$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json) Hash identifier: U4s0t9fR5sb5Qar3Klfb8C9IoJLEWQ1DhY5qDYH5Sqo= Subject key identifier: 80:07:D3:8F:B6:72:F6:23:77:5E:26:CD:D9:2F:63:78:9F:68:CD:DD Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft Manifest number: 08E6 Signing time: Wed 22 Jul 2026 20:50:04 +0000 Manifest this update: Wed 22 Jul 2026 20:50:03 +0000 Manifest next update: Wed 29 Jul 2026 20:50:03 +0000 Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: JLFr5wQiYSTntJv27wpnTen8NX3Y+e9TQmSyfzDp9M0=) 2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: c4VC0uZLIwEYMCTYEDFpqIYkNUoeZb1I54lM3XwQmNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Validity Not Before: Jul 22 20:50:03 2026 GMT Not After : Jul 29 20:50:03 2026 GMT Subject: CN=6a612cfb-7b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:79:54:1a:07:5b:4d:b4:61:7f:1b:a8:55: d0:76:dc:de:c3:08:fa:6c:1b:ce:f2:5f:fb:57:cc: c9:07:b2:9a:89:48:d5:80:34:8c:07:83:78:4d:da: f6:d5:81:ab:d0:08:0e:bb:8c:2b:f0:9a:46:50:78: 8d:19:b2:c3:6a:69:17:ff:b1:9b:db:34:cd:f5:05: 45:21:15:81:c6:ab:83:57:b4:f1:17:d7:b4:0e:9e: 66:82:e7:7b:f6:e4:d4:c3:38:47:cb:c6:6e:a8:f3: f0:53:3f:9f:e3:fe:19:c3:34:e0:70:eb:3e:3c:44: dc:6a:7f:8e:36:77:9f:5a:74:be:c4:f1:89:39:85: ec:cf:21:a2:f2:b4:2a:2e:83:14:5f:f6:5b:cd:3c: fa:cf:69:4d:13:3e:31:2d:6c:62:04:b8:38:0b:e3: 2d:bc:18:0a:5d:c9:de:ee:fd:b5:ee:73:74:1a:28: cd:9e:53:c5:95:2e:ea:5f:1a:be:63:ff:82:d1:4c: 08:97:fd:d1:31:cb:dc:93:2e:8d:81:64:03:ff:8e: 67:b9:15:f3:01:eb:95:de:62:9d:60:cf:df:56:f6: 98:8a:07:ee:77:97:4c:80:ed:9a:64:69:a9:cb:c4: 41:11:14:08:20:2b:19:50:d9:ac:cb:72:cb:d0:35: 62:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:07:D3:8F:B6:72:F6:23:77:5E:26:CD:D9:2F:63:78:9F:68:CD:DD X509v3 Authority Key Identifier: keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:cd:41:73:39:fb:d8:1f:49:dc:78:ca:1d:c3:18:dc:ac:0b: 34:f9:ec:ce:01:f2:21:58:53:ce:51:fb:67:f5:aa:e4:18:71: 48:d5:e0:e0:1b:18:f9:10:2b:0b:45:0a:59:53:62:3f:73:6c: 53:85:57:42:49:86:8e:2b:56:4b:96:0c:e2:b0:88:97:e5:1c: 08:93:a5:5b:93:ca:4f:a0:31:3b:24:d6:d7:8c:dd:8c:09:b0: 70:d0:6b:11:7e:60:17:2f:d4:6d:f7:d8:1e:6d:2c:f3:0f:dd: 00:a9:c6:21:9c:83:f7:6e:fa:e6:97:f5:b4:42:cb:05:4c:1f: 20:98:44:16:b0:1a:7a:30:e5:83:6e:ad:90:ab:19:eb:4c:07: 42:c5:e7:ad:b8:37:d5:9f:e5:a6:0b:d9:aa:58:99:de:db:21: 02:fd:05:15:5b:c1:4c:aa:59:a7:5d:b3:96:c6:a3:c3:46:03: c8:82:b0:1c:db:65:bc:2d:15:0c:5e:12:3d:a5:3e:c3:48:12: 50:35:f5:c4:36:de:8a:27:21:db:6b:72:80:4b:93:b3:af:dc: 6a:7b:8a:0d:be:44:eb:86:e9:2e:49:7f:91:bb:b2:b0:8c:d0: 73:58:b8:e9:9b:b3:7f:70:27:fb:68:84:84:5d:2b:57:64:3a: 6c:3b:36:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0NjIxMTAvBgNVBAUTKEZENEQ4QzYzOUFEQzE1ODQ3QzdCNDkxMTE1OURFNzFC RDgxMzkzQUUwHhcNMjYwNzIyMjA1MDAzWhcNMjYwNzI5MjA1MDAzWjAYMRYwFAYD VQQDEw02YTYxMmNmYi03YjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqp95VBoHW020YX8bqFXQdtzewwj6bBvO8l/7V8zJB7KaiUjVgDSMB4N4Tdr2 1YGr0AgOu4wr8JpGUHiNGbLDamkX/7Gb2zTN9QVFIRWBxquDV7TxF9e0Dp5mgud7 9uTUwzhHy8ZuqPPwUz+f4/4ZwzTgcOs+PETcan+ONnefWnS+xPGJOYXszyGi8rQq LoMUX/ZbzTz6z2lNEz4xLWxiBLg4C+MtvBgKXcne7v217nN0GijNnlPFlS7qXxq+ Y/+C0UwIl/3RMcvcky6NgWQD/45nuRXzAeuV3mKdYM/fVvaYigfud5dMgO2aZGmp y8RBERQIICsZUNmsy3LL0DVibwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAH04+2 cvYjd14mzdkvY3ifaM3dMB8GA1UdIwQYMBaAFP1NjGOa3BWEfHtJERWd5xvYE5Ou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjQ2Mi8zMkM3NTdFNkRD NDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZUjhlMGtSRlozbkc5Z1Rr NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VMk1ZNXJjRllSOGUwa1JGWjNuRzlnVGs2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjQ2Mi8zMkM3NTdFNkRDNDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZ UjhlMGtSRlozbkc5Z1RrNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAM1Bczn72B9J3HjKHcMY3KwLNPnszgHyIVhTzlH7Z/Wq5BhxSNXg4BsY+RAr C0UKWVNiP3NsU4VXQkmGjitWS5YM4rCIl+UcCJOlW5PKT6AxOyTW14zdjAmwcNBr EX5gFy/UbffYHm0s8w/dAKnGIZyD92765pf1tELLBUwfIJhEFrAaejDlg26tkKsZ 60wHQsXnrbg31Z/lpgvZqliZ3tshAv0FFVvBTKpZp12zlsajw0YDyIKwHNtlvC0V DF4SPaU+w0gSUDX1xDbeiich22tygEuTs6/canuKDb5E64bpLkl/kbuysIzQc1i4 6Zuzf3An+2iEhF0rV2Q6bDs2yw== -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:43 2026 by rpki-client