$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft File: dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json) Hash identifier: xdpMstKwQPGmbgS+mcF2oxbyNBU6R/Wi58we74egaso= Subject key identifier: 21:F6:7E:09:86:26:C0:E8:95:98:8A:EC:54:2B:53:C0:FF:79:69:10 Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft Manifest number: 0386 Signing time: Thu 23 Jul 2026 01:50:18 +0000 Manifest this update: Thu 23 Jul 2026 01:50:18 +0000 Manifest next update: Thu 30 Jul 2026 01:50:18 +0000 Files and hashes: 1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: piO3bvUjm1mLq9WOWQAYP4jaeeUASpj89UIhvdzI6FI=) 2: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: HpPZhZVSwGrzf4zGYjjyQ7ueOCim2ZvtK0gkwPhEOmI=) 3: 7F78A06E6BBD11F18D81D59C7947A888.roa (hash: eg0ecmCsbK5JnVphz+icPr5TGD+NYgXexf2SF0w1KKU=) 4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: PAqkmFF7NdZLc+WBtc68ZNEhsmCDHgoBRZN4pVqjKP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Jul 23 01:50:18 2026 GMT Not After : Jul 30 01:50:18 2026 GMT Subject: CN=6a61735a-106c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:cb:3a:f3:dc:de:6f:36:ac:cc:7d:0b:1b: 5d:f8:e0:c8:e2:6e:14:d0:23:e9:fb:11:1c:e7:e8: ff:75:ca:6a:68:87:7b:e1:e0:06:66:b8:10:a1:b4: 71:17:c3:fb:c2:24:46:0d:a2:e1:90:43:17:7f:2e: cf:62:4e:57:18:1f:de:ad:52:83:bf:69:c4:0c:b6: a1:d0:61:50:29:e0:d3:4d:40:23:b1:3d:11:c0:4e: 73:cb:93:b4:9f:01:8f:ec:87:51:cb:f2:39:87:c3: eb:c7:9d:93:fb:f5:bd:4b:72:2c:9f:7b:49:d7:1e: 9c:0d:bf:4f:12:e7:09:f3:70:96:29:4e:9b:8d:f8: f4:d2:39:2e:37:d1:9d:2e:4d:aa:c7:97:33:65:4c: ba:29:6d:a6:d6:9b:f7:40:06:d8:e1:cc:9e:f8:8e: fa:7d:e0:1d:e6:84:99:d7:68:9b:bf:b1:57:ed:f1: 9f:b2:27:6c:9b:66:fb:d5:16:76:63:53:81:a4:ef: 73:d9:76:c6:b7:f6:85:5b:c1:2e:65:80:bf:ff:ba: ac:57:70:d2:26:84:14:6a:19:fa:ad:c8:cc:45:b4: 55:28:58:3c:48:c3:26:fc:3e:b5:02:06:89:07:ed: 9a:42:2f:e1:f5:4d:80:e5:b6:02:c6:a5:fd:66:78: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F6:7E:09:86:26:C0:E8:95:98:8A:EC:54:2B:53:C0:FF:79:69:10 X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:4d:bd:84:f6:5b:e6:3d:11:28:1e:1b:e1:bd:00:52:ce:d2: 23:86:4a:1e:71:4a:f8:95:cc:f2:e7:16:03:24:97:8c:99:3b: 1c:d5:25:04:68:69:e8:8a:c6:60:ad:cf:b8:c4:df:69:36:3d: 3a:ef:df:0c:ba:3e:28:b9:2c:f8:2d:a5:ee:3e:18:b5:94:27: 38:ed:f6:2d:ea:58:93:70:8c:ab:5e:2a:03:e0:eb:e1:af:11: 69:00:5f:2b:23:ba:1e:5a:1b:74:01:93:b3:fc:95:e8:28:49: 34:f3:e1:da:da:c8:26:6f:14:a0:b0:8f:71:5c:3c:86:5d:08: fe:16:09:d2:77:4d:06:5d:1d:ed:b9:cc:0a:08:88:27:37:f2: 3f:92:e5:c0:22:a1:f2:31:1a:8d:bb:84:97:68:f8:05:4e:26: b1:42:f6:6b:0c:ef:f1:ba:0a:38:f0:5d:b9:42:34:94:0a:55: 4a:1f:b9:89:f5:fa:55:a6:f6:22:1d:c3:fa:bd:73:5b:c7:fd: 3c:20:a3:36:b3:c9:26:4b:b0:02:b9:69:23:95:14:d4:70:5e: 28:d7:f0:38:64:f4:0a:13:30:8f:a1:56:13:4e:97:d0:92:33: b5:55:38:95:4d:2e:12:d5:0f:a3:b0:82:0a:ea:16:42:d1:a3: 73:6d:86:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjYwNzIzMDE1MDE4WhcNMjYwNzMwMDE1MDE4WjAYMRYwFAYD VQQDEw02YTYxNzM1YS0xMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqL3LOvPc3m82rMx9Cxtd+ODI4m4U0CPp+xEc5+j/dcpqaId74eAGZrgQobRx F8P7wiRGDaLhkEMXfy7PYk5XGB/erVKDv2nEDLah0GFQKeDTTUAjsT0RwE5zy5O0 nwGP7IdRy/I5h8Prx52T+/W9S3Isn3tJ1x6cDb9PEucJ83CWKU6bjfj00jkuN9Gd Lk2qx5czZUy6KW2m1pv3QAbY4cye+I76feAd5oSZ12ibv7FX7fGfsidsm2b71RZ2 Y1OBpO9z2XbGt/aFW8EuZYC//7qsV3DSJoQUahn6rcjMRbRVKFg8SMMm/D61AgaJ B+2aQi/h9U2A5bYCxqX9ZngePQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCH2fgmG JsDolZiK7FQrU8D/eWkQMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zMENDMDg0QTA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJr by1LMGVjZWtESmtDT0RhNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkU29hPZb5j0RKB4b4b0AUs7SI4ZKHnFK+JXM8ucWAySXjJk7HNUlBGhp6IrG YK3PuMTfaTY9Ou/fDLo+KLks+C2l7j4YtZQnOO32LepYk3CMq14qA+Dr4a8RaQBf KyO6HlobdAGTs/yV6ChJNPPh2trIJm8UoLCPcVw8hl0I/hYJ0ndNBl0d7bnMCgiI JzfyP5LlwCKh8jEajbuEl2j4BU4msUL2awzv8boKOPBduUI0lApVSh+5ifX6Vab2 Ih3D+r1zW8f9PCCjNrPJJkuwArlpI5UU1HBeKNfwOGT0ChMwj6FWE06X0JIztVU4 lU0uEtUPo7CCCuoWQtGjc22GuQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:22:58 2026 by rpki-client