$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: UdtlEleskcYoUeZPZMOhC9BpYX/W9SB6tQbWWLhI5o0= Subject key identifier: 3A:25:DC:6B:28:70:43:91:C6:A9:1C:96:1B:99:90:E3:3A:34:E3:66 Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 0234 Signing time: Thu 23 Jul 2026 03:49:14 +0000 Manifest this update: Thu 23 Jul 2026 03:49:14 +0000 Manifest next update: Thu 30 Jul 2026 03:49:14 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: Gruc5OQ/reQbioy8ffYzJdp09w8KvLuGnPQHIzjvJOE=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: CnQdXrVdbfHUOklxI7z70j5KZwSvtEik5podERJ5fAs=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: 4+MCHLMN337B5RTZTokxnplPrkpGKjeWgwbYWmw0fsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Jul 23 03:49:14 2026 GMT Not After : Jul 30 03:49:14 2026 GMT Subject: CN=6a618f3a-58d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:eb:fc:f0:73:0b:71:47:41:cb:aa:0e:ed: 9a:2a:50:8a:b6:32:64:c6:f5:aa:1b:5b:e5:32:7c: 20:2f:f4:f7:69:e8:63:5d:83:24:e5:47:cf:7a:3e: 06:e6:cf:c0:d1:ad:4f:be:28:b3:19:ac:56:d2:1d: 0d:7a:3f:17:fc:29:ed:d6:f2:9a:e3:57:81:9e:ce: f5:d3:4a:c0:12:15:43:4c:69:b3:2b:7f:47:f1:f4: c0:24:d4:ce:e1:ec:41:9e:7c:a2:54:6c:8d:2f:57: c9:74:6e:0f:37:50:90:24:ca:fb:e3:f5:60:55:14: 41:64:51:e1:a8:fa:e0:c3:02:89:0e:d1:71:61:8a: a8:0e:f7:29:ac:ef:17:99:1a:2e:0f:d7:5c:eb:70: 7e:63:2e:bb:35:0b:3e:45:39:ef:86:bf:3d:63:77: 32:9f:d8:1e:6f:78:df:91:fa:2d:c0:66:b5:2a:e5: d3:fa:a1:5f:fb:ec:06:4a:e5:c1:98:41:b0:a7:32: 6a:55:88:9d:b7:99:58:52:d5:96:c5:c7:f7:13:42: 74:9e:9a:37:0a:27:7f:f4:83:61:87:ca:7a:30:83: 33:d1:76:b7:5a:ee:5d:f2:17:81:2d:35:db:64:ea: 16:50:ef:df:28:f1:99:2b:a5:8f:79:e9:7e:7e:96: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:25:DC:6B:28:70:43:91:C6:A9:1C:96:1B:99:90:E3:3A:34:E3:66 X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7f:e8:4a:b4:b0:f1:80:c3:00:0f:29:75:3d:ca:d7:6c:1d: 9d:4b:ed:d9:69:d9:76:2d:c1:35:a7:e9:84:a7:45:9f:ac:75: 18:a3:78:ec:ff:97:74:f0:a7:82:50:71:49:58:09:07:09:46: 6a:46:a1:62:b4:aa:1a:8b:e7:d6:fd:92:07:8b:4e:f0:ee:44: a9:15:a0:92:aa:82:48:9e:18:c3:87:ef:0a:bc:71:6a:0e:48: 0b:0e:61:4b:71:2b:de:e2:ea:ea:2b:88:a8:c6:4c:35:56:8d: f6:8d:a7:c0:08:fe:c7:05:4d:84:20:5e:3e:c6:91:4b:c5:3c: 24:27:0b:83:b5:7f:3b:76:8c:87:a4:d5:26:55:8e:c3:64:02: d2:b9:45:c4:76:6d:96:31:de:e0:56:61:56:e5:99:45:c4:20: 2a:b8:c5:67:62:8e:09:4c:65:80:1b:9d:9d:c4:1c:5b:a6:b1: 99:15:fe:61:a6:e3:68:9d:28:38:f2:ea:10:54:fa:91:a2:2a: 69:67:db:c4:bb:3c:bb:8d:df:ee:c3:bf:70:37:64:c0:1c:dd: 03:54:fe:d1:24:84:e1:05:d1:0b:3e:93:d6:0e:03:e9:08:6b: 53:b4:25:f4:a6:84:cf:38:f2:ab:fb:1f:e4:ce:f3:e7:28:df: 67:99:02:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjYwNzIzMDM0OTE0WhcNMjYwNzMwMDM0OTE0WjAYMRYwFAYD VQQDEw02YTYxOGYzYS01OGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Hrr/PBzC3FHQcuqDu2aKlCKtjJkxvWqG1vlMnwgL/T3aehjXYMk5UfPej4G 5s/A0a1PviizGaxW0h0Nej8X/Cnt1vKa41eBns7100rAEhVDTGmzK39H8fTAJNTO 4exBnnyiVGyNL1fJdG4PN1CQJMr74/VgVRRBZFHhqPrgwwKJDtFxYYqoDvcprO8X mRouD9dc63B+Yy67NQs+RTnvhr89Y3cyn9geb3jfkfotwGa1KuXT+qFf++wGSuXB mEGwpzJqVYidt5lYUtWWxcf3E0J0npo3Cid/9INhh8p6MIMz0Xa3Wu5d8heBLTXb ZOoWUO/fKPGZK6WPeel+fpb+iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDol3Gso cEORxqkclhuZkOM6NONmMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi3/oSrSw8YDDAA8pdT3K12wdnUvt2WnZdi3BNafphKdFn6x1GKN47P+XdPCn glBxSVgJBwlGakahYrSqGovn1v2SB4tO8O5EqRWgkqqCSJ4Yw4fvCrxxag5ICw5h S3Er3uLq6iuIqMZMNVaN9o2nwAj+xwVNhCBePsaRS8U8JCcLg7V/O3aMh6TVJlWO w2QC0rlFxHZtljHe4FZhVuWZRcQgKrjFZ2KOCUxlgBudncQcW6axmRX+YabjaJ0o OPLqEFT6kaIqaWfbxLs8u43f7sO/cDdkwBzdA1T+0SSE4QXRCz6T1g4D6QhrU7Ql 9KaEzzjyq/sf5M7z5yjfZ5kCtw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:19:01 2026 by rpki-client