$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft File: A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json) Hash identifier: M+ihQ8sySUJKXvpLIWG6WD7EwsqZirRLpveZutfLzxY= Subject key identifier: 71:82:74:4B:C5:B4:C4:3D:84:4B:AA:2D:47:BB:E9:D8:D9:EF:EF:38 Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft Manifest number: 0825 Signing time: Wed 22 Jul 2026 21:41:01 +0000 Manifest this update: Wed 22 Jul 2026 21:41:01 +0000 Manifest next update: Wed 29 Jul 2026 21:41:01 +0000 Files and hashes: 1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: geyT75n3Xt028I/rPaOu5YlZngXcGeaXevxOWbt2B5c=) 2: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=) 3: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=) 4: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Validity Not Before: Jul 22 21:41:01 2026 GMT Not After : Jul 29 21:41:01 2026 GMT Subject: CN=6a6138ed-16f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:6c:92:63:0c:4e:87:e5:54:c5:0f:94:7e: 38:8a:b8:45:d3:2a:bc:06:fe:90:cd:75:94:d6:84: c9:63:96:1b:f9:11:c2:67:57:45:03:98:d0:2b:97: 2a:e1:bf:b6:0d:ca:71:83:58:60:e3:1c:57:d1:c1: 43:09:b5:39:da:90:8d:42:84:4d:a4:db:f0:8e:b0: 5a:4d:db:1f:0a:cc:73:50:68:65:bd:75:93:81:b9: 0e:02:f4:19:d5:34:24:c3:b3:af:dd:f7:2c:e1:34: a0:57:79:56:a0:32:9a:62:48:75:c1:ab:a0:21:dc: a8:25:09:0b:43:07:3c:fa:6e:f7:d0:ee:d8:ec:dd: 29:ed:ea:b9:68:ca:51:ee:e9:ef:58:1b:90:0c:8f: d3:06:2f:2b:47:6d:06:a7:ea:39:4e:c2:10:bd:2f: 61:63:94:2a:d1:4f:a1:6c:6d:76:fb:f2:23:17:66: b8:09:d9:98:a4:ae:ba:a4:33:56:27:5a:a7:cd:9c: 3c:17:70:22:85:27:f2:44:6e:9f:2c:42:33:39:c6: 7d:7d:47:ee:d4:ff:4a:37:0c:20:19:01:26:a8:84: 51:0b:d8:81:98:aa:c6:59:36:7c:be:78:f4:4c:1e: 6c:1e:34:40:85:1b:c9:7c:06:e6:d5:a7:94:89:52: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:82:74:4B:C5:B4:C4:3D:84:4B:AA:2D:47:BB:E9:D8:D9:EF:EF:38 X509v3 Authority Key Identifier: keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7b:19:8f:7e:a0:11:6c:43:24:51:3e:66:e3:b3:b3:29:7c: b5:72:0f:06:e3:f1:b3:3d:2a:4d:f6:e2:75:81:dd:06:ac:78: f0:95:c9:ca:28:7a:8e:64:64:5d:41:1a:0a:5a:3e:72:96:c9: b9:f3:37:b4:b3:3a:f3:43:88:2b:2c:4d:f4:c0:9c:b4:e7:0c: db:ba:81:ba:f2:4f:7a:fc:c3:f4:22:87:ed:dd:b0:65:d7:5b: be:ee:15:20:b3:de:6b:96:b5:3c:da:90:d7:5b:de:ab:ae:20: 56:d2:23:d8:ee:2c:e2:b2:c5:22:52:98:1b:82:1a:67:41:ad: ff:9a:bc:52:db:e7:de:1b:d4:37:00:1a:3e:d3:11:6c:bc:f9: b0:8f:07:00:4a:6f:28:38:3f:6a:0a:d1:12:2e:6f:3d:af:d1: 04:0f:d4:70:eb:52:bc:c8:76:d5:d4:c7:52:11:31:e1:d5:8e: c8:3d:59:7f:26:49:94:fd:14:dc:37:3a:e4:c3:6a:3e:bd:8c: 7f:b1:f0:32:96:c4:e0:03:1f:6f:07:67:57:99:d2:a5:9d:92: 37:b2:07:bf:ec:b1:8e:fa:a9:76:dc:65:24:b2:22:71:23:9d: fa:5c:db:4a:81:aa:f8:a7:dd:a8:b4:47:77:ff:10:80:27:3c: 96:fe:a1:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE2MjAxMTAvBgNVBAUTKDAzNjY4QTIxRjBGMDFGMDZCMjc0RkQ4OENDOUUwQTZF ODNENTVGODUwHhcNMjYwNzIyMjE0MTAxWhcNMjYwNzI5MjE0MTAxWjAYMRYwFAYD VQQDEw02YTYxMzhlZC0xNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPFskmMMToflVMUPlH44irhF0yq8Bv6QzXWU1oTJY5Yb+RHCZ1dFA5jQK5cq 4b+2Dcpxg1hg4xxX0cFDCbU52pCNQoRNpNvwjrBaTdsfCsxzUGhlvXWTgbkOAvQZ 1TQkw7Ov3fcs4TSgV3lWoDKaYkh1waugIdyoJQkLQwc8+m730O7Y7N0p7eq5aMpR 7unvWBuQDI/TBi8rR20Gp+o5TsIQvS9hY5Qq0U+hbG12+/IjF2a4CdmYpK66pDNW J1qnzZw8F3AihSfyRG6fLEIzOcZ9fUfu1P9KNwwgGQEmqIRRC9iBmKrGWTZ8vnj0 TB5sHjRAhRvJfAbm1aeUiVLcDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGCdEvF tMQ9hEuqLUe76djZ7+84MB8GA1UdIwQYMBaAFANmiiHw8B8GsnT9iMyeCm6D1V+F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTYyMC8yMTk4MTZBQTI5 M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3YXlkUDJJeko0S2JvUFZY NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyYUtJZkR3SHdheWRQMkl6SjRLYm9QVlg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTYyMC8yMTk4MTZBQTI5M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3 YXlkUDJJeko0S2JvUFZYNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhnsZj36gEWxDJFE+ZuOzsyl8tXIPBuPxsz0qTfbidYHdBqx48JXJyih6jmRk XUEaClo+cpbJufM3tLM680OIKyxN9MCctOcM27qBuvJPevzD9CKH7d2wZddbvu4V ILPea5a1PNqQ11veq64gVtIj2O4s4rLFIlKYG4IaZ0Gt/5q8Utvn3hvUNwAaPtMR bLz5sI8HAEpvKDg/agrREi5vPa/RBA/UcOtSvMh21dTHUhEx4dWOyD1ZfyZJlP0U 3Dc65MNqPr2Mf7HwMpbE4AMfbwdnV5nSpZ2SN7IHv+yxjvqpdtxlJLIicSOd+lzb SoGq+KfdqLRHd/8QgCc8lv6hMA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:59:20 2026 by rpki-client