$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft File: imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft (raw, json) Hash identifier: +Eez12584dVdMdWtm25KO8acmIMMUzFZBoEgG+CLdT0= Subject key identifier: 66:48:FF:C3:2C:57:8D:09:AA:3C:D2:02:36:59:C8:D2:5F:65:29:BA Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Certificate serial: 2E81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft Manifest number: 2E01 Signing time: Wed 22 Jul 2026 15:34:27 +0000 Manifest this update: Wed 22 Jul 2026 15:34:27 +0000 Manifest next update: Wed 29 Jul 2026 15:34:27 +0000 Files and hashes: 1: imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl (hash: V25W6hU1zDdhFP2Dn5t1jrEn2UFtf1XMapCfiDTVBCA=) 2: EAB11C569E7A11EF9C2A9E09C4F9AE02.roa (hash: WjyM3KD8j7LYktjGDYnf9TzfHp76S+j3QqZZ2zALeh0=) 3: 4221CE240EC211EB9F6B1914C4F9AE02.roa (hash: 98d7Szz1xVrKOjRtTK04BwOwzNCfjc24NwJ5XcHSo3Y=) 4: 3E0A6ED49E7B11EFBD44280AC4F9AE02.roa (hash: I9utLoQOo+FgrMzcmZ+nktkwChduEwkgHWKAKFKVei8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11905 (0x2e81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127523, serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Validity Not Before: Jul 22 15:34:27 2026 GMT Not After : Jul 29 15:34:27 2026 GMT Subject: CN=6a60e303-c3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:6b:d1:71:a5:6a:6c:0a:f3:bc:1d:28:ce: ed:ac:56:21:61:6d:d1:d8:89:89:c8:0d:24:04:b7: 03:c2:24:07:05:4c:d8:4a:94:40:51:a4:bc:94:ad: b8:7d:e8:f9:89:de:a2:74:c5:e9:8e:62:1e:7c:d3: c3:e6:8a:4a:c0:9d:74:68:1e:c9:ea:5b:e6:1c:99: 5f:ad:fb:da:5b:5f:c8:32:d5:ab:ee:d2:76:76:09: c6:02:ae:ae:c9:3f:7c:eb:81:e0:d2:45:d6:cb:dc: 13:55:d9:18:52:fc:17:16:58:63:63:77:99:35:a9: 74:74:7e:c9:ea:43:7c:44:26:67:e4:38:7e:d0:25: c6:41:c4:80:e0:9b:3f:2e:35:cf:36:70:b6:28:99: 1d:d4:09:11:7a:e0:18:ae:46:66:81:c1:7c:92:b0: f5:6d:c4:13:9b:24:49:21:52:d7:78:a7:d4:96:2c: 81:05:98:93:77:c3:18:21:72:8a:a2:11:6e:e3:5a: 3d:a3:d7:c8:f3:28:ee:c7:8d:f3:a4:7f:33:2f:a2: f3:f9:8a:6b:ec:11:c8:1f:e0:f4:34:ca:25:15:7e: a6:bd:74:a0:e3:45:f5:7f:2f:04:c6:07:66:ac:7e: a1:f2:10:f0:12:aa:53:20:da:10:5e:48:f1:3b:75: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:48:FF:C3:2C:57:8D:09:AA:3C:D2:02:36:59:C8:D2:5F:65:29:BA X509v3 Authority Key Identifier: keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d7:56:aa:f8:ae:bf:38:25:3d:14:bb:67:28:6b:c0:c2:cc: 60:b2:fb:1b:a8:d4:9e:1a:62:93:ca:56:f2:42:f4:37:38:a8: 55:05:96:5c:2c:b1:a4:aa:25:19:20:4a:0f:6c:1b:83:bc:e9: 3c:38:6f:f5:c5:79:42:9d:82:e3:e6:db:6c:12:81:ac:0a:4d: 25:73:83:06:fa:a8:45:1f:12:b4:2a:87:7f:c2:e3:ff:fd:6b: c9:00:99:6a:68:58:00:67:eb:a1:4a:82:c4:e7:53:fa:3c:23: 60:b2:7a:1c:2f:83:43:e1:26:15:c4:0b:d2:38:74:b6:4a:3d: d5:0e:c4:4d:7e:96:3b:19:99:a3:7c:ab:d0:ec:c5:1c:e8:9b: d2:56:4f:39:c2:4e:1f:a6:a1:08:c7:44:88:2f:d0:10:7e:86: 94:13:79:4d:5c:09:c5:38:c7:4b:9e:15:1f:c8:45:bf:5b:ae: 95:23:a7:93:60:88:ae:18:57:51:a0:92:27:80:44:b5:76:99: be:77:c5:5b:0c:0b:b9:eb:86:4f:ca:1a:7d:b3:3e:35:7b:4b: c2:f9:79:3d:7f:7c:57:ff:c0:2a:84:79:ce:e7:52:ee:ec:03: 13:a8:12:b6:56:5b:3c:cd:46:75:37:97:51:7b:08:0d:e4:d6: 52:4d:21:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1MjMxMTAvBgNVBAUTKDhBNjgxREQwQzQzNzMxRDBGNDc2M0E0REJERDVENEND MDFGRDY0QzIwHhcNMjYwNzIyMTUzNDI3WhcNMjYwNzI5MTUzNDI3WjAYMRYwFAYD VQQDEw02YTYwZTMwMy1jM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApE1r0XGlamwK87wdKM7trFYhYW3R2ImJyA0kBLcDwiQHBUzYSpRAUaS8lK24 fej5id6idMXpjmIefNPD5opKwJ10aB7J6lvmHJlfrfvaW1/IMtWr7tJ2dgnGAq6u yT9864Hg0kXWy9wTVdkYUvwXFlhjY3eZNal0dH7J6kN8RCZn5Dh+0CXGQcSA4Js/ LjXPNnC2KJkd1AkReuAYrkZmgcF8krD1bcQTmyRJIVLXeKfUliyBBZiTd8MYIXKK ohFu41o9o9fI8yjux43zpH8zL6Lz+Ypr7BHIH+D0NMolFX6mvXSg40X1fy8Exgdm rH6h8hDwEqpTINoQXkjxO3UGAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZI/8Ms V40JqjzSAjZZyNJfZSm6MB8GA1UdIwQYMBaAFIpoHdDENzHQ9HY6Tb3V1MwB/WTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzUyMy8xMkI5OTdFODlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01kRDBkanBOdmRYVXpBSDla TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltZ2QwTVEzTWREMGRqcE52ZFhVekFIOVpNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzUyMy8xMkI5OTdFODlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01k RDBkanBOdmRYVXpBSDlaTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVddWqviuvzglPRS7ZyhrwMLMYLL7G6jUnhpik8pW8kL0NzioVQWWXCyxpKol GSBKD2wbg7zpPDhv9cV5Qp2C4+bbbBKBrApNJXODBvqoRR8StCqHf8Lj//1ryQCZ amhYAGfroUqCxOdT+jwjYLJ6HC+DQ+EmFcQL0jh0tko91Q7ETX6WOxmZo3yr0OzF HOib0lZPOcJOH6ahCMdEiC/QEH6GlBN5TVwJxTjHS54VH8hFv1uulSOnk2CIrhhX UaCSJ4BEtXaZvnfFWwwLueuGT8oafbM+NXtLwvl5PX98V//AKoR5zudS7uwDE6gS tlZbPM1GdTeXUXsIDeTWUk0hXQ== -----END CERTIFICATE-----Generated at Thu Jul 23 22:09:37 2026 by rpki-client