$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: Cz89yPR08olfpLSRLIR6dUf9msQ/Xc+lvTZ1QlBZFBo= Subject key identifier: 2B:51:AB:5F:3B:BA:B6:CC:55:0B:AC:07:9D:D1:C6:C1:08:ED:DB:7F Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 0286 Signing time: Thu 23 Jul 2026 03:01:37 +0000 Manifest this update: Thu 23 Jul 2026 03:01:36 +0000 Manifest next update: Thu 30 Jul 2026 03:01:36 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: t2Nq5DoKqCfEjCnf/1H4ptitzRVOYWLImYRvZEoESIE=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: 9aPuAfrv6U9JgTzd4m4UnxApaKEUV0ZT7nFSzZfe2yQ=) 3: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: tGMAIl3/k6G1q8dJnYI7hANKBUtFxchL1YEdgkkggUg=) 4: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: CSz19I4y5kF+WlyNFkJdkvlKJUnI/Eko4kr9Q3tcNIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Jul 23 03:01:36 2026 GMT Not After : Jul 30 03:01:36 2026 GMT Subject: CN=6a618411-a351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:1e:b3:92:e3:61:31:23:17:92:61:1f:64: a4:a9:72:0e:0b:d7:03:a3:c3:88:55:3e:8d:8e:92: 5b:99:64:8c:cf:38:67:dd:73:df:e5:32:9f:27:f3: 1c:e0:0f:d5:dc:e2:e3:25:0c:ac:22:74:c6:bb:3b: 32:a4:a1:8c:b8:64:17:db:59:78:2e:8e:08:fa:87: 4c:79:a8:63:5e:7b:7a:ed:a6:49:29:ea:75:c9:9d: fb:e9:be:c4:17:1b:1e:34:03:85:6a:5d:3a:8e:4b: b5:56:3a:85:cf:94:16:fd:8e:d1:ac:89:48:46:ce: 7f:f8:4e:0f:2c:ae:73:1f:58:65:1f:b0:37:62:76: a2:05:53:71:1e:4c:16:53:ec:b3:48:46:ad:2d:68: 31:ed:df:26:13:dd:64:41:92:73:b7:51:10:9f:a2: 93:45:1a:a0:83:7c:03:17:cc:23:4b:da:17:18:75: 75:f7:6f:21:68:73:bd:18:66:60:48:55:ab:bb:e0: 60:cd:fd:22:66:10:0d:1e:8c:2c:1d:5c:2a:96:ae: 8d:bc:9f:bf:84:6b:6b:4b:6f:9f:75:e8:d6:2c:6c: 02:34:4d:ff:09:dc:35:20:fe:cf:62:18:76:eb:8b: 13:56:0a:9c:79:fc:bc:2a:3a:fd:54:b0:1e:e6:c8: 34:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:51:AB:5F:3B:BA:B6:CC:55:0B:AC:07:9D:D1:C6:C1:08:ED:DB:7F X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d1:92:6d:12:24:8c:7c:2b:8c:33:07:f3:92:69:2b:fc:e6: a6:77:57:39:53:17:0c:6f:14:2d:08:fa:e2:32:de:0b:a1:1b: ab:80:72:9f:c2:fd:c3:4b:06:a1:80:23:a5:b5:b6:12:88:56: d3:72:1e:e4:0d:1a:1a:df:a5:8e:38:85:62:80:23:d1:f2:d1: 02:ca:10:a0:2f:95:14:3b:40:23:6f:7f:0e:46:6c:b5:22:f4: ca:05:fc:5c:6d:f0:03:a3:60:d8:dd:71:7d:58:1c:d3:18:28: b4:de:c3:73:98:cf:1a:6d:29:1d:cd:1e:0e:71:2a:19:3f:76: 25:35:b8:b5:74:1a:d2:0e:25:16:7e:db:ec:28:85:7e:fd:89: 8b:ea:77:d9:e2:2f:b8:f7:68:df:de:0b:a7:25:45:c8:fd:2d: a1:58:5a:83:d5:2b:6a:d4:7e:75:01:9c:18:ba:8c:9a:a8:10: 1b:67:2f:4c:ba:0e:01:75:3a:36:ab:0e:54:10:14:d9:32:84: 86:b5:c4:be:92:cb:8c:a9:5f:cc:cf:4b:56:39:35:06:08:b1: e1:08:4a:61:90:30:07:ee:21:c0:41:0b:22:08:93:2f:e6:4b: 14:73:12:9f:fd:ec:4d:cf:b3:9b:29:f6:c7:00:62:cc:e4:c5: b2:c9:b6:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjYwNzIzMDMwMTM2WhcNMjYwNzMwMDMwMTM2WjAYMRYwFAYD VQQDEw02YTYxODQxMS1hMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q0es5LjYTEjF5JhH2SkqXIOC9cDo8OIVT6NjpJbmWSMzzhn3XPf5TKfJ/Mc 4A/V3OLjJQysInTGuzsypKGMuGQX21l4Lo4I+odMeahjXnt67aZJKep1yZ376b7E FxseNAOFal06jku1VjqFz5QW/Y7RrIlIRs5/+E4PLK5zH1hlH7A3YnaiBVNxHkwW U+yzSEatLWgx7d8mE91kQZJzt1EQn6KTRRqgg3wDF8wjS9oXGHV1928haHO9GGZg SFWru+Bgzf0iZhANHowsHVwqlq6NvJ+/hGtrS2+fdejWLGwCNE3/Cdw1IP7PYhh2 64sTVgqcefy8Kjr9VLAe5sg0/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtRq187 urbMVQusB53RxsEI7dt/MB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWdGSbRIkjHwrjDMH85JpK/zmpndXOVMXDG8ULQj64jLeC6Ebq4Byn8L9w0sG oYAjpbW2EohW03Ie5A0aGt+ljjiFYoAj0fLRAsoQoC+VFDtAI29/DkZstSL0ygX8 XG3wA6Ng2N1xfVgc0xgotN7Dc5jPGm0pHc0eDnEqGT92JTW4tXQa0g4lFn7b7CiF fv2Ji+p32eIvuPdo394LpyVFyP0toVhag9UratR+dQGcGLqMmqgQG2cvTLoOAXU6 NqsOVBAU2TKEhrXEvpLLjKlfzM9LVjk1Bgix4QhKYZAwB+4hwEELIgiTL+ZLFHMS n/3sTc+zmyn2xwBizOTFssm25g== -----END CERTIFICATE-----Generated at Thu Jul 23 23:05:41 2026 by rpki-client