$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft File: mvY3DDqaguLsqIJzqLjnngKCVPk.mft (raw, json) Hash identifier: EPltrCeveE7Gl16Ge2UbkvCX53TnsNnIQ00PYPcKyH0= Subject key identifier: E3:F0:F4:C5:67:DF:18:88:48:8C:6A:17:E1:5A:B2:D9:19:FA:4E:31 Authority key identifier: 9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9 Certificate issuer: /CN=A9165C34/serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft Manifest number: 26 Signing time: Thu 23 Jul 2026 10:55:04 +0000 Manifest this update: Thu 23 Jul 2026 10:55:04 +0000 Manifest next update: Thu 30 Jul 2026 10:55:04 +0000 Files and hashes: 1: mvY3DDqaguLsqIJzqLjnngKCVPk.crl (hash: HomQwJXEqEUH1x5dfOmT+ntapBPRbYYTX2M9dItKppA=) 2: HOBn4xDPKZiL8Isjj99ROKIwrsQ.asa (hash: zAFqND4LetLfBzzSmwzchzjXRNY+jMjvxeB5FZiT9ek=) 3: D8D132C452E111F18BE0BBBEAE833773.roa (hash: SOC3GpUKSzAAkyJ5IYbCisAxPDi0msNuelaQ5PwEXrg=) 4: 0642A9644FB211F18BDA0000A1833773.roa (hash: ba3MiHCQ/9RzbEMhAGdSRjmEpdohirZy6IJ6tNd/uKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9 Validity Not Before: Jul 23 10:55:04 2026 GMT Not After : Jul 30 10:55:04 2026 GMT Subject: CN=6a61f308-701f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9f:b6:fe:03:74:5e:c8:9f:ed:c1:d5:fe:af: e8:4f:65:32:cf:a5:d7:82:c9:08:28:bf:87:b3:8f: 69:7f:8f:a6:fd:31:c2:1a:9c:7d:12:77:0c:3e:e7: 8f:89:57:67:b1:b4:71:10:d5:af:4a:e0:2c:1f:a7: e0:80:b2:d8:92:72:98:b9:92:7f:96:2b:79:ee:4d: 38:f9:1c:3b:c7:b3:a6:f3:91:06:52:96:84:64:5d: b0:4e:fd:e9:b7:50:f1:cf:04:e2:8e:22:c4:1b:e0: d5:60:b6:97:dd:19:b7:01:8e:a3:b0:51:a5:25:3a: 7e:38:59:c3:88:af:4f:38:da:f4:e1:f3:b7:9a:7a: ad:3f:c7:c6:0c:03:95:cb:7f:61:66:62:1f:79:8b: a8:e1:84:e5:b8:90:e7:a3:e8:d7:5d:47:4d:cb:b2: 2f:10:a5:7d:7b:21:a1:36:ad:8c:c4:05:0a:8c:2b: 66:dc:e8:0b:00:26:11:f9:44:05:e1:09:da:20:f5: f9:3e:cf:f1:10:a0:a7:a9:8d:e1:0d:ca:bf:d6:c3: 66:93:dc:32:66:76:da:da:6c:5f:35:ef:fd:d3:5e: 78:72:82:bd:5f:e1:49:d6:db:64:fb:63:2c:4c:55: 8e:de:cc:46:5a:47:d8:d2:87:0a:2e:f3:23:25:ed: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F0:F4:C5:67:DF:18:88:48:8C:6A:17:E1:5A:B2:D9:19:FA:4E:31 X509v3 Authority Key Identifier: keyid:9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:09:3d:cb:5c:eb:27:47:b2:74:97:cc:b2:c1:9d:bd:f9:c0: a7:78:ca:0b:1f:d1:63:0a:e3:00:71:71:38:b1:ca:ab:26:c9: 12:38:45:f8:40:5f:08:f0:74:70:5e:1f:31:f5:1e:20:71:dd: ee:db:b3:0c:14:90:17:0e:e6:b4:88:78:a0:0f:e9:d0:d8:32: 44:10:7b:7c:c0:4c:ad:bb:38:1a:d2:f4:82:9f:d1:3e:98:9d: 4a:52:9f:e0:62:b0:96:75:1f:d6:27:d7:b1:a6:64:9d:e0:3f: f3:c5:c7:07:51:56:29:9d:d5:d2:f6:a7:3d:04:b6:83:c3:00: 0a:55:b3:f7:c1:04:2c:34:69:3c:42:0e:91:9d:85:35:09:ba: 5f:98:f4:7b:aa:71:4d:78:c4:80:15:d3:db:4f:84:3e:07:95: d6:99:bb:08:d1:2b:3d:4d:7e:43:40:9f:bb:61:a4:8e:1f:0b: 8b:b1:3c:b7:0e:0b:72:01:e9:ff:ae:42:99:09:23:95:78:50: 0d:16:be:5d:a4:18:db:b5:43:b9:ca:53:d8:ce:1a:d2:ca:78: 45:fa:e6:49:0a:ae:7c:8e:6e:1a:fc:b3:ec:1b:2b:67:65:14: 03:58:86:8b:81:2d:76:bc:5b:54:2a:dc:dd:14:d9:a8:9f:72: 78:42:01:5e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOUFGNjM3MEMzQTlBODJFMkVDQTg4MjczQThCOEU3OUUw MjgyNTRGOTAeFw0yNjA3MjMxMDU1MDRaFw0yNjA3MzAxMDU1MDRaMBgxFjAUBgNV BAMTDTZhNjFmMzA4LTcwMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQn7b+A3ReyJ/twdX+r+hPZTLPpdeCyQgov4ezj2l/j6b9McIanH0Sdww+54+J V2extHEQ1a9K4Cwfp+CAstiScpi5kn+WK3nuTTj5HDvHs6bzkQZSloRkXbBO/em3 UPHPBOKOIsQb4NVgtpfdGbcBjqOwUaUlOn44WcOIr0842vTh87eaeq0/x8YMA5XL f2FmYh95i6jhhOW4kOej6NddR03Lsi8QpX17IaE2rYzEBQqMK2bc6AsAJhH5RAXh Cdog9fk+z/EQoKepjeENyr/Ww2aT3DJmdtrabF817/3TXnhygr1f4UnW22T7YyxM VY7ezEZaR9jShwou8yMl7SKBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4/D0xWff GIhIjGoX4Vqy2Rn6TjEwHwYDVR0jBBgwFoAUmvY3DDqaguLsqIJzqLjnngKCVPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzJCMDE3MjVFNEZB QzExRjE5MTY0MzI5NzlFODMzNzczL212WTNERHFhZ3VMc3FJSnpxTGpubmdLQ1ZQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXZZM0REcWFndUxzcUlKenFMam5uZ0tDVlBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzJCMDE3MjVFNEZBQzExRjE5MTY0MzI5NzlFODMzNzczL212WTNERHFhZ3VM c3FJSnpxTGpubmdLQ1ZQay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBcCT3LXOsnR7J0l8yywZ29+cCneMoLH9FjCuMAcXE4scqrJskSOEX4QF8I8HRw Xh8x9R4gcd3u27MMFJAXDua0iHigD+nQ2DJEEHt8wEytuzga0vSCn9E+mJ1KUp/g YrCWdR/WJ9expmSd4D/zxccHUVYpndXS9qc9BLaDwwAKVbP3wQQsNGk8Qg6RnYU1 CbpfmPR7qnFNeMSAFdPbT4Q+B5XWmbsI0Ss9TX5DQJ+7YaSOHwuLsTy3DgtyAen/ rkKZCSOVeFANFr5dpBjbtUO5ylPYzhrSynhF+uZJCq58jm4a/LPsGytnZRQDWIaL gS12vFtUKtzdFNmon3J4QgFe -----END CERTIFICATE-----Generated at Thu Jul 23 21:14:29 2026 by rpki-client