$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: 3KaxYoZLdDbjCVl6zRGNmlpIObJUr/+hKrUSIIApQGU= Subject key identifier: 04:EB:9B:FA:88:BA:ED:DB:69:D4:20:4D:E5:5E:40:EA:80:76:E3:5C Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 0421 Signing time: Thu 23 Jul 2026 01:15:34 +0000 Manifest this update: Thu 23 Jul 2026 01:15:33 +0000 Manifest next update: Thu 30 Jul 2026 01:15:33 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: fItsvG0m1DSwzQFG4MWKDc1XgoZDebMGuB6hsdmci/E=) 2: 2A616414808A11EF813A8343C4F9AE02.roa (hash: H4XlQT8YJyI/+h2ZQgxbC5lWcfJk5rnOXu02XWl3y7o=) 3: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: Ta8P8ZlJNRZOOFxGWrA6sGVXlUCQZKAEPu0o6UyWhpE=) 4: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: X3lbzZGPgotkq76L6mKpw9+PljAruzWQzmyb0blRPVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Jul 23 01:15:33 2026 GMT Not After : Jul 30 01:15:33 2026 GMT Subject: CN=6a616b35-c6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:9d:1d:d5:76:46:e9:88:23:d6:1a:44:33: 12:65:d2:a6:8d:b3:7f:fc:e7:a8:d4:1e:62:a1:dc: 15:ec:ff:a2:3a:26:32:b0:1c:f7:e9:91:b5:27:27: 57:d0:a6:51:f6:c3:d4:11:1a:ca:da:f2:68:9f:75: 37:b3:31:3e:f1:58:a0:b0:85:ed:de:ea:3c:44:55: 4f:4c:20:18:d5:3a:6c:e3:13:1a:85:f9:7f:4e:25: dd:0e:64:5d:ea:95:78:5b:3b:d1:f4:d4:e2:81:47: 0b:cb:a7:9c:be:2d:35:b9:80:04:14:be:4e:a4:1b: c5:67:f0:f6:8d:38:b4:47:ab:03:0d:d3:fc:5d:16: 24:4c:b2:16:f7:90:ef:66:3f:40:af:8c:e8:c8:8c: 96:a9:42:fd:51:5a:7b:d7:ac:34:3d:53:7b:55:80: 80:cb:9f:0e:19:11:3f:6a:f2:e2:c6:cc:e4:d4:8c: 76:96:26:17:09:c6:5a:06:de:d2:af:03:ea:93:73: af:b4:29:1e:64:5e:3a:d5:69:b0:b3:f2:af:78:fd: dc:80:85:fc:52:a3:41:c9:a6:a3:b8:c2:8d:4b:49: 53:63:ca:05:91:37:2a:87:f8:c8:30:f9:5b:b9:68: 7a:1b:d1:dc:62:89:db:f6:63:32:78:7c:ba:e3:01: ed:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EB:9B:FA:88:BA:ED:DB:69:D4:20:4D:E5:5E:40:EA:80:76:E3:5C X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:dc:4c:a6:4d:76:0b:ff:ce:09:41:6b:b4:0f:0c:72:ea:36: 80:99:bb:3a:c2:b3:be:5d:6b:80:3c:a5:85:b9:b6:90:c3:26: 3a:d3:27:6a:42:79:df:89:29:0c:40:74:f0:6f:bc:5e:b5:e1: a3:12:5d:dc:6c:c5:69:8e:2e:83:ee:73:30:fe:fa:ef:11:5d: de:cd:01:da:a0:6e:92:96:6e:31:21:7b:73:9f:63:cb:00:1a: dc:cc:95:51:1c:05:dc:f5:c6:27:ae:19:f1:b1:19:70:9c:6c: 30:bd:16:1d:de:37:78:eb:2a:1e:e0:5f:d8:9b:a7:93:c6:ff: 78:80:95:27:fc:7d:73:4c:12:43:5a:0a:86:c8:de:43:2b:b6: 29:c9:57:18:67:fd:1c:8f:17:50:62:08:28:af:11:b4:88:2a: 22:6a:27:85:be:37:27:52:2b:7c:87:6d:11:5f:63:b9:08:c1: cc:76:13:8f:63:61:48:b4:5d:f5:7a:b1:c4:a4:03:d0:bb:35: f8:a8:10:27:6c:a0:ea:fc:8a:24:ea:67:a3:f8:8a:4d:9c:76: 3b:a0:fb:6d:c3:13:b7:12:2c:fe:4e:dc:ed:8d:39:10:5b:7f: e4:81:67:3c:4e:0f:e2:cf:ba:8c:ba:55:5b:78:10:6d:26:ab: b4:9b:50:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjYwNzIzMDExNTMzWhcNMjYwNzMwMDExNTMzWjAYMRYwFAYD VQQDEw02YTYxNmIzNS1jNmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26adHdV2RumII9YaRDMSZdKmjbN//Oeo1B5iodwV7P+iOiYysBz36ZG1JydX 0KZR9sPUERrK2vJon3U3szE+8VigsIXt3uo8RFVPTCAY1Tps4xMahfl/TiXdDmRd 6pV4WzvR9NTigUcLy6ecvi01uYAEFL5OpBvFZ/D2jTi0R6sDDdP8XRYkTLIW95Dv Zj9Ar4zoyIyWqUL9UVp716w0PVN7VYCAy58OGRE/avLixszk1Ix2liYXCcZaBt7S rwPqk3OvtCkeZF461Wmws/KveP3cgIX8UqNByaajuMKNS0lTY8oFkTcqh/jIMPlb uWh6G9HcYonb9mMyeHy64wHtPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATrm/qI uu3badQgTeVeQOqAduNcMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlNxMpk12C//OCUFrtA8Mcuo2gJm7OsKzvl1rgDylhbm2kMMmOtMnakJ534kp DEB08G+8XrXhoxJd3GzFaY4ug+5zMP767xFd3s0B2qBukpZuMSF7c59jywAa3MyV URwF3PXGJ64Z8bEZcJxsML0WHd43eOsqHuBf2Junk8b/eICVJ/x9c0wSQ1oKhsje Qyu2KclXGGf9HI8XUGIIKK8RtIgqImonhb43J1IrfIdtEV9juQjBzHYTj2NhSLRd 9XqxxKQD0Ls1+KgQJ2yg6vyKJOpno/iKTZx2O6D7bcMTtxIs/k7c7Y05EFt/5IFn PE4P4s+6jLpVW3gQbSartJtQWg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:28:42 2026 by rpki-client