$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: /ocT8+TVy5td/v/7/QoksY0yoUWvpll39VkzLg62pGI= Subject key identifier: 32:6B:22:F6:94:BF:48:BC:94:82:F9:B9:9B:AD:E3:22:54:5D:E0:CD Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: 013F Signing time: Thu 23 Jul 2026 07:09:37 +0000 Manifest this update: Thu 23 Jul 2026 07:09:37 +0000 Manifest next update: Thu 30 Jul 2026 07:09:37 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: RI0ylRrkFMzMxteLrsl1586MXvBVSLz/eoPWERBcn5o=) 2: 3853657658CA11F188C8E1F19D833773.roa (hash: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=) 3: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=) 4: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Jul 23 07:09:37 2026 GMT Not After : Jul 30 07:09:37 2026 GMT Subject: CN=6a61be31-807d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:20:ad:9b:9a:a0:65:94:b4:ab:cb:79:d8: 30:d9:15:a8:44:3a:9a:ea:94:9a:2b:30:5b:5e:62: 0c:2c:20:4a:7c:79:7c:60:49:71:7e:8b:72:75:8c: 1c:42:d8:a7:13:b6:5e:26:ea:4d:dc:03:c7:a8:b3: 2c:ea:2f:88:30:de:67:68:1e:a0:17:78:94:52:97: 17:68:fc:a7:e9:88:8e:00:dd:c1:c0:ec:d4:83:6e: f4:95:e4:99:35:39:c4:a5:da:96:e6:fc:1b:bb:db: 48:de:7b:0c:50:a4:6c:4f:48:d4:cb:4c:c5:e7:6a: 6f:5c:41:80:e5:de:3b:98:cb:d3:55:8b:e7:88:e6: a5:da:21:4e:3a:bc:da:6e:35:2d:41:3c:f2:eb:b9: 40:45:03:45:53:55:70:ad:53:a6:47:2b:78:0e:dd: f0:e4:2a:34:5b:de:09:05:2b:f5:3b:5c:3e:ee:95: 3a:4e:9f:f6:9f:58:af:c6:8d:3e:48:c8:e2:2a:87: bd:79:d1:a3:93:64:bd:8d:17:ac:d8:09:a8:f8:18: 77:74:41:e8:16:56:cc:43:de:db:26:72:12:47:68: 69:c8:77:2d:c1:af:03:50:79:fd:bb:e9:c9:2c:51: ac:2e:ce:8b:f1:c6:4e:f6:8e:6e:09:22:27:fa:bb: b8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6B:22:F6:94:BF:48:BC:94:82:F9:B9:9B:AD:E3:22:54:5D:E0:CD X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:34:2d:37:d8:4b:60:7d:84:c2:9f:57:8e:bc:f3:53:27:82: 90:93:56:bf:ba:fd:cc:2b:69:12:72:90:24:53:b7:c7:12:8c: 31:3f:60:7a:c7:e1:fd:a8:68:4b:ef:64:85:19:ca:b3:92:4b: 2f:a3:5d:03:4d:86:c9:cd:78:bb:26:e2:ae:ed:cf:28:3d:de: 06:b8:09:e6:e2:4b:93:42:d6:8b:c8:16:cc:8e:89:85:40:68: 15:d4:60:b4:8c:d4:20:e4:c3:cc:1e:67:c9:c6:71:9e:33:2a: ea:4d:04:a9:63:e2:8d:de:b5:93:58:b1:a8:da:7f:02:d7:cb: 94:d5:17:6b:02:6f:b7:dd:04:4f:44:a6:4f:b0:7c:cb:38:e8: 78:d9:aa:36:4c:84:90:2c:df:af:96:88:38:b3:27:6e:61:ed: 58:c0:3a:40:03:fa:1f:c8:3d:be:b3:52:db:72:29:82:ec:f7: dc:16:d8:ad:1d:c6:8d:e4:96:3f:9b:24:15:06:4f:17:e3:75: 42:d2:39:93:e4:1f:a9:fc:d1:3f:20:d9:04:57:fb:f3:7e:da: 88:dc:20:0f:19:98:19:5a:b0:bd:55:ba:7b:a7:29:ec:81:b2: 97:97:1a:b6:99:ce:96:ab:bb:5b:39:2d:92:f6:36:03:6b:57: f4:15:cd:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjYwNzIzMDcwOTM3WhcNMjYwNzMwMDcwOTM3WjAYMRYwFAYD VQQDEw02YTYxYmUzMS04MDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTMgrZuaoGWUtKvLedgw2RWoRDqa6pSaKzBbXmIMLCBKfHl8YElxfotydYwc QtinE7ZeJupN3APHqLMs6i+IMN5naB6gF3iUUpcXaPyn6YiOAN3BwOzUg270leSZ NTnEpdqW5vwbu9tI3nsMUKRsT0jUy0zF52pvXEGA5d47mMvTVYvniOal2iFOOrza bjUtQTzy67lARQNFU1VwrVOmRyt4Dt3w5Co0W94JBSv1O1w+7pU6Tp/2n1ivxo0+ SMjiKoe9edGjk2S9jRes2Amo+Bh3dEHoFlbMQ97bJnISR2hpyHctwa8DUHn9u+nJ LFGsLs6L8cZO9o5uCSIn+ru4UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJrIvaU v0i8lIL5uZut4yJUXeDNMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjzQtN9hLYH2Ewp9XjrzzUyeCkJNWv7r9zCtpEnKQJFO3xxKMMT9gesfh/aho S+9khRnKs5JLL6NdA02Gyc14uybiru3PKD3eBrgJ5uJLk0LWi8gWzI6JhUBoFdRg tIzUIOTDzB5nycZxnjMq6k0EqWPijd61k1ixqNp/AtfLlNUXawJvt90ET0SmT7B8 yzjoeNmqNkyEkCzfr5aIOLMnbmHtWMA6QAP6H8g9vrNS23Ipguz33BbYrR3GjeSW P5skFQZPF+N1QtI5k+QfqfzRPyDZBFf7837aiNwgDxmYGVqwvVW6e6cp7IGyl5ca tpnOlqu7WzktkvY2A2tX9BXNTw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:07:35 2026 by rpki-client