$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft File: diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json) Hash identifier: n1Ejew4JBR9vsAE/8UUyo9Xkx7YqSqGq+w4/1JuxzHA= Subject key identifier: 5A:AD:23:53:04:BE:5D:B6:C1:CD:82:57:D1:26:16:74:7B:8F:FD:04 Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC Certificate issuer: /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft Manifest number: 0120 Signing time: Thu 23 Jul 2026 07:30:50 +0000 Manifest this update: Thu 23 Jul 2026 07:30:49 +0000 Manifest next update: Thu 30 Jul 2026 07:30:49 +0000 Files and hashes: 1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: nL/M/hBWBEXC5QagyJpbOVaFzj3Aa4SG0uVYn8ad0oo=) 2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: Duer1WVGQHeYZI/Azd1wOhsGz2PF1wG4VU8KdNzFWQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC Validity Not Before: Jul 23 07:30:49 2026 GMT Not After : Jul 30 07:30:49 2026 GMT Subject: CN=6a61c329-5509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:69:a9:b1:6b:22:0b:0d:36:f0:66:61:aa:4d: 70:0e:05:19:4e:72:2c:e5:8d:a4:2c:26:19:26:dd: 97:b2:37:2c:a1:b1:c3:0c:bb:5c:2c:5b:fa:03:2a: 8f:d9:a3:19:4c:60:3e:c9:c7:ba:72:0d:d3:a8:0a: ed:c1:f0:ff:38:fa:80:6a:a9:1b:cc:23:28:42:7c: 59:26:26:ab:b0:47:58:6f:98:9f:57:57:9a:24:a1: 7d:db:53:1c:9a:c7:0e:e2:2d:f4:76:13:03:62:24: 16:6f:dd:3e:b9:19:6d:07:e1:96:b3:c2:95:ed:6f: 00:a6:99:02:ce:1e:c1:88:99:a7:24:4b:1a:27:fd: b0:2c:5c:c7:71:dc:48:58:95:ed:4a:bf:8f:46:90: 3e:65:ae:b6:34:5a:3e:83:03:56:7b:ee:77:57:30: c7:50:dc:97:01:00:41:bf:ea:1c:4d:cc:fa:2b:f1: c0:bc:97:68:cc:90:93:a6:ca:3c:45:ed:73:f2:ad: 5b:e2:01:e2:95:05:0c:9f:a0:f3:8f:e9:85:a0:03: 97:fe:a4:ff:17:e8:3e:86:88:a4:dc:86:b4:63:35: 3b:14:d2:72:73:f1:81:9f:52:7e:68:00:4d:b0:58: 88:f1:85:66:79:63:1e:a2:df:df:c3:4e:39:e6:d1: 1e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AD:23:53:04:BE:5D:B6:C1:CD:82:57:D1:26:16:74:7B:8F:FD:04 X509v3 Authority Key Identifier: keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:0a:9c:09:10:af:ca:a6:3a:ae:b6:ea:86:87:a5:b8:40:ac: 99:1c:07:12:fd:dc:0d:8d:2b:b9:cd:27:91:55:b8:e5:84:f8: 6a:94:80:6e:d0:ed:91:47:18:5b:a4:78:ca:f8:5e:68:0f:92: 65:17:fa:cb:6e:59:55:79:54:79:33:c3:19:1d:50:0c:dc:78: cf:26:fd:df:08:c4:d5:2e:de:16:5b:2d:d3:de:59:96:af:90: c2:4a:82:4f:59:ab:b9:24:7a:0f:07:0d:ad:f3:a6:ae:20:88: 06:eb:8a:5e:eb:70:4f:de:20:da:85:83:84:ca:d3:28:9b:ad: cd:66:77:d9:08:6e:45:bd:29:93:04:72:60:92:25:b8:f3:20: 6e:22:63:6a:f5:8f:30:b5:f8:44:c4:4c:ac:f4:d8:11:05:43: 8c:34:40:ce:69:38:4e:66:ba:77:74:de:14:9f:6d:6a:5d:1d: cb:10:da:b9:0f:0a:12:9f:bf:d1:da:57:90:b9:96:62:07:a5: 81:bc:16:74:f0:14:bc:00:db:fe:00:51:05:dc:1a:42:a8:30: 90:fa:f1:c1:3a:a0:7f:92:c8:0e:26:19:15:bf:15:7a:db:b0: 4e:c8:d9:e8:2e:01:36:33:ed:8e:2d:a4:af:99:0a:c2:3c:36: b8:e0:97:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NjAxMTAvBgNVBAUTKDc2MjAyNjZCOTg5MUEyMThDMEU1RjJFRjI4OEY3ODJE NTcxN0YyQkMwHhcNMjYwNzIzMDczMDQ5WhcNMjYwNzMwMDczMDQ5WjAYMRYwFAYD VQQDEw02YTYxYzMyOS01NTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiGmpsWsiCw028GZhqk1wDgUZTnIs5Y2kLCYZJt2XsjcsobHDDLtcLFv6AyqP 2aMZTGA+yce6cg3TqArtwfD/OPqAaqkbzCMoQnxZJiarsEdYb5ifV1eaJKF921Mc mscO4i30dhMDYiQWb90+uRltB+GWs8KV7W8AppkCzh7BiJmnJEsaJ/2wLFzHcdxI WJXtSr+PRpA+Za62NFo+gwNWe+53VzDHUNyXAQBBv+ocTcz6K/HAvJdozJCTpso8 Re1z8q1b4gHilQUMn6Dzj+mFoAOX/qT/F+g+hoik3Ia0YzU7FNJyc/GBn1J+aABN sFiI8YVmeWMeot/fw0455tEeVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqtI1ME vl22wc2CV9EmFnR7j/0EMB8GA1UdIwQYMBaAFHYgJmuYkaIYwOXy7yiPeC1XF/K8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY2MC9GOTg3MTFEQUQy NDIxMUVGODhDNUJDMTFDNEY5QUUwMi9kaUFtYTVpUm9oakE1Zkx2S0k5NExWY1g4 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RpQW1hNWlSb2hqQTVmTHZLSTk0TFZjWDhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY2MC9GOTg3MTFEQUQyNDIxMUVGODhDNUJDMTFDNEY5QUUwMi9kaUFtYTVpUm9o akE1Zkx2S0k5NExWY1g4cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlAqcCRCvyqY6rrbqhoeluECsmRwHEv3cDY0ruc0nkVW45YT4apSAbtDtkUcY W6R4yvheaA+SZRf6y25ZVXlUeTPDGR1QDNx4zyb93wjE1S7eFlst095Zlq+QwkqC T1mruSR6DwcNrfOmriCIBuuKXutwT94g2oWDhMrTKJutzWZ32QhuRb0pkwRyYJIl uPMgbiJjavWPMLX4RMRMrPTYEQVDjDRAzmk4Tma6d3TeFJ9tal0dyxDauQ8KEp+/ 0dpXkLmWYgelgbwWdPAUvADb/gBRBdwaQqgwkPrxwTqgf5LIDiYZFb8VetuwTsjZ 6C4BNjPtji2kr5kKwjw2uOCXgw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:06:54 2026 by rpki-client