$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: QN2AbQ+ceEORHg1/Ft0ak05Iw+bky1BHfcRDH5QYnns= Subject key identifier: 87:99:CE:9D:FE:9C:02:C5:B2:0C:2C:EE:38:B6:F3:29:14:62:36:99 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 042B Signing time: Thu 23 Jul 2026 01:12:20 +0000 Manifest this update: Thu 23 Jul 2026 01:12:19 +0000 Manifest next update: Thu 30 Jul 2026 01:12:19 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: rskgmEftyiaAM32rRovH2onhQJtWTOscOZOlBzjdbqo=) 2: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 3: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Jul 23 01:12:19 2026 GMT Not After : Jul 30 01:12:19 2026 GMT Subject: CN=6a616a74-c0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:7b:c0:92:4f:ac:67:ff:39:ac:88:f6:10: 14:bf:1f:87:3d:cc:16:d7:44:37:47:a5:05:80:80: 08:c6:2c:c8:b8:f3:98:71:58:2c:2f:ec:4b:c6:b6: 9d:a5:9e:5f:bb:3f:67:c4:f8:65:b2:f6:71:b8:a8: bb:f4:d1:35:37:7c:a4:31:20:fb:73:b4:14:41:2f: b3:47:12:9b:24:b7:a2:0a:5f:61:7f:28:a2:dd:8c: 2e:16:6a:b9:26:e5:fe:b2:28:9b:78:f1:b2:c5:2f: eb:14:13:34:42:bb:f5:f3:ad:1e:cc:0b:6b:d7:d1: 0b:8d:dd:bd:35:6d:0f:c0:4b:29:bd:b5:e0:11:15: 6b:02:ef:ca:6e:f4:1a:d6:39:39:b2:70:92:7e:7f: 10:8d:cc:8b:1a:74:c5:d6:32:e0:74:ee:a6:a0:1b: 74:9e:75:31:f9:08:ab:2e:b6:4f:40:43:a8:76:a0: d3:e7:16:7b:a5:68:37:73:60:a9:4e:e6:fa:4a:30: fe:24:1b:ce:7c:15:63:f3:d8:36:9d:1a:2c:a0:f3: 8e:67:b0:e7:e5:81:6a:fc:49:bc:ae:5e:36:f3:b3: 95:32:a1:36:c4:55:1a:19:29:ee:ce:15:a3:21:9a: 8b:50:75:9c:27:c8:ca:26:80:ed:25:50:0b:73:01: bc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:99:CE:9D:FE:9C:02:C5:B2:0C:2C:EE:38:B6:F3:29:14:62:36:99 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:17:e3:7e:07:31:1e:db:37:6e:18:77:a1:51:d0:d1:a1:95: da:1e:7b:0d:78:8d:43:eb:36:dd:aa:ff:2c:aa:e1:95:1f:d5: 39:59:d1:61:4c:ca:5e:ca:ab:d8:25:39:f8:bb:d8:1f:c1:b9: 14:31:33:f0:81:45:91:7a:c8:ba:42:07:2e:d5:7c:52:6a:de: bc:bf:b6:51:13:f3:a2:e3:04:cc:ad:93:be:c1:a2:9e:6b:80: ce:42:65:55:e2:44:25:61:fa:2e:ce:09:7c:d9:ab:f4:45:13: 0f:10:81:0e:2c:f2:c2:cf:e5:b2:29:6a:a1:d4:f7:81:e9:6c: e4:da:99:e5:40:b1:dd:2f:b2:5c:8c:e6:92:03:50:bb:2f:51: 34:86:59:25:91:76:f8:62:d4:72:0f:97:61:40:31:0b:58:5c: 56:34:e0:88:a8:0b:a1:b4:c9:f6:33:0c:fe:80:9c:94:0f:24: f2:ec:d4:48:1b:3f:1e:8e:f1:4c:10:c3:54:2b:0d:66:f7:51: 71:d6:5a:e7:ff:59:7b:2a:3f:cb:d7:fa:19:4a:a4:3c:97:47: 4b:70:40:9f:bb:32:b2:1d:65:68:6c:af:0c:86:e7:91:2a:1b: 59:83:c9:5e:d4:ab:4a:8e:8c:b0:46:fe:49:85:d2:e9:48:03: b0:73:32:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwNzIzMDExMjE5WhcNMjYwNzMwMDExMjE5WjAYMRYwFAYD VQQDEw02YTYxNmE3NC1jMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ox7wJJPrGf/OayI9hAUvx+HPcwW10Q3R6UFgIAIxizIuPOYcVgsL+xLxrad pZ5fuz9nxPhlsvZxuKi79NE1N3ykMSD7c7QUQS+zRxKbJLeiCl9hfyii3YwuFmq5 JuX+siibePGyxS/rFBM0Qrv1860ezAtr19ELjd29NW0PwEspvbXgERVrAu/KbvQa 1jk5snCSfn8QjcyLGnTF1jLgdO6moBt0nnUx+QirLrZPQEOodqDT5xZ7pWg3c2Cp Tub6SjD+JBvOfBVj89g2nRosoPOOZ7Dn5YFq/Em8rl4287OVMqE2xFUaGSnuzhWj IZqLUHWcJ8jKJoDtJVALcwG8JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIeZzp3+ nALFsgws7ji28ykUYjaZMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANhfjfgcxHts3bhh3oVHQ0aGV2h57DXiNQ+s23ar/LKrhlR/VOVnRYUzKXsqr 2CU5+LvYH8G5FDEz8IFFkXrIukIHLtV8UmrevL+2URPzouMEzK2TvsGinmuAzkJl VeJEJWH6Ls4JfNmr9EUTDxCBDizyws/lsilqodT3gels5NqZ5UCx3S+yXIzmkgNQ uy9RNIZZJZF2+GLUcg+XYUAxC1hcVjTgiKgLobTJ9jMM/oCclA8k8uzUSBs/Ho7x TBDDVCsNZvdRcdZa5/9Zeyo/y9f6GUqkPJdHS3BAn7sysh1laGyvDIbnkSobWYPJ XtSrSo6MsEb+SYXS6UgDsHMyrg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:36:39 2026 by rpki-client