$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json) Hash identifier: FcYcLcpRrsaYGFCgTI46oCybWJcxqzm0CPnY7wUgLOg= Subject key identifier: 32:2A:73:A7:D8:7C:3D:BB:59:D5:A4:76:C8:59:44:4B:65:1D:FA:D0 Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft Manifest number: 0134 Signing time: Thu 23 Jul 2026 07:13:20 +0000 Manifest this update: Thu 23 Jul 2026 07:13:19 +0000 Manifest next update: Thu 30 Jul 2026 07:13:19 +0000 Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: 3PbgO4F+q8vmoLox8MjLCpuyYHTlqtZu/goaHyLgrkc=) 2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919 Validity Not Before: Jul 23 07:13:19 2026 GMT Not After : Jul 30 07:13:19 2026 GMT Subject: CN=6a61bf10-d67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:2f:69:70:20:9e:7f:7c:74:21:c5:d5:bb: 2d:40:9b:63:72:b3:74:91:55:49:0e:cf:41:c7:71: 82:75:36:5d:68:5f:62:e1:f4:09:70:54:7f:8f:6e: eb:7b:8c:72:9e:45:9f:2d:1a:b6:81:95:2b:5c:89: db:b3:50:61:96:ab:bb:83:90:31:0c:f7:34:e6:2f: 55:5d:c5:61:81:9e:38:89:83:e7:7d:c5:84:59:2c: d5:55:23:7f:6c:5b:ac:6b:c2:71:02:ba:ca:3e:34: ce:58:d9:96:c4:2a:80:f0:47:6f:4f:3b:82:ed:91: 9a:5d:ae:41:37:e1:74:5a:a6:c8:dc:5b:1d:d7:8c: a2:ec:45:96:d3:f0:94:5e:32:60:4d:6a:3d:65:c0: 94:75:00:71:99:8e:79:1d:1f:20:2f:13:fa:30:98: aa:7b:c8:29:6c:c9:1c:1e:fc:0d:b0:84:38:a1:97: ae:05:c6:fc:17:63:68:79:d5:39:3c:8f:f4:1b:95: 6c:f9:fa:57:80:01:22:74:e4:5d:e8:2f:6c:6b:04: 74:17:02:68:3f:7d:df:f5:eb:58:e8:ca:1c:a9:c7: e3:46:e7:0a:64:14:09:81:a6:92:9f:8e:cf:b3:fe: 1b:30:b8:52:49:50:cc:46:6e:9b:ba:5a:f2:29:b5: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2A:73:A7:D8:7C:3D:BB:59:D5:A4:76:C8:59:44:4B:65:1D:FA:D0 X509v3 Authority Key Identifier: keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:51:94:2b:0c:3d:d4:db:f8:0f:e4:76:60:cc:72:b4:ef:8a: 61:5f:db:fc:df:91:a8:79:fe:26:9d:13:df:89:f2:2a:1f:4b: 9f:a8:b9:9a:c7:af:45:dd:3c:dd:9a:a2:10:d9:e1:da:36:7b: 3c:53:df:b2:db:9d:07:e6:fc:78:60:dd:00:5f:97:89:c9:7f: 86:3b:d9:7f:a1:45:24:2f:d0:e0:8c:10:24:56:aa:09:c2:07: c1:6c:e8:f5:ff:ea:10:5f:54:51:4a:a5:42:dd:e4:40:8d:b9: be:67:87:9e:c6:07:4c:ab:57:a5:5d:09:30:3a:8e:58:7b:6b: eb:a5:27:3b:d8:dc:b3:ef:98:d5:71:71:d7:b8:57:e3:86:a9: 39:c4:ce:be:7d:7d:71:0b:96:39:05:a8:3c:63:fe:4e:67:d0: 40:0a:95:8a:db:85:4b:c6:b7:03:30:22:9b:80:e9:50:e4:07: 42:ae:61:74:fd:84:f3:da:e6:58:77:50:da:0e:df:6d:9d:e1: cc:a2:41:96:ac:9a:af:2e:8d:76:49:8d:61:e3:4e:f3:da:a4: 89:51:8e:69:42:40:42:89:a6:c0:86:82:3d:0b:3b:11:df:ac: 97:5c:5d:ff:e0:4b:2c:ed:90:25:e4:17:c5:62:c9:ef:99:be: 9e:88:83:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEI0RDIxNzkzOUEyNzUxOTM4RTA3NjU5QTc5NDg4NUE5 Qzg4NDE5MTkwHhcNMjYwNzIzMDcxMzE5WhcNMjYwNzMwMDcxMzE5WjAYMRYwFAYD VQQDEw02YTYxYmYxMC1kNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt10vaXAgnn98dCHF1bstQJtjcrN0kVVJDs9Bx3GCdTZdaF9i4fQJcFR/j27r e4xynkWfLRq2gZUrXInbs1Bhlqu7g5AxDPc05i9VXcVhgZ44iYPnfcWEWSzVVSN/ bFusa8JxArrKPjTOWNmWxCqA8EdvTzuC7ZGaXa5BN+F0WqbI3Fsd14yi7EWW0/CU XjJgTWo9ZcCUdQBxmY55HR8gLxP6MJiqe8gpbMkcHvwNsIQ4oZeuBcb8F2NoedU5 PI/0G5Vs+fpXgAEidORd6C9sawR0FwJoP33f9etY6MocqcfjRucKZBQJgaaSn47P s/4bMLhSSVDMRm6bulryKbUdGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIqc6fY fD27WdWkdshZREtlHfrQMB8GA1UdIwQYMBaAFLTSF5OaJ1GTjgdlmnlIhanIhBkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy81MEJEMjMwRUIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVaT09CMldhZVVpRnFjaUVH UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy81MEJEMjMwRUIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVa T09CMldhZVVpRnFjaUVHUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuFGUKww91Nv4D+R2YMxytO+KYV/b/N+RqHn+Jp0T34nyKh9Ln6i5msevRd08 3ZqiENnh2jZ7PFPfstudB+b8eGDdAF+Xicl/hjvZf6FFJC/Q4IwQJFaqCcIHwWzo 9f/qEF9UUUqlQt3kQI25vmeHnsYHTKtXpV0JMDqOWHtr66UnO9jcs++Y1XFx17hX 44apOcTOvn19cQuWOQWoPGP+TmfQQAqVituFS8a3AzAim4DpUOQHQq5hdP2E89rm WHdQ2g7fbZ3hzKJBlqyary6NdkmNYeNO89qkiVGOaUJAQommwIaCPQs7Ed+sl1xd /+BLLO2QJeQXxWLJ75m+noiDBQ== -----END CERTIFICATE-----Generated at Fri Jul 24 22:15:02 2026 by rpki-client