$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: Q+/g8yxxdzcpSVKtK8OPTR88mmnFV9U5awehqYoh7oE= Subject key identifier: 06:CE:B9:95:DB:A3:22:E3:99:CC:0C:91:C8:27:AC:F8:4C:A6:0D:ED Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: D0 Signing time: Thu 23 Jul 2026 08:40:28 +0000 Manifest this update: Thu 23 Jul 2026 08:40:27 +0000 Manifest next update: Thu 30 Jul 2026 08:40:27 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: Dk0rGSWFGv4xSP7/Lj9MtJVB+ZMkRvKCTgFLVYYBARg=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: ki7xh64GIKfwbhwFIwfLQ7ubTp/Y8e6eL9BMSGhKC7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Jul 23 08:40:27 2026 GMT Not After : Jul 30 08:40:27 2026 GMT Subject: CN=6a61d37c-7765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:60:8a:96:b9:e7:84:d2:83:77:2a:51:87: 54:63:82:3c:80:ae:70:37:f7:8b:51:11:96:43:47: ff:c7:18:1c:b0:74:0b:55:20:6f:c8:a7:d2:f1:d8: b3:c5:ff:e6:5d:26:ca:be:f7:fe:dd:46:f7:37:ee: 7d:7a:d0:9c:d5:41:de:c3:19:4e:bf:86:39:e3:d5: 44:ce:9c:73:8d:cc:d6:a3:d7:84:60:45:c3:6b:cc: c8:cc:d0:ae:d2:28:9c:69:bd:8b:2b:96:51:62:92: a5:51:aa:62:63:62:4d:03:61:31:0a:6c:99:90:0c: 38:97:42:0c:e1:61:34:67:68:51:dd:d2:b7:5e:b4: ed:58:1a:9e:1b:72:8b:83:1b:e3:16:9d:5f:25:85: 8b:7c:71:de:09:6b:25:c2:54:ea:f9:c5:78:6a:cd: 90:5b:71:ca:ef:d6:22:b3:c0:11:f2:6c:5e:a5:2f: ea:90:45:ff:38:2f:bd:5a:e0:bf:5c:d8:6d:a1:c9: e0:b1:fd:7c:2c:89:50:f8:56:34:ae:66:ac:46:d8: 37:ab:b6:93:d0:b2:17:c7:d7:ef:5e:0d:a8:41:43: c5:2c:b1:65:dd:57:24:83:00:79:12:0a:47:31:0e: 71:5a:6f:40:5d:3f:b9:41:88:40:1a:d0:aa:9a:3f: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CE:B9:95:DB:A3:22:E3:99:CC:0C:91:C8:27:AC:F8:4C:A6:0D:ED X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:57:c6:c1:c7:3b:19:60:7c:8c:fb:12:ce:8f:70:a1:b1:f5: ea:5b:d1:c9:1a:a1:9d:e2:70:d3:dc:5d:8a:bb:d8:64:bd:f5: 90:92:9c:5c:29:37:96:9c:ef:4d:6f:ac:38:8e:3e:29:00:bc: a9:92:77:75:42:cb:43:82:35:70:bb:b1:9f:e8:ff:8a:3f:aa: 4f:9a:b9:82:f4:41:cc:d4:cf:34:84:a2:5c:e3:43:23:80:88: 49:98:c7:4d:58:dc:ea:01:99:e4:c5:fb:03:11:90:6b:36:c3: 4f:3f:ca:ef:98:e2:9d:16:2d:9f:36:22:fb:cf:b8:fa:4c:0e: cd:c8:2c:09:d1:0b:39:f5:1d:3d:9e:ff:94:87:1b:f9:4d:e4: b1:24:e3:fe:43:e1:44:c6:bf:3f:29:37:3b:82:88:5f:27:db: 5b:e6:1c:9b:6c:ae:22:83:43:94:e5:35:ab:42:ad:bb:8f:3e: 22:0b:37:ac:3d:16:9b:6e:1b:78:3f:5e:71:3c:16:f7:b7:fa: 9f:4e:b7:52:a0:95:45:be:eb:fa:bd:81:b4:1d:6b:ad:a2:23: b0:3b:05:1f:59:29:28:ba:e8:21:74:b2:f9:25:13:82:0a:c3: e4:e1:ad:47:8f:a4:1f:23:80:54:0e:bb:2b:7a:67:da:83:3e: 23:55:77:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2NjExMTAvBgNVBAUTKDBGOTE0QTFEQzk0RjVCRTQyRTg4M0MyQURENTQzMEJD REY2REYzMzQwHhcNMjYwNzIzMDg0MDI3WhcNMjYwNzMwMDg0MDI3WjAYMRYwFAYD VQQDEw02YTYxZDM3Yy03NzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUVgipa554TSg3cqUYdUY4I8gK5wN/eLURGWQ0f/xxgcsHQLVSBvyKfS8diz xf/mXSbKvvf+3Ub3N+59etCc1UHewxlOv4Y549VEzpxzjczWo9eEYEXDa8zIzNCu 0iicab2LK5ZRYpKlUapiY2JNA2ExCmyZkAw4l0IM4WE0Z2hR3dK3XrTtWBqeG3KL gxvjFp1fJYWLfHHeCWslwlTq+cV4as2QW3HK79Yis8AR8mxepS/qkEX/OC+9WuC/ XNhtocngsf18LIlQ+FY0rmasRtg3q7aT0LIXx9fvXg2oQUPFLLFl3VckgwB5EgpH MQ5xWm9AXT+5QYhAGtCqmj+ZuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbOuZXb oyLjmcwMkcgnrPhMpg3tMB8GA1UdIwQYMBaAFA+RSh3JT1vkLog8Kt1UMLzfbfM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTY2MS8wRjQzRUMzQzU4 RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFctUXVpRHdxM1ZRd3ZOOXQ4 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTY2MS8wRjQzRUMzQzU4RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFct UXVpRHdxM1ZRd3ZOOXQ4elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANFfGwcc7GWB8jPsSzo9wobH16lvRyRqhneJw09xdirvYZL31kJKcXCk3lpzv TW+sOI4+KQC8qZJ3dULLQ4I1cLuxn+j/ij+qT5q5gvRBzNTPNISiXONDI4CISZjH TVjc6gGZ5MX7AxGQazbDTz/K75jinRYtnzYi+8+4+kwOzcgsCdELOfUdPZ7/lIcb +U3ksSTj/kPhRMa/Pyk3O4KIXyfbW+Ycm2yuIoNDlOU1q0Ktu48+Igs3rD0Wm24b eD9ecTwW97f6n063UqCVRb7r+r2BtB1rraIjsDsFH1kpKLroIXSy+SUTggrD5OGt R4+kHyOAVA67K3pn2oM+I1V3xw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:46:58 2026 by rpki-client