$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json) Hash identifier: 6fe6xh1ypNCAqxLlWHKDYbd1z+/NlhTHgnSOfbQXEJo= Subject key identifier: 1D:37:0D:22:A5:E8:98:53:E9:B3:14:B0:C0:EB:D2:FE:F5:A9:E3:D1 Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Certificate serial: 135C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft Manifest number: 1353 Signing time: Wed 22 Jul 2026 17:05:54 +0000 Manifest this update: Wed 22 Jul 2026 17:05:53 +0000 Manifest next update: Wed 29 Jul 2026 17:05:53 +0000 Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: gCMguYLmKzbbpDaWfg/EkU8hffj24W5La7Es27qq42o=) 2: 51C3E830926B11F09CB88A3FC4F9AE02.roa (hash: qokabZtBOAlQ/LOtlITa957LjkcWQQzpeDyYnXOKXSA=) 3: 5232D4B6926B11F09CB88A3FC4F9AE02.roa (hash: TXksggudhoYnYZG8XJQZOjMGiQeEQ88l8YGg9Asd64Y=) 4: 5144F80E926B11F09CB88A3FC4F9AE02.roa (hash: sFjuCeK0cCGXi+GkdmGnHvDeHOKZWdP9M+7beoSSfAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4956 (0x135c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Validity Not Before: Jul 22 17:05:53 2026 GMT Not After : Jul 29 17:05:53 2026 GMT Subject: CN=6a60f872-5002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:95:b5:de:26:ca:42:36:05:74:dc:56:2b:43: c8:4d:a6:04:5d:bc:7c:46:f8:af:6c:f9:ea:61:d8: 05:c5:94:2b:6a:89:8b:bd:9d:4a:b0:3a:25:fc:63: e5:98:0b:a5:69:22:bf:c6:65:4d:80:28:b6:0d:46: 3c:f8:94:6d:ad:47:c3:d8:21:37:ff:11:a1:0f:01: 74:be:31:35:cb:bd:f8:57:74:1b:5d:2b:82:05:22: 40:e0:7a:e3:92:29:ff:72:25:6c:16:a6:cc:ba:65: 21:06:f3:ef:c7:f3:86:8d:f9:b0:a6:d7:97:a8:de: e2:73:da:f5:a2:2c:28:97:32:51:f2:0f:59:59:1d: 5a:f9:eb:0b:fa:b6:c0:d7:f0:17:c3:c7:ae:98:71: 4f:06:3b:7e:8e:fb:c6:3c:58:07:5b:e8:28:a1:82: 0d:c7:e6:47:35:bc:87:61:d5:30:9f:df:01:dc:cf: fe:62:63:4b:2a:8e:a5:e1:43:63:69:bc:1b:93:57: 54:dc:0c:f3:be:fb:57:7e:df:b9:f5:33:ab:80:55: 69:fd:fb:b7:12:96:31:df:cf:a3:e5:2c:8f:f4:53: ba:c6:07:c0:57:d7:48:de:e1:20:ea:37:7d:48:9a: 42:30:62:df:f0:99:98:79:9f:4d:92:f3:86:43:20: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:37:0D:22:A5:E8:98:53:E9:B3:14:B0:C0:EB:D2:FE:F5:A9:E3:D1 X509v3 Authority Key Identifier: keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9a:0d:11:0d:91:b7:f5:10:c2:d4:9d:f8:ee:6b:e4:98:b7: e4:25:0f:ed:19:d8:49:8b:74:a4:7f:a1:d8:97:f0:58:ce:ef: f5:ce:d5:ce:37:c1:72:7c:54:99:3d:63:90:ee:77:12:4e:cd: a4:c4:db:c7:47:f8:4e:a0:77:a0:ea:4c:41:57:75:06:27:2c: c3:85:8e:49:1e:e0:ec:20:ad:22:b1:23:bf:f7:2f:cc:a6:45: 20:50:f7:14:f8:8e:9e:18:5c:67:f9:c8:d5:36:81:68:70:96: 35:ba:91:b2:b4:da:9a:d3:6e:35:b7:09:2c:37:67:8b:0a:5f: d9:c0:56:83:55:c9:4b:02:53:4a:5d:20:92:a4:f8:27:b9:16: a5:a9:a5:a5:ba:58:78:0b:77:3d:be:15:94:8d:dd:b1:44:1e: d8:e2:d1:c6:64:c0:40:34:94:82:b1:ba:ba:73:c0:ba:d8:37: 4b:24:48:ab:9d:80:c1:52:77:1f:28:68:41:b0:05:71:37:30: 18:4d:2a:72:1c:7c:7a:25:82:a7:10:fe:98:97:85:72:e7:5d: a2:a2:be:83:2b:3b:48:a7:62:2a:ef:a5:0a:78:d6:eb:4b:f1: 85:ca:6d:f0:74:eb:56:8e:c0:1d:52:14:ce:f8:55:2e:c6:40: 6f:fa:d8:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyM0MxMTAvBgNVBAUTKEY3NEY3MzVGREM1QTVCOTMzNkYzMjRDMzJDQkE1NThF QkJEMjhEOTcwHhcNMjYwNzIyMTcwNTUzWhcNMjYwNzI5MTcwNTUzWjAYMRYwFAYD VQQDEw02YTYwZjg3Mi01MDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjJW13ibKQjYFdNxWK0PITaYEXbx8RvivbPnqYdgFxZQraomLvZ1KsDol/GPl mAulaSK/xmVNgCi2DUY8+JRtrUfD2CE3/xGhDwF0vjE1y734V3QbXSuCBSJA4Hrj kin/ciVsFqbMumUhBvPvx/OGjfmwpteXqN7ic9r1oiwolzJR8g9ZWR1a+esL+rbA 1/AXw8eumHFPBjt+jvvGPFgHW+gooYINx+ZHNbyHYdUwn98B3M/+YmNLKo6l4UNj abwbk1dU3AzzvvtXft+59TOrgFVp/fu3EpYx38+j5SyP9FO6xgfAV9dI3uEg6jd9 SJpCMGLf8JmYeZ9NkvOGQyDxLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB03DSKl 6JhT6bMUsMDr0v71qePRMB8GA1UdIwQYMBaAFPdPc1/cWluTNvMkwyy6VY670o2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTIzQy82OEY1M0YzMkNC M0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1TTI4eVRETExwVmpydlNq WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwOXpYOXhhVzVNMjh5VERMTHBWanJ2U2paYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTIzQy82OEY1M0YzMkNCM0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1 TTI4eVRETExwVmpydlNqWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI5oNEQ2Rt/UQwtSd+O5r5Ji35CUP7RnYSYt0pH+h2JfwWM7v9c7VzjfBcnxU mT1jkO53Ek7NpMTbx0f4TqB3oOpMQVd1Bicsw4WOSR7g7CCtIrEjv/cvzKZFIFD3 FPiOnhhcZ/nI1TaBaHCWNbqRsrTamtNuNbcJLDdniwpf2cBWg1XJSwJTSl0gkqT4 J7kWpamlpbpYeAt3Pb4VlI3dsUQe2OLRxmTAQDSUgrG6unPAutg3SyRIq52AwVJ3 HyhoQbAFcTcwGE0qchx8eiWCpxD+mJeFcuddoqK+gys7SKdiKu+lCnjW60vxhcpt 8HTrVo7AHVIUzvhVLsZAb/rY9Q== -----END CERTIFICATE-----Generated at Fri Jul 24 09:42:52 2026 by rpki-client