$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft File: CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json) Hash identifier: yAMqqKx08Quj2lDdwgug66TgFbCcmdpzLf450O50zoU= Subject key identifier: 55:E3:02:D6:60:0B:8B:1D:76:50:70:E3:42:19:2C:22:0B:3F:E3:D4 Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft Manifest number: 02AA Signing time: Thu 23 Jul 2026 02:43:52 +0000 Manifest this update: Thu 23 Jul 2026 02:43:52 +0000 Manifest next update: Thu 30 Jul 2026 02:43:52 +0000 Files and hashes: 1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: KrvByteMNJgTOCGRokIynQlyQ1rc+3cY8BY6EWOGZNo=) 2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: ZBpZFHSjfj1bISXLZ4G9TvJh+gywnnw40Zr1cDFnGAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Validity Not Before: Jul 23 02:43:52 2026 GMT Not After : Jul 30 02:43:52 2026 GMT Subject: CN=6a617fe8-e658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:b2:85:d9:cc:7a:cf:e5:84:64:52:fa:09: 67:be:72:3b:24:e9:09:53:31:4f:fe:43:e9:a9:e0: 04:fd:d2:8f:b0:4a:af:91:b9:a0:09:ab:05:d7:c6: 14:96:ab:87:3d:88:4e:87:da:bb:77:0e:05:7e:83: 99:42:18:74:21:63:c3:9f:5b:1e:22:04:23:3b:bf: b5:c1:d9:87:d9:6a:0a:95:0e:81:3f:ff:82:ce:ba: 73:30:b1:ea:17:38:36:8b:2a:af:ee:70:d2:10:df: 55:7f:ad:27:a4:a5:16:42:e4:1d:c9:e9:73:09:27: 66:30:29:d1:a4:eb:2b:ad:cf:0f:c9:be:48:3c:b6: 29:f7:d6:e0:55:8a:d2:21:cf:d4:62:a3:79:64:8c: e6:f4:d4:40:3c:56:bd:89:46:ee:76:98:a1:ed:41: f1:cf:2b:11:80:89:17:63:87:c1:70:da:cf:74:84: dd:d7:9d:47:db:7b:5c:fc:05:aa:32:da:0f:06:8d: 8c:fd:af:ae:8d:d0:d2:0d:cb:de:9c:51:c7:45:e6: 43:ff:ad:14:83:e2:dc:7e:2a:8d:6f:e1:db:4d:5f: 3c:f9:63:65:b5:19:7f:f7:46:6a:35:3e:fd:4b:d2: 10:e4:db:df:72:f8:1e:ba:90:b4:79:3d:ab:ab:24: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:02:D6:60:0B:8B:1D:76:50:70:E3:42:19:2C:22:0B:3F:E3:D4 X509v3 Authority Key Identifier: keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:32:0f:50:7b:5e:80:a9:03:8d:25:20:5e:be:e0:4f:4c:09: c1:20:b5:8f:54:74:6c:c3:c0:05:7a:ab:18:47:ed:82:41:23: c2:80:ac:d4:d8:62:12:e7:f4:5c:74:b7:0e:d9:d7:42:15:4c: e5:0d:d4:64:13:4a:14:de:3f:70:4b:ff:7a:03:c6:28:80:91: 19:86:1e:1b:e5:76:88:e2:ee:b6:f2:30:12:4f:63:1e:02:46: f8:b0:61:a3:41:8c:f5:c4:fd:96:23:60:d6:6c:e2:18:d0:72: df:13:d8:f6:4e:bf:e3:4d:75:99:0a:9c:08:ef:2a:99:b4:9a: 91:3a:cb:13:f5:4c:01:9e:a1:31:dc:fa:21:8b:7f:6c:b5:60: a1:09:55:01:82:d1:96:a0:7b:a2:83:a3:e5:38:56:25:5b:95: 4f:55:ac:88:46:d8:fb:12:eb:b9:08:19:ec:eb:11:b2:2f:b9: 4c:74:e4:01:4f:48:27:92:e4:34:7b:5a:62:45:1d:4d:39:22: ac:49:2f:bc:28:d8:98:07:00:e4:e8:4d:78:51:89:69:4a:e0: 80:79:0c:ad:68:1e:82:63:c9:f8:82:09:95:92:48:d7:4c:07: 05:9d:a3:52:46:3f:c9:28:bd:ff:97:1f:ad:02:6f:ea:9b:54: ab:d4:13:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4 MkM4RDJDRTAwHhcNMjYwNzIzMDI0MzUyWhcNMjYwNzMwMDI0MzUyWjAYMRYwFAYD VQQDEw02YTYxN2ZlOC1lNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyWyhdnMes/lhGRS+glnvnI7JOkJUzFP/kPpqeAE/dKPsEqvkbmgCasF18YU lquHPYhOh9q7dw4FfoOZQhh0IWPDn1seIgQjO7+1wdmH2WoKlQ6BP/+CzrpzMLHq Fzg2iyqv7nDSEN9Vf60npKUWQuQdyelzCSdmMCnRpOsrrc8Pyb5IPLYp99bgVYrS Ic/UYqN5ZIzm9NRAPFa9iUbudpih7UHxzysRgIkXY4fBcNrPdITd151H23tc/AWq MtoPBo2M/a+ujdDSDcvenFHHReZD/60Ug+LcfiqNb+HbTV88+WNltRl/90ZqNT79 S9IQ5NvfcvgeupC0eT2rqyTyfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXjAtZg C4sddlBw40IZLCILP+PUMB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1 NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVBMi8xNTI1MzQxNDg1NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJU X09Id3dOdXpHeHVDeU5MT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfDIPUHtegKkDjSUgXr7gT0wJwSC1j1R0bMPABXqrGEftgkEjwoCs1NhiEuf0 XHS3DtnXQhVM5Q3UZBNKFN4/cEv/egPGKICRGYYeG+V2iOLutvIwEk9jHgJG+LBh o0GM9cT9liNg1mziGNBy3xPY9k6/4011mQqcCO8qmbSakTrLE/VMAZ6hMdz6IYt/ bLVgoQlVAYLRlqB7ooOj5ThWJVuVT1WsiEbY+xLruQgZ7OsRsi+5THTkAU9IJ5Lk NHtaYkUdTTkirEkvvCjYmAcA5OhNeFGJaUrggHkMrWgegmPJ+IIJlZJI10wHBZ2j UkY/ySi9/5cfrQJv6ptUq9QTig== -----END CERTIFICATE-----Generated at Fri Jul 24 11:02:21 2026 by rpki-client