$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: WVKC8NCwHvYJBQ7qxCzjf3yHxeUK/1S7MJZWl0p5gVg= Subject key identifier: 9B:3A:02:5E:DE:8D:E7:E5:EA:2D:4A:37:62:C8:76:8D:56:CF:7C:CC Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1FCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1F95 Signing time: Wed 22 Jul 2026 16:04:38 +0000 Manifest this update: Wed 22 Jul 2026 16:04:38 +0000 Manifest next update: Wed 29 Jul 2026 16:04:38 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: EAAy9mZBjdtJYj7mveXT36g0h+naAcSwZEYSDdgOO4o=) 2: A63484760E7511F0B651A474C4F9AE02.roa (hash: +pE7fz+25XDKVSR1TTre98pAfrw8z0UxTph99EfCdpg=) 3: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y=) 4: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: Xg8b4k8dyJnknGrxDqu8s/epK4EcpiaQJZTkwQhIk5w=) 5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: cyiYPrBSjjiz7rqliBBIH7SM0wyxWHZdYA/as9MjKxQ=) 6: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8143 (0x1fcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Jul 22 16:04:38 2026 GMT Not After : Jul 29 16:04:38 2026 GMT Subject: CN=6a60ea16-22d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:f1:7a:97:e3:80:09:c5:ab:d2:da:7a:a0: 1d:48:66:c3:b6:8b:7f:6e:90:c4:f9:19:0e:c5:0e: 05:27:00:14:30:17:6f:17:18:80:0c:8e:32:b1:9e: 5d:e7:ba:20:39:58:6b:2b:f5:78:a1:ae:d8:c7:ee: d1:d5:b8:82:28:93:c1:61:1e:87:6b:35:5f:ee:bf: 4f:47:0b:38:76:e2:47:5b:50:e2:2b:11:73:9a:c9: db:2c:59:0a:d6:24:f0:7b:2c:f1:66:a5:fb:a0:bf: 00:54:ea:0e:dd:68:74:1a:2d:ea:47:33:3f:6a:61: 29:00:86:5e:e6:c3:73:8c:e6:e9:a1:7a:6d:82:4f: 7b:2c:be:9d:2e:0c:e5:6e:4a:d0:eb:41:50:61:ed: bc:30:70:f7:77:ee:89:d2:f8:30:d2:19:9a:39:24: 6a:19:a3:33:bc:bc:fb:18:2d:09:38:1d:17:dc:7f: 23:40:21:3c:c0:dc:77:4b:ff:29:97:87:10:6f:81: 89:56:88:0a:02:96:75:fb:01:e6:ad:25:5e:05:53: 2f:c6:95:97:c0:60:cb:62:40:bd:f1:db:0c:c2:9c: a9:06:7b:45:88:5f:f0:f5:10:c6:57:3b:c0:17:0c: c4:5a:89:f6:dc:33:b7:34:4e:9f:fb:ad:ae:2a:dc: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3A:02:5E:DE:8D:E7:E5:EA:2D:4A:37:62:C8:76:8D:56:CF:7C:CC X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7a:b7:4c:c3:e9:86:2d:8d:04:38:f4:2c:ad:5d:c6:06:fc: cb:5f:0c:53:d4:b2:5b:16:17:4f:8e:22:16:0a:26:43:f2:65: 6f:df:71:71:d1:66:fe:16:91:50:b9:c7:1a:ac:53:45:cb:60: 41:8b:05:71:b6:76:d4:cc:44:8f:e0:d3:16:bb:f0:ad:12:5c: 3c:27:c6:a4:8b:ff:88:cb:c8:09:51:19:89:96:ca:5c:29:97: 59:48:75:41:95:15:9d:ed:5e:17:5f:6f:96:71:c1:42:47:e7: e9:e9:89:b2:fd:04:69:05:91:3e:b4:bb:02:28:b4:5a:d9:d6: 2e:e0:22:3f:fe:80:fe:8a:26:03:96:69:c5:b8:42:23:12:f8: 74:2c:65:5b:a6:c6:fc:40:69:c9:21:9e:7f:a7:5f:62:5e:29: d9:f8:65:2c:69:58:5d:b7:81:c5:d3:d8:7b:45:97:df:33:db: 03:22:32:2b:e3:c4:5f:e1:e7:2b:0c:98:d1:dd:b0:eb:3b:46: a9:53:b3:b2:2c:29:42:67:2e:e8:48:0e:91:19:26:c5:bb:1f: 0b:dc:9f:88:b0:1d:16:16:52:2c:ee:53:ff:50:6d:f3:c6:ef: 77:be:e0:aa:03:11:8e:53:aa:37:e6:a9:30:5d:f7:06:96:f0: e1:81:90:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjYwNzIyMTYwNDM4WhcNMjYwNzI5MTYwNDM4WjAYMRYwFAYD VQQDEw02YTYwZWExNi0yMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqDxepfjgAnFq9LaeqAdSGbDtot/bpDE+RkOxQ4FJwAUMBdvFxiADI4ysZ5d 57ogOVhrK/V4oa7Yx+7R1biCKJPBYR6HazVf7r9PRws4duJHW1DiKxFzmsnbLFkK 1iTweyzxZqX7oL8AVOoO3Wh0Gi3qRzM/amEpAIZe5sNzjObpoXptgk97LL6dLgzl bkrQ60FQYe28MHD3d+6J0vgw0hmaOSRqGaMzvLz7GC0JOB0X3H8jQCE8wNx3S/8p l4cQb4GJVogKApZ1+wHmrSVeBVMvxpWXwGDLYkC98dsMwpypBntFiF/w9RDGVzvA FwzEWon23DO3NE6f+62uKtwH7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJs6Al7e jefl6i1KN2LIdo1Wz3zMMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmnq3TMPphi2NBDj0LK1dxgb8y18MU9SyWxYXT44iFgomQ/Jlb99xcdFm/haR ULnHGqxTRctgQYsFcbZ21MxEj+DTFrvwrRJcPCfGpIv/iMvICVEZiZbKXCmXWUh1 QZUVne1eF19vlnHBQkfn6emJsv0EaQWRPrS7Aii0WtnWLuAiP/6A/oomA5ZpxbhC IxL4dCxlW6bG/EBpySGef6dfYl4p2fhlLGlYXbeBxdPYe0WX3zPbAyIyK+PEX+Hn KwyY0d2w6ztGqVOzsiwpQmcu6EgOkRkmxbsfC9yfiLAdFhZSLO5T/1Bt88bvd77g qgMRjlOqN+apMF33Bpbw4YGQhg== -----END CERTIFICATE-----Generated at Fri Jul 24 13:36:31 2026 by rpki-client