$ rpki-client -vvf rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft File: haeIySXAhvfi-8AHHZ6SmOwCPlk.mft (raw, json) Hash identifier: 7N2MT4rBKU4DPmN90DPWfmFv4zssPfwqOUtnsbYNoUs= Subject key identifier: 53:92:E3:59:39:92:3B:43:34:72:85:2A:69:FE:51:01:F4:B7:2A:F3 Authority key identifier: 85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59 Certificate issuer: /CN=A9163FDD/serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft Manifest number: 29 Signing time: Thu 23 Jul 2026 10:49:39 +0000 Manifest this update: Thu 23 Jul 2026 10:49:39 +0000 Manifest next update: Thu 30 Jul 2026 10:49:39 +0000 Files and hashes: 1: haeIySXAhvfi-8AHHZ6SmOwCPlk.crl (hash: KrmmiWOroBcWd1yrLzhOh9NgTyeFOz5Oux5rVRMhFv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163FDD, serialNumber=85A788C925C086F7E2FBC0071D9E9298EC023E59 Validity Not Before: Jul 23 10:49:39 2026 GMT Not After : Jul 30 10:49:39 2026 GMT Subject: CN=6a61f1c3-e10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:ad:d8:7c:4f:fa:e5:66:58:fb:a7:25:4d: 42:1c:74:af:7d:87:6b:bd:2d:ab:32:10:05:5b:88: a9:1d:91:2f:d5:1f:4a:c0:fd:5c:a9:a3:3b:9d:78: c6:a5:cf:b3:42:fb:7a:fc:d6:53:8a:70:54:fb:c2: 99:a3:27:c3:6f:0c:3b:1d:b0:36:60:4d:d9:e4:68: a4:e6:58:c1:1a:ee:6b:6d:93:ca:19:c6:e4:ba:4b: 35:48:54:c6:8d:1e:d2:dc:94:64:b6:79:be:ee:24: 3c:bb:59:11:de:bb:f8:ba:69:ea:dd:d5:f6:39:ef: f2:54:4d:56:a9:28:7d:3d:0f:56:cd:f8:80:86:5b: d3:7b:6c:17:01:88:da:a3:61:b9:52:7b:52:9f:61: 49:a6:d4:f5:a1:93:28:a8:6f:42:84:4f:ca:3d:c9: 3f:a3:13:7f:c6:85:86:dc:e4:e6:bc:77:30:6b:70: eb:b4:0d:1d:ff:da:f5:6c:96:97:ea:5b:c1:b8:ef: 8c:02:f0:d4:1a:f9:f5:45:77:1a:74:a3:b3:6a:eb: be:35:93:83:7f:b6:ca:4b:68:61:52:c5:8e:b5:70: 84:03:4e:fc:cc:f8:9c:c8:c9:dd:e7:94:8f:a6:d8: db:db:b6:72:0a:36:1f:36:03:e1:75:8a:30:48:a9: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:92:E3:59:39:92:3B:43:34:72:85:2A:69:FE:51:01:F4:B7:2A:F3 X509v3 Authority Key Identifier: keyid:85:A7:88:C9:25:C0:86:F7:E2:FB:C0:07:1D:9E:92:98:EC:02:3E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haeIySXAhvfi-8AHHZ6SmOwCPlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/3F48B0B447B511F1A32F452AAB833773/haeIySXAhvfi-8AHHZ6SmOwCPlk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:9b:4f:ac:7b:22:78:34:d9:a9:6a:18:17:cc:1d:c2:ee:ba: 99:5d:5b:2d:91:6a:f4:1d:fd:e1:b7:36:c3:2d:8e:29:b7:39: e3:41:12:b5:0d:b4:3a:e8:07:f7:4e:9e:1c:04:32:e1:e7:c3: e9:74:5d:a2:6d:3e:b7:80:e3:64:a0:df:bc:b8:44:03:7e:8a: 2d:f3:f6:5c:19:50:71:74:0a:0e:80:2e:66:e7:86:21:4c:30: ce:20:58:2c:e6:6a:b7:4e:42:f0:1a:a0:07:7e:3d:6a:f3:3b: 05:67:57:9a:f8:40:f5:56:1c:a7:f0:27:f5:44:f2:b1:a5:a8: bb:b2:44:49:7c:56:01:52:1a:57:26:53:8c:79:e1:02:54:59: 83:6c:c1:cc:7d:b6:7c:44:ab:0b:8b:14:6d:c6:c9:95:85:2e: 9d:09:cd:2a:87:44:41:47:1b:9c:fa:79:57:21:25:53:38:41: 31:4b:e0:fb:75:1d:05:9a:c4:4e:3e:d5:c8:21:1e:a8:01:fd: bd:17:15:cd:7e:d4:c3:58:eb:8f:b5:90:54:bd:6b:b3:16:19: 87:cc:e6:30:3a:87:8d:58:3c:dc:9f:bf:a5:cc:20:d3:fd:60: 6b:2f:42:5e:28:a4:ea:f7:bf:c4:66:bb:9c:9b:63:83:26:73: 4b:f1:a1:40 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0ZERDExMC8GA1UEBRMoODVBNzg4QzkyNUMwODZGN0UyRkJDMDA3MUQ5RTkyOThF QzAyM0U1OTAeFw0yNjA3MjMxMDQ5MzlaFw0yNjA3MzAxMDQ5MzlaMBgxFjAUBgNV BAMTDTZhNjFmMWMzLWUxMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyd63YfE/65WZY+6clTUIcdK99h2u9LasyEAVbiKkdkS/VH0rA/VypozudeMal z7NC+3r81lOKcFT7wpmjJ8NvDDsdsDZgTdnkaKTmWMEa7mttk8oZxuS6SzVIVMaN HtLclGS2eb7uJDy7WRHeu/i6aerd1fY57/JUTVapKH09D1bN+ICGW9N7bBcBiNqj YblSe1KfYUmm1PWhkyiob0KET8o9yT+jE3/GhYbc5Oa8dzBrcOu0DR3/2vVslpfq W8G474wC8NQa+fVFdxp0o7Nq6741k4N/tspLaGFSxY61cIQDTvzM+JzIyd3nlI+m 2NvbtnIKNh82A+F1ijBIqe3/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUU5LjWTmS O0M0coUqaf5RAfS3KvMwHwYDVR0jBBgwFoAUhaeIySXAhvfi+8AHHZ6SmOwCPlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzRkRELzNGNDhCMEI0NDdC NTExRjFBMzJGNDUyQUFCODMzNzczL2hhZUl5U1hBaHZmaS04QUhIWjZTbU93Q1Bs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGFlSXlTWEFodmZpLThBSEhaNlNtT3dDUGxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz RkRELzNGNDhCMEI0NDdCNTExRjFBMzJGNDUyQUFCODMzNzczL2hhZUl5U1hBaHZm aS04QUhIWjZTbU93Q1Bsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZm0+seyJ4NNmpahgXzB3C7rqZXVstkWr0Hf3htzbDLY4ptznjQRK1DbQ66Af3 Tp4cBDLh58PpdF2ibT63gONkoN+8uEQDfoot8/ZcGVBxdAoOgC5m54YhTDDOIFgs 5mq3TkLwGqAHfj1q8zsFZ1ea+ED1Vhyn8Cf1RPKxpai7skRJfFYBUhpXJlOMeeEC VFmDbMHMfbZ8RKsLixRtxsmVhS6dCc0qh0RBRxuc+nlXISVTOEExS+D7dR0FmsRO PtXIIR6oAf29FxXNftTDWOuPtZBUvWuzFhmHzOYwOoeNWDzcn7+lzCDT/WBrL0Je KKTq97/EZrucm2ODJnNL8aFA -----END CERTIFICATE-----Generated at Fri Jul 24 07:13:13 2026 by rpki-client