$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft File: hA_W9-iR44BKfbMJ0EzoXBr3htE.mft (raw, json) Hash identifier: eolc+9LBIAZJsQGpoT/XWcZ0PPPNDxj1mYMRAXP4SmE= Subject key identifier: 75:C7:99:1E:EB:DF:11:97:74:B8:70:52:DC:17:06:54:44:73:49:AB Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft Manifest number: 0141 Signing time: Wed 22 Jul 2026 19:33:49 +0000 Manifest this update: Wed 22 Jul 2026 19:33:49 +0000 Manifest next update: Wed 29 Jul 2026 19:33:49 +0000 Files and hashes: 1: hA_W9-iR44BKfbMJ0EzoXBr3htE.crl (hash: fXt5hNEOC27w02DL/N3/gy5hpVMMoElGmg0KopGv09o=) 2: 245F176CA81311F0A8A82B85C4F9AE02.roa (hash: eX1W6sEO6qSGiwMhq2AqfocdX9JRjmM9eN6Q3NFHq5U=) 3: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (hash: dPEhTQP3qeAR4yGjatb5GQPGEIi2y0rBsSN9VqRiVX4=) 4: 7B73A414A81311F0A69E5E49C4F9AE02.roa (hash: CmfJtzvbUDIWlxCuJc7fM+dnWaJ+FXCzjzg3v0W8Rc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Jul 22 19:33:49 2026 GMT Not After : Jul 29 19:33:49 2026 GMT Subject: CN=6a611b1d-01d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:b5:92:1f:9e:c4:46:8b:3b:2d:17:f2:a1: 20:e9:f1:62:4e:9f:6c:b3:3b:e3:ef:48:6f:bf:c5: f8:63:bc:d1:c0:f5:14:0e:bc:63:38:91:39:d6:2b: 8a:c3:24:ef:0b:0b:50:a7:51:61:df:78:d4:c9:61: 92:06:ba:26:8a:54:76:ab:95:9b:33:af:8a:46:67: 7e:d8:f1:04:b0:d6:18:43:85:5a:3d:31:90:92:f1: 68:5a:ff:bc:ee:f0:33:94:30:f9:3d:86:cb:08:db: 24:df:2d:5c:67:f9:3c:2f:a6:31:e0:92:20:44:1c: 99:3f:9d:dd:02:4c:af:66:69:71:20:d0:c2:8f:3b: 40:20:45:9c:0c:da:c5:65:09:65:f0:5c:7b:8b:92: 04:b7:f3:a4:87:4a:60:eb:5a:ef:ff:71:be:2f:38: 87:c2:ee:05:fe:5d:b6:79:05:39:dd:b0:26:42:1d: b1:32:7b:80:de:de:17:07:62:c7:63:5c:a7:a5:5d: 6a:1c:70:07:1f:d7:cf:35:67:32:06:2a:17:a2:96: 62:15:16:71:45:f8:a2:a1:f6:a8:a2:5e:5f:fc:1d: 9c:db:d5:47:31:ed:59:3c:6a:7a:a8:c9:cd:88:d3: 1c:df:1d:1f:2e:2e:74:8a:3d:90:e9:0f:5e:b9:3f: 3e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C7:99:1E:EB:DF:11:97:74:B8:70:52:DC:17:06:54:44:73:49:AB X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:47:68:48:48:db:07:9e:69:38:46:f7:91:c6:a7:68:2d:74: 27:01:88:51:9f:87:25:d6:29:04:bc:a6:ed:f9:0a:b1:b2:70: 91:fe:87:2e:8b:3e:e6:65:7c:da:b7:27:8d:17:95:b8:53:d0: fd:16:2b:0e:a3:a1:47:54:d6:ef:51:26:d6:ad:23:d3:3c:c4: 47:0c:1b:2b:8f:9e:dd:3f:6e:a2:1b:b4:d2:5e:46:01:68:53: 0b:83:d0:6d:64:1d:50:d5:6d:80:6b:5d:bd:53:89:e2:90:1e: 8e:49:2a:ed:48:06:8d:05:c2:88:5e:0a:30:fe:a8:fc:28:57: 3e:96:8c:5d:54:d2:5a:9c:5c:e2:4b:a2:9b:29:fd:73:37:2a: b3:02:4e:47:dd:a6:f9:21:5b:ee:f4:9d:55:99:55:89:cc:aa: 7e:42:cf:9d:70:8d:50:93:71:8b:b9:65:79:ec:84:9d:af:fd: 26:4a:b1:81:0a:3e:e9:a2:b8:0b:05:3d:a9:ef:ee:03:bf:dd: fe:58:78:56:40:79:d0:fa:86:c7:c5:e4:58:58:71:5c:ba:de: fa:9e:32:14:e7:b9:84:06:bc:24:c4:87:35:e3:e3:21:ba:ec: af:6d:3a:74:b3:33:2b:5f:01:44:45:4a:f1:a8:f0:87:a6:ad: 90:cf:55:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjYwNzIyMTkzMzQ5WhcNMjYwNzI5MTkzMzQ5WjAYMRYwFAYD VQQDEw02YTYxMWIxZC0wMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywK1kh+exEaLOy0X8qEg6fFiTp9sszvj70hvv8X4Y7zRwPUUDrxjOJE51iuK wyTvCwtQp1Fh33jUyWGSBromilR2q5WbM6+KRmd+2PEEsNYYQ4VaPTGQkvFoWv+8 7vAzlDD5PYbLCNsk3y1cZ/k8L6Yx4JIgRByZP53dAkyvZmlxINDCjztAIEWcDNrF ZQll8Fx7i5IEt/Okh0pg61rv/3G+LziHwu4F/l22eQU53bAmQh2xMnuA3t4XB2LH Y1ynpV1qHHAHH9fPNWcyBioXopZiFRZxRfiiofaool5f/B2c29VHMe1ZPGp6qMnN iNMc3x0fLi50ij2Q6Q9euT8+uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXHmR7r 3xGXdLhwUtwXBlREc0mrMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi8xOTdGRjdBMkI0MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0 QktmYk1KMEV6b1hCcjNodEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjEdoSEjbB55pOEb3kcanaC10JwGIUZ+HJdYpBLym7fkKsbJwkf6HLos+5mV8 2rcnjReVuFPQ/RYrDqOhR1TW71Em1q0j0zzERwwbK4+e3T9uohu00l5GAWhTC4PQ bWQdUNVtgGtdvVOJ4pAejkkq7UgGjQXCiF4KMP6o/ChXPpaMXVTSWpxc4kuimyn9 czcqswJOR92m+SFb7vSdVZlVicyqfkLPnXCNUJNxi7lleeyEna/9JkqxgQo+6aK4 CwU9qe/uA7/d/lh4VkB50PqGx8XkWFhxXLre+p4yFOe5hAa8JMSHNePjIbrsr206 dLMzK18BREVK8ajwh6atkM9VwQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:05:25 2026 by rpki-client