$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: GhlcHNRudksTukx3POk5duuv5m4Bn0phiF+0TH982P8= Subject key identifier: B4:C3:A6:83:8A:17:4E:2B:15:0B:60:ED:C2:2C:7C:3E:26:88:55:F3 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 2A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2918 Signing time: Thu 23 Jul 2026 23:31:50 +0000 Manifest this update: Thu 23 Jul 2026 23:31:50 +0000 Manifest next update: Thu 30 Jul 2026 23:31:50 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: NoZ5rvt5IjacRRbjugFeVIxoLBpkU4qFQHrFS9AEnvg=) 2: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: IkqwubhChyAi/RsPzQUJ2UaEZb1ZNZg9N1N26san5I8=) 3: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: THnuk88BmBSAnI45lh48WjXHbq0OqH6ZzkCu47KlOw0=) 4: AB2AF04486EE11F19E006003A7EE528E.roa (hash: t2pS3yuliQa2TvZjXQm5ml1zE9xtTLMHXX3VLp+HFG0=) 5: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: z422r+0bSl4JOQTLZbDePZuu5kvTrdyMBLvSzmsZIos=) 6: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: DC/CiNTewEy9AjzNKO1rCpeeQC3b7v2RZLNf6CbyhHI=) 7: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b6hQv7rPPh2NoXSYCy1LQfz1KDKIPOQY1rtTl5hURj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 23:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10791 (0x2a27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Jul 23 23:31:50 2026 GMT Not After : Jul 30 23:31:50 2026 GMT Subject: CN=6a62a466-8492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:f8:2a:7d:58:40:d6:c6:93:3d:f7:59:54: ba:3f:a4:1e:df:c1:30:78:d2:2b:c3:2f:fc:ad:9a: 5f:4c:0e:ad:54:df:85:67:96:0a:38:c5:71:f2:de: 73:d0:42:15:bc:d0:ef:43:9e:86:27:98:e7:61:32: 8f:c1:25:e4:d5:e3:90:24:47:17:99:be:36:d0:50: ab:58:5d:59:50:87:10:db:83:60:7e:57:e8:09:ff: 2b:2c:d7:a3:f5:aa:38:f3:1f:42:3e:7a:62:fb:aa: 41:7c:8d:f8:b0:19:c9:a8:fa:a3:9b:ee:52:4f:0c: cf:51:74:db:33:1d:98:fb:2e:64:77:54:b5:79:d3: 39:2a:fd:47:77:21:5d:82:68:fb:78:1d:e2:a5:9b: 64:04:a3:8e:61:fc:f5:6d:d8:57:f6:73:af:22:e9: 11:6a:89:7e:ab:21:f3:27:27:5c:a7:8f:4b:0f:c5: 93:4c:a8:ea:03:12:33:49:55:08:dd:70:07:6d:59: 47:c5:02:f7:e4:d5:15:65:90:9e:97:49:fd:2d:21: 2f:90:49:72:50:e2:37:96:87:93:01:b6:7b:e8:81: 0c:62:c8:08:41:aa:d3:61:e0:7a:7a:04:b0:18:f4: fe:ca:a2:96:2e:d3:37:4a:1b:7c:29:e1:0c:19:22: 96:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C3:A6:83:8A:17:4E:2B:15:0B:60:ED:C2:2C:7C:3E:26:88:55:F3 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:71:9e:0b:bf:a9:17:81:72:22:68:a6:40:a1:24:e2:b1:9e: d1:a2:b2:ae:0a:5b:f0:e0:e7:5a:fa:64:62:d3:a0:b7:19:32: d0:e5:27:6c:37:5f:36:05:f6:e7:53:30:80:7b:a7:89:46:71: 26:1f:c4:a1:d0:71:c0:00:86:91:60:a2:6a:50:68:50:7d:49: 13:ad:95:ca:2e:c9:b5:c0:ab:5e:09:96:34:00:8f:c0:1a:40: ef:c5:80:60:af:24:c4:ef:db:96:a2:e0:ad:ff:54:0c:ad:c7: 7b:70:eb:c6:bc:b8:ca:31:6a:b2:d2:91:33:50:6d:f8:33:b9: b7:c4:f8:6e:d3:bc:27:0c:c4:98:56:39:43:58:25:9f:81:22: 47:e6:79:d4:54:4a:ed:69:ec:f9:5a:ca:51:25:78:f5:85:82: 9d:e4:37:3e:47:5d:bb:1a:e6:e0:69:7a:d8:5d:42:96:a1:be: d4:34:4b:7e:62:51:23:43:fc:65:dd:05:07:56:a8:47:8a:5f: 74:aa:c1:da:2f:c5:12:3e:1c:5b:98:99:7c:48:2b:b2:1d:c7: 1c:b7:7c:6d:5c:44:ee:b6:fa:be:6c:04:36:ab:ca:7a:67:f1: da:b0:96:e5:f2:85:9f:c1:63:08:d8:12:12:f5:36:5c:a9:98: 58:5b:c3:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYwNzIzMjMzMTUwWhcNMjYwNzMwMjMzMTUwWjAYMRYwFAYD VQQDEw02YTYyYTQ2Ni04NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4H4Kn1YQNbGkz33WVS6P6Qe38EweNIrwy/8rZpfTA6tVN+FZ5YKOMVx8t5z 0EIVvNDvQ56GJ5jnYTKPwSXk1eOQJEcXmb420FCrWF1ZUIcQ24NgflfoCf8rLNej 9ao48x9CPnpi+6pBfI34sBnJqPqjm+5STwzPUXTbMx2Y+y5kd1S1edM5Kv1HdyFd gmj7eB3ipZtkBKOOYfz1bdhX9nOvIukRaol+qyHzJydcp49LD8WTTKjqAxIzSVUI 3XAHbVlHxQL35NUVZZCel0n9LSEvkElyUOI3loeTAbZ76IEMYsgIQarTYeB6egSw GPT+yqKWLtM3Sht8KeEMGSKWTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTDpoOK F04rFQtg7cIsfD4miFXzMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGXGeC7+pF4FyImimQKEk4rGe0aKyrgpb8ODnWvpkYtOgtxky0OUnbDdfNgX2 51MwgHuniUZxJh/EodBxwACGkWCialBoUH1JE62Vyi7JtcCrXgmWNACPwBpA78WA YK8kxO/blqLgrf9UDK3He3Drxry4yjFqstKRM1Bt+DO5t8T4btO8JwzEmFY5Q1gl n4EiR+Z51FRK7Wns+VrKUSV49YWCneQ3Pkdduxrm4Gl62F1ClqG+1DRLfmJRI0P8 Zd0FB1aoR4pfdKrB2i/FEj4cW5iZfEgrsh3HHLd8bVxE7rb6vmwENqvKemfx2rCW 5fKFn8FjCNgSEvU2XKmYWFvDEg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:55 2026 by rpki-client