$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: eM74tjmO9o3FzEAjXDxNSzrJRvSS+RQ4cSswRXGyjRE= Subject key identifier: D6:2E:65:55:63:F6:C7:3A:B8:FB:B8:E3:C4:B5:D7:78:C4:97:F6:97 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0E81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0E66 Signing time: Wed 22 Jul 2026 17:57:02 +0000 Manifest this update: Wed 22 Jul 2026 17:57:02 +0000 Manifest next update: Wed 29 Jul 2026 17:57:02 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: WfHhwQhejjrIyiZug4IMwkj+4un6RogEdsV9VsOA+3M=) 2: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=) 3: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: O9SFY6mcwxzxPd5Lw8GpZMWUtvVj4velHO/wpusDdSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3713 (0xe81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Jul 22 17:57:02 2026 GMT Not After : Jul 29 17:57:02 2026 GMT Subject: CN=6a61046e-4e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:a3:57:61:8a:40:57:d3:3e:99:38:b5:3c: 71:4e:13:41:dc:d4:60:85:06:76:73:66:a1:18:6a: a2:93:5c:5b:27:6d:a5:a9:d0:e3:d3:19:12:65:ea: 9a:ea:80:16:3d:a1:6c:8c:80:a7:62:c1:34:12:de: 29:0c:b6:bb:a2:4a:cb:4c:99:24:d2:3a:4d:94:89: 5e:d9:c6:bd:44:a5:73:65:3b:06:fc:24:30:61:29: a1:20:61:a4:59:41:82:23:82:d9:28:01:8d:73:a2: 09:f9:10:1d:a0:9d:ec:52:c0:42:e5:96:ec:a8:55: 56:81:8b:f5:6c:fc:c0:05:d5:73:de:d1:f5:4c:89: c9:c5:7a:6b:27:7e:b8:56:45:fe:fe:b5:ae:13:6f: 91:fb:91:d4:96:d4:12:72:70:32:a7:cf:c8:f4:f2: 7c:47:67:b2:0d:91:d9:3b:73:85:6b:8b:f4:80:2d: 04:e1:4e:57:7a:62:ba:e7:3b:b1:5f:4a:05:34:7c: 51:bc:ab:20:2e:83:4f:24:bc:ed:ad:49:b5:45:71: 1b:28:05:f2:cd:9d:38:4f:92:b9:59:33:83:f6:f1: 64:d9:13:b7:ec:b3:cb:c2:c5:4d:aa:e8:09:ef:b8: 33:14:24:3b:1f:b6:5b:24:61:10:3d:0f:6f:26:05: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2E:65:55:63:F6:C7:3A:B8:FB:B8:E3:C4:B5:D7:78:C4:97:F6:97 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b8:94:35:ff:88:6a:a0:0d:4f:4d:fe:84:1a:4c:92:81:55: 14:9c:d5:19:e1:8b:83:20:7a:30:90:44:a3:d1:b3:31:db:34: 6d:ee:f2:64:d7:ab:4c:83:ed:c7:04:d4:4b:fd:50:01:18:9d: 90:26:a6:d5:87:df:e5:e5:49:5d:4f:02:40:0f:84:63:74:4a: 49:e1:01:a1:4e:33:65:22:61:a5:89:cb:c2:20:1a:e4:28:12: 92:45:2c:a4:60:89:0f:4c:6b:32:62:16:54:4a:1c:bd:dd:2a: b7:bf:d3:85:bf:80:0d:e3:96:7f:ba:13:41:de:df:6c:ac:9f: 15:47:94:64:ae:f3:d8:cf:8d:8b:59:75:e2:fc:1c:5c:dc:22: fe:57:21:8a:f9:7c:5a:3b:7e:4d:f9:f0:18:a2:95:73:85:e7: f9:9c:21:15:87:c4:07:3d:f7:be:17:ac:78:3a:1a:11:50:12: 3b:70:83:9e:58:27:4b:f6:41:c5:cc:ec:3f:e6:02:f6:2a:04: 09:15:0e:b4:48:bc:5a:db:f5:9d:4e:8b:dc:74:77:3f:a2:38: 0c:34:e1:a9:e7:33:4a:20:9e:b6:e5:de:69:91:95:fb:68:2d: e6:f9:d6:7d:76:5f:e1:4d:3f:c4:df:41:ea:55:c1:90:d3:4f: e2:61:d7:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjYwNzIyMTc1NzAyWhcNMjYwNzI5MTc1NzAyWjAYMRYwFAYD VQQDEw02YTYxMDQ2ZS00ZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfKjV2GKQFfTPpk4tTxxThNB3NRghQZ2c2ahGGqik1xbJ22lqdDj0xkSZeqa 6oAWPaFsjICnYsE0Et4pDLa7okrLTJkk0jpNlIle2ca9RKVzZTsG/CQwYSmhIGGk WUGCI4LZKAGNc6IJ+RAdoJ3sUsBC5ZbsqFVWgYv1bPzABdVz3tH1TInJxXprJ364 VkX+/rWuE2+R+5HUltQScnAyp8/I9PJ8R2eyDZHZO3OFa4v0gC0E4U5XemK65zux X0oFNHxRvKsgLoNPJLztrUm1RXEbKAXyzZ04T5K5WTOD9vFk2RO37LPLwsVNqugJ 77gzFCQ7H7ZbJGEQPQ9vJgWsEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYuZVVj 9sc6uPu448S113jEl/aXMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARriUNf+IaqANT03+hBpMkoFVFJzVGeGLgyB6MJBEo9GzMds0be7yZNerTIPt xwTUS/1QARidkCam1Yff5eVJXU8CQA+EY3RKSeEBoU4zZSJhpYnLwiAa5CgSkkUs pGCJD0xrMmIWVEocvd0qt7/Thb+ADeOWf7oTQd7fbKyfFUeUZK7z2M+Ni1l14vwc XNwi/lchivl8Wjt+TfnwGKKVc4Xn+ZwhFYfEBz33vheseDoaEVASO3CDnlgnS/ZB xczsP+YC9ioECRUOtEi8Wtv1nU6L3HR3P6I4DDThqeczSiCetuXeaZGV+2gt5vnW fXZf4U0/xN9B6lXBkNNP4mHXrA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:15:45 2026 by rpki-client