$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft File: 5D3SMzFr8OKboG0g3sJdtMwRbgg.mft (raw, json) Hash identifier: WfEjq7gYZn4ijj0VzGHu4+vj+Z5yeOfCdRqKLfXjIY8= Subject key identifier: 2F:98:B9:E9:88:9B:85:1A:CC:45:0E:98:85:ED:8D:06:1B:FE:70:61 Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Certificate serial: 05A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft Manifest number: 058E Signing time: Thu 23 Jul 2026 00:02:08 +0000 Manifest this update: Thu 23 Jul 2026 00:02:07 +0000 Manifest next update: Thu 30 Jul 2026 00:02:07 +0000 Files and hashes: 1: 5D3SMzFr8OKboG0g3sJdtMwRbgg.crl (hash: bXh40KgDf/oRIVVEd1MllyF7rM3Ggz4N8+Ymm3g7JZ4=) 2: 3A2A80AE3C8311ECA86D031EC4F9AE02.roa (hash: MUl/v1p+vm1Iz1fhfXWdiu0rlYEkwrSBTJH5GlDUE7w=) 3: 579B33AE886F11F0A02D4009C4F9AE02.roa (hash: kvqSrwpHPLZJw/K+1ltO2ek3REXXe9HMAbW/Edna9+s=) 4: 94AB76D86DE711F196A4F1FD5BA30FBC.roa (hash: kx05g5sFc7i3wM9cZ3d4c4kpJCzSjVmmtIWjZ9lyY9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1442 (0x5a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Validity Not Before: Jul 23 00:02:07 2026 GMT Not After : Jul 30 00:02:07 2026 GMT Subject: CN=6a6159ff-9502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:a3:9b:4d:20:e5:70:92:f5:e5:cc:01:4d: ee:61:f3:b8:ee:e5:92:b1:67:02:90:cb:9e:6b:78: fc:c2:c2:ed:d8:c7:0b:81:24:4e:8a:76:ca:b6:7d: 56:25:63:4c:93:66:9c:ae:ea:0d:60:29:be:04:69: dc:d9:07:8d:d5:dd:13:e9:4d:28:52:90:76:db:a7: 35:95:3c:b1:ff:f6:eb:f0:90:cd:4b:ae:c4:91:da: 7c:83:66:cc:02:e1:31:b3:ee:c2:e1:9d:07:15:87: 2f:cb:37:c1:af:d4:81:bc:9b:c5:05:43:17:9a:9b: 95:ea:a6:2a:db:5e:bc:0f:53:11:44:bd:bf:77:35: 26:b5:34:40:3a:42:5b:a8:be:81:2a:57:c1:66:7e: bf:af:81:9b:af:d1:94:98:c3:cb:76:14:36:44:e6: d3:78:97:3d:1f:14:0b:e6:3f:07:b8:c9:88:d5:27: 61:29:e8:a1:e2:98:44:e5:bd:9a:93:e0:0c:28:dd: 5c:aa:78:21:27:b3:cf:49:73:f6:16:e4:2d:07:f2: 00:b9:e5:45:6a:69:96:83:42:af:59:d0:9e:2f:9e: 8e:73:1b:b6:b5:cc:b8:dc:23:50:c9:4c:90:b8:ea: 69:d0:4b:0a:64:32:c5:92:c5:aa:3c:2a:5b:4f:06: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:98:B9:E9:88:9B:85:1A:CC:45:0E:98:85:ED:8D:06:1B:FE:70:61 X509v3 Authority Key Identifier: keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:46:81:5a:98:75:12:a1:25:bf:9b:51:c1:b0:51:61:64:53: e7:7f:d4:17:83:04:a6:f2:30:d1:9d:c1:3f:03:37:ee:51:ee: 50:3c:b8:5b:f3:ab:7f:5f:b2:cf:74:d3:cf:d2:d7:be:81:cf: 83:b9:d8:84:df:28:5e:22:e9:24:c6:d5:52:ca:3c:11:b1:d2: 0d:78:da:79:6b:5a:15:5a:9c:fc:7c:7a:fd:6f:d1:68:df:be: 5a:70:21:63:de:59:a5:9b:7b:ab:cb:51:f2:d5:58:da:15:62: 2d:e2:a6:51:28:bc:87:4c:69:7b:26:68:d3:ca:52:4d:16:2b: 42:ea:36:34:4e:dc:ee:d3:6e:8b:2f:78:94:46:6a:1d:76:68: ac:2e:13:7d:f6:19:f3:e6:fe:2b:19:1b:81:cf:c3:3a:9c:7d: 0b:da:f1:e2:a6:13:f1:1b:2b:64:24:54:4e:11:ea:38:80:83: 25:7d:e6:1e:73:31:54:f0:47:df:71:ae:96:5f:a7:44:2d:4d: 86:93:70:dd:93:e2:b0:4c:3a:57:28:fe:3f:da:26:b7:56:e3: 29:ce:98:49:13:a5:e4:1b:15:52:e4:9c:dd:7d:5c:d5:c2:89: c5:9d:b4:8f:44:21:12:40:20:a5:02:eb:ae:45:b3:56:d6:96: a3:4d:5b:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0 Q0MxMTZFMDgwHhcNMjYwNzIzMDAwMjA3WhcNMjYwNzMwMDAwMjA3WjAYMRYwFAYD VQQDEw02YTYxNTlmZi05NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbyjm00g5XCS9eXMAU3uYfO47uWSsWcCkMuea3j8wsLt2McLgSROinbKtn1W JWNMk2acruoNYCm+BGnc2QeN1d0T6U0oUpB226c1lTyx//br8JDNS67Ekdp8g2bM AuExs+7C4Z0HFYcvyzfBr9SBvJvFBUMXmpuV6qYq2168D1MRRL2/dzUmtTRAOkJb qL6BKlfBZn6/r4Gbr9GUmMPLdhQ2RObTeJc9HxQL5j8HuMmI1SdhKeih4phE5b2a k+AMKN1cqnghJ7PPSXP2FuQtB/IAueVFammWg0KvWdCeL56Ocxu2tcy43CNQyUyQ uOpp0EsKZDLFksWqPCpbTwa/xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+YuemI m4UazEUOmIXtjQYb/nBhMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zRTlBNEFFMDMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhP S2JvRzBnM3NKZHRNd1JiZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJUaBWph1EqElv5tRwbBRYWRT53/UF4MEpvIw0Z3BPwM37lHuUDy4W/Orf1+y z3TTz9LXvoHPg7nYhN8oXiLpJMbVUso8EbHSDXjaeWtaFVqc/Hx6/W/RaN++WnAh Y95ZpZt7q8tR8tVY2hViLeKmUSi8h0xpeyZo08pSTRYrQuo2NE7c7tNuiy94lEZq HXZorC4TffYZ8+b+Kxkbgc/DOpx9C9rx4qYT8RsrZCRUThHqOICDJX3mHnMxVPBH 33Gull+nRC1NhpNw3ZPisEw6Vyj+P9omt1bjKc6YSROl5BsVUuSc3X1c1cKJxZ20 j0QhEkAgpQLrrkWzVtaWo01bvA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:48:35 2026 by rpki-client