$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: 3iJIMDTQrvchhl7SYalowFPCXS06Xo/MWSmHBmorEj4= Subject key identifier: D8:74:A7:D5:F7:2E:2A:EC:AE:7E:7F:B6:F0:3C:91:70:BE:0F:20:A4 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 09B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 098A Signing time: Wed 22 Jul 2026 20:30:16 +0000 Manifest this update: Wed 22 Jul 2026 20:30:15 +0000 Manifest next update: Wed 29 Jul 2026 20:30:15 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: 1h09ocQjiUl7t/qqyYJ9dQoYk40Ej/FQ9RJHWcTL/vo=) 2: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: 1/1W8qYx2zRT+SB1jArsVcARbCr/b03bu7LoiR2N3yc=) 3: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 4FteVAZhXJnMTtQSuLVXL/Dj2oifA5aqn3kTr1yXK2M=) 4: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: jyCcQPHB1GYl8fSSLexidNgFWzesxj3u8rWectLDfq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2481 (0x9b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Jul 22 20:30:15 2026 GMT Not After : Jul 29 20:30:15 2026 GMT Subject: CN=6a612858-94c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:3c:14:0d:95:a4:95:87:d2:9e:07:d1:64: bc:6c:40:ad:01:96:20:d0:7e:df:15:83:0f:4c:3a: 44:6a:b2:1f:88:0f:1e:e4:84:c6:f9:5d:65:23:a9: cb:db:8b:d8:42:1e:c1:aa:f6:06:3f:31:0a:38:34: 7d:fb:c3:16:ee:31:3e:b3:36:23:c2:99:9d:71:ed: 35:8d:78:63:9e:44:8c:96:3c:b1:02:23:06:a7:ce: e0:4a:da:be:63:56:fa:50:5f:75:ac:d2:b7:bc:ba: 4d:c2:bd:ff:f3:06:18:e2:b5:d5:a7:ce:90:2c:a4: c6:40:4c:2a:61:a9:91:85:e6:fc:64:ac:15:9c:a6: 0c:4f:23:04:5e:48:f2:65:e9:82:4d:df:ca:8e:d0: 48:15:17:a4:75:f0:ec:bf:86:5a:8e:8d:80:f5:21: b1:f3:30:ea:50:0d:71:64:68:5d:56:a9:73:90:70: 55:09:28:dd:8b:b8:63:5a:c3:be:ec:82:eb:5a:b9: e2:4e:e0:53:45:eb:86:b6:e6:ba:76:db:29:a0:fc: b6:d2:8c:b8:66:3b:7e:bd:4a:ac:4f:a7:6d:30:f9: c6:3f:3c:1e:17:ed:00:66:0c:0f:e1:a8:dc:e1:ec: 45:19:80:33:1a:c9:22:e5:bc:93:7d:51:f0:32:c9: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:74:A7:D5:F7:2E:2A:EC:AE:7E:7F:B6:F0:3C:91:70:BE:0F:20:A4 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:62:c6:64:e9:c5:32:da:65:d4:64:a3:96:00:9e:49:61:02: e9:a4:0b:57:9a:e9:57:0a:b1:e1:a4:d8:10:06:b2:5b:50:73: 03:ba:2e:9c:88:95:5f:e5:f3:f0:53:74:1f:f2:ab:82:87:19: b5:8e:02:56:e1:b6:2a:09:31:a8:54:46:84:2c:86:3c:39:79: 71:c5:6f:d7:b7:f3:50:c9:57:e6:f2:e1:13:87:25:ad:ec:46: 67:35:41:6c:b1:c9:20:ef:7d:b2:02:dd:83:a6:fa:84:42:1c: 39:ba:f9:51:a3:80:b9:1e:b8:51:5b:cc:7f:23:6b:42:f0:24: af:36:4d:8e:ac:6e:15:90:3b:ae:6a:87:43:b7:f1:00:be:b7: 4e:bf:86:34:cf:76:ff:32:ec:6f:2f:b1:e9:6e:29:05:94:e5: 44:c0:d8:83:d7:40:32:68:15:52:b4:40:04:29:91:2a:61:1c: 70:9a:49:d9:0d:37:dd:29:4f:81:d2:c0:5f:61:ee:a1:1f:10: 7d:bc:a0:18:18:73:6c:10:94:ad:47:13:5b:32:64:8f:28:c6: bf:fa:4b:ff:43:8d:d2:10:b7:61:38:84:0f:23:64:1f:e8:63: 40:ed:dd:be:5e:52:c8:a1:13:9b:1e:39:54:96:22:83:ae:59: 01:16:c7:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjYwNzIyMjAzMDE1WhcNMjYwNzI5MjAzMDE1WjAYMRYwFAYD VQQDEw02YTYxMjg1OC05NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjY8FA2VpJWH0p4H0WS8bECtAZYg0H7fFYMPTDpEarIfiA8e5ITG+V1lI6nL 24vYQh7BqvYGPzEKODR9+8MW7jE+szYjwpmdce01jXhjnkSMljyxAiMGp87gStq+ Y1b6UF91rNK3vLpNwr3/8wYY4rXVp86QLKTGQEwqYamRheb8ZKwVnKYMTyMEXkjy ZemCTd/KjtBIFRekdfDsv4Zajo2A9SGx8zDqUA1xZGhdVqlzkHBVCSjdi7hjWsO+ 7ILrWrniTuBTReuGtua6dtspoPy20oy4Zjt+vUqsT6dtMPnGPzweF+0AZgwP4ajc 4exFGYAzGski5byTfVHwMsn+bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNh0p9X3 Lirsrn5/tvA8kXC+DyCkMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKGLGZOnFMtpl1GSjlgCeSWEC6aQLV5rpVwqx4aTYEAayW1BzA7ounIiVX+Xz 8FN0H/KrgocZtY4CVuG2KgkxqFRGhCyGPDl5ccVv17fzUMlX5vLhE4clrexGZzVB bLHJIO99sgLdg6b6hEIcObr5UaOAuR64UVvMfyNrQvAkrzZNjqxuFZA7rmqHQ7fx AL63Tr+GNM92/zLsby+x6W4pBZTlRMDYg9dAMmgVUrRABCmRKmEccJpJ2Q033SlP gdLAX2HuoR8QfbygGBhzbBCUrUcTWzJkjyjGv/pL/0ON0hC3YTiEDyNkH+hjQO3d vl5SyKETmx45VJYig65ZARbHcQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:53:29 2026 by rpki-client