$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json) Hash identifier: 2RioH436dbW0v0pxEn2T/5MT9U9nUzYNe/JMkzsJFQs= Subject key identifier: E8:80:9D:2C:5D:19:0F:E6:91:C5:64:2C:CF:F9:08:34:FA:12:9F:E6 Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Certificate serial: 09CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft Manifest number: 09BA Signing time: Wed 22 Jul 2026 20:22:19 +0000 Manifest this update: Wed 22 Jul 2026 20:22:19 +0000 Manifest next update: Wed 29 Jul 2026 20:22:19 +0000 Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: vpDCjYzBOAlhJ4W8Xb3nU4Y3ycDmDBZFYpUIdiAlQlk=) 2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: CYtTamBw2WXxPcIM3rrSk3dBYaMWIxNwfk91+jxjXp8=) 3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: F7WyOekFgI8ivePs6ZQwLbNz0QkuTR1HhVS0Z6YFZWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2507 (0x9cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Validity Not Before: Jul 22 20:22:19 2026 GMT Not After : Jul 29 20:22:19 2026 GMT Subject: CN=6a61267b-db53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:7a:e1:34:c3:51:2c:2a:0a:bb:80:91:59: 5e:5e:c3:95:3b:8d:87:d2:2f:ed:2f:1a:e0:b8:35: aa:44:5d:1a:dc:bc:bd:4b:44:66:c0:48:79:0c:2a: 5b:e3:91:5b:e0:51:f8:e5:6c:09:3e:2c:38:3f:80: bf:50:0d:c3:46:9e:cf:9e:8e:1f:68:68:4a:54:85: ee:33:3f:0c:76:3d:a5:b9:0e:76:bc:88:0e:e7:ac: a6:08:05:db:67:c7:8a:36:6a:e6:80:43:c4:ed:c8: 01:25:e4:e6:9b:92:65:c0:db:81:e3:d1:de:3f:9e: 3d:c7:eb:09:83:42:94:bf:74:1d:f8:18:50:1e:f2: 12:04:f2:6c:9a:4d:d4:8d:cb:de:51:7d:82:0f:33: 4c:7b:71:f4:97:eb:48:2f:27:f2:ab:34:12:cc:cb: c3:e7:42:59:d0:28:54:71:8b:27:13:d9:5c:eb:0b: 86:00:ad:a6:c6:62:e7:7c:56:3b:ad:88:1f:4f:74: 39:61:b9:1b:a2:75:03:71:2a:61:7c:71:82:a3:1d: c6:31:7a:6b:4f:d7:1f:e9:ba:2d:4c:4f:c0:61:78: cc:48:2e:6f:df:b6:3f:69:4c:86:ee:81:94:43:f4: e1:70:63:90:2e:90:81:4b:74:77:29:90:d6:77:18: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:80:9D:2C:5D:19:0F:E6:91:C5:64:2C:CF:F9:08:34:FA:12:9F:E6 X509v3 Authority Key Identifier: keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c6:50:ea:09:90:33:6d:44:41:a7:81:db:61:5c:da:81:e1: 31:10:e6:ef:02:ea:7d:77:02:72:15:3a:2c:91:a9:f3:b1:4a: fa:23:44:7b:0a:0b:98:74:d8:53:cf:66:0b:c4:60:d4:01:3b: 29:61:ac:a6:90:20:07:cf:ce:8e:e4:e3:9e:86:42:e7:e9:da: df:fe:09:05:7a:27:5b:fe:bb:17:03:e6:de:dc:89:98:0b:ff: 69:11:f3:0b:39:1c:93:f1:f1:6a:6e:13:a3:2f:40:a4:d4:57: d5:f2:50:5d:78:8e:f4:cf:d5:05:43:4b:04:3a:76:c1:30:9f: 82:4e:07:2c:0d:d3:a5:65:89:f1:64:20:55:86:61:40:7a:13: 85:78:8b:a9:1f:52:1b:eb:56:53:c9:84:72:35:11:67:d2:a5: 09:8a:5b:ff:69:60:96:df:58:0e:2f:83:20:d3:6f:3b:2d:af: 8b:77:12:bc:85:92:40:e4:00:0b:d7:f2:5d:55:01:17:2e:f8: b4:a1:80:c2:7f:73:af:01:75:31:9b:41:68:01:cf:de:52:9f: 79:da:a9:c5:5f:60:84:bc:1d:c0:91:2f:9e:a0:ae:d8:96:70: f4:b6:d7:e2:e5:92:5a:23:0d:66:97:90:0e:dd:0c:09:e1:ef: fa:01:5a:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQxOEYxMTAvBgNVBAUTKEQxQjZCRTdDRDUxNTQ1ODEzRUMzMTc2NjgwN0FDREQ5 ODdBOTBGREYwHhcNMjYwNzIyMjAyMjE5WhcNMjYwNzI5MjAyMjE5WjAYMRYwFAYD VQQDEw02YTYxMjY3Yi1kYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKt64TTDUSwqCruAkVleXsOVO42H0i/tLxrguDWqRF0a3Ly9S0RmwEh5DCpb 45Fb4FH45WwJPiw4P4C/UA3DRp7Pno4faGhKVIXuMz8Mdj2luQ52vIgO56ymCAXb Z8eKNmrmgEPE7cgBJeTmm5JlwNuB49HeP549x+sJg0KUv3Qd+BhQHvISBPJsmk3U jcveUX2CDzNMe3H0l+tILyfyqzQSzMvD50JZ0ChUcYsnE9lc6wuGAK2mxmLnfFY7 rYgfT3Q5YbkbonUDcSphfHGCox3GMXprT9cf6botTE/AYXjMSC5v37Y/aUyG7oGU Q/ThcGOQLpCBS3R3KZDWdxiW4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiAnSxd GQ/mkcVkLM/5CDT6Ep/mMB8GA1UdIwQYMBaAFNG2vnzVFUWBPsMXZoB6zdmHqQ/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDE4Ri83NUI5MEQyNEFG QjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZRS13eGRtZ0hyTjJZZXBE OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBiYS1mTlVWUllFLXd4ZG1nSHJOMlllcEQ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDE4Ri83NUI5MEQyNEFGQjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZ RS13eGRtZ0hyTjJZZXBEOTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIcZQ6gmQM21EQaeB22Fc2oHhMRDm7wLqfXcCchU6LJGp87FK+iNEewoLmHTY U89mC8Rg1AE7KWGsppAgB8/OjuTjnoZC5+na3/4JBXonW/67FwPm3tyJmAv/aRHz Czkck/Hxam4Toy9ApNRX1fJQXXiO9M/VBUNLBDp2wTCfgk4HLA3TpWWJ8WQgVYZh QHoThXiLqR9SG+tWU8mEcjURZ9KlCYpb/2lglt9YDi+DINNvOy2vi3cSvIWSQOQA C9fyXVUBFy74tKGAwn9zrwF1MZtBaAHP3lKfedqpxV9ghLwdwJEvnqCu2JZw9LbX 4uWSWiMNZpeQDt0MCeHv+gFaQg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:27:16 2026 by rpki-client