$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft File: JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json) Hash identifier: rezrM7juYyiDGH6PkbbItqMz7ULIr+dXhHHH3C98NNY= Subject key identifier: 7F:48:B9:6A:28:95:32:11:17:D7:31:76:AE:7A:C3:0E:14:C1:96:4E Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Certificate serial: 2AB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft Manifest number: 2AA5 Signing time: Wed 22 Jul 2026 15:38:52 +0000 Manifest this update: Wed 22 Jul 2026 15:38:52 +0000 Manifest next update: Wed 29 Jul 2026 15:38:52 +0000 Files and hashes: 1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: lD4IRBonGd+3Xy9jAFVZsPfQ9g45q56C5xDWngdQfaU=) 2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: hriHnwahZFQ690sRLwz6iRs8F4NGV9dzWdCEbvzLxNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10929 (0x2ab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A39, serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Validity Not Before: Jul 22 15:38:52 2026 GMT Not After : Jul 29 15:38:52 2026 GMT Subject: CN=6a60e40c-b1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:84:e3:ce:cf:6e:60:11:6a:37:b1:90:69: 0b:97:51:93:ea:1b:18:a9:5b:cb:40:e6:1d:48:4f: b4:df:ef:c0:7a:2c:3d:b4:9d:f2:4c:d6:eb:5c:02: 55:d1:92:c9:f2:78:c4:7d:a7:d4:c5:92:e3:b5:af: 03:92:65:5c:81:6c:3f:db:8c:8c:39:f6:f3:46:6a: 91:04:2f:01:e7:82:fe:ce:a8:6d:7f:a0:82:37:47: 8f:e9:2d:d8:66:73:2f:e6:b4:fe:30:de:b7:32:c1: 71:f0:d8:39:da:18:e0:c5:65:da:d0:8e:e8:80:f4: b0:7f:b0:25:65:78:09:f5:c5:3e:ee:4e:b2:1d:46: 06:3e:dc:cd:6f:70:9f:1a:5b:35:6c:ab:21:ca:b2: 00:8d:9b:61:f5:6a:41:4b:4d:6e:6f:97:ec:27:9d: d0:01:1f:bf:c9:a2:72:9f:bb:4c:a9:bc:41:27:6f: 99:7c:52:75:1e:fe:b8:29:2e:07:5c:93:30:a9:af: ea:56:e8:9e:32:b8:dc:e7:f1:3a:8b:c3:3d:38:65: 26:b8:e8:b3:ab:1b:0a:9a:01:60:12:86:5e:01:72: 14:cf:e2:67:da:f9:e5:ad:eb:5c:cc:bc:b7:55:96: 56:e6:b7:30:f2:2d:5e:68:b7:5a:de:cb:c5:db:3e: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:48:B9:6A:28:95:32:11:17:D7:31:76:AE:7A:C3:0E:14:C1:96:4E X509v3 Authority Key Identifier: keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a4:67:f5:d3:08:82:08:ce:aa:5b:3d:33:96:34:7c:0c:29: 0f:8a:bd:68:8f:13:17:d8:79:d1:b7:f2:69:1f:5f:9f:74:f2: 57:9f:0e:2c:51:97:ad:9a:20:e1:ac:ec:f1:c7:39:e8:55:1c: 1d:eb:19:36:51:4e:20:88:6e:a8:80:51:fb:2a:48:65:b6:49: 75:28:ab:0b:0f:c5:d7:e2:1b:74:42:19:44:eb:26:1e:92:59: f6:73:f6:5e:60:b7:36:53:bc:86:5f:5a:dd:25:cb:06:fc:97: 61:12:d0:e8:d7:cd:08:5c:d2:d7:3f:14:97:63:53:99:10:4d: 0b:c7:56:51:6d:e0:44:61:c0:7c:e9:cf:b2:14:62:8f:b8:0d: f6:0a:57:40:0b:20:da:33:ac:61:16:01:06:72:74:0e:2f:93: f7:d9:fe:10:f7:56:eb:37:e3:13:6f:db:66:74:68:90:f4:49: ae:9c:63:6a:e1:b5:63:9e:f2:5f:a1:63:f0:87:1a:61:44:47: 9f:29:6e:b6:c7:38:21:27:75:6d:62:3d:a6:55:8b:51:9e:d4: 22:b3:61:aa:49:56:3f:e9:80:b4:9e:89:78:01:7d:47:6b:f0: b1:5f:8d:c5:86:fe:d2:e1:32:85:21:13:28:64:9a:1a:c0:0a: 2c:14:2d:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMzkxMTAvBgNVBAUTKDI3MzJBOTlBODYzQkQ2MjAzQ0Q5MTVDRDcyNTdCNUQx RDk4N0VCMjgwHhcNMjYwNzIyMTUzODUyWhcNMjYwNzI5MTUzODUyWjAYMRYwFAYD VQQDEw02YTYwZTQwYy1iMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvCE487PbmARajexkGkLl1GT6hsYqVvLQOYdSE+03+/Aeiw9tJ3yTNbrXAJV 0ZLJ8njEfafUxZLjta8DkmVcgWw/24yMOfbzRmqRBC8B54L+zqhtf6CCN0eP6S3Y ZnMv5rT+MN63MsFx8Ng52hjgxWXa0I7ogPSwf7AlZXgJ9cU+7k6yHUYGPtzNb3Cf Gls1bKshyrIAjZth9WpBS01ub5fsJ53QAR+/yaJyn7tMqbxBJ2+ZfFJ1Hv64KS4H XJMwqa/qVuieMrjc5/E6i8M9OGUmuOizqxsKmgFgEoZeAXIUz+Jn2vnlretczLy3 VZZW5rcw8i1eaLda3svF2z5MRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9IuWoo lTIRF9cxdq56ww4UwZZOMB8GA1UdIwQYMBaAFCcyqZqGO9YgPNkVzXJXtdHZh+so MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEzOS9BNjU5NDlCMjNC QzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFpQTgyUlhOY2xlMTBkbUg2 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6S3Btb1k3MWlBODJSWE5jbGUxMGRtSDZ5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkEzOS9BNjU5NDlCMjNCQzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFp QTgyUlhOY2xlMTBkbUg2eWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG6Rn9dMIggjOqls9M5Y0fAwpD4q9aI8TF9h50bfyaR9fn3TyV58OLFGXrZog 4azs8cc56FUcHesZNlFOIIhuqIBR+ypIZbZJdSirCw/F1+IbdEIZROsmHpJZ9nP2 XmC3NlO8hl9a3SXLBvyXYRLQ6NfNCFzS1z8Ul2NTmRBNC8dWUW3gRGHAfOnPshRi j7gN9gpXQAsg2jOsYRYBBnJ0Di+T99n+EPdW6zfjE2/bZnRokPRJrpxjauG1Y57y X6Fj8IcaYURHnylutsc4ISd1bWI9plWLUZ7UIrNhqklWP+mAtJ6JeAF9R2vwsV+N xYb+0uEyhSETKGSaGsAKLBQtZQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:10:50 2026 by rpki-client