$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: 69RdK1+SnynPn7+iZJiJTI/rEBVIVQPbolUec7W6b40= Subject key identifier: 73:B6:83:95:EC:03:38:9A:30:FF:5E:D6:2B:A1:19:08:94:AF:53:E5 Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 08E6 Signing time: Wed 22 Jul 2026 20:47:41 +0000 Manifest this update: Wed 22 Jul 2026 20:47:40 +0000 Manifest next update: Wed 29 Jul 2026 20:47:40 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: hZPtGt9IQsW9tIfEX6xwme7Dy2HbyfvjuBfiVPJXLTM=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: D05It9UAiO51r8ILKVDfdiFJE2qz6LfsL6XWmNrhCuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Jul 22 20:47:40 2026 GMT Not After : Jul 29 20:47:40 2026 GMT Subject: CN=6a612c6c-f923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:9d:47:ee:f5:c0:1b:aa:60:82:9b:e5:ea: 4e:01:35:0e:b2:8f:ce:bf:e1:8f:8c:08:33:07:3f: d2:ed:ce:f7:d6:7a:d8:93:3d:e4:e1:52:e5:e1:f7: 37:c6:77:12:15:d5:4c:bc:34:37:13:7b:90:8a:c7: ed:f6:b0:db:6a:ee:81:d9:75:99:1f:42:71:31:4d: 59:b2:7b:4c:b1:15:62:99:a1:92:54:ff:cf:57:81: d5:90:fc:95:63:fc:60:4d:55:7f:cd:21:b6:8e:78: 3a:de:5f:17:8c:43:56:e6:0d:90:80:18:ef:51:29: b7:01:67:bf:8e:fc:29:ce:c4:e1:25:cd:6e:e4:fb: 02:e5:d9:b1:42:e5:d6:8e:d4:57:0f:21:36:d4:eb: cc:e0:3b:c6:9b:4e:08:24:81:96:72:09:bb:67:d0: 61:0c:c8:03:f7:39:00:b5:9e:76:db:96:c9:3d:4a: 84:a2:3e:1e:e0:34:fe:9b:82:f2:59:3f:2f:9a:82: 6e:c8:ff:20:af:a1:08:8f:35:55:cf:83:f6:25:0a: 9b:b6:3d:84:10:ea:94:31:3a:c4:bd:dc:30:ef:22: e3:e7:2c:dc:77:c2:ac:74:be:75:5f:77:28:49:90: 49:a1:7c:fc:6a:78:ff:2a:89:14:38:a1:91:8a:56: a9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B6:83:95:EC:03:38:9A:30:FF:5E:D6:2B:A1:19:08:94:AF:53:E5 X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:35:21:f9:f5:70:46:90:e8:7f:c3:21:ac:bb:01:9e:ae:6a: 44:bc:14:28:24:bc:32:4f:03:19:fc:35:12:61:d8:ba:a3:ac: bc:2a:f1:86:83:f6:a7:97:ba:05:cb:2c:c7:65:0e:f6:b4:c8: 27:ec:cb:de:bc:e4:73:b7:a8:fc:19:8e:9d:91:e1:91:0b:53: 06:6d:3c:ea:36:97:a6:ee:31:de:25:21:57:87:dd:c4:94:25: ac:48:f9:fd:e9:b7:bd:af:8c:b2:4d:ee:a5:f7:ff:49:28:d6: 56:a5:30:79:66:dc:a9:2a:b1:b6:6a:ee:fe:db:38:8f:c1:f0: 70:2b:41:cd:0a:95:a5:fc:51:13:54:60:ae:c8:cc:f5:dd:91: 87:81:8e:50:a2:57:21:2b:f0:06:95:33:20:52:52:85:66:ff: 66:ca:85:cf:cd:e8:63:5a:af:3e:96:12:f6:c7:f2:40:02:55: 9a:ec:c3:b5:7b:77:ee:3f:a4:09:c9:95:fa:fc:b3:fc:a4:0c: fa:ea:61:32:b5:dd:20:0b:ed:73:29:4c:2e:61:63:ef:8e:74: 11:96:2d:cb:f4:13:de:29:d6:83:89:cc:99:ec:d8:9a:85:c5: 57:c4:d8:46:ad:af:26:19:2a:d7:ce:fa:46:e4:db:84:5b:76: 13:aa:55:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjYwNzIyMjA0NzQwWhcNMjYwNzI5MjA0NzQwWjAYMRYwFAYD VQQDEw02YTYxMmM2Yy1mOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZSdR+71wBuqYIKb5epOATUOso/Ov+GPjAgzBz/S7c731nrYkz3k4VLl4fc3 xncSFdVMvDQ3E3uQisft9rDbau6B2XWZH0JxMU1ZsntMsRVimaGSVP/PV4HVkPyV Y/xgTVV/zSG2jng63l8XjENW5g2QgBjvUSm3AWe/jvwpzsThJc1u5PsC5dmxQuXW jtRXDyE21OvM4DvGm04IJIGWcgm7Z9BhDMgD9zkAtZ5225bJPUqEoj4e4DT+m4Ly WT8vmoJuyP8gr6EIjzVVz4P2JQqbtj2EEOqUMTrEvdww7yLj5yzcd8KsdL51X3co SZBJoXz8anj/KokUOKGRilap9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHO2g5Xs AziaMP9e1iuhGQiUr1PlMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvDUh+fVwRpDof8MhrLsBnq5qRLwUKCS8Mk8DGfw1EmHYuqOsvCrxhoP2p5e6 Bcssx2UO9rTIJ+zL3rzkc7eo/BmOnZHhkQtTBm086jaXpu4x3iUhV4fdxJQlrEj5 /em3va+Msk3upff/SSjWVqUweWbcqSqxtmru/ts4j8HwcCtBzQqVpfxRE1RgrsjM 9d2Rh4GOUKJXISvwBpUzIFJShWb/ZsqFz83oY1qvPpYS9sfyQAJVmuzDtXt37j+k CcmV+vyz/KQM+uphMrXdIAvtcylMLmFj7450EZYty/QT3inWg4nMmezYmoXFV8TY Rq2vJhkq1876RuTbhFt2E6pVyA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:18:39 2026 by rpki-client