$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: s21LhgHKpV+p4wqCMMHOSaPEqJmkHCwHF+ICtM41QO0= Subject key identifier: 26:B7:26:F9:60:D1:F7:85:2A:6D:A8:C5:72:F7:0C:C2:83:81:8D:27 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 356D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 3564 Signing time: Wed 22 Jul 2026 14:58:44 +0000 Manifest this update: Wed 22 Jul 2026 14:58:43 +0000 Manifest next update: Wed 29 Jul 2026 14:58:43 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: bL3vNae2+EuKOY5famkXXJTsvEHdStXodQhoFFFho8E=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: k15XvHBFTQxYQednyHDCk4s/WtIgkfY4gwfxlATMUsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13677 (0x356d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Jul 22 14:58:43 2026 GMT Not After : Jul 29 14:58:43 2026 GMT Subject: CN=6a60daa4-40bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:6a:02:2f:c1:05:96:7c:c4:3e:c2:d7:b0: 80:5c:3c:82:bc:78:95:c4:4e:11:a7:77:44:df:60: 92:6b:d9:ae:91:d3:21:67:62:b8:b5:0e:60:c2:50: c4:d5:d5:d3:0a:c4:86:db:0f:03:83:41:8a:3f:e7: 40:f8:a2:20:5c:1f:f2:2b:65:b9:b6:49:7c:78:96: 83:0c:83:30:a4:aa:5d:31:1a:7e:40:c0:4a:44:c9: 87:5c:59:b9:47:5d:4c:61:f0:c4:1a:5b:e6:ba:28: b8:61:36:9a:d5:55:ba:12:d7:cb:e1:3f:b1:dd:63: 41:03:5d:3a:34:15:fb:5c:db:6e:4b:b5:17:f6:61: b2:70:4f:95:37:f4:4e:06:ea:09:ab:fc:7d:89:da: 6d:cd:89:c0:e5:5d:de:3a:8c:9e:76:a4:35:c0:e6: 1b:a8:c2:b9:ef:ad:39:65:ad:8f:9f:4c:cd:66:ef: 3a:57:b3:17:87:66:e1:d1:73:c1:c5:00:c2:64:d5: f0:32:68:a2:84:46:7b:f3:87:a1:c9:82:37:13:af: fd:1b:2e:ae:58:a1:7b:76:97:49:7a:ae:b3:9a:9a: 7e:b2:cf:62:08:1d:6b:89:d9:92:20:18:46:7d:f2: a6:47:e8:d5:2b:9c:6b:86:b8:85:f7:7c:43:47:43: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B7:26:F9:60:D1:F7:85:2A:6D:A8:C5:72:F7:0C:C2:83:81:8D:27 X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:df:02:df:76:a9:aa:50:6d:18:40:c5:9f:0d:5e:51:4e:74: 30:c3:58:99:04:ab:c6:d3:8b:5f:98:f1:52:42:da:20:ce:6b: ac:02:c6:26:4a:24:31:e1:b7:1e:e1:24:2d:0e:b0:3e:d9:8d: cd:4f:e9:c0:c0:cb:b7:86:0a:a3:2d:0b:ef:64:6f:0c:6f:ba: 56:36:b9:3c:55:0b:c7:70:26:19:5d:c0:27:c0:94:a2:ab:6a: be:cb:6a:e0:7b:4b:c6:b8:5f:a8:79:b6:d8:ff:f7:ee:5d:23: 54:16:bc:26:55:c8:ab:9e:f6:6c:41:62:83:5d:f6:e6:11:a5: 6b:f6:98:5b:e2:38:f6:18:80:3b:e9:77:b3:19:4e:eb:60:d3: d1:5e:df:1c:b1:42:23:60:80:d1:63:1f:5b:e5:8f:a1:51:ed: 56:6a:56:93:af:bb:57:5c:54:5e:b3:50:47:9e:14:f9:5d:aa: 1e:6f:32:85:23:5b:2f:6a:34:d6:68:ac:35:7c:af:df:cd:ad: 55:83:a6:2a:ab:5b:34:07:cb:7a:5f:5c:54:73:23:0b:75:51: 98:f2:10:aa:71:da:0c:aa:0c:2b:18:53:b5:a0:26:11:0b:79: b4:dc:7b:d1:7b:8f:4d:14:7a:c5:5f:c6:51:12:03:c1:73:9e: 75:84:12:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjYwNzIyMTQ1ODQzWhcNMjYwNzI5MTQ1ODQzWjAYMRYwFAYD VQQDEw02YTYwZGFhNC00MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIZqAi/BBZZ8xD7C17CAXDyCvHiVxE4Rp3dE32CSa9mukdMhZ2K4tQ5gwlDE 1dXTCsSG2w8Dg0GKP+dA+KIgXB/yK2W5tkl8eJaDDIMwpKpdMRp+QMBKRMmHXFm5 R11MYfDEGlvmuii4YTaa1VW6EtfL4T+x3WNBA106NBX7XNtuS7UX9mGycE+VN/RO BuoJq/x9idptzYnA5V3eOoyedqQ1wOYbqMK57605Za2Pn0zNZu86V7MXh2bh0XPB xQDCZNXwMmiihEZ784ehyYI3E6/9Gy6uWKF7dpdJeq6zmpp+ss9iCB1ridmSIBhG ffKmR+jVK5xrhriF93xDR0OORQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCa3Jvlg 0feFKm2oxXL3DMKDgY0nMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmN8C33apqlBtGEDFnw1eUU50MMNYmQSrxtOLX5jxUkLaIM5rrALGJkokMeG3 HuEkLQ6wPtmNzU/pwMDLt4YKoy0L72RvDG+6Vja5PFULx3AmGV3AJ8CUoqtqvstq 4HtLxrhfqHm22P/37l0jVBa8JlXIq572bEFig1325hGla/aYW+I49hiAO+l3sxlO 62DT0V7fHLFCI2CA0WMfW+WPoVHtVmpWk6+7V1xUXrNQR54U+V2qHm8yhSNbL2o0 1misNXyv382tVYOmKqtbNAfLel9cVHMjC3VRmPIQqnHaDKoMKxhTtaAmEQt5tNx7 0XuPTRR6xV/GURIDwXOedYQSqg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:53:57 2026 by rpki-client