$ rpki-client -vvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft File: JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft (raw, json) Hash identifier: 8dpz5owHBgQ54hwggxT61B/vKC0eG7do2quXyFq2rmk= Subject key identifier: 68:4F:90:BF:E6:7E:1B:1A:5D:1C:DE:3B:B4:8D:17:C7:BE:EA:7A:54 Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 Certificate issuer: /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Certificate serial: 0DB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft Manifest number: 0D89 Signing time: Wed 22 Jul 2026 18:13:35 +0000 Manifest this update: Wed 22 Jul 2026 18:13:35 +0000 Manifest next update: Wed 29 Jul 2026 18:13:35 +0000 Files and hashes: 1: JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl (hash: Go44jXq0m8uW3OfrbDRTPzuanUUY9bQTScA+MQYjB+w=) 2: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (hash: 2j8ZEZZDC+v0AsplIrNRFX86JLUI1D1lZouNpF7eL1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3507 (0xdb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128918, serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Validity Not Before: Jul 22 18:13:35 2026 GMT Not After : Jul 29 18:13:35 2026 GMT Subject: CN=6a61084f-4fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:42:d8:26:d5:6b:6b:78:d5:88:f9:9c:3b: e0:43:4b:67:0c:dc:1b:df:e1:66:46:26:cd:ca:e3: f6:3f:95:0d:51:91:ee:38:27:0e:30:a2:c9:82:a7: 3c:da:34:e8:5b:b3:23:35:73:68:3d:a4:ff:ab:ec: c1:fb:7e:cb:ab:7a:f1:5d:6e:7f:2f:08:4b:2d:67: 21:6d:68:e7:9a:5a:b7:d4:28:78:75:32:8e:65:00: dd:1d:94:8e:56:5a:f1:2d:a9:57:b5:64:fb:e8:fa: fa:e3:dd:8e:89:8d:5c:3e:58:61:7c:c3:51:7d:d8: dd:6e:b0:f4:13:d8:e6:a3:fc:ce:d4:5a:95:e4:0d: 82:dc:94:c3:9f:3a:3b:2c:bd:e2:ba:44:73:5f:8f: 4a:88:61:89:0b:38:e3:2f:6d:64:0f:9f:63:2b:5f: b0:da:f1:5f:9b:10:44:2e:d1:f7:93:cd:b9:9b:ac: 75:68:6d:5b:da:31:25:0f:37:f8:40:b1:37:71:29: c1:54:ff:ac:49:ed:54:32:1c:a4:ca:f4:8d:c7:87: 7d:06:f0:69:0c:b7:c7:10:ab:6c:20:12:56:25:76: 09:e3:2c:50:45:c3:af:51:e0:88:55:74:8c:42:c8: 4b:ce:bc:a2:0e:21:d1:9b:58:64:07:3e:c4:8f:1f: 93:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4F:90:BF:E6:7E:1B:1A:5D:1C:DE:3B:B4:8D:17:C7:BE:EA:7A:54 X509v3 Authority Key Identifier: keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:00:be:3c:77:22:d5:80:c1:d8:4b:67:32:7c:f9:e8:56:8a: 9f:77:39:7d:07:f1:53:77:e2:78:fb:4a:18:31:52:0a:c5:54: 14:ad:86:a1:15:55:35:97:c1:9d:f6:98:a2:69:0f:88:75:d0: 49:a8:eb:dc:29:82:a6:b1:6a:6a:83:fb:5a:52:50:4d:78:d7: 05:7d:d8:26:1a:3a:f6:0e:86:d7:0b:a3:2f:14:1e:1c:05:bb: a8:62:57:2d:08:89:f1:09:68:fd:37:7f:d2:79:db:18:ea:31: 04:8f:41:cb:4f:0e:d2:de:73:7f:1d:e0:05:d2:bd:c4:7b:c4: c5:6a:76:64:c5:55:59:6e:dd:13:ec:2d:38:3c:ab:d6:37:fb: 7b:bc:51:c8:8b:6c:15:1c:bd:b0:95:34:7b:03:85:09:da:6f: d4:42:36:63:51:5d:3f:46:22:68:98:09:8f:a1:c0:67:7d:fc: e7:9b:36:ab:5a:07:12:49:5d:09:e7:09:5d:3d:b2:f2:3f:89: 7c:fe:1f:44:5e:37:5a:7c:a3:98:6f:00:2d:df:2d:1a:97:29: 9e:30:59:66:5f:16:29:1e:43:9e:16:4a:06:48:5f:44:b0:22: 2b:9c:9b:4b:ed:7f:ae:96:14:df:e8:a1:c3:22:3e:36:c0:ed: e2:e2:8c:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5MTgxMTAvBgNVBAUTKDI1MDM3NzVGQUMzQTZGNDcyMzRDQjgzMkE2MzdGQzEw ODJBNDdDNDQwHhcNMjYwNzIyMTgxMzM1WhcNMjYwNzI5MTgxMzM1WjAYMRYwFAYD VQQDEw02YTYxMDg0Zi00ZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOlC2CbVa2t41Yj5nDvgQ0tnDNwb3+FmRibNyuP2P5UNUZHuOCcOMKLJgqc8 2jToW7MjNXNoPaT/q+zB+37Lq3rxXW5/LwhLLWchbWjnmlq31Ch4dTKOZQDdHZSO VlrxLalXtWT76Pr6492OiY1cPlhhfMNRfdjdbrD0E9jmo/zO1FqV5A2C3JTDnzo7 LL3iukRzX49KiGGJCzjjL21kD59jK1+w2vFfmxBELtH3k825m6x1aG1b2jElDzf4 QLE3cSnBVP+sSe1UMhykyvSNx4d9BvBpDLfHEKtsIBJWJXYJ4yxQRcOvUeCIVXSM QshLzryiDiHRm1hkBz7Ejx+TawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGhPkL/m fhsaXRzeO7SNF8e+6npUMB8GA1UdIwQYMBaAFCUDd1+sOm9HI0y4MqY3/BCCpHxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODkxOC9FOThGREZENEY2 NzIxMUU5OTFFRDBCMTZDNEY5QUUwMi9KUU4zWDZ3NmIwY2pUTGd5cGpmOEVJS2tm RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRTjNYNnc2YjBjalRMZ3lwamY4RUlLa2ZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODkxOC9FOThGREZENEY2NzIxMUU5OTFFRDBCMTZDNEY5QUUwMi9KUU4zWDZ3NmIw Y2pUTGd5cGpmOEVJS2tmRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsgC+PHci1YDB2EtnMnz56FaKn3c5fQfxU3fiePtKGDFSCsVUFK2GoRVVNZfB nfaYomkPiHXQSajr3CmCprFqaoP7WlJQTXjXBX3YJho69g6G1wujLxQeHAW7qGJX LQiJ8Qlo/Td/0nnbGOoxBI9By08O0t5zfx3gBdK9xHvExWp2ZMVVWW7dE+wtODyr 1jf7e7xRyItsFRy9sJU0ewOFCdpv1EI2Y1FdP0YiaJgJj6HAZ33855s2q1oHEkld CecJXT2y8j+JfP4fRF43WnyjmG8ALd8tGpcpnjBZZl8WKR5DnhZKBkhfRLAiK5yb S+1/rpYU3+ihwyI+NsDt4uKMoA== -----END CERTIFICATE-----Generated at Fri Jul 24 16:57:02 2026 by rpki-client