$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json) Hash identifier: H1fSiAygIK6HYC1Alvz207/0E0q9W4XrGkXojOiai9A= Subject key identifier: 23:B8:2C:62:11:EE:5B:65:56:77:E5:3D:3E:38:C3:2A:29:F7:39:8A Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft Manifest number: 0CAB Signing time: Wed 22 Jul 2026 18:49:31 +0000 Manifest this update: Wed 22 Jul 2026 18:49:31 +0000 Manifest next update: Wed 29 Jul 2026 18:49:31 +0000 Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: he11r5p7dRQK2O6aHKD1LnDgjw6Ar59Omp8OEKv9Z8c=) 2: 021496F2A4EC11F0A8EB5F7EC4F9AE02.roa (hash: wgK4ZuIIb0twemfmKGJQ9J4VlAgOAeotYnSBFamHuz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Validity Not Before: Jul 22 18:49:31 2026 GMT Not After : Jul 29 18:49:31 2026 GMT Subject: CN=6a6110bb-42df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:16:47:bc:2e:ac:e2:64:a1:2c:c3:2e:8a: c3:b0:56:a8:e7:70:e2:9a:d8:00:ca:75:97:a0:62: fb:07:97:fc:9e:da:6b:a2:f8:4d:34:a4:a1:a0:55: 17:95:f9:3f:d7:e0:da:86:0c:85:1f:b5:cd:72:5d: 63:9b:b0:4f:75:f6:00:d8:16:9a:41:fe:c3:40:90: ea:3b:56:8d:af:07:1a:b1:8f:54:cf:fd:b5:53:7a: 01:bf:d2:51:56:6e:56:d6:db:98:06:59:2b:7b:e9: 86:7e:3d:c3:dc:dd:31:73:c1:15:4d:dc:af:4d:06: 46:6b:8d:33:bb:a5:f5:de:8b:67:d3:54:fa:eb:ef: ca:51:fe:80:5b:df:a9:10:71:0c:8d:fa:3b:42:e0: 0f:36:81:05:f6:72:51:12:0e:94:70:91:d7:d2:c7: e9:58:cf:35:83:5c:0a:21:46:8b:40:8b:cf:3a:93: 9d:b5:01:1f:cc:dc:3b:5f:de:3b:9e:6b:9e:c3:0e: 1a:61:bb:d8:4f:fc:c9:6e:5a:a2:95:9e:1f:fd:cc: 0c:ba:b3:2c:ce:a5:a4:47:f6:82:11:fd:34:29:39: 32:5e:01:f3:02:c8:90:8c:c9:56:bb:d4:c2:7c:49: 14:e1:69:e3:d6:31:47:72:65:ab:88:78:77:75:74: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B8:2C:62:11:EE:5B:65:56:77:E5:3D:3E:38:C3:2A:29:F7:39:8A X509v3 Authority Key Identifier: keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1a:f4:7c:0e:f3:8f:e3:e3:30:d5:9f:f5:92:2e:0f:58:dc: 87:12:d5:f1:87:92:7c:19:cc:67:e8:0d:e2:b8:a8:22:c5:15: e8:62:30:f3:1f:3d:09:e5:aa:af:cb:14:5e:c9:04:9b:6c:2b: 86:3e:2d:a5:5b:18:95:f5:3b:2d:2a:59:1c:44:04:a6:ba:18: 66:a4:63:81:17:97:49:2e:c8:82:9d:af:0c:15:97:a3:cd:f2: 27:23:32:61:42:e7:66:bd:22:f5:3d:52:c4:67:95:23:ad:13: 8c:42:36:5a:d3:38:0f:4c:96:57:77:99:c4:a6:0f:46:c1:4d: 8d:61:bd:84:51:68:72:34:0c:53:be:80:b5:f9:f2:9a:10:c3: 24:28:59:05:0f:a0:2c:1c:c2:3d:96:51:27:b9:42:e4:b8:27: 34:e0:45:13:46:ab:08:1a:d6:7b:ce:1d:0e:39:93:e9:ed:16: 2a:52:61:1f:9b:a6:07:86:9c:a5:81:7c:99:c8:9e:91:9a:65: a9:32:11:fd:ba:c5:8f:dc:36:56:3d:cf:d6:cd:1a:8b:d4:3b: 94:e9:3a:47:b4:fa:ba:24:8e:c1:f8:e7:f2:99:7b:76:40:8c: 2c:64:67:72:f5:3d:7c:3d:71:18:f8:58:50:6b:01:7d:1c:cc: b1:97:07:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFFMjIxMTAvBgNVBAUTKDcyNjIyMEQ5OEJDQzdEQzY2QTNDQ0YzNzY3N0VBMEEz REIwOTBEQTQwHhcNMjYwNzIyMTg0OTMxWhcNMjYwNzI5MTg0OTMxWjAYMRYwFAYD VQQDEw02YTYxMTBiYi00MmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweMWR7wurOJkoSzDLorDsFao53DimtgAynWXoGL7B5f8ntprovhNNKShoFUX lfk/1+DahgyFH7XNcl1jm7BPdfYA2BaaQf7DQJDqO1aNrwcasY9Uz/21U3oBv9JR Vm5W1tuYBlkre+mGfj3D3N0xc8EVTdyvTQZGa40zu6X13otn01T66+/KUf6AW9+p EHEMjfo7QuAPNoEF9nJREg6UcJHX0sfpWM81g1wKIUaLQIvPOpOdtQEfzNw7X947 nmueww4aYbvYT/zJblqilZ4f/cwMurMszqWkR/aCEf00KTkyXgHzAsiQjMlWu9TC fEkU4Wnj1jFHcmWriHh3dXQuEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCO4LGIR 7ltlVnflPT44wyop9zmKMB8GA1UdIwQYMBaAFHJiINmLzH3GajzPN2d+oKPbCQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUUyMi9CMTc4NDM5RTFC QkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZjWnFQTTgzWjM2Z285c0pE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtSWcyWXZNZmNacVBNODNaMzZnbzlzSkRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUUyMi9CMTc4NDM5RTFCQkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZj WnFQTTgzWjM2Z285c0pEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADxr0fA7zj+PjMNWf9ZIuD1jchxLV8YeSfBnMZ+gN4rioIsUV6GIw8x89CeWq r8sUXskEm2wrhj4tpVsYlfU7LSpZHEQEproYZqRjgReXSS7Igp2vDBWXo83yJyMy YULnZr0i9T1SxGeVI60TjEI2WtM4D0yWV3eZxKYPRsFNjWG9hFFocjQMU76Atfny mhDDJChZBQ+gLBzCPZZRJ7lC5LgnNOBFE0arCBrWe84dDjmT6e0WKlJhH5umB4ac pYF8mciekZplqTIR/brFj9w2Vj3P1s0ai9Q7lOk6R7T6uiSOwfjn8pl7dkCMLGRn cvU9fD1xGPhYUGsBfRzMsZcHag== -----END CERTIFICATE-----Generated at Fri Jul 24 07:07:37 2026 by rpki-client