$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: XF66/6Qj4wu1Xk3lDW9yUdhu8sOsEdiIEoBZqVWSuaM= Subject key identifier: 91:E5:88:88:7B:0B:08:74:DD:BE:9F:65:94:20:9B:54:E2:54:D4:7D Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 35FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 35AE Signing time: Wed 22 Jul 2026 14:47:39 +0000 Manifest this update: Wed 22 Jul 2026 14:47:39 +0000 Manifest next update: Wed 29 Jul 2026 14:47:39 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: VReq8gamONsLhevpedr0ZBEz8RHpTJBsQtGmKm0Jb7w=) 2: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: illzYtOOz5MQq5nwysx6uFDldWy19sy215+YxcopclA=) 3: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: 4UkZmGMtMgidHUh2uNVdZrHG6v8E7JRiip06TQCEA/o=) 4: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: reaXyWDA2ljuxsntm0i6DnDHoaBzJzPoCC4N+GYDna4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13821 (0x35fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Jul 22 14:47:39 2026 GMT Not After : Jul 29 14:47:39 2026 GMT Subject: CN=6a60d80b-bdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:ed:38:76:15:ea:91:39:f7:12:61:2b:b8:e4: 90:2b:8d:35:f5:38:4d:d9:ed:99:b9:0c:ca:e1:57: 69:45:6e:25:9f:01:82:95:4e:e9:51:b7:c7:d5:d7: 77:cf:e8:78:7e:cc:dd:4d:8d:86:e4:05:10:da:c8: c6:29:df:cf:b4:5a:ce:f5:cd:85:6f:5d:54:cd:0e: e8:0a:32:84:f4:34:84:06:c8:7a:b1:b6:eb:29:79: f7:f4:18:f2:ec:21:01:03:49:4f:f2:9f:9b:6a:9d: f0:af:cf:c1:27:29:d6:90:71:f4:94:fa:8b:5c:09: 95:70:2a:2b:26:72:ab:6a:a0:82:42:38:85:ab:12: 79:78:e9:b4:7b:28:03:8b:c5:5b:6a:75:cb:4c:f4: ed:26:10:6d:df:87:7b:4d:8f:46:a9:30:82:89:22: 85:99:0c:38:d7:eb:2a:09:69:7a:f0:29:45:9a:15: 16:f5:fc:76:73:cf:00:05:d4:15:7d:92:e5:d4:e4: 04:ed:66:af:e3:8c:22:0d:07:0a:1b:71:95:29:fe: 08:19:85:20:a6:b9:75:c0:31:50:ad:aa:b2:92:67: d7:5e:6b:e0:3a:db:0b:d6:31:9c:0e:62:84:a7:02: b2:5d:ca:b6:e1:e3:82:28:a3:dc:a2:83:24:19:2c: 6d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E5:88:88:7B:0B:08:74:DD:BE:9F:65:94:20:9B:54:E2:54:D4:7D X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:13:08:d1:7e:57:cc:3f:92:2e:aa:75:22:de:00:6e:63:b1: c6:3f:8d:30:77:f8:7a:c9:91:de:dc:05:bc:0f:0d:ce:84:6f: 7e:b0:ee:05:80:e2:53:df:47:bd:62:d7:91:cf:b2:60:2f:90: f1:06:10:8f:20:3b:a3:6b:af:30:df:2b:27:48:ef:51:13:81: bf:d9:8e:39:aa:1b:0e:ca:8c:11:9e:2b:ba:e4:a8:88:d2:f2: 3e:23:d4:61:c6:63:50:dd:96:ac:4f:2f:51:e6:4f:54:7e:3a: 71:b5:7a:7d:ca:74:2b:97:9d:7b:a0:11:57:2c:20:78:6e:c5: f1:d7:40:4b:a9:37:81:97:3a:44:64:3b:a4:c3:b1:51:4d:ac: 50:96:ad:cb:6f:d0:d3:13:7d:6a:fc:5a:7e:51:f5:c5:93:ba: 87:80:b5:a7:4f:62:d3:fc:41:8b:2a:80:7f:a6:e2:2c:0f:f3: 0b:8f:25:c5:f1:36:79:f2:72:2b:f7:25:a8:64:e1:cb:0d:04: 3b:74:ed:d7:c5:44:f2:4e:e3:7f:90:97:29:58:cc:01:1c:6f: 11:b0:e1:d3:e8:92:fc:a6:0a:5e:d7:9d:e5:a7:80:a6:fb:38: c6:65:d3:ef:be:53:58:22:24:ff:13:30:82:8e:48:48:07:7d: 7f:52:a0:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjYwNzIyMTQ0NzM5WhcNMjYwNzI5MTQ0NzM5WjAYMRYwFAYD VQQDEw02YTYwZDgwYi1iZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/e04dhXqkTn3EmEruOSQK4019ThN2e2ZuQzK4VdpRW4lnwGClU7pUbfH1dd3 z+h4fszdTY2G5AUQ2sjGKd/PtFrO9c2Fb11UzQ7oCjKE9DSEBsh6sbbrKXn39Bjy 7CEBA0lP8p+bap3wr8/BJynWkHH0lPqLXAmVcCorJnKraqCCQjiFqxJ5eOm0eygD i8VbanXLTPTtJhBt34d7TY9GqTCCiSKFmQw41+sqCWl68ClFmhUW9fx2c88ABdQV fZLl1OQE7Wav44wiDQcKG3GVKf4IGYUgprl1wDFQraqykmfXXmvgOtsL1jGcDmKE pwKyXcq24eOCKKPcooMkGSxt9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHliIh7 Cwh03b6fZZQgm1TiVNR9MB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQRMI0X5XzD+SLqp1It4AbmOxxj+NMHf4esmR3twFvA8NzoRvfrDuBYDiU99H vWLXkc+yYC+Q8QYQjyA7o2uvMN8rJ0jvUROBv9mOOaobDsqMEZ4ruuSoiNLyPiPU YcZjUN2WrE8vUeZPVH46cbV6fcp0K5ede6ARVywgeG7F8ddAS6k3gZc6RGQ7pMOx UU2sUJaty2/Q0xN9avxaflH1xZO6h4C1p09i0/xBiyqAf6biLA/zC48lxfE2efJy K/clqGThyw0EO3Tt18VE8k7jf5CXKVjMARxvEbDh0+iS/KYKXted5aeApvs4xmXT 775TWCIk/xMwgo5ISAd9f1Kgng== -----END CERTIFICATE-----Generated at Fri Jul 24 05:54:04 2026 by rpki-client