$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft File: CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json) Hash identifier: wfpaEt2924SfL/+1gAXB3+vTLpJyGtH7K+AQy2c0NPI= Subject key identifier: 55:7A:A5:9C:C0:59:F3:28:67:86:A2:06:D1:C5:CD:43:5E:B1:B0:8D Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft Manifest number: FA Signing time: Thu 23 Jul 2026 08:00:32 +0000 Manifest this update: Thu 23 Jul 2026 08:00:32 +0000 Manifest next update: Thu 30 Jul 2026 08:00:32 +0000 Files and hashes: 1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: 5lL7FdbZZJiUvf4PYPObZnJZ9YiI09Y/9XhFMAdUgFU=) 2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: cNFpk4xvE3+xhetFVsHGb9R/5Z63kJbCCHb2RP80z/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Validity Not Before: Jul 23 08:00:32 2026 GMT Not After : Jul 30 08:00:32 2026 GMT Subject: CN=6a61ca20-21e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:2e:db:81:e0:fb:14:cc:5f:e0:eb:c5:bb: c5:22:de:2a:39:04:15:2a:ba:35:ea:e1:02:a0:86: 72:d5:a6:66:22:b5:d6:7a:1e:1a:97:05:8f:e7:94: 38:8f:87:e5:55:5e:87:06:53:64:8a:29:58:7c:9b: 48:a4:a8:c9:7a:41:db:ef:0d:c5:73:76:ef:f0:06: 3d:f1:bc:8e:39:65:38:28:59:af:bb:e6:2d:c7:11: 37:06:f0:c9:f1:c6:1d:f9:2e:86:38:f1:bb:f1:0a: 80:06:87:87:c2:13:ac:11:32:af:f9:57:14:c4:f8: 8b:99:a5:54:6c:dc:5d:05:7f:21:a3:2f:4f:15:40: e4:93:4f:09:bc:51:e5:a9:2b:34:c4:07:74:40:3a: 62:f1:0f:a3:c7:08:1d:eb:f7:a2:97:6c:d7:0c:b8: e9:00:8a:28:c2:8b:ff:3d:c8:5e:ab:17:bf:95:5b: 8a:d9:17:d0:79:47:61:7f:b1:5c:0f:8a:df:28:da: b7:dd:df:f6:79:f9:61:22:ac:18:cc:58:00:7a:fd: f3:66:b3:2f:77:e7:68:15:7f:37:5a:01:44:f1:ab: f3:86:de:19:06:3a:40:77:45:48:dd:ad:84:0f:ed: 66:b2:f5:3c:93:d5:79:c7:74:78:95:c3:0e:5c:21: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7A:A5:9C:C0:59:F3:28:67:86:A2:06:D1:C5:CD:43:5E:B1:B0:8D X509v3 Authority Key Identifier: keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:47:f8:15:9b:1d:3a:b8:bf:d9:47:9c:49:24:92:ba:d2:6b: 84:ad:ba:21:de:1a:ff:d4:64:88:2b:2e:d7:24:2d:eb:43:d9: df:be:cd:e9:df:d1:2e:b4:4c:76:5c:8e:01:33:49:2d:1c:ba: 18:28:5f:13:f4:7a:4b:8c:b8:f1:e2:3d:5a:95:a1:45:7b:b9: 76:28:ea:f2:d2:6d:54:a2:cf:27:2b:a1:ff:5c:ce:34:a2:49: 6c:3e:5b:99:75:a2:73:8f:b3:52:9d:a5:4a:6d:38:34:78:40: 80:08:ba:4c:cd:d8:b7:d6:7f:f4:94:d7:c5:d5:d5:34:a3:0e: 46:9b:d9:2d:5c:2a:49:f1:39:40:87:fa:db:32:80:1d:2a:0b: 16:19:fa:a7:06:e2:67:fc:b1:d6:59:53:a2:e8:a2:51:3c:25: f4:04:29:0c:1d:34:54:19:c1:0e:af:4b:ff:24:11:e6:e2:79: 64:b8:57:7a:fb:97:23:b6:75:b7:9f:9a:f2:f6:27:26:f8:25: a9:80:8c:11:2c:8f:35:ff:b3:dc:15:05:b4:ab:cc:c2:3c:0e: e3:5b:69:0f:37:bb:8c:09:cd:25:aa:dc:ee:d1:cd:7f:35:8a: d2:69:b7:32:20:2b:3e:b4:7e:bd:bb:df:c7:af:1d:55:30:68: e8:d4:17:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFMDkxMTAvBgNVBAUTKDA4QTM5MUM2QjM4OUM4MTBFOTVCQzYxMzlDRUNCMjlE NUQzOTU4QzQwHhcNMjYwNzIzMDgwMDMyWhcNMjYwNzMwMDgwMDMyWjAYMRYwFAYD VQQDEw02YTYxY2EyMC0yMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva4u24Hg+xTMX+DrxbvFIt4qOQQVKro16uECoIZy1aZmIrXWeh4alwWP55Q4 j4flVV6HBlNkiilYfJtIpKjJekHb7w3Fc3bv8AY98byOOWU4KFmvu+YtxxE3BvDJ 8cYd+S6GOPG78QqABoeHwhOsETKv+VcUxPiLmaVUbNxdBX8hoy9PFUDkk08JvFHl qSs0xAd0QDpi8Q+jxwgd6/eil2zXDLjpAIoowov/Pcheqxe/lVuK2RfQeUdhf7Fc D4rfKNq33d/2eflhIqwYzFgAev3zZrMvd+doFX83WgFE8avzht4ZBjpAd0VI3a2E D+1msvU8k9V5x3R4lcMOXCHIowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFV6pZzA WfMoZ4aiBtHFzUNesbCNMB8GA1UdIwQYMBaAFAijkcazicgQ6VvGE5zssp1dOVjE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUUwOS84NzA1NUIzMjA4 QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9DS09SeHJPSnlCRHBXOFlUbk95eW5WMDVX TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NLT1J4ck9KeUJEcFc4WVRuT3l5blYwNVdNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUUwOS84NzA1NUIzMjA4QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9DS09SeHJPSnlC RHBXOFlUbk95eW5WMDVXTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABEf4FZsdOri/2UecSSSSutJrhK26Id4a/9RkiCsu1yQt60PZ377N6d/RLrRM dlyOATNJLRy6GChfE/R6S4y48eI9WpWhRXu5dijq8tJtVKLPJyuh/1zONKJJbD5b mXWic4+zUp2lSm04NHhAgAi6TM3Yt9Z/9JTXxdXVNKMORpvZLVwqSfE5QIf62zKA HSoLFhn6pwbiZ/yx1llTouiiUTwl9AQpDB00VBnBDq9L/yQR5uJ5ZLhXevuXI7Z1 t5+a8vYnJvglqYCMESyPNf+z3BUFtKvMwjwO41tpDze7jAnNJarc7tHNfzWK0mm3 MiArPrR+vbvfx68dVTBo6NQXQg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:00:13 2026 by rpki-client