$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json) Hash identifier: fffDu7emmj0exR46HKn65vtcoaVV1bHAN43PrMksdDM= Subject key identifier: 7E:7C:B3:A1:46:A0:CF:5D:D5:CC:02:93:09:DD:AC:22:50:EA:FA:28 Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft Manifest number: 0595 Signing time: Thu 23 Jul 2026 00:00:18 +0000 Manifest this update: Thu 23 Jul 2026 00:00:18 +0000 Manifest next update: Thu 30 Jul 2026 00:00:18 +0000 Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: 8qWhxp72JMIg4PacP8HK36ZaEyx92CPwJ6zAO0jxvDI=) 2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ekGdq5XwvQSiFAECeI1yOoTTSMBYmajgvzc3Dt6ibs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Validity Not Before: Jul 23 00:00:18 2026 GMT Not After : Jul 30 00:00:18 2026 GMT Subject: CN=6a615992-a587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e1:ea:a9:dd:51:b1:3c:36:f7:7e:59:fa:db: 83:ed:09:30:41:bc:29:70:d8:d0:9b:e9:82:35:4f: ab:8c:c5:a3:59:c9:1d:ce:bc:7d:d3:06:a1:33:81: bc:1b:b0:3d:48:9e:5b:b5:82:ad:ce:94:1c:f1:80: 99:91:d7:50:bb:f2:a1:62:8f:16:ea:21:98:a5:19: 11:2f:e3:95:f1:40:d8:da:41:22:29:1c:5b:4d:d4: 73:59:03:42:bf:21:74:f4:0d:56:40:80:ce:2b:35: 22:ff:a7:3f:bc:5f:c3:3a:9d:ab:f6:0d:95:77:71: 96:7c:4a:ca:a5:83:b8:4d:19:2c:5b:15:c6:cf:ed: 4c:f1:88:ea:09:b7:5a:e6:78:61:9b:52:8f:43:68: b5:de:11:c2:af:74:38:5a:c5:cf:ac:eb:5e:96:b3: 4e:8d:bb:a2:22:2a:80:57:90:a4:27:27:ff:16:3c: b5:ae:c6:9c:76:d8:5e:56:11:84:3c:6f:d1:b3:65: 2a:5d:04:71:28:b8:25:1c:58:ca:9c:32:e3:04:ee: ba:41:ef:66:5c:61:07:55:c2:f7:8e:02:6f:3f:48: 97:bc:cd:08:2b:92:21:8d:54:13:84:2f:7b:c9:22: 7c:e5:d1:40:02:9a:00:9a:9f:4b:78:a9:21:f9:f0: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7C:B3:A1:46:A0:CF:5D:D5:CC:02:93:09:DD:AC:22:50:EA:FA:28 X509v3 Authority Key Identifier: keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:03:e1:8a:5d:5a:d9:4a:bf:20:dd:5d:60:e3:96:15:c6:c8: 0a:dc:a9:42:52:fa:45:16:6b:82:9f:55:1e:7d:cc:65:4c:70: c0:1a:56:80:1c:c9:0a:3d:e5:76:27:2f:ff:a3:66:74:8a:0a: 04:28:0c:6f:c7:c5:1a:e8:8d:a8:2d:74:5c:14:5e:9a:2a:8b: 9b:2b:08:f8:bf:09:1d:40:f6:22:b6:fa:00:a4:61:49:55:af: 72:fe:25:1d:41:c6:6f:1b:0f:2d:ae:61:ec:e4:eb:0d:77:c6: cf:d5:8d:f6:d2:69:a2:a7:04:15:d6:27:8d:be:4c:95:cf:d0: 95:3d:28:8e:a5:a9:97:38:54:17:e3:4c:c4:db:ce:f4:16:e9: 6d:e5:7e:1b:27:df:d6:15:fe:cd:14:c8:36:0d:45:62:82:e9: 0c:df:82:93:ac:82:33:ee:fd:20:34:da:c2:17:f1:17:28:70: 34:ea:8d:8b:aa:b2:75:39:b1:29:d8:ad:a3:db:44:fa:4e:10: 16:55:8b:31:0c:34:ed:c4:53:23:11:1c:13:af:08:7b:3a:59: d7:ba:c9:e7:c2:35:89:65:48:02:c2:64:95:95:69:fc:8e:a5: ff:99:16:ce:43:75:5e:af:d8:a1:19:78:1e:e6:85:80:52:96: e6:ba:a3:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4 NEMzRjI2MEIwHhcNMjYwNzIzMDAwMDE4WhcNMjYwNzMwMDAwMDE4WjAYMRYwFAYD VQQDEw02YTYxNTk5Mi1hNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eHqqd1RsTw2935Z+tuD7QkwQbwpcNjQm+mCNU+rjMWjWckdzrx90wahM4G8 G7A9SJ5btYKtzpQc8YCZkddQu/KhYo8W6iGYpRkRL+OV8UDY2kEiKRxbTdRzWQNC vyF09A1WQIDOKzUi/6c/vF/DOp2r9g2Vd3GWfErKpYO4TRksWxXGz+1M8YjqCbda 5nhhm1KPQ2i13hHCr3Q4WsXPrOtelrNOjbuiIiqAV5CkJyf/Fjy1rsacdtheVhGE PG/Rs2UqXQRxKLglHFjKnDLjBO66Qe9mXGEHVcL3jgJvP0iXvM0IK5IhjVQThC97 ySJ85dFAApoAmp9LeKkh+fDA4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH58s6FG oM9d1cwCkwndrCJQ6vooMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL TlFEdHliUUtWR3FFd19KZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfgPhil1a2Uq/IN1dYOOWFcbICtypQlL6RRZrgp9VHn3MZUxwwBpWgBzJCj3l dicv/6NmdIoKBCgMb8fFGuiNqC10XBRemiqLmysI+L8JHUD2Irb6AKRhSVWvcv4l HUHGbxsPLa5h7OTrDXfGz9WN9tJpoqcEFdYnjb5Mlc/QlT0ojqWplzhUF+NMxNvO 9BbpbeV+Gyff1hX+zRTINg1FYoLpDN+Ck6yCM+79IDTawhfxFyhwNOqNi6qydTmx Kdito9tE+k4QFlWLMQw07cRTIxEcE68IezpZ17rJ58I1iWVIAsJklZVp/I6l/5kW zkN1Xq/YoRl4HuaFgFKW5rqj+w== -----END CERTIFICATE-----Generated at Fri Jul 24 00:13:37 2026 by rpki-client