$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft File: sc2DuJnOYCmsikIu278VgzU5HQg.mft (raw, json) Hash identifier: qIoVINWSCkTN+8Ue57UoJ3z+5jF1Pma5Jddheku+AY4= Subject key identifier: BA:16:7B:6F:A4:F6:9B:BC:DF:F8:E8:C2:79:1D:F7:06:3A:5D:EF:C0 Authority key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08 Certificate issuer: /CN=A9168497/serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 10:00:21 +0000 Manifest this update: Thu 23 Jul 2026 10:00:20 +0000 Manifest next update: Thu 30 Jul 2026 10:00:20 +0000 Files and hashes: 1: sc2DuJnOYCmsikIu278VgzU5HQg.crl (hash: LzImWWx1XDkYQnVJd6JKtJRA/zxn2UwWjIC+Xdsoos8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08 Validity Not Before: Jul 23 10:00:20 2026 GMT Not After : Jul 30 10:00:20 2026 GMT Subject: CN=6a61e634-4427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:e7:61:3f:40:9d:e0:1e:d2:23:e1:be:bf: 2f:ac:24:dd:90:6d:cc:cf:3c:52:01:2e:42:a0:b2: 32:2c:c0:7d:ab:52:79:4f:a4:2d:43:a2:65:ce:32: 4d:e3:08:db:78:d6:ef:ea:7a:5e:16:d4:38:72:29: 0b:09:4b:f3:74:19:6c:eb:36:70:f2:96:91:12:a5: a7:99:e8:64:f9:51:68:9e:b1:16:a5:c9:fc:38:4d: b8:27:b9:30:25:ba:0e:45:7a:ef:0d:fb:8f:d0:b8: ad:77:21:96:74:7d:d7:4f:36:c7:e7:36:8a:3e:31: 1d:f6:a8:09:3c:8c:f8:1b:6f:66:71:3f:fd:7f:5e: 38:f4:85:0f:2a:5c:86:7a:30:fa:aa:79:47:6c:44: 3c:6f:af:68:4b:3c:c6:9b:56:76:5b:c3:2c:c7:42: a4:16:8b:34:83:88:6c:6a:2d:54:b8:92:de:a4:2f: c4:09:54:27:be:78:e8:97:20:08:3a:35:c6:44:a7: e8:60:74:5e:a7:ce:e2:c2:59:03:a0:30:52:65:90: e5:d3:85:75:00:ae:42:e5:a6:9d:b8:eb:d9:c5:31: 64:f9:14:81:7a:4d:45:62:cb:4e:2c:0a:1c:00:04: cf:3c:84:2c:98:0f:9c:d0:cb:d9:c8:1c:33:d5:cf: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:16:7B:6F:A4:F6:9B:BC:DF:F8:E8:C2:79:1D:F7:06:3A:5D:EF:C0 X509v3 Authority Key Identifier: keyid:B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:8a:86:35:1c:3e:f2:4c:28:7f:a4:a4:2e:ca:3d:cb:84:dc: 39:f1:3e:7b:53:31:3e:9e:df:a9:be:9c:54:c4:ac:ef:59:9a: 0a:1a:7a:91:e6:47:d3:22:f7:ae:b2:47:08:f8:28:70:62:a9: e9:a7:83:87:96:b4:1f:dc:57:13:54:4c:21:66:9a:1e:07:26: 0c:59:e0:65:27:fe:b9:86:cd:61:6c:16:b0:a6:7a:6b:ce:3e: ca:d5:f5:9d:4a:64:d9:18:22:bc:95:5f:8e:6a:4d:e5:32:c0: 72:80:7a:df:de:a8:05:9a:17:2f:77:f1:ff:ae:0d:16:b5:96: d8:aa:88:94:0f:1b:c6:32:3a:41:6d:51:e2:3f:8d:a4:cb:70: 63:34:66:da:b1:d2:26:87:7f:6f:4c:1b:a2:14:17:43:40:73: 94:26:e8:63:10:64:df:c9:75:49:3a:9f:cd:bf:41:7c:e9:ea: 53:e8:c0:3f:52:2f:76:aa:8d:fb:7e:34:08:ee:a0:e7:2e:c7: d4:94:18:78:70:7f:a7:89:32:d0:b7:f2:61:b2:48:fc:af:7d: 04:44:cd:47:5c:4c:9a:aa:e2:34:3e:b4:7c:9d:df:93:8d:db: c2:b4:72:69:78:fb:53:c3:17:13:be:ef:b1:bc:4f:f9:97:8b: 09:11:72:f9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODQ5NzExMC8GA1UEBRMoQjFDRDgzQjg5OUNFNjAyOUFDOEE0MjJFREJCRjE1ODMz NTM5MUQwODAeFw0yNjA3MjMxMDAwMjBaFw0yNjA3MzAxMDAwMjBaMBgxFjAUBgNV BAMTDTZhNjFlNjM0LTQ0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYUudhP0Cd4B7SI+G+vy+sJN2QbczPPFIBLkKgsjIswH2rUnlPpC1DomXOMk3j CNt41u/qel4W1DhyKQsJS/N0GWzrNnDylpESpaeZ6GT5UWiesRalyfw4TbgnuTAl ug5Feu8N+4/QuK13IZZ0fddPNsfnNoo+MR32qAk8jPgbb2ZxP/1/Xjj0hQ8qXIZ6 MPqqeUdsRDxvr2hLPMabVnZbwyzHQqQWizSDiGxqLVS4kt6kL8QJVCe+eOiXIAg6 NcZEp+hgdF6nzuLCWQOgMFJlkOXThXUArkLlpp2469nFMWT5FIF6TUViy04sChwA BM88hCyYD5zQy9nIHDPVz9XHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuhZ7b6T2 m7zf+OjCeR33Bjpd78AwHwYDVR0jBBgwFoAUsc2DuJnOYCmsikIu278VgzU5HQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NDk3LzAzMzJCQzY0RjEz NDExRjBCRUQxRjg3MDUzNkY1NkJDL3NjMkR1Sm5PWUNtc2lrSXUyNzhWZ3pVNUhR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvc2MyRHVKbk9ZQ21zaWtJdTI3OFZnelU1SFFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NDk3LzAzMzJCQzY0RjEzNDExRjBCRUQxRjg3MDUzNkY1NkJDL3NjMkR1Sm5PWUNt c2lrSXUyNzhWZ3pVNUhRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACioY1HD7yTCh/pKQuyj3LhNw58T57UzE+nt+pvpxUxKzvWZoKGnqR5kfTIveu skcI+ChwYqnpp4OHlrQf3FcTVEwhZpoeByYMWeBlJ/65hs1hbBawpnprzj7K1fWd SmTZGCK8lV+Oak3lMsBygHrf3qgFmhcvd/H/rg0WtZbYqoiUDxvGMjpBbVHiP42k y3BjNGbasdImh39vTBuiFBdDQHOUJuhjEGTfyXVJOp/Nv0F86epT6MA/Ui92qo37 fjQI7qDnLsfUlBh4cH+niTLQt/Jhskj8r30ERM1HXEyaquI0PrR8nd+TjdvCtHJp ePtTwxcTvu+xvE/5l4sJEXL5 -----END CERTIFICATE-----Generated at Fri Jul 24 11:10:28 2026 by rpki-client