$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: mztwDW/lt2uNe3eqXcMv+nNY07MDV0I4q/NpNsfWZPI= Subject key identifier: 81:DB:EE:61:07:72:4B:CA:7F:FB:BC:26:4B:D2:19:82:D2:4D:14:5F Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: 0148 Signing time: Thu 23 Jul 2026 06:55:01 +0000 Manifest this update: Thu 23 Jul 2026 06:55:00 +0000 Manifest next update: Thu 30 Jul 2026 06:55:00 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: wiFSdOQdjK7NWldQlscuRRNcz6fSCdwf5iKyT7a8TOI=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: VhIuGtFPo2Cv8cAGYxGtYUO/7hhyF5U43Aacg6GF4jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Jul 23 06:55:00 2026 GMT Not After : Jul 30 06:55:00 2026 GMT Subject: CN=6a61bac5-ac59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:15:48:17:49:a3:8e:a2:a2:0b:dd:e8:35: ed:56:ad:b9:07:57:73:af:42:9a:cf:94:75:3d:70: c6:db:d1:a8:02:30:04:fa:7f:dc:b7:34:37:0c:34: 74:cf:96:0d:a4:4d:6c:ef:dc:8d:27:1a:ce:d9:4d: 75:b3:f9:34:d8:24:5c:7c:6f:64:52:b9:3b:fd:57: 6c:31:1d:68:00:a1:72:78:9f:ad:29:e5:23:85:93: 93:e9:e9:10:78:3e:0a:98:15:d4:2b:be:de:e9:b9: dc:bf:ee:d3:2d:0d:d9:d5:3e:1e:25:e5:3a:c8:e3: b4:74:ee:4d:4c:23:8f:65:10:ef:07:2d:94:ab:59: 19:3a:33:a2:71:83:50:e4:7d:8f:d1:de:15:3d:9c: 27:59:e1:67:a4:f5:9d:84:3e:d4:44:83:71:11:f3: 1e:39:94:11:9f:2e:1d:0c:ba:11:83:4d:bc:70:d2: a5:4f:c0:d5:a6:9c:4f:19:76:db:45:2f:7b:da:f6: 5b:99:e7:71:24:6a:7c:41:a6:68:ca:f8:fe:80:a7: 2f:58:6f:15:c1:d8:9a:9b:c8:a1:81:f7:c8:59:c7: 95:de:2e:b0:c2:8a:52:d8:91:8a:c4:66:6b:42:07: 74:de:65:69:78:ed:e5:da:5c:26:59:c3:2d:34:b2: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DB:EE:61:07:72:4B:CA:7F:FB:BC:26:4B:D2:19:82:D2:4D:14:5F X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:30:0f:ce:e4:f2:0d:43:92:d3:3a:81:52:1e:fd:9f:76:ae: fd:d2:c6:f5:bc:93:48:cd:10:d2:f6:70:76:a3:7f:07:e5:71: b0:0c:d7:d3:8c:cf:6b:a8:1f:1f:25:a9:d3:88:99:7c:9d:a6: fe:39:e4:ab:85:c0:60:b0:16:0a:12:3b:4d:e9:87:63:2f:b1: 46:a4:d9:76:16:66:fa:ca:ba:f7:a5:7a:66:ca:6e:c0:17:d7: 8b:e3:0f:6e:92:d1:b4:22:8a:e7:19:41:8d:89:c5:47:5a:ab: a1:a8:2b:06:94:b3:a3:dd:6e:98:24:80:21:5b:a4:89:09:80: 92:57:d8:11:84:33:0b:4f:a3:b9:bf:a0:62:42:63:96:96:c8: a8:a2:13:9f:08:af:ea:dd:cf:93:04:b8:cb:20:9f:e1:7c:b4: 3f:0c:0c:3f:75:cf:99:68:7d:7c:bd:a6:ae:ef:3f:ce:07:c5: 90:78:ba:c4:3f:34:d1:79:14:0a:b7:16:09:f1:04:c6:d7:c3: 41:54:c8:f1:fa:3c:55:19:44:1c:bc:a9:7c:67:ad:51:1b:d2: e1:7a:a8:36:33:99:a6:42:cd:25:32:13:e1:41:d1:c8:72:75: 5b:c3:9b:82:2a:29:af:b0:09:48:8b:9b:28:eb:52:4c:17:4c: 95:a1:03:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4 MkMyRUQ0ODgwHhcNMjYwNzIzMDY1NTAwWhcNMjYwNzMwMDY1NTAwWjAYMRYwFAYD VQQDEw02YTYxYmFjNS1hYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllEVSBdJo46iogvd6DXtVq25B1dzr0Kaz5R1PXDG29GoAjAE+n/ctzQ3DDR0 z5YNpE1s79yNJxrO2U11s/k02CRcfG9kUrk7/VdsMR1oAKFyeJ+tKeUjhZOT6ekQ eD4KmBXUK77e6bncv+7TLQ3Z1T4eJeU6yOO0dO5NTCOPZRDvBy2Uq1kZOjOicYNQ 5H2P0d4VPZwnWeFnpPWdhD7URINxEfMeOZQRny4dDLoRg028cNKlT8DVppxPGXbb RS972vZbmedxJGp8QaZoyvj+gKcvWG8Vwdiam8ihgffIWceV3i6wwopS2JGKxGZr Qgd03mVpeO3l2lwmWcMtNLJeqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHb7mEH ckvKf/u8JkvSGYLSTRRfMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1 eWNtTmlZRmh4elNDd3UxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQjAPzuTyDUOS0zqBUh79n3au/dLG9byTSM0Q0vZwdqN/B+VxsAzX04zPa6gf HyWp04iZfJ2m/jnkq4XAYLAWChI7TemHYy+xRqTZdhZm+sq696V6ZspuwBfXi+MP bpLRtCKK5xlBjYnFR1qroagrBpSzo91umCSAIVukiQmAklfYEYQzC0+jub+gYkJj lpbIqKITnwiv6t3PkwS4yyCf4Xy0PwwMP3XPmWh9fL2mru8/zgfFkHi6xD800XkU CrcWCfEExtfDQVTI8fo8VRlEHLypfGetURvS4XqoNjOZpkLNJTIT4UHRyHJ1W8Ob giopr7AJSIubKOtSTBdMlaEDuw== -----END CERTIFICATE-----Generated at Fri Jul 24 06:05:58 2026 by rpki-client