$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft File: UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json) Hash identifier: TkEYe8CcfVxCaLNiBlFcY+0t5WoJnne22Xcytfc6jkc= Subject key identifier: 45:A0:C1:EA:BB:3D:7E:2A:3E:30:E0:5F:AB:0F:3F:65:CD:19:CE:79 Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft Manifest number: 04C0 Signing time: Thu 23 Jul 2026 00:40:48 +0000 Manifest this update: Thu 23 Jul 2026 00:40:48 +0000 Manifest next update: Thu 30 Jul 2026 00:40:48 +0000 Files and hashes: 1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: QXWUYYycSPVXQMg8PogvDgdIOQ9SYt3MnkrZW2Lsb0M=) 2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: /VTKAsBYqoqlqAxKe4NHOLUI09z6HI4GOHUHa9bO0Ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157031, serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Validity Not Before: Jul 23 00:40:48 2026 GMT Not After : Jul 30 00:40:48 2026 GMT Subject: CN=6a616310-11f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:c2:05:ed:4f:84:b8:f9:85:24:0f:96:2a: 2c:46:26:5d:7b:f1:c9:6a:59:35:46:86:58:b2:26: 77:96:8b:cb:f4:b9:51:11:9d:9d:03:2a:36:10:c2: dd:18:8a:e7:19:b0:9b:61:77:fb:a4:ee:a6:fc:f9: 51:1e:df:8b:17:e6:d6:03:f1:40:b4:c5:21:86:15: 4b:67:8e:61:75:f2:d5:fe:63:6c:99:94:33:2b:16: 75:7b:26:6e:32:7e:1c:c0:b8:de:5c:bc:37:2e:0d: b8:8c:7c:23:c7:c0:88:8e:79:9c:a9:f3:f9:01:f6: 42:0d:cb:6d:a9:4f:e9:a7:e5:0d:c4:33:31:8b:28: 64:b9:8b:e1:b0:0e:38:65:24:3d:16:6c:7d:dd:15: 68:8c:0f:ba:61:2d:84:ab:8f:68:84:3a:8c:b6:9d: 52:e3:5e:a1:30:4f:6a:15:97:f3:e8:40:c2:94:4a: c0:e5:c2:7a:26:9b:ea:1f:5e:30:f4:fb:05:38:37: bc:af:6f:bc:ba:f7:f6:07:c5:50:b0:b6:b0:2c:05: 9c:de:e0:32:5e:a7:79:e3:35:36:b7:31:e7:14:d3: 9a:54:cc:df:d8:fb:0f:33:1d:e5:11:2f:a6:d1:4b: 6c:d6:df:37:c3:21:87:47:b0:26:77:10:46:43:b4: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A0:C1:EA:BB:3D:7E:2A:3E:30:E0:5F:AB:0F:3F:65:CD:19:CE:79 X509v3 Authority Key Identifier: keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ab:ca:93:40:85:96:77:49:f7:af:2c:6d:54:24:6d:f4:b4: 0c:a8:3a:5f:1d:53:f1:99:1a:8a:9e:94:9d:54:19:86:18:3f: 87:1d:6c:39:8a:aa:89:d3:b9:51:3b:52:c0:34:11:01:33:9b: b7:dd:e6:3a:20:54:7a:10:c4:35:d9:3d:b3:32:22:fe:52:88: 65:80:4d:ad:ea:e5:fb:90:4a:95:ea:58:f9:c4:b8:05:51:ea: af:0e:16:74:9f:50:db:37:a8:3b:df:56:8e:44:67:47:74:66: af:7b:d5:b0:05:0d:d8:0b:2b:03:56:ef:49:22:8f:05:68:f5: 3c:b6:59:b1:01:6b:69:17:13:40:86:a9:59:fb:1d:7b:4c:09: fd:a2:d8:28:e4:72:13:15:68:bc:d1:e8:f3:53:68:2f:47:8d: 1b:30:aa:6d:e9:71:1a:87:6b:2c:7d:c8:a0:57:8b:9c:f5:8d: d9:cf:0e:18:79:37:11:3a:e7:de:29:47:fa:fd:75:21:58:f9: 75:64:cb:61:cc:83:c0:1c:33:c7:8b:f4:10:ac:c9:a2:7a:9b: a7:39:bb:b6:de:30:a7:97:40:91:3a:17:72:75:58:ae:1b:67: 80:bb:91:45:12:78:4a:a1:9b:89:fe:2f:79:7a:ff:6f:14:e4: bf:88:35:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwMzExMTAvBgNVBAUTKDUwRTUwRURBRjY0QTJDMjVCNzMxMjM5NjczRDkwNzBG NjE4MzAyNzkwHhcNMjYwNzIzMDA0MDQ4WhcNMjYwNzMwMDA0MDQ4WjAYMRYwFAYD VQQDEw02YTYxNjMxMC0xMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyzCBe1PhLj5hSQPliosRiZde/HJalk1RoZYsiZ3lovL9LlREZ2dAyo2EMLd GIrnGbCbYXf7pO6m/PlRHt+LF+bWA/FAtMUhhhVLZ45hdfLV/mNsmZQzKxZ1eyZu Mn4cwLjeXLw3Lg24jHwjx8CIjnmcqfP5AfZCDcttqU/pp+UNxDMxiyhkuYvhsA44 ZSQ9Fmx93RVojA+6YS2Eq49ohDqMtp1S416hME9qFZfz6EDClErA5cJ6JpvqH14w 9PsFODe8r2+8uvf2B8VQsLawLAWc3uAyXqd54zU2tzHnFNOaVMzf2PsPMx3lES+m 0Uts1t83wyGHR7AmdxBGQ7SPKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWgweq7 PX4qPjDgX6sPP2XNGc55MB8GA1UdIwQYMBaAFFDlDtr2SiwltzEjlnPZBw9hgwJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzAzMS83QTAwNEY3ODdF QzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xDVzNNU09XYzlrSEQyR0RB bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPVU8ydlpLTENXM01TT1djOWtIRDJHREFuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzAzMS83QTAwNEY3ODdFQzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xD VzNNU09XYzlrSEQyR0RBbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd6vKk0CFlndJ968sbVQkbfS0DKg6Xx1T8Zkaip6UnVQZhhg/hx1sOYqqidO5 UTtSwDQRATObt93mOiBUehDENdk9szIi/lKIZYBNrerl+5BKlepY+cS4BVHqrw4W dJ9Q2zeoO99WjkRnR3Rmr3vVsAUN2AsrA1bvSSKPBWj1PLZZsQFraRcTQIapWfsd e0wJ/aLYKORyExVovNHo81NoL0eNGzCqbelxGodrLH3IoFeLnPWN2c8OGHk3ETrn 3ilH+v11IVj5dWTLYcyDwBwzx4v0EKzJonqbpzm7tt4wp5dAkToXcnVYrhtngLuR RRJ4SqGbif4veXr/bxTkv4g1pg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:07:00 2026 by rpki-client