$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft File: AQMtnfw2KpWHQ-htPI0GEaatsFs.mft (raw, json) Hash identifier: xC90I6kUNYlfN6WDTpbxz+VXk8ngHhOSEvMNgzAsQMo= Subject key identifier: F2:88:D9:A5:20:D4:22:70:5A:5B:72:C2:2F:08:C5:83:5C:98:FE:9F Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Certificate serial: 0D29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft Manifest number: 0D05 Signing time: Wed 22 Jul 2026 18:37:25 +0000 Manifest this update: Wed 22 Jul 2026 18:37:25 +0000 Manifest next update: Wed 29 Jul 2026 18:37:25 +0000 Files and hashes: 1: AQMtnfw2KpWHQ-htPI0GEaatsFs.crl (hash: xSo5w77AxLC4TUibFpmW+u7YP8IkW+y5EW/H/WURBag=) 2: 033EB676834D11F193DB325E60A30FBC.roa (hash: JeLY9INIwkxyYjsTV9pQhbhk/f5tgjUgFdxQQau5BR4=) 3: 20F1E6906B8C11F0A612561BC4F9AE02.roa (hash: ZU1zBpAfTGCrjm2xsGHreVQj4RFT5bNxMFoo9IRDAv0=) 4: 6D3BA6B0834D11F18EA3856060A30FBC.roa (hash: 02eJd1zQT0JnnntRDHq6rSGX1dpQL3jq24n2qQzP6QM=) 5: 2BA0624C078511ED87041524C4F9AE02.roa (hash: 0jbGDYo7DDfv4MFk7YXPgz8jJvCIX6bzZUVL+H0jKpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3369 (0xd29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Validity Not Before: Jul 22 18:37:25 2026 GMT Not After : Jul 29 18:37:25 2026 GMT Subject: CN=6a610de5-1682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:2d:4a:02:dc:cb:a2:7b:6f:2a:f7:4c:11: ce:5c:cd:cd:82:af:06:1d:9d:2e:0e:eb:ce:3f:a0: 74:4f:3d:eb:2c:c9:4c:b0:3e:f2:c2:76:6b:ae:e7: 8c:3b:69:50:bc:e7:5f:d2:ef:ee:b3:8a:06:73:0c: d7:19:21:d1:43:04:c0:17:f2:03:f5:0e:94:b0:86: 35:6f:2d:ed:45:f1:73:04:51:ab:b1:c3:4e:a6:a4: 86:c4:ec:0e:09:51:e2:bb:3e:25:8a:68:ab:44:a1: 91:17:85:f5:33:99:6c:c1:c7:66:64:6f:5a:fb:b9: f9:9e:10:33:7d:ee:cf:26:4e:87:66:a9:d9:97:5b: 3a:53:70:ac:99:d2:ca:70:50:33:e8:2c:23:ec:02: be:6a:64:3f:d8:bd:fb:9d:7a:e3:95:43:67:22:20: bb:cc:89:32:d8:c4:e4:a1:ed:5d:96:65:ab:66:1c: 65:83:05:51:e1:ba:ae:47:d4:57:4a:2d:66:9c:7e: eb:6b:ce:b5:f5:7d:71:93:be:e0:ce:ce:f2:53:38: dd:91:9f:26:bc:6b:87:6a:e2:b9:16:0f:53:c8:0c: 70:98:c4:83:9b:72:08:ee:58:9e:e8:5f:38:97:e8: c3:9c:80:1e:c3:e3:65:0f:23:dc:41:f7:40:6d:e6: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:88:D9:A5:20:D4:22:70:5A:5B:72:C2:2F:08:C5:83:5C:98:FE:9F X509v3 Authority Key Identifier: keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:11:d6:85:d5:87:26:b0:95:de:24:58:17:93:73:e8:ae:cb: 30:c9:3a:3b:ff:66:53:cf:c2:0b:24:5c:29:0e:b5:11:63:d3: 3e:df:37:01:5d:38:73:9a:5f:5f:72:e4:80:4d:12:bf:e1:f6: 74:6a:de:8f:18:dc:c2:0c:dc:ca:74:55:40:79:53:75:1f:97: 5c:48:87:4c:f3:a3:cb:dd:b3:ab:ac:fb:ea:5b:6e:92:14:dd: d1:89:d4:f2:e0:3f:97:8c:2d:62:00:d3:9f:04:1e:03:e8:c8: 08:b0:ac:14:1c:42:44:11:aa:d8:55:ce:e5:bf:2f:eb:f0:c4: f2:52:a0:bb:9d:74:b4:80:b0:ce:c1:1f:d3:7e:d8:54:a4:d4: 6c:4d:ef:d9:e0:8a:2f:49:18:43:41:ad:3f:25:dd:e8:0a:f0: 68:ea:93:e8:c9:47:94:74:20:f8:e4:19:ff:81:5a:5f:c0:7d: 49:e3:e3:62:59:b7:3f:26:1b:1b:c6:51:b1:ec:cf:b0:d4:3d: 1e:09:cd:9e:f1:ac:53:07:28:f3:2a:1c:f5:d3:9a:2f:5a:92: f1:e9:a4:1b:8b:61:6e:e9:f8:f9:93:61:a0:de:b8:08:4f:a3: d8:ba:ed:cf:2e:f8:45:25:72:33:f0:57:62:c9:e3:99:ec:ef: 6e:3f:65:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx QTZBREIwNUIwHhcNMjYwNzIyMTgzNzI1WhcNMjYwNzI5MTgzNzI1WjAYMRYwFAYD VQQDEw02YTYxMGRlNS0xNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriktSgLcy6J7byr3TBHOXM3Ngq8GHZ0uDuvOP6B0Tz3rLMlMsD7ywnZrrueM O2lQvOdf0u/us4oGcwzXGSHRQwTAF/ID9Q6UsIY1by3tRfFzBFGrscNOpqSGxOwO CVHiuz4limirRKGRF4X1M5lswcdmZG9a+7n5nhAzfe7PJk6HZqnZl1s6U3CsmdLK cFAz6Cwj7AK+amQ/2L37nXrjlUNnIiC7zIky2MTkoe1dlmWrZhxlgwVR4bquR9RX Si1mnH7ra8619X1xk77gzs7yUzjdkZ8mvGuHauK5Fg9TyAxwmMSDm3II7lie6F84 l+jDnIAew+NlDyPcQfdAbeYD/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKI2aUg 1CJwWltywi8IxYNcmP6fMB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkUyQi8yN0U3Q0FBNjBDMkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3Mktw V0hRLWh0UEkwR0VhYXRzRnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAChHWhdWHJrCV3iRYF5Nz6K7LMMk6O/9mU8/CCyRcKQ61EWPTPt83AV04c5pf X3LkgE0Sv+H2dGrejxjcwgzcynRVQHlTdR+XXEiHTPOjy92zq6z76ltukhTd0YnU 8uA/l4wtYgDTnwQeA+jICLCsFBxCRBGq2FXO5b8v6/DE8lKgu510tICwzsEf037Y VKTUbE3v2eCKL0kYQ0GtPyXd6ArwaOqT6MlHlHQg+OQZ/4FaX8B9SePjYlm3PyYb G8ZRsezPsNQ9HgnNnvGsUwco8yoc9dOaL1qS8emkG4thbun4+ZNhoN64CE+j2Lrt zy74RSVyM/BXYsnjmezvbj9l/w== -----END CERTIFICATE-----Generated at Fri Jul 24 08:18:36 2026 by rpki-client