2:4b:b8:05:ef:18:31:0e:8d:21:64:2d:89:62:1a: 08:17:60:0f:48:53:30:db:58:b9:e7:72:c6:75:3e:ea:28:e7: 58:c5:41:c3:e0:d8:44:99:8e:4a:a2:eb:64:16:81:fa:db:58: 5e:90:63:cd:73:36:6a:d7:2e:1d:ac:19:74:7f:16:56:bf:d9: fb:ae:33:7e:67:be:15:2d:85:cc:75:3a:f3:99:26:c2:05:5c: 51:be:33:4c:87:38:75:c3:8b:48:f0:8f:2c:11:be:fd:b8:cc: 19:c4:88:7b:12:25:fb:2f:a1:ba:5e:be:a7:1d:19:bd:30:dd: 66:bb:6f:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjYwNzIyMjA0NTEyWhcNMjYwNzI5MjA0NTEyWjAYMRYwFAYD VQQDEw02YTYxMmJkOC04NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykv0n7YEVtZN4KsyVApkfR8mde+Mo+T+Bgb8VPxXsfcZkcNMPYaE0GAn7Qjx gCdR535ctX4ntlBIkTXW/A03cCtO4s3hixoQr6L7Ne0kAb410Jv75qtRgJG5P5Wk 6qbgndGWRNXwoo53dj49Q8AqQswLKlaf3gFOU59ZVbkXs4MpqCOG5WRp4Dj4x/w4 rRJNXB/gx+IvuJr4P7XCpNLlRbKy7RianV7jP7YCOR9ivumsPK0K7UWiierBiqee OzHB+1DjizuRikzLz01U1IiWduhThtUShuF6nf4/uWyZf4UTYoHwATvk9v+ZY7NY 1bYHqaa9UYT0WD7cPdAdX7MpyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlm60Sf fC3I2o7LYTDTO2+SlCj0MB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARnvRN6UhPjyJBbWctitdWMQ1ycdVtIkv8+N5NpHYlm8f5g6x5zof2mS7Gm4S ndx9+/0a0tct/7p4DXFYvgFHQKWtU/VOn4F4Zi9Zg8lMoapCySlTpbhJjcNwxxFS IiuR85BnY/eVdjzM4DgfNMLs9JvdGEzpuItX//1SY0JFEvFpwku4Be8YMQ6NIWQt iWIaCBdgD0hTMNtYuedyxnU+6ijnWMVBw+DYRJmOSqLrZBaB+ttYXpBjzXM2atcu HawZdH8WVr/Z+64zfme+FS2FzHU685kmwgVcUb4zTIc4dcOLSPCPLBG+/bjMGcSI exIl+y+hul6+px0ZvTDdZrtvpQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:55:31 2026 by rpki-client