$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft File: jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json) Hash identifier: sGNN3LhSt09nIlqsyOrTomEMGDQCm/By4dIo6/Mp5E0= Subject key identifier: 9A:C8:20:31:D9:2B:22:E6:34:9A:B2:4B:0D:3A:AC:69:0A:66:31:D3 Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft Manifest number: 01D2 Signing time: Thu 23 Jul 2026 05:06:17 +0000 Manifest this update: Thu 23 Jul 2026 05:06:17 +0000 Manifest next update: Thu 30 Jul 2026 05:06:17 +0000 Files and hashes: 1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: 530GsRv0CBTecd3RGDu9Q9bwI9wXLmMhO24psB0eqxc=) 2: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: owQYw9h+uccODUhkikEdlCDKK/hYVX6MWumcBf31Hrw=) 3: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: 0E4qYTpBck7zqd7XOVsdpYAiDLiP6vH0ev4CSQjnfXI=) 4: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: /8Gd5gZ758sNArtTS8yRpNug05q/Okyd5D7W2BUqcNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Validity Not Before: Jul 23 05:06:17 2026 GMT Not After : Jul 30 05:06:17 2026 GMT Subject: CN=6a61a149-227d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d0:d8:45:7e:72:db:10:21:26:96:54:9e:04: ee:75:3e:2a:72:09:de:97:0b:4e:43:c1:f4:34:a4: d7:76:e8:77:c0:3c:04:36:95:3b:7c:50:f8:18:f3: 34:b1:fe:95:43:15:d0:40:8f:d5:d6:48:dd:f0:51: b1:eb:f5:6d:20:6b:a1:90:f9:15:ed:ed:3e:e7:ee: 50:fb:ad:f2:26:15:e6:9c:9b:20:fe:81:85:99:0e: 2f:70:12:87:43:7b:31:91:4f:48:95:88:06:ad:9e: 96:3d:fc:a2:41:52:1f:0d:53:81:df:2c:66:62:62: 30:b4:ce:65:9a:24:8e:76:af:48:7e:52:55:57:81: 40:23:e6:5e:a9:4d:f0:68:e6:3a:2c:df:18:37:cd: f6:31:e6:7f:b4:7d:53:72:df:5b:5e:a4:63:55:a9: e2:9b:37:80:5d:f7:19:4d:47:9f:92:b4:48:18:aa: 3a:31:4a:bd:6a:94:4c:4e:9c:de:5c:0c:04:80:74: cd:87:77:90:ca:df:69:10:67:4d:b0:fc:de:00:07: 66:2d:60:a6:5f:76:f0:ea:57:15:ae:e8:12:81:c9: 11:30:f2:ab:76:1e:2b:93:64:fd:3c:75:73:5e:11: d1:86:b9:64:df:1a:96:c5:58:61:51:51:b8:99:7f: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C8:20:31:D9:2B:22:E6:34:9A:B2:4B:0D:3A:AC:69:0A:66:31:D3 X509v3 Authority Key Identifier: keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:78:29:ff:56:9b:00:28:4f:51:83:bd:88:a9:67:f0:aa:12: 80:57:3a:21:f5:cf:6a:f1:85:ab:16:34:6f:36:0b:6c:e3:8d: b6:3b:44:87:5c:17:04:da:63:90:9e:a4:1f:25:4f:9e:08:5f: 41:5d:2b:15:b9:f5:6e:b8:de:a2:e9:8a:fa:79:05:9d:27:a4: e2:61:60:d1:95:0b:ce:08:42:b8:ee:63:06:1d:c4:8e:05:d7: 48:df:95:c6:cc:8d:15:20:53:00:1c:a1:39:74:0c:5f:cc:5b: 55:0c:7c:8e:a3:89:d0:a3:33:be:0e:fb:9b:23:e9:52:d2:89: 17:c0:47:ac:72:d5:88:37:dc:27:7a:ec:bf:13:f4:aa:a0:37: 26:67:7f:d4:e3:c3:e2:26:28:76:49:a1:b6:ce:44:27:ba:05: e6:1a:4d:b3:71:7f:a1:2b:ef:73:3c:33:36:81:bf:d2:61:53: 4c:1a:a0:26:24:92:f2:d0:af:c0:da:65:16:a1:3a:c1:22:21: 9e:d1:e7:4d:b7:77:f1:67:92:b7:5e:b8:88:10:d6:50:ad:1b: 05:c9:88:ec:7b:62:2e:7e:09:e8:eb:3d:01:fd:25:ed:a2:f0: 6a:17:89:6e:aa:39:ee:8e:18:0d:cf:ab:0f:08:ba:c6:86:f1: e6:fc:e7:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzMzQxMTAvBgNVBAUTKDhFOERENUIyQzEwMUI5ODNBNzk5QzkzOEFBMEU0MEE2 NTFGQ0JFMDcwHhcNMjYwNzIzMDUwNjE3WhcNMjYwNzMwMDUwNjE3WjAYMRYwFAYD VQQDEw02YTYxYTE0OS0yMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dDYRX5y2xAhJpZUngTudT4qcgnelwtOQ8H0NKTXduh3wDwENpU7fFD4GPM0 sf6VQxXQQI/V1kjd8FGx6/VtIGuhkPkV7e0+5+5Q+63yJhXmnJsg/oGFmQ4vcBKH Q3sxkU9IlYgGrZ6WPfyiQVIfDVOB3yxmYmIwtM5lmiSOdq9IflJVV4FAI+ZeqU3w aOY6LN8YN832MeZ/tH1Tct9bXqRjVanimzeAXfcZTUefkrRIGKo6MUq9apRMTpze XAwEgHTNh3eQyt9pEGdNsPzeAAdmLWCmX3bw6lcVrugSgckRMPKrdh4rk2T9PHVz XhHRhrlk3xqWxVhhUVG4mX+1OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrIIDHZ KyLmNJqySw06rGkKZjHTMB8GA1UdIwQYMBaAFI6N1bLBAbmDp5nJOKoOQKZR/L4H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjMzNC9FN0NEREZDRUM4 RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZT25tY2s0cWc1QXBsSDh2 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvM1Zzc0VCdVlPbm1jazRxZzVBcGxIOHZnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjMzNC9FN0NEREZDRUM4RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZ T25tY2s0cWc1QXBsSDh2Z2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj3gp/1abAChPUYO9iKln8KoSgFc6IfXPavGFqxY0bzYLbOONtjtEh1wXBNpj kJ6kHyVPnghfQV0rFbn1brjeoumK+nkFnSek4mFg0ZULzghCuO5jBh3EjgXXSN+V xsyNFSBTAByhOXQMX8xbVQx8jqOJ0KMzvg77myPpUtKJF8BHrHLViDfcJ3rsvxP0 qqA3Jmd/1OPD4iYodkmhts5EJ7oF5hpNs3F/oSvvczwzNoG/0mFTTBqgJiSS8tCv wNplFqE6wSIhntHnTbd38WeSt164iBDWUK0bBcmI7HtiLn4J6Os9Af0l7aLwaheJ bqo57o4YDc+rDwi6xobx5vznPA== -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:50 2026 by rpki-client