$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: XFytVQ9x3MrOIqV0tPqS4hSfyKIpzIiSZCH3LPEl8ig= Subject key identifier: 61:BB:2B:59:14:84:3D:7E:E1:54:50:BC:4B:F3:78:4C:8B:2D:FB:71 Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 1317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1BDC Signing time: Wed 22 Jul 2026 17:08:04 +0000 Manifest this update: Wed 22 Jul 2026 17:08:03 +0000 Manifest next update: Wed 29 Jul 2026 17:08:03 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: I/PAy05kCkJFCbgV1M053wBxb0Ntew6JBfeSCEfIoRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4887 (0x1317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: Jul 22 17:08:03 2026 GMT Not After : Jul 29 17:08:03 2026 GMT Subject: CN=6a60f8f3-a687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:52:fe:1f:15:43:02:f9:bc:23:e2:ea:bc: 47:bb:1b:cc:06:99:db:3d:e0:e6:4f:ca:c4:b9:c9: 9c:33:81:28:b7:b1:a6:0e:bf:1b:c3:6d:53:e4:56: c7:d2:c4:f4:ec:dc:ca:37:34:bd:e9:a2:41:a6:31: 79:b1:11:57:1f:9c:cd:19:46:c9:b7:88:97:91:c7: 40:02:5e:af:6a:36:ce:df:59:fd:c5:2b:14:e5:22: 22:cc:ac:6f:e1:59:e9:38:ca:5e:ea:aa:9e:8e:ab: f3:96:3e:34:7e:02:18:e2:78:e9:f1:91:a1:61:74: bb:f3:57:31:0a:bb:2c:f9:17:31:1b:36:d7:44:19: 51:b4:89:d8:6f:a3:9d:1b:f9:3f:f1:4e:57:26:2e: ac:1f:30:d2:43:42:50:64:10:9b:3d:27:6e:6c:8e: be:7d:cd:15:d0:2a:8e:fb:52:3b:9d:19:d9:4f:a9: 10:3e:bf:a1:24:69:9c:96:ce:71:1a:40:ae:e9:d3: c0:48:6d:03:6f:ea:c2:1b:83:1a:d2:28:03:15:c3: 40:09:00:ce:93:fb:db:0e:e0:00:63:bd:d9:97:4d: 4f:80:8c:35:a4:58:3d:32:60:17:1b:cd:b8:c8:19: 5f:18:23:57:a1:a0:0b:e9:ec:65:5c:44:c9:3b:f7: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BB:2B:59:14:84:3D:7E:E1:54:50:BC:4B:F3:78:4C:8B:2D:FB:71 X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:66:3d:de:39:84:ee:b3:af:e1:0f:69:74:41:e3:11:88:68: 28:87:ea:98:f2:f3:85:80:a0:16:d1:49:e7:1a:84:46:1e:da: 13:05:f6:51:3b:0f:0a:98:cd:40:16:b0:c1:60:52:00:58:bb: de:3e:42:49:62:6a:d2:6c:2b:8c:e7:f5:23:cf:56:d6:1c:75: 35:65:ac:4d:f8:3b:9c:54:c2:6f:9c:be:f3:a8:eb:a9:3a:05: cc:00:4c:dd:07:73:f5:9e:42:58:80:82:4c:ae:61:64:15:74: e7:32:a2:99:66:aa:4c:53:cf:45:82:dc:8e:1c:50:31:a6:88: a6:66:26:ea:bb:77:4d:c4:a4:43:5a:46:ed:8a:84:7a:4d:d7: b3:02:be:25:d1:7c:40:cb:55:93:18:ce:92:95:ef:38:1b:67: bb:7a:4b:59:63:c6:9b:46:dd:60:47:89:ca:6f:f3:bd:bf:73: 72:1f:8d:a9:05:3f:f3:1d:a8:57:10:f2:b1:83:15:12:35:a9: 5d:5c:19:5c:b7:25:0c:45:16:e4:5c:82:34:8d:fd:03:4d:2e: 48:af:06:04:60:9e:e4:36:10:80:4a:ed:cb:bb:3f:b0:b9:97: d4:82:b4:38:50:5c:e7:a9:39:f3:09:d8:be:e6:51:5e:52:bb: 58:4c:f3:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICExcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjYwNzIyMTcwODAzWhcNMjYwNzI5MTcwODAzWjAYMRYwFAYD VQQDEw02YTYwZjhmMy1hNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK9S/h8VQwL5vCPi6rxHuxvMBpnbPeDmT8rEucmcM4Eot7GmDr8bw21T5FbH 0sT07NzKNzS96aJBpjF5sRFXH5zNGUbJt4iXkcdAAl6vajbO31n9xSsU5SIizKxv 4VnpOMpe6qqejqvzlj40fgIY4njp8ZGhYXS781cxCrss+RcxGzbXRBlRtInYb6Od G/k/8U5XJi6sHzDSQ0JQZBCbPSdubI6+fc0V0CqO+1I7nRnZT6kQPr+hJGmcls5x GkCu6dPASG0Db+rCG4Ma0igDFcNACQDOk/vbDuAAY73Zl01PgIw1pFg9MmAXG824 yBlfGCNXoaAL6exlXETJO/fI7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGG7K1kU hD1+4VRQvEvzeEyLLftxMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMWY93jmE7rOv4Q9pdEHjEYhoKIfqmPLzhYCgFtFJ5xqERh7aEwX2UTsPCpjN QBawwWBSAFi73j5CSWJq0mwrjOf1I89W1hx1NWWsTfg7nFTCb5y+86jrqToFzABM 3Qdz9Z5CWICCTK5hZBV05zKimWaqTFPPRYLcjhxQMaaIpmYm6rt3TcSkQ1pG7YqE ek3XswK+JdF8QMtVkxjOkpXvOBtnu3pLWWPGm0bdYEeJym/zvb9zch+NqQU/8x2o VxDysYMVEjWpXVwZXLclDEUW5FyCNI39A00uSK8GBGCe5DYQgErty7s/sLmX1IK0 OFBc56k58wnYvuZRXlK7WEzzQg== -----END CERTIFICATE-----Generated at Fri Jul 24 10:08:54 2026 by rpki-client