$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: qj/x67Vhz1GP56otDv328CSgXqTx8BSNkMG1zU7yyCA= Subject key identifier: 3D:1E:F7:F4:99:D9:DF:A5:42:B1:CB:1B:30:87:80:AD:54:63:F8:27 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 04CD Signing time: Thu 23 Jul 2026 00:38:51 +0000 Manifest this update: Thu 23 Jul 2026 00:38:51 +0000 Manifest next update: Thu 30 Jul 2026 00:38:51 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: xTg0Q8a/qUK6HCRjxkD0wvodq+DDq1CLeiyXLdv1S9M=) 2: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: W6dMaUqeZUZ5yl2vrB4kDnmuCp2AkA9688MbXMn1Iu0=) 3: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: 3jewHBb77PCvairN2996ZvKaBpoln62DoJ8FtmWYmYo=) 4: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (hash: Q/WW69HDFqBmPazKy9CWTwg7ADAfQr3xucgCfcoGH6o=) 5: EFAA6C1CD16911F08A99D95BC4F9AE02.roa (hash: Jq67A+F4rIfzW8WwGVI/74n9tCcPV6PLGYDBFsxh/v4=) 6: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: woJiUlfh+5rrMBDG7PnsvNBeiKjiLhLTkpDWmy2sy4w=) 7: 4B167396E74111EC80E35542C4F9AE02.roa (hash: s3LCy4JitIxrk8TrdHNnZ3pFI/mZ0+J3BlkxeqJMpVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Jul 23 00:38:51 2026 GMT Not After : Jul 30 00:38:51 2026 GMT Subject: CN=6a61629b-fb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:1a:00:a1:63:50:16:99:15:6c:e5:54:6f: 76:11:1a:47:71:74:b2:ad:23:4f:12:85:1f:e3:8d: 1f:fc:fd:c4:c6:3a:2c:ab:dd:15:56:fb:b1:04:7b: a4:cd:1e:df:90:30:2a:0e:15:14:9a:34:19:25:d6: 93:c5:60:7b:36:6f:ce:4d:2b:df:e6:75:4b:70:df: 3e:9a:f9:1a:5d:e6:80:dd:79:65:6f:e0:32:63:23: d6:c7:1a:39:cf:8a:5f:b5:76:56:51:9e:8e:59:cf: 7c:b0:87:92:c9:8f:92:83:fe:6f:61:ae:2e:e3:06: 3b:58:0c:8a:f5:17:c6:b6:81:ef:90:43:7d:e4:ac: 5a:4a:14:58:5a:c1:6f:aa:62:6a:7a:d8:ca:57:1b: de:e6:55:ff:7d:c4:44:12:35:50:a7:7f:a8:02:fa: dc:22:dd:28:61:16:a2:da:68:6d:bd:35:5d:e0:91: 39:99:8b:06:e7:da:4a:34:3f:6d:d4:60:31:b2:96: eb:d8:be:ba:5e:4d:87:97:0e:4a:b6:c0:90:4e:96: c0:6c:2c:dc:3e:a9:f3:0e:9c:b3:37:50:d9:cc:31: a1:38:78:8d:d1:da:82:4e:05:da:d7:14:8c:1c:40: 09:a2:98:c1:70:2f:8a:2d:f7:84:31:bd:a5:30:a6: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1E:F7:F4:99:D9:DF:A5:42:B1:CB:1B:30:87:80:AD:54:63:F8:27 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:73:c8:bb:de:b7:b8:20:89:40:e3:89:7c:f1:a8:8f:0b:3f: 46:3b:e7:c0:64:62:02:e9:00:a9:97:65:e1:7a:2a:d4:01:02: f3:c9:c5:a0:78:de:78:d0:ae:08:be:3a:fd:28:9b:e4:35:d6: 52:8f:44:b3:2e:47:48:89:67:45:76:cd:16:e1:e9:43:b4:57: 30:0a:e3:9c:a5:6c:96:f3:4a:39:b6:22:95:6c:91:69:9b:c7: ee:82:5c:a3:3a:06:1d:e8:80:67:da:f3:50:14:07:c7:5e:34: 9f:6c:28:44:aa:63:da:2a:78:74:ae:b8:d5:86:fa:96:11:51: 8c:fb:f0:4a:94:f8:64:5e:b5:41:2d:c1:6d:38:9b:64:c6:09: c2:26:38:fb:f6:b6:61:a1:3e:42:da:cf:a1:97:10:af:e6:10: 8a:49:1b:6b:23:f6:08:05:4b:dd:ac:ce:0d:ce:df:8c:f7:43: fc:0f:3f:4b:39:48:5a:38:48:37:19:82:be:a0:7a:3c:a7:71: 32:2a:9c:e1:e3:88:b9:cd:1d:2a:d5:b9:26:84:c2:1b:6c:b5: 6b:ce:20:f0:ff:85:80:aa:4b:e3:12:be:c2:b9:5d:81:98:aa: f7:50:81:d5:ee:92:63:2f:d4:0f:69:96:75:be:9b:b6:dd:0f: 96:72:c4:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYwNzIzMDAzODUxWhcNMjYwNzMwMDAzODUxWjAYMRYwFAYD VQQDEw02YTYxNjI5Yi1mYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFAaAKFjUBaZFWzlVG92ERpHcXSyrSNPEoUf440f/P3Exjosq90VVvuxBHuk zR7fkDAqDhUUmjQZJdaTxWB7Nm/OTSvf5nVLcN8+mvkaXeaA3Xllb+AyYyPWxxo5 z4pftXZWUZ6OWc98sIeSyY+Sg/5vYa4u4wY7WAyK9RfGtoHvkEN95KxaShRYWsFv qmJqetjKVxve5lX/fcREEjVQp3+oAvrcIt0oYRai2mhtvTVd4JE5mYsG59pKND9t 1GAxspbr2L66Xk2Hlw5KtsCQTpbAbCzcPqnzDpyzN1DZzDGhOHiN0dqCTgXa1xSM HEAJopjBcC+KLfeEMb2lMKZ4UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0e9/SZ 2d+lQrHLGzCHgK1UY/gnMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmnPIu963uCCJQOOJfPGojws/RjvnwGRiAukAqZdl4Xoq1AEC88nFoHjeeNCu CL46/Sib5DXWUo9Esy5HSIlnRXbNFuHpQ7RXMArjnKVslvNKObYilWyRaZvH7oJc ozoGHeiAZ9rzUBQHx140n2woRKpj2ip4dK641Yb6lhFRjPvwSpT4ZF61QS3BbTib ZMYJwiY4+/a2YaE+QtrPoZcQr+YQikkbayP2CAVL3azODc7fjPdD/A8/SzlIWjhI NxmCvqB6PKdxMiqc4eOIuc0dKtW5JoTCG2y1a84g8P+FgKpL4xK+wrldgZiq91CB 1e6SYy/UD2mWdb6btt0PlnLEAA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:14:51 2026 by rpki-client