$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft File: cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft (raw, json) Hash identifier: oinVbUL41/62CaMad6us94HV5+KjlpbL4bJ0fxWWZVI= Subject key identifier: 8B:7A:9D:9B:C6:F1:A7:E2:3D:6A:7D:76:A0:FB:B9:E5:B0:64:F0:CE Authority key identifier: 71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 Certificate issuer: /CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft Manifest number: 0CC8 Signing time: Wed 22 Jul 2026 18:45:39 +0000 Manifest this update: Wed 22 Jul 2026 18:45:38 +0000 Manifest next update: Wed 29 Jul 2026 18:45:38 +0000 Files and hashes: 1: cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl (hash: i5V6ZsGdBKDkaOdQ83nN4LwGiXgTrFGcgpXXdPZ5QCU=) 2: 4697751815B111EA8277BA34C4F9AE02.roa (hash: mpWE3JxWmusWHtsdnUiKvPMOgwCqfgCScdAt8K/8YQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C31, serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Validity Not Before: Jul 22 18:45:38 2026 GMT Not After : Jul 29 18:45:38 2026 GMT Subject: CN=6a610fd2-bffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:ff:29:08:1e:9a:62:4c:42:a0:1b:54:ad: 1e:cb:5d:47:bf:f5:4a:f4:b2:09:29:55:90:a9:5c: 10:2e:c9:d1:39:d3:31:2f:15:f8:6e:f2:dd:80:f4: 22:e3:e7:4b:94:31:e3:01:05:bd:f7:9d:6a:2f:ab: 4b:df:61:55:c9:29:3c:90:14:4c:bd:f8:42:12:d7: c6:56:7e:0b:f5:27:87:d6:7e:2e:56:da:5b:d2:95: 48:f2:81:f5:7f:57:47:94:e2:5a:19:9f:4e:b7:1e: 69:a0:fb:35:e6:7c:8e:18:88:68:34:6e:09:bb:87: b5:6c:3c:50:e6:a0:1e:d9:5a:1d:4d:54:58:f4:04: dc:50:32:ad:f5:04:75:41:75:e5:48:f2:fa:46:04: 53:6f:6c:4e:fd:44:3f:15:3c:b5:55:47:d9:c3:b8: 3f:3d:84:9c:8e:1f:6b:2a:a4:32:53:cf:37:cd:5e: 53:7e:16:89:82:dc:1c:9c:72:ee:a3:e2:5b:85:59: 94:17:27:dc:f6:a7:f9:54:19:dc:54:02:a9:58:7f: ae:16:15:d1:2b:e1:01:b0:0d:fd:62:ad:18:98:00: 52:42:53:79:c9:02:60:37:59:a7:2c:55:88:2d:a9: 00:dc:e6:b6:ef:fe:6a:8c:e1:c8:05:f1:b1:fc:47: 19:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7A:9D:9B:C6:F1:A7:E2:3D:6A:7D:76:A0:FB:B9:E5:B0:64:F0:CE X509v3 Authority Key Identifier: keyid:71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:32:bb:4d:6f:49:b3:f9:a5:14:c5:74:3d:3a:72:af:6a:d5: 8a:c9:be:bc:52:8e:e7:c4:b7:1d:b1:46:51:fa:2a:83:39:53: 67:c2:53:1f:cf:7e:f1:9c:e8:8a:c6:94:3a:c0:65:5e:70:8c: 85:ad:ab:9b:29:9c:73:86:b4:8b:24:a8:c3:fc:ba:64:7a:c7: 11:0f:23:75:67:fa:3d:30:12:2c:9c:a1:16:37:2a:3a:9c:52: 35:86:93:e4:10:6c:11:56:19:d5:36:b5:a1:1a:ce:77:8c:f5: d3:10:8b:73:2f:ca:c3:db:0c:52:98:ff:0b:96:6a:54:7d:f6: 08:80:8b:15:65:52:3d:49:06:c0:a3:fc:0c:60:28:de:d2:95: f4:25:59:2b:a4:40:4b:8f:a9:c0:df:c9:ca:e7:80:41:e0:97: 68:05:83:7a:54:e1:e3:57:28:cb:42:e2:bd:d6:47:9c:d4:8f: bb:a3:8b:b0:f9:41:5c:48:53:a6:46:9d:90:14:89:57:6c:b7: 87:2a:2d:93:1c:74:01:76:fc:b8:2b:7c:ff:16:8a:51:a0:a4: f7:f2:a0:ae:4c:03:c7:ef:c8:75:83:1a:8a:ac:8f:ae:dd:fc: fc:b1:3a:d9:35:75:7e:68:8d:32:2f:3c:47:b1:3e:fd:77:5e: a6:3d:c9:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMzExMTAvBgNVBAUTKDcxMDUzNzI0NDZBMjA2NDU0NkQ5NjI5RjQyMUMzNzZG RENFRjIxRDYwHhcNMjYwNzIyMTg0NTM4WhcNMjYwNzI5MTg0NTM4WjAYMRYwFAYD VQQDEw02YTYxMGZkMi1iZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsE//KQgemmJMQqAbVK0ey11Hv/VK9LIJKVWQqVwQLsnROdMxLxX4bvLdgPQi 4+dLlDHjAQW9951qL6tL32FVySk8kBRMvfhCEtfGVn4L9SeH1n4uVtpb0pVI8oH1 f1dHlOJaGZ9Otx5poPs15nyOGIhoNG4Ju4e1bDxQ5qAe2VodTVRY9ATcUDKt9QR1 QXXlSPL6RgRTb2xO/UQ/FTy1VUfZw7g/PYScjh9rKqQyU883zV5TfhaJgtwcnHLu o+JbhVmUFyfc9qf5VBncVAKpWH+uFhXRK+EBsA39Yq0YmABSQlN5yQJgN1mnLFWI LakA3Oa27/5qjOHIBfGx/EcZNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIt6nZvG 8afiPWp9dqD7ueWwZPDOMB8GA1UdIwQYMBaAFHEFNyRGogZFRtlin0IcN2/c7yHW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzMS8zOEJGNDA5QTE1 OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJrVkcyV0tmUWh3M2I5enZJ ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRVTNKRWFpQmtWRzJXS2ZRaHczYjl6dklkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzMS8zOEJGNDA5QTE1OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJr VkcyV0tmUWh3M2I5enZJZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiTK7TW9Js/mlFMV0PTpyr2rVism+vFKO58S3HbFGUfoqgzlTZ8JTH89+8Zzo isaUOsBlXnCMha2rmymcc4a0iySow/y6ZHrHEQ8jdWf6PTASLJyhFjcqOpxSNYaT 5BBsEVYZ1Ta1oRrOd4z10xCLcy/Kw9sMUpj/C5ZqVH32CICLFWVSPUkGwKP8DGAo 3tKV9CVZK6RAS4+pwN/JyueAQeCXaAWDelTh41coy0LivdZHnNSPu6OLsPlBXEhT pkadkBSJV2y3hyotkxx0AXb8uCt8/xaKUaCk9/KgrkwDx+/IdYMaiqyPrt38/LE6 2TV1fmiNMi88R7E+/Xdepj3J6A== -----END CERTIFICATE-----Generated at Fri Jul 24 16:27:38 2026 by rpki-client