$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: JC00vUpStJS8sBQp5i2b+bO6l8PFNdKjeVwt4wVnZj4= Subject key identifier: 4C:0C:22:9A:B9:8D:13:D4:99:A7:66:5F:F6:BF:BF:26:09:7C:A0:21 Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: 01AA Signing time: Thu 23 Jul 2026 05:33:58 +0000 Manifest this update: Thu 23 Jul 2026 05:33:57 +0000 Manifest next update: Thu 30 Jul 2026 05:33:57 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: ZX9da/SXXNdreiNDuZrx932Lkfd1E5gvckoCAkf21cQ=) 2: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: ki8BXTLBldb3cGwGovgDoOhIuW4iyxvUAjDm1D52/e0=) 3: C591C650781311F080669C0EC4F9AE02.roa (hash: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Jul 23 05:33:57 2026 GMT Not After : Jul 30 05:33:57 2026 GMT Subject: CN=6a61a7c6-89e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c7:f9:bc:47:13:a9:61:bf:7f:ac:8a:00:50: 47:ae:f5:7d:7c:55:f3:bb:a0:0f:e8:f6:a5:e3:5f: b4:46:d6:7b:39:bf:21:0d:c8:d6:fe:23:8f:4f:24: 6b:39:d3:01:5f:8a:d8:fa:55:7b:78:5f:86:2f:37: 7e:b3:f8:bf:02:0f:91:98:b8:39:2b:f4:e0:1a:6f: f9:a1:16:4f:2a:57:e8:62:9b:4b:1f:1f:c3:37:d6: 59:25:d6:57:33:b9:a6:60:9e:7c:de:2b:9f:5d:a8: 59:83:e3:d9:8d:f5:a6:ea:b1:1b:28:53:8a:de:6b: 3d:7f:fc:02:07:e2:b0:5b:61:a5:35:24:a2:16:c4: 61:2b:7a:4f:fb:47:af:c1:0a:68:43:9c:6a:11:2f: eb:a7:13:e2:a1:6c:bd:7b:d7:bb:0b:36:67:60:ad: 32:86:08:6e:3a:8c:1f:02:c1:51:23:8c:66:25:bf: 5b:df:35:7b:1c:1e:64:97:dc:b3:c1:1b:f9:9f:9e: 64:2f:b6:84:b8:9e:09:54:0a:43:7a:30:17:f7:a4: 06:a0:b3:55:b4:ad:92:82:a6:04:03:6e:42:d7:ef: 3b:79:ef:83:3b:2d:13:ed:8c:2d:b2:65:e5:6c:98: b4:13:52:18:c2:21:68:20:2c:e8:88:8f:e8:2f:bb: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0C:22:9A:B9:8D:13:D4:99:A7:66:5F:F6:BF:BF:26:09:7C:A0:21 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:16:09:d8:cf:e6:80:52:52:de:30:5e:aa:ba:76:30:99:23: e0:3e:21:48:90:92:7c:af:6b:fb:1c:19:6f:7d:6e:dc:6e:bb: ce:7c:1f:a4:e7:65:45:67:a2:fe:e3:60:00:d6:c6:a7:70:8a: c7:80:e5:40:77:4b:de:11:86:21:c2:99:1b:d4:de:7d:5d:49: fb:fc:7a:d7:f1:44:40:9a:42:90:94:0c:72:07:66:b1:f9:1d: 1f:af:1a:50:2b:bb:8c:19:13:f7:6f:69:dd:ca:36:f5:43:d3: 56:0b:c1:12:50:1a:83:6c:e1:79:cf:73:60:27:2a:6e:59:c2: 82:32:6f:22:2d:7d:41:72:e6:3e:01:74:99:ae:60:43:04:38: 4f:50:27:0a:40:11:ad:f4:0c:07:06:28:e4:02:d1:17:f2:9b: e3:ad:b5:5e:e3:a8:75:13:b1:d4:ad:a7:7f:ef:f9:36:fb:8e: 87:ae:68:bd:82:23:76:09:ce:8d:26:eb:db:50:b1:11:32:4e: f1:18:e6:09:fb:d3:93:a8:a0:36:a8:da:4f:c3:b2:4e:17:03: 1d:b3:54:76:e0:ce:4e:64:f5:2d:43:06:4f:5d:4a:60:76:a8: c1:96:fe:83:b0:f9:81:76:cb:9e:88:db:d4:b7:cc:08:b0:3b: bd:95:7c:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjYwNzIzMDUzMzU3WhcNMjYwNzMwMDUzMzU3WjAYMRYwFAYD VQQDEw02YTYxYTdjNi04OWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cf5vEcTqWG/f6yKAFBHrvV9fFXzu6AP6Pal41+0RtZ7Ob8hDcjW/iOPTyRr OdMBX4rY+lV7eF+GLzd+s/i/Ag+RmLg5K/TgGm/5oRZPKlfoYptLHx/DN9ZZJdZX M7mmYJ583iufXahZg+PZjfWm6rEbKFOK3ms9f/wCB+KwW2GlNSSiFsRhK3pP+0ev wQpoQ5xqES/rpxPioWy9e9e7CzZnYK0yhghuOowfAsFRI4xmJb9b3zV7HB5kl9yz wRv5n55kL7aEuJ4JVApDejAX96QGoLNVtK2SgqYEA25C1+87ee+DOy0T7YwtsmXl bJi0E1IYwiFoICzoiI/oL7tS/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEwMIpq5 jRPUmadmX/a/vyYJfKAhMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2 a3IwWDBNU3paUmpWdm5kdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnhYJ2M/mgFJS3jBeqrp2MJkj4D4hSJCSfK9r+xwZb31u3G67znwfpOdlRWei /uNgANbGp3CKx4DlQHdL3hGGIcKZG9TefV1J+/x61/FEQJpCkJQMcgdmsfkdH68a UCu7jBkT929p3co29UPTVgvBElAag2zhec9zYCcqblnCgjJvIi19QXLmPgF0ma5g QwQ4T1AnCkARrfQMBwYo5ALRF/Kb4621XuOodROx1K2nf+/5NvuOh65ovYIjdgnO jSbr21CxETJO8RjmCfvTk6igNqjaT8OyThcDHbNUduDOTmT1LUMGT11KYHaowZb+ g7D5gXbLnojb1LfMCLA7vZV88w== -----END CERTIFICATE-----Generated at Thu Jul 23 22:51:39 2026 by rpki-client