$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: Y5L8TtrdPenYIU0aGf5HqQ1Wehags6KLd5/CL/RFDZk= Subject key identifier: 6E:FC:CA:A6:EC:AF:8F:C5:1E:D8:D2:37:01:D8:0E:AA:2A:D8:0F:F7 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2E70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2E4B Signing time: Wed 22 Jul 2026 15:33:42 +0000 Manifest this update: Wed 22 Jul 2026 15:33:41 +0000 Manifest next update: Wed 29 Jul 2026 15:33:41 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: wxgc2SWsGqzcOocLw/RaXvQZwboYfj27zn3cl9Swrvc=) 2: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: VFEJ2pC2bmVwEIh9Ul33fbeRMTH5fCAYFl8iU/+lajY=) 3: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: /EIrPIM51/gSZuhZi7PXLaV6H0Mn6QzhbGDSyj34JEc=) 4: F2AE85D6128E11F1BA652BAD3A3D8C67.roa (hash: N17i/Vo6qq4GynkhbHnkWbsIC9qgwD2VSBbjxJt5D3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11888 (0x2e70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Jul 22 15:33:41 2026 GMT Not After : Jul 29 15:33:41 2026 GMT Subject: CN=6a60e2d6-2394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:db:cf:2e:08:3a:0a:6b:61:28:d6:72:d5:73: dc:4f:43:bc:21:58:60:5d:30:55:06:7e:9a:9e:cf: 3f:0b:d4:66:3d:cc:70:9d:18:14:f7:29:bb:2f:52: 93:6c:f9:8f:2d:47:55:8f:28:18:e0:8a:66:19:06: c4:da:20:8b:13:fa:8b:82:ad:fa:31:c8:a0:d7:a3: 09:d2:8d:bc:30:ca:b2:68:cb:a7:b6:51:5d:6f:27: 0e:97:2f:b7:8e:e6:f3:94:fb:01:2f:a1:2c:37:a9: 7a:94:25:c2:af:b1:f3:d4:fc:fe:52:92:a7:13:be: ae:89:6c:fb:7c:42:2a:12:58:94:d7:fd:2e:cf:46: 12:59:df:31:d8:4a:df:22:08:df:aa:6a:fd:3c:6c: 72:d7:da:fe:75:c4:7c:8b:b5:7e:e1:93:ea:33:d4: 56:38:6a:2f:77:ae:0c:7f:7d:be:3d:4c:84:f8:e0: b8:c4:c7:6a:e3:8e:55:c6:7c:d5:20:87:ef:f2:08: bc:fc:b7:67:9b:53:f5:b0:2f:f1:0d:e8:fc:cc:a9: 76:a4:c3:08:11:6d:a7:00:92:8d:ae:fb:d4:67:cf: 67:d1:9d:1c:59:53:7a:80:53:3e:39:77:91:67:fd: 99:e0:c6:fb:21:4c:f0:d2:e1:32:0c:a1:a6:15:e2: a7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FC:CA:A6:EC:AF:8F:C5:1E:D8:D2:37:01:D8:0E:AA:2A:D8:0F:F7 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9f:6f:2c:1d:d9:76:1c:8a:e1:3e:07:cb:d5:4d:27:f1:40: 80:74:99:24:6a:09:11:32:b1:23:9f:4c:a6:3d:fc:28:a5:89: ad:f5:b6:12:97:b2:6d:d2:09:71:bb:25:c3:0e:2c:7e:8d:9a: 8d:96:65:0f:35:96:b9:ee:6a:fc:44:70:e6:69:d2:71:b1:28: 40:5d:40:4d:18:9e:57:7b:fd:75:a3:1e:a1:de:ef:4a:13:60: 76:d3:a8:52:d0:70:7c:d9:0f:72:a0:f9:c1:c1:bc:fd:05:25: 6f:12:00:b1:97:6a:f1:61:5a:e0:43:2d:fc:87:dd:2c:0b:c1: 7c:95:d0:fc:5b:9e:ac:c1:f0:52:2c:99:df:bf:22:01:66:e5: 1b:9b:15:e4:91:7f:3f:2b:eb:bf:96:31:e2:2a:80:a4:1e:a9: 6e:5a:0a:43:5e:e7:7f:f8:4d:29:05:a5:34:41:3b:ad:9d:cd: 75:ca:b1:c7:ab:f6:27:b4:bc:d7:14:f8:b4:d9:76:42:71:2d: 25:65:8b:5d:36:e8:f9:62:ae:30:50:80:4a:e0:42:a3:6e:0a: e0:ee:07:11:d6:c7:80:fe:40:94:2c:fb:c0:58:f9:16:e4:1a: b3:ec:3a:0d:26:93:c6:02:b5:ee:18:16:ad:b6:5d:bb:d3:30: e4:71:bf:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjYwNzIyMTUzMzQxWhcNMjYwNzI5MTUzMzQxWjAYMRYwFAYD VQQDEw02YTYwZTJkNi0yMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dvPLgg6CmthKNZy1XPcT0O8IVhgXTBVBn6ans8/C9RmPcxwnRgU9ym7L1KT bPmPLUdVjygY4IpmGQbE2iCLE/qLgq36Mcig16MJ0o28MMqyaMuntlFdbycOly+3 jubzlPsBL6EsN6l6lCXCr7Hz1Pz+UpKnE76uiWz7fEIqEliU1/0uz0YSWd8x2Erf Igjfqmr9PGxy19r+dcR8i7V+4ZPqM9RWOGovd64Mf32+PUyE+OC4xMdq445VxnzV IIfv8gi8/Ldnm1P1sC/xDej8zKl2pMMIEW2nAJKNrvvUZ89n0Z0cWVN6gFM+OXeR Z/2Z4Mb7IUzw0uEyDKGmFeKnhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG78yqbs r4/FHtjSNwHYDqoq2A/3MB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASp9vLB3ZdhyK4T4Hy9VNJ/FAgHSZJGoJETKxI59Mpj38KKWJrfW2EpeybdIJ cbslww4sfo2ajZZlDzWWue5q/ERw5mnScbEoQF1ATRieV3v9daMeod7vShNgdtOo UtBwfNkPcqD5wcG8/QUlbxIAsZdq8WFa4EMt/IfdLAvBfJXQ/FuerMHwUiyZ378i AWblG5sV5JF/Pyvrv5Yx4iqApB6pbloKQ17nf/hNKQWlNEE7rZ3Ndcqxx6v2J7S8 1xT4tNl2QnEtJWWLXTbo+WKuMFCASuBCo24K4O4HEdbHgP5AlCz7wFj5FuQas+w6 DSaTxgK17hgWrbZdu9Mw5HG/Hw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:45:24 2026 by rpki-client