$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft File: mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json) Hash identifier: 07uaiKBIcx8xHO4IAgkPwH73f8yX7qc3pe46f7m/vMM= Subject key identifier: A9:45:D1:19:D3:FA:74:5C:01:CE:0D:42:BF:17:D5:64:AF:DE:21:0E Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 Certificate issuer: /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft Manifest number: 032C Signing time: Thu 23 Jul 2026 02:02:45 +0000 Manifest this update: Thu 23 Jul 2026 02:02:44 +0000 Manifest next update: Thu 30 Jul 2026 02:02:44 +0000 Files and hashes: 1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: yeuIemqsjNmmQwXHjBfRrEOitK/ohiP/DNK294o7M9Y=) 2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: HIwqlmntoeFwo+S7UDebJJRPpqNaEv4Pryk7jDC+0qM=) 3: E79D93681C1F11F1B2DF50D0313D8C67.roa (hash: W4I4DorhQtZcnS22ft48DnGQCDVeftj54k6lXf7w3f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Validity Not Before: Jul 23 02:02:44 2026 GMT Not After : Jul 30 02:02:44 2026 GMT Subject: CN=6a617645-3f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:ae:63:6a:c8:40:81:51:9d:38:8c:e8:3c: d5:90:2d:cb:56:3d:b9:0c:0f:48:f2:52:ad:79:87: b6:f2:53:5f:a9:f4:b6:c9:5d:04:15:99:02:52:08: 62:fb:de:b5:83:74:36:e9:d5:91:c9:e7:9f:0f:82: 59:64:d8:ee:6b:ff:4b:51:cb:7b:25:f3:a5:1e:de: 59:fc:e2:65:c5:71:b9:7b:9d:2e:22:1c:ce:ab:63: fa:e3:7f:9f:ed:7a:2c:b9:1d:c2:c3:f8:f4:94:8c: 02:87:eb:6c:62:e0:5a:f2:8e:40:d9:71:8a:da:8d: cd:12:f5:55:b8:a0:e1:80:ab:2b:17:35:eb:cb:74: 4d:3a:b3:8f:f9:1f:ac:cf:d7:fe:de:3e:6e:4c:80: f3:56:82:db:a2:d2:1e:23:77:be:b8:39:b3:9b:a9: 85:80:90:4c:8d:ec:7c:2c:37:b0:4d:91:49:2c:d4: 60:9d:45:44:e3:30:36:32:94:d4:24:48:4b:37:7d: d8:c8:47:b1:66:f8:38:55:70:1a:3c:85:b1:89:b5: 83:de:c2:d8:82:aa:0d:01:28:84:42:20:20:3f:ba: 72:97:eb:63:7b:5d:78:71:0f:1e:9c:c4:e4:22:d5: 52:b4:1d:84:cd:fc:63:75:38:3c:0b:36:1a:81:94: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:45:D1:19:D3:FA:74:5C:01:CE:0D:42:BF:17:D5:64:AF:DE:21:0E X509v3 Authority Key Identifier: keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f4:47:3f:00:09:5d:c8:a8:a1:03:e3:56:e2:86:f5:f8:db: 8a:fa:c9:63:77:20:61:74:b3:0e:e2:f1:cd:9b:ac:af:9f:8f: 94:c3:82:f2:fd:b3:59:83:19:cb:75:5f:e2:d7:18:a3:e3:2d: 78:4d:5d:3a:c3:5e:ca:64:92:64:e4:59:66:68:ff:e7:37:b9: 6d:68:1b:15:cc:5c:68:70:c7:49:bb:27:3e:70:8b:dd:a8:7f: d9:8c:66:9a:c3:7d:22:a9:d0:e9:1b:e2:90:3f:62:21:4b:93: 9e:5b:3c:ca:8b:1b:55:df:40:cc:51:4a:9b:a9:fe:ec:ba:dd: 6c:1f:65:60:17:2b:fb:3a:a5:8a:e3:06:91:3e:4a:82:bd:08: 13:23:6f:1a:e3:24:d6:04:01:f0:8a:25:42:53:7d:db:79:69: 42:52:0f:4d:9c:46:47:c4:ef:b1:5f:86:b3:3c:eb:37:cf:08: 8f:74:2a:e9:8c:ed:d8:ce:31:e8:e8:a2:3d:7b:53:c7:34:55: 45:c2:b9:6e:6e:ea:2b:d9:43:2a:64:54:af:d7:d6:3f:5b:b7: b5:40:a1:9e:38:3f:51:ea:74:18:39:f8:1a:c5:fa:d7:6c:ec: 26:45:ab:74:8c:13:75:93:48:f0:82:04:1d:0e:4f:03:1c:7b: 16:55:87:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKDlBMDY0RUE2QjY2REI0REUyMEM5M0NDMDQxQjg1QTE3 MDZDODA2NzIwHhcNMjYwNzIzMDIwMjQ0WhcNMjYwNzMwMDIwMjQ0WjAYMRYwFAYD VQQDEw02YTYxNzY0NS0zZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LquY2rIQIFRnTiM6DzVkC3LVj25DA9I8lKteYe28lNfqfS2yV0EFZkCUghi +961g3Q26dWRyeefD4JZZNjua/9LUct7JfOlHt5Z/OJlxXG5e50uIhzOq2P643+f 7XosuR3Cw/j0lIwCh+tsYuBa8o5A2XGK2o3NEvVVuKDhgKsrFzXry3RNOrOP+R+s z9f+3j5uTIDzVoLbotIeI3e+uDmzm6mFgJBMjex8LDewTZFJLNRgnUVE4zA2MpTU JEhLN33YyEexZvg4VXAaPIWxibWD3sLYgqoNASiEQiAgP7pyl+tje114cQ8enMTk ItVStB2EzfxjdTg8CzYagZQnWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKlF0RnT +nRcAc4NQr8X1WSv3iEOMB8GA1UdIwQYMBaAFJoGTqa2bbTeIMk8wEG4WhcGyAZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC81NEVFRjUxNDFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRONGd5VHpBUWJoYUZ3YklC bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21nWk9wclp0dE40Z3lUekFRYmhhRndiSUJuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC81NEVFRjUxNDFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRO NGd5VHpBUWJoYUZ3YklCbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACvRHPwAJXciooQPjVuKG9fjbivrJY3cgYXSzDuLxzZusr5+PlMOC8v2zWYMZ y3Vf4tcYo+MteE1dOsNeymSSZORZZmj/5ze5bWgbFcxcaHDHSbsnPnCL3ah/2Yxm msN9IqnQ6RvikD9iIUuTnls8yosbVd9AzFFKm6n+7LrdbB9lYBcr+zqliuMGkT5K gr0IEyNvGuMk1gQB8IolQlN923lpQlIPTZxGR8TvsV+GszzrN88Ij3Qq6Yzt2M4x 6OiiPXtTxzRVRcK5bm7qK9lDKmRUr9fWP1u3tUChnjg/Uep0GDn4GsX612zsJkWr dIwTdZNI8IIEHQ5PAxx7FlWH7A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:52:20 2026 by rpki-client