$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft File: up0lGkqfrMTkpmOHdQooZioxAFc.mft (raw, json) Hash identifier: ei+0MVab8KrDtec+4fjlrrZ9Kom6c1Gtrxew03RhIb8= Subject key identifier: 66:30:03:69:4A:5F:31:07:9E:E3:15:CB:CD:F7:EC:D9:96:E7:47:F6 Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Certificate serial: 358A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft Manifest number: 3574 Signing time: Wed 22 Jul 2026 14:48:21 +0000 Manifest this update: Wed 22 Jul 2026 14:48:21 +0000 Manifest next update: Wed 29 Jul 2026 14:48:21 +0000 Files and hashes: 1: up0lGkqfrMTkpmOHdQooZioxAFc.crl (hash: La8My8t9WdxPdJ68FWzI4SJos4Y3Iy3C1oLeevcycrY=) 2: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (hash: wpF9ptajaxcFCU5XYXYL7kAycTSdDrhOWM0Rnpw1Xnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13706 (0x358a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Validity Not Before: Jul 22 14:48:21 2026 GMT Not After : Jul 29 14:48:21 2026 GMT Subject: CN=6a60d835-8caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:78:65:7b:c8:a5:3f:74:a8:c7:78:02:df:76: d6:17:18:cd:63:56:02:8f:2d:7a:e1:8c:21:e4:a6: 50:bd:13:b0:09:cf:99:c2:79:f2:0d:37:43:4e:da: 41:e6:da:0f:38:c1:73:fa:6e:75:8a:78:da:06:9e: 71:2a:f8:cc:99:bd:f6:46:f3:6a:fe:82:00:2b:82: 83:c8:90:a1:b9:87:db:b1:8e:a0:2b:22:b1:b4:ac: 1a:0e:ed:fb:08:e3:45:07:d8:f7:45:16:9f:a1:9b: d8:93:67:ab:99:2f:88:e3:77:39:90:38:78:5c:b3: 0f:62:e6:93:54:cd:d2:e9:28:6e:62:95:f9:b7:4b: 55:a0:30:48:fb:6b:17:96:59:a3:b5:9e:84:bf:6f: c0:5e:16:06:40:0a:23:f8:bc:59:ec:16:91:7a:0f: 22:e3:4c:bd:6c:e1:42:d5:68:59:a3:f3:8f:22:b6: 73:c4:bb:52:3c:65:9b:79:d9:56:51:b7:32:24:cb: 57:12:2b:7d:1a:b7:eb:6f:99:65:4c:55:3e:6c:ef: 05:67:1a:b2:53:ff:e5:92:38:2e:c4:f8:5f:d5:52: 16:57:d6:01:9d:47:3f:52:96:6e:29:ac:e5:be:49: 2d:1a:fa:c4:d3:0a:01:b3:b0:a3:fb:94:0a:d1:e7: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:30:03:69:4A:5F:31:07:9E:E3:15:CB:CD:F7:EC:D9:96:E7:47:F6 X509v3 Authority Key Identifier: keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d1:4a:74:47:70:59:41:21:47:1f:9f:65:97:fc:6f:d9:97: f6:ec:bb:95:28:86:62:40:82:bb:30:cb:4c:1e:b4:9c:6f:f6: 1d:35:35:4d:b6:e5:8a:97:aa:e8:aa:14:14:0b:09:fa:05:40: 6c:4f:00:a7:5a:b4:85:02:e8:ad:47:e0:a3:60:01:d7:d6:05: 06:28:48:9b:d6:a3:f3:7e:e9:8d:6e:b7:5f:b6:e1:ec:12:87: 21:a2:a6:15:a4:b9:b4:3c:8b:fd:ca:f2:27:45:30:f3:e1:22: 0c:a2:b6:5f:75:aa:38:62:da:33:d6:05:88:4a:88:d9:d7:a5: e6:4b:91:43:8f:06:df:54:66:03:59:c9:e6:ce:bf:fa:2f:92: 82:10:6d:9b:e8:41:7f:35:9d:40:d9:92:88:dd:18:28:7a:0e: c7:5b:d5:4f:66:9e:39:d4:cb:e5:0c:09:65:72:88:cf:bf:f8: 7f:12:9b:b6:82:a5:83:5e:dc:9c:20:06:76:75:0e:23:12:b4: a8:76:13:66:01:86:69:68:35:2b:6e:e7:42:34:5c:48:1a:0e: b0:f0:1f:c1:28:4e:0d:6b:50:a7:2e:64:16:76:e1:1a:80:80: 04:b0:2e:e1:8d:96:a5:34:60:4c:4a:57:ca:ba:36:b4:89:dd: c9:95:64:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2 MkEzMTAwNTcwHhcNMjYwNzIyMTQ0ODIxWhcNMjYwNzI5MTQ0ODIxWjAYMRYwFAYD VQQDEw02YTYwZDgzNS04Y2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3hle8ilP3Sox3gC33bWFxjNY1YCjy164Ywh5KZQvROwCc+ZwnnyDTdDTtpB 5toPOMFz+m51injaBp5xKvjMmb32RvNq/oIAK4KDyJChuYfbsY6gKyKxtKwaDu37 CONFB9j3RRafoZvYk2ermS+I43c5kDh4XLMPYuaTVM3S6ShuYpX5t0tVoDBI+2sX llmjtZ6Ev2/AXhYGQAoj+LxZ7BaReg8i40y9bOFC1WhZo/OPIrZzxLtSPGWbedlW UbcyJMtXEit9Grfrb5llTFU+bO8FZxqyU//lkjguxPhf1VIWV9YBnUc/UpZuKazl vkktGvrE0woBs7Cj+5QK0edUOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGYwA2lK XzEHnuMVy8337NmW50f2MB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU4MS9CQjhGREZGRTFEOTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJN VGtwbU9IZFFvb1ppb3hBRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGtFKdEdwWUEhRx+fZZf8b9mX9uy7lSiGYkCCuzDLTB60nG/2HTU1Tbblipeq 6KoUFAsJ+gVAbE8Ap1q0hQLorUfgo2AB19YFBihIm9aj837pjW63X7bh7BKHIaKm FaS5tDyL/cryJ0Uw8+EiDKK2X3WqOGLaM9YFiEqI2del5kuRQ48G31RmA1nJ5s6/ +i+SghBtm+hBfzWdQNmSiN0YKHoOx1vVT2aeOdTL5QwJZXKIz7/4fxKbtoKlg17c nCAGdnUOIxK0qHYTZgGGaWg1K27nQjRcSBoOsPAfwShODWtQpy5kFnbhGoCABLAu 4Y2WpTRgTEpXyro2tIndyZVkAg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:26:37 2026 by rpki-client