$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: OZDVTHj6btskgiy7UIs2fYQ8RUFwFL5NSoDLRtw9pkU= Subject key identifier: 56:85:C1:3B:BD:5A:21:D7:01:CF:47:D8:22:F2:F1:6D:9B:B2:75:ED Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: 022B Signing time: Thu 23 Jul 2026 04:01:50 +0000 Manifest this update: Thu 23 Jul 2026 04:01:49 +0000 Manifest next update: Thu 30 Jul 2026 04:01:49 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: 8sZb+2Nq6bgIxox+RDRyTg12dQ3XbPS4ckEIbXJqOUg=) 2: F451A8D61D3411F188270AE1183D8C67.roa (hash: HhAPddYZebVgFTklVhrNnb9AwfNFYy5EHwSBa4LUjG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: Jul 23 04:01:49 2026 GMT Not After : Jul 30 04:01:49 2026 GMT Subject: CN=6a61922d-60d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:ad:9c:10:bd:0d:44:c3:05:bb:8c:bc:7a: 9d:bd:81:15:3e:44:d3:dc:aa:ec:29:89:bc:80:07: e4:b7:e3:15:c2:10:76:16:96:83:32:a7:72:a4:3c: 64:a2:1c:66:7b:e1:2e:8c:53:f0:c8:f8:e5:32:3f: a5:04:ea:51:11:09:d3:1c:71:ac:dd:f4:eb:a2:f3: c6:b5:ed:33:81:a1:71:75:b0:5b:6b:4c:26:4c:b6: 25:09:04:8b:1c:82:66:dc:29:71:a6:20:09:7b:b1: bd:a9:3e:ab:7b:17:d5:5e:d6:89:81:51:1b:83:9e: 5e:80:77:97:da:ec:36:fd:42:d7:0f:0f:09:24:ec: 6a:f8:99:01:79:b9:60:4f:75:5e:ea:c0:07:b1:43: 05:b3:62:18:0d:f4:1d:ee:d9:01:32:19:b7:35:89: 8c:f2:79:a1:89:02:73:c0:82:35:ee:24:86:81:a4: 84:89:c2:ee:19:4a:c3:3c:2b:d1:ca:9b:e3:99:a2: df:a1:b9:8b:f3:59:67:16:a0:1a:9f:e0:ee:4c:39: b8:56:3c:5d:80:6e:a0:f3:d0:d3:1a:c1:bf:5a:7c: d9:3c:27:e0:ef:70:0a:eb:77:d4:29:be:10:da:01: 83:2a:63:ad:16:14:fd:2e:5a:06:ca:48:d7:91:63: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:85:C1:3B:BD:5A:21:D7:01:CF:47:D8:22:F2:F1:6D:9B:B2:75:ED X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:31:c0:eb:46:a9:0b:b5:e3:d8:04:bb:5d:1f:7a:22:3c:89: 2c:b8:26:96:c4:cf:ae:10:21:09:16:d1:8b:7b:5b:e6:64:45: 8a:4d:a7:46:39:86:73:2e:bd:d8:0c:47:ca:f4:68:ac:46:6e: eb:7b:ed:18:79:ef:c8:09:22:62:c2:56:e3:d8:65:94:ad:a3: 14:d1:b0:69:d1:f1:0e:0c:48:2e:aa:61:5a:3a:ef:bb:9f:35: d5:cc:df:c1:dc:85:7e:a1:35:d7:0f:ad:19:5f:65:5e:d8:a5: 38:db:a2:0d:94:cc:de:e4:30:9a:a4:f3:68:28:dd:1d:11:32: ea:25:8a:22:c2:27:b4:34:74:39:3d:ce:03:45:d0:1c:36:7c: 7b:0f:47:cc:d6:12:2a:5f:9f:59:e0:61:15:0b:bd:8b:cd:b9: ec:e8:71:c0:0b:8d:f5:35:04:5e:de:68:3c:2d:7d:e0:0a:f2: b6:aa:bd:ef:5d:dd:eb:ec:06:6d:a8:db:12:ca:6c:f0:48:59: 17:d4:1f:3a:8c:47:ba:4f:f7:a7:07:82:1a:8f:97:d1:a2:fb: e5:2c:71:42:f9:fe:cc:62:46:59:a0:53:53:0f:e4:34:a3:13: bd:2b:c1:bf:e8:f5:33:36:11:63:ed:b5:50:d3:cd:2a:6d:2d: 40:84:4c:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjYwNzIzMDQwMTQ5WhcNMjYwNzMwMDQwMTQ5WjAYMRYwFAYD VQQDEw02YTYxOTIyZC02MGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07OtnBC9DUTDBbuMvHqdvYEVPkTT3KrsKYm8gAfkt+MVwhB2FpaDMqdypDxk ohxme+EujFPwyPjlMj+lBOpREQnTHHGs3fTrovPGte0zgaFxdbBba0wmTLYlCQSL HIJm3ClxpiAJe7G9qT6rexfVXtaJgVEbg55egHeX2uw2/ULXDw8JJOxq+JkBeblg T3Ve6sAHsUMFs2IYDfQd7tkBMhm3NYmM8nmhiQJzwII17iSGgaSEicLuGUrDPCvR ypvjmaLfobmL81lnFqAan+DuTDm4VjxdgG6g89DTGsG/WnzZPCfg73AK63fUKb4Q 2gGDKmOtFhT9LloGykjXkWPf4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFaFwTu9 WiHXAc9H2CLy8W2bsnXtMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgTHA60apC7Xj2AS7XR96IjyJLLgmlsTPrhAhCRbRi3tb5mRFik2nRjmGcy69 2AxHyvRorEZu63vtGHnvyAkiYsJW49hllK2jFNGwadHxDgxILqphWjrvu5811czf wdyFfqE11w+tGV9lXtilONuiDZTM3uQwmqTzaCjdHREy6iWKIsIntDR0OT3OA0XQ HDZ8ew9HzNYSKl+fWeBhFQu9i8257OhxwAuN9TUEXt5oPC194Arytqq9713d6+wG bajbEsps8EhZF9QfOoxHuk/3pweCGo+X0aL75SxxQvn+zGJGWaBTUw/kNKMTvSvB v+j1MzYRY+21UNPNKm0tQIRMMQ== -----END CERTIFICATE-----Generated at Fri Jul 24 02:44:44 2026 by rpki-client