$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft File: U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json) Hash identifier: VNnD5IWimfNRSxtQnuky/G2lrJymZtEjLKZp/mqYBYY= Subject key identifier: 5C:F0:7E:34:06:08:80:54:39:BD:80:91:02:FE:34:44:30:5C:69:44 Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Certificate serial: 0265 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft Manifest number: 025D Signing time: Thu 23 Jul 2026 01:03:46 +0000 Manifest this update: Thu 23 Jul 2026 01:03:46 +0000 Manifest next update: Thu 30 Jul 2026 01:03:46 +0000 Files and hashes: 1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: +Ic5rCX37oi7nKYq0UXqU1zHGLaPAJbj//uNeYaSBG0=) 2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: E/3+zHRb9cigB2So9gcmcEr9UWMt8OA7wew5j990xKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 613 (0x265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Validity Not Before: Jul 23 01:03:46 2026 GMT Not After : Jul 30 01:03:46 2026 GMT Subject: CN=6a616872-4ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:5e:4b:40:15:0d:fc:4c:79:1d:70:8c:ba: 11:de:7d:d7:87:6f:28:cf:7b:42:e5:f4:09:b2:fc: a3:21:f4:e7:bf:6c:44:e5:0d:ba:3f:1f:74:3d:56: b8:bb:c7:e7:a7:39:32:a0:51:78:f5:c9:45:8c:35: af:ca:0d:9f:e1:8f:8b:ed:10:4c:dc:16:4c:89:3d: 37:ee:33:8a:5b:29:a3:c2:a1:2b:ea:d3:5d:24:3d: ea:80:84:36:1d:55:67:a1:cd:28:24:12:c8:cf:d2: 44:39:59:af:60:32:cc:c5:2b:ae:de:40:6b:a4:d6: f3:6c:2b:55:1c:c0:1b:4f:e4:8e:70:79:b6:73:bc: e4:16:e2:89:26:c3:bb:98:a3:65:cd:cc:27:30:72: 12:f7:a2:9a:91:4e:68:fa:82:4e:0a:bb:7c:7c:6c: 0e:83:8b:a1:8b:95:57:bd:56:e4:c3:57:ee:9d:31: ee:e0:27:a2:a1:9f:26:63:53:13:25:da:5b:81:fa: 15:06:07:9b:31:b4:9b:28:62:a9:09:6b:56:23:fd: 9a:e8:5f:07:23:8b:8e:4c:eb:e6:03:84:26:be:bc: 6f:65:85:d3:50:0c:0e:fe:37:5f:ba:17:29:14:e6: d2:e6:58:d8:8a:40:31:70:91:19:b6:8a:54:16:d6: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F0:7E:34:06:08:80:54:39:BD:80:91:02:FE:34:44:30:5C:69:44 X509v3 Authority Key Identifier: keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0d:91:45:61:d5:4a:6e:60:fb:56:23:fb:a2:ad:f9:a7:5f: 26:98:82:af:d4:bb:99:1b:69:cf:35:b4:07:99:95:d8:26:d9: 01:54:2f:fe:a9:ef:4c:10:24:09:88:bf:d7:3e:43:13:71:81: 8a:c4:18:e2:ac:8b:d3:db:7b:73:7b:05:71:a5:b6:6c:5c:7f: 40:bd:b9:20:73:39:b3:5a:1e:ee:9b:d0:55:84:8d:dd:d3:58: ad:8a:bd:f4:f9:b3:59:b2:4e:ae:50:26:da:86:b8:44:5b:79: e8:e5:11:25:51:52:4f:b2:69:6a:a6:c3:97:4d:82:4a:9d:d7: 24:32:9b:51:91:c7:51:2e:bc:2a:8c:91:1b:e2:c1:2b:e2:29: a1:99:f7:18:cd:75:ba:a3:d7:e6:74:e0:e8:86:6d:76:df:c4: c3:73:91:6c:68:7c:8a:8d:de:d5:c0:1a:db:6c:35:a8:b2:48: e5:0f:a3:40:96:69:1f:7d:22:a5:69:1d:e2:99:16:35:97:ab: 86:5c:f7:c8:ca:59:65:69:b8:e0:34:cf:c4:bc:9a:8e:16:f1: aa:6d:cb:32:79:4b:11:fd:b7:9e:8f:ab:28:4b:77:b9:78:00: 4c:9c:e2:8a:27:70:e9:63:79:b2:1c:be:35:45:91:86:d3:a6: 02:fc:61:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDUzNkI5MUIxN0I2RTFCQjE2MzhDODM1OEEwRkE1RUE1 RDBFQkVGQjcwHhcNMjYwNzIzMDEwMzQ2WhcNMjYwNzMwMDEwMzQ2WjAYMRYwFAYD VQQDEw02YTYxNjg3Mi00Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFpeS0AVDfxMeR1wjLoR3n3Xh28oz3tC5fQJsvyjIfTnv2xE5Q26Px90PVa4 u8fnpzkyoFF49clFjDWvyg2f4Y+L7RBM3BZMiT037jOKWymjwqEr6tNdJD3qgIQ2 HVVnoc0oJBLIz9JEOVmvYDLMxSuu3kBrpNbzbCtVHMAbT+SOcHm2c7zkFuKJJsO7 mKNlzcwnMHIS96KakU5o+oJOCrt8fGwOg4uhi5VXvVbkw1funTHu4CeioZ8mY1MT JdpbgfoVBgebMbSbKGKpCWtWI/2a6F8HI4uOTOvmA4QmvrxvZYXTUAwO/jdfuhcp FObS5ljYikAxcJEZtopUFta46wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzwfjQG CIBUOb2AkQL+NEQwXGlEMB8GA1UdIwQYMBaAFFNrkbF7bhuxY4yDWKD6XqXQ6++3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC8yMzIzRkQ4MDAw RDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3RmpqSU5Zb1BwZXBkRHI3 N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1UydVJzWHR1RzdGampJTllvUHBlcGREcjc3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC8yMzIzRkQ4MDAwRDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3 RmpqSU5Zb1BwZXBkRHI3N2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAQ2RRWHVSm5g+1Yj+6Kt+adfJpiCr9S7mRtpzzW0B5mV2CbZAVQv/qnvTBAk CYi/1z5DE3GBisQY4qyL09t7c3sFcaW2bFx/QL25IHM5s1oe7pvQVYSN3dNYrYq9 9PmzWbJOrlAm2oa4RFt56OURJVFST7JpaqbDl02CSp3XJDKbUZHHUS68KoyRG+LB K+IpoZn3GM11uqPX5nTg6IZtdt/Ew3ORbGh8io3e1cAa22w1qLJI5Q+jQJZpH30i pWkd4pkWNZerhlz3yMpZZWm44DTPxLyajhbxqm3LMnlLEf23no+rKEt3uXgATJzi iidw6WN5shy+NUWRhtOmAvxhTA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:28 2026 by rpki-client