$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft File: d9okgAToxYcr33K6wSIsfMtujjc.mft (raw, json) Hash identifier: YEygpBhAzoILpx7rR/xByrZ3XyMxMq371brIWqrWwj8= Subject key identifier: 99:28:1E:98:81:A5:65:D0:D7:3C:29:60:F3:99:70:FD:CF:3E:DD:0E Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft Manifest number: 0A35 Signing time: Wed 22 Jul 2026 20:10:15 +0000 Manifest this update: Wed 22 Jul 2026 20:10:14 +0000 Manifest next update: Wed 29 Jul 2026 20:10:14 +0000 Files and hashes: 1: d9okgAToxYcr33K6wSIsfMtujjc.crl (hash: EjKps6CoAa6bDfLx+MUwFL/Mr2IoV7BqKmZRF9Jmst4=) 2: 3BABBD7699E611EAB3C00943C4F9AE02.roa (hash: goeW12JBA3cKKGwjatqM92u32XRcfD8Zb78gB6ELWSk=) 3: 3A58D9F499E611EAB3C00943C4F9AE02.roa (hash: Ix/A1HAv4E1o+T96OwAx6diCaMu8Un7l8lL1cR9lZ0I=) 4: 3AFD491C99E611EAB3C00943C4F9AE02.roa (hash: hAA41RG01uNOAJq/J2qFIRJdJvtjuAyTCQh8VD7YTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156342, serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Validity Not Before: Jul 22 20:10:14 2026 GMT Not After : Jul 29 20:10:14 2026 GMT Subject: CN=6a6123a6-5ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cf:76:0e:2d:77:df:34:51:14:53:f9:f5:26: 5c:26:ce:c9:09:49:5c:9a:79:bb:28:65:96:e9:47: df:aa:b8:63:30:c4:bd:d0:42:10:47:79:05:f6:f5: 31:4d:13:32:99:59:5b:fc:b4:24:53:eb:ff:ad:dc: e4:69:b6:87:34:5a:6e:bc:60:75:4f:fa:cd:b5:ba: e0:c2:d8:f2:42:fa:d9:31:9f:94:b8:2e:f2:f2:7c: 73:23:9a:2b:3d:73:50:0c:cc:ad:c3:62:1b:3c:96: fe:a4:45:08:43:0b:11:d9:57:1f:af:15:60:53:46: 2d:ee:90:b7:77:1f:25:ef:7e:b2:a7:68:b3:1d:69: 4d:90:f6:20:38:c2:29:7f:70:06:fa:79:c4:96:51: 09:0f:14:11:39:f7:13:d8:3b:bc:88:6d:02:3a:2b: cb:24:06:8a:43:61:df:a6:0c:67:84:3d:43:89:eb: a3:ec:9f:02:2f:a0:f0:c9:fa:d8:c9:cd:48:bb:47: 4c:8b:8c:c0:a2:9c:45:39:c4:0e:80:db:2c:34:8b: cb:38:f5:d1:00:e3:42:d7:a4:47:91:07:b2:e7:eb: 4e:0e:a4:01:92:98:eb:4e:eb:11:30:4c:da:eb:ac: d7:33:80:89:14:37:f2:4d:10:9c:be:fb:95:05:35: 2a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:28:1E:98:81:A5:65:D0:D7:3C:29:60:F3:99:70:FD:CF:3E:DD:0E X509v3 Authority Key Identifier: keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6e:20:90:2f:4b:f2:1a:1d:5e:c1:b7:71:46:2f:22:03:e2: 1e:50:83:90:98:9f:c0:e0:82:f6:58:28:f5:56:8a:93:bc:32: 28:5a:31:23:59:0a:10:fd:df:67:5c:3e:f4:69:1d:82:a2:c1: ec:37:43:20:18:33:67:81:6a:df:30:ca:c6:24:9d:79:20:0c: 73:82:fd:76:7a:6f:97:b7:cb:5d:d5:cc:58:44:a6:c0:5a:66: 51:bb:d6:21:91:1f:8a:b9:67:b0:3a:9d:a4:cd:12:62:e1:43: c7:5a:28:10:ce:92:b4:69:eb:40:cf:16:9f:39:6e:fb:27:fc: 21:da:b3:1f:0e:57:25:d5:9f:9b:e2:75:da:b6:c3:49:cf:06: d1:d8:d4:8c:57:ad:d0:84:31:c4:12:9c:f0:20:3a:ec:6b:a4: 4e:f4:4d:2b:21:30:83:a1:4b:0a:8a:47:e9:5f:80:73:9f:12: f9:f6:00:56:bb:fc:9f:7d:32:cf:13:ca:82:84:c8:3d:4d:8e: 93:e0:b3:cd:7b:08:28:97:62:93:16:05:2b:26:56:76:43:f5: 0d:9c:9b:d3:a1:d7:95:15:da:3d:8a:36:6a:c4:be:1a:d0:ea: ca:4e:4d:10:fb:0d:1d:c0:ce:c7:f1:7d:ac:5d:f6:68:d9:8c: 03:ad:e6:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzNDIxMTAvBgNVBAUTKDc3REEyNDgwMDRFOEM1ODcyQkRGNzJCQUMxMjIyQzdD Q0I2RThFMzcwHhcNMjYwNzIyMjAxMDE0WhcNMjYwNzI5MjAxMDE0WjAYMRYwFAYD VQQDEw02YTYxMjNhNi01Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAls92Di133zRRFFP59SZcJs7JCUlcmnm7KGWW6UffqrhjMMS90EIQR3kF9vUx TRMymVlb/LQkU+v/rdzkabaHNFpuvGB1T/rNtbrgwtjyQvrZMZ+UuC7y8nxzI5or PXNQDMytw2IbPJb+pEUIQwsR2VcfrxVgU0Yt7pC3dx8l736yp2izHWlNkPYgOMIp f3AG+nnEllEJDxQROfcT2Du8iG0COivLJAaKQ2HfpgxnhD1Dieuj7J8CL6DwyfrY yc1Iu0dMi4zAopxFOcQOgNssNIvLOPXRAONC16RHkQey5+tODqQBkpjrTusRMEza 66zXM4CJFDfyTRCcvvuVBTUqWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkoHpiB pWXQ1zwpYPOZcP3PPt0OMB8GA1UdIwQYMBaAFHfaJIAE6MWHK99yusEiLHzLbo43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjM0Mi9CREY4OTA4MDk5 RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZY3IzM0s2d1NJc2ZNdHVq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q5b2tnQVRveFljcjMzSzZ3U0lzZk10dWpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjM0Mi9CREY4OTA4MDk5RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZ Y3IzM0s2d1NJc2ZNdHVqamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALG4gkC9L8hodXsG3cUYvIgPiHlCDkJifwOCC9lgo9VaKk7wyKFoxI1kKEP3f Z1w+9GkdgqLB7DdDIBgzZ4Fq3zDKxiSdeSAMc4L9dnpvl7fLXdXMWESmwFpmUbvW IZEfirlnsDqdpM0SYuFDx1ooEM6StGnrQM8Wnzlu+yf8IdqzHw5XJdWfm+J12rbD Sc8G0djUjFet0IQxxBKc8CA67GukTvRNKyEwg6FLCopH6V+Ac58S+fYAVrv8n30y zxPKgoTIPU2Ok+CzzXsIKJdikxYFKyZWdkP1DZyb06HXlRXaPYo2asS+GtDqyk5N EPsNHcDOx/F9rF32aNmMA63mHg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:04:35 2026 by rpki-client