$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: 845AAM7f4lOgzBwUh7MbOr9/kR2LEIDVF1APnJOSlFI= Subject key identifier: 44:2F:BC:4F:7F:A8:FA:63:7B:24:90:45:5F:AF:DD:9E:AB:47:6E:EA Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: F1 Signing time: Thu 23 Jul 2026 08:08:59 +0000 Manifest this update: Thu 23 Jul 2026 08:08:59 +0000 Manifest next update: Thu 30 Jul 2026 08:08:59 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: wiorUzZkUzH/N7tdXqzcC9EEIOmU+rYbwKSBirujiKE=) 2: 136834E05FA411F189336C2D6447A888.roa (hash: jaSZMPt/7qEgI70+BaRDVpbnOmgZ4JyLB8v5C8xqApk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Jul 23 08:08:59 2026 GMT Not After : Jul 30 08:08:59 2026 GMT Subject: CN=6a61cc1b-1dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:40:33:89:c5:25:f2:f4:6c:0b:37:48:86: 80:35:88:50:70:e1:9c:de:c0:a9:36:f1:e8:a3:06: f3:e4:67:a2:f1:f9:1f:30:a0:f5:f8:de:1f:5f:94: 20:57:bc:22:66:4e:4c:18:e9:48:c6:47:3c:a4:40: d1:f5:7b:c3:e9:31:f5:fb:a5:cd:42:1e:39:ca:84: 12:83:0b:4b:30:78:a2:13:3a:4e:60:11:68:ce:47: 35:f2:32:9a:86:01:77:e8:2c:bf:a1:9d:1a:0e:93: d0:51:45:58:8a:00:ab:df:c7:46:8a:29:95:86:7b: ca:80:73:05:7c:bc:14:61:80:f3:65:ae:2d:68:8b: 2b:fe:06:dc:18:e0:fc:21:36:c8:45:77:ff:65:5e: e3:27:3a:5e:68:f0:01:cc:12:40:8f:16:b8:01:18: 77:bf:c0:0c:98:56:41:e0:a2:9a:78:58:e8:6a:d1: c3:c2:bb:f8:12:e7:a5:73:98:4c:a2:f4:5b:cb:15: 61:9c:0a:f6:3e:60:81:9c:c3:51:31:58:fd:8f:94: 28:a1:56:3b:70:5c:4f:96:0a:7c:77:15:b5:47:a2: 62:2d:65:5a:56:f2:1d:f0:64:3e:16:50:b3:c7:1e: 4b:c8:c8:97:d2:77:8c:b3:0d:d4:ff:f7:63:68:20: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2F:BC:4F:7F:A8:FA:63:7B:24:90:45:5F:AF:DD:9E:AB:47:6E:EA X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4f:d0:c4:ed:8d:bd:04:4c:db:3e:1a:6f:f3:d3:51:3c:6b: ae:a9:5e:54:b3:ea:fd:f3:56:53:c9:11:9d:92:77:80:fa:9c: d8:c6:9f:f2:69:8b:18:65:4c:c1:61:64:6d:27:b1:58:e9:3d: 3f:d0:2f:52:e6:8c:ee:a7:37:3d:97:81:ce:17:57:16:93:7e: e7:15:09:71:6a:aa:d4:72:2b:1e:4a:4f:dd:3a:b1:5d:85:dc: ea:a4:ec:f4:c4:9b:e3:c1:5f:63:bb:29:7c:cf:44:64:1d:f6: 8b:3a:e0:ae:32:6d:c1:49:c4:2d:05:71:18:7d:17:72:a0:09: b6:29:d3:4b:66:8c:24:0e:0e:78:2d:cc:c9:b7:c6:5d:74:9b: 1c:a7:8a:3a:e7:5d:b1:c5:fc:61:de:7b:ed:1a:26:ba:00:ad: ae:a1:c8:a8:0e:43:14:12:00:78:8b:69:05:5f:62:1d:89:1d: 2d:da:c7:8d:d4:8d:ad:05:4d:8a:af:b0:4b:53:3e:a8:d1:2b: c3:47:0c:d2:a2:15:49:e3:48:98:8b:01:4d:da:ce:27:ff:dd: 79:73:25:14:e2:6d:bf:b1:54:b6:19:f8:f2:5b:d0:e2:af:fd: 4a:81:c2:f7:b0:e9:bf:fa:ed:98:7e:c5:3e:9b:de:6a:66:1f: a7:32:f4:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDRDMxMTAvBgNVBAUTKDY5RkU5NzNCN0VFQkVCMEZGODlCMjlCOUNCNUJFQkFC RDBFMzFENkIwHhcNMjYwNzIzMDgwODU5WhcNMjYwNzMwMDgwODU5WjAYMRYwFAYD VQQDEw02YTYxY2MxYi0xZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJVAM4nFJfL0bAs3SIaANYhQcOGc3sCpNvHoowbz5Gei8fkfMKD1+N4fX5Qg V7wiZk5MGOlIxkc8pEDR9XvD6TH1+6XNQh45yoQSgwtLMHiiEzpOYBFozkc18jKa hgF36Cy/oZ0aDpPQUUVYigCr38dGiimVhnvKgHMFfLwUYYDzZa4taIsr/gbcGOD8 ITbIRXf/ZV7jJzpeaPABzBJAjxa4ARh3v8AMmFZB4KKaeFjoatHDwrv4Euelc5hM ovRbyxVhnAr2PmCBnMNRMVj9j5QooVY7cFxPlgp8dxW1R6JiLWVaVvId8GQ+FlCz xx5LyMiX0neMsw3U//djaCAevwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQvvE9/ qPpjeySQRV+v3Z6rR27qMB8GA1UdIwQYMBaAFGn+lzt+6+sP+Jspuctb66vQ4x1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENEMy9GMEE2NUMzRTFC NjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3XzRteW01eTF2cnE5RGpI V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENEMy9GMEE2NUMzRTFCNjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3 XzRteW01eTF2cnE5RGpIV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdU/QxO2NvQRM2z4ab/PTUTxrrqleVLPq/fNWU8kRnZJ3gPqc2Maf8mmLGGVM wWFkbSexWOk9P9AvUuaM7qc3PZeBzhdXFpN+5xUJcWqq1HIrHkpP3TqxXYXc6qTs 9MSb48FfY7spfM9EZB32izrgrjJtwUnELQVxGH0XcqAJtinTS2aMJA4OeC3MybfG XXSbHKeKOuddscX8Yd577RomugCtrqHIqA5DFBIAeItpBV9iHYkdLdrHjdSNrQVN iq+wS1M+qNErw0cM0qIVSeNImIsBTdrOJ//deXMlFOJtv7FUthn48lvQ4q/9SoHC 97Dpv/rtmH7FPpveamYfpzL06w== -----END CERTIFICATE-----Generated at Thu Jul 23 23:02:24 2026 by rpki-client