$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft File: AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft (raw, json) Hash identifier: WIxyTVFcaZSGIKccq1iu4QTUj2PDc9UdIkC3ocv1mF8= Subject key identifier: 55:1B:8E:73:20:9B:27:A9:03:88:1C:27:89:8E:44:B2:0F:A7:9E:B2 Authority key identifier: 00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4 Certificate issuer: /CN=A9170DF0/serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft Manifest number: 022B Signing time: Thu 23 Jul 2026 03:55:45 +0000 Manifest this update: Thu 23 Jul 2026 03:55:45 +0000 Manifest next update: Thu 30 Jul 2026 03:55:45 +0000 Files and hashes: 1: AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl (hash: RlPjjrih6AdkNTv3i+dguH6spQeQsPRvaxgiIXKpj9Q=) 2: B022AC18368811EEB1BFE56AC4F9AE02.roa (hash: ChPU5idLRzFBAUfZXdVDn4ZS21EQnqWVbj2XL7b56XA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DF0, serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4 Validity Not Before: Jul 23 03:55:45 2026 GMT Not After : Jul 30 03:55:45 2026 GMT Subject: CN=6a6190c1-bc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:2d:6e:31:a6:48:ee:21:9d:63:95:1e:c9: e9:d4:4f:3d:c6:42:e2:39:59:01:ef:4a:bc:5d:c5: b4:64:d7:a6:42:9b:7a:c7:e8:33:17:64:22:9a:3e: c1:c5:e7:fd:d9:35:43:b3:4a:1d:12:32:c2:d4:38: 5f:0f:38:19:09:69:9e:d1:6c:41:73:57:16:8d:9d: 39:3f:09:56:8e:da:fc:34:85:5e:bd:32:3a:87:38: 59:22:5c:81:49:6b:ac:70:46:fd:38:d0:13:80:5f: 19:2e:96:0a:52:7c:4b:96:f1:46:04:4b:17:04:ba: b3:ab:e4:69:67:30:56:e0:8f:0d:96:4e:31:d1:17: 25:b8:4b:8e:91:d8:ba:b4:01:5c:13:07:97:79:85: e4:1d:09:db:ce:0d:42:7c:3c:58:dc:41:43:52:03: 0e:11:7b:7d:e1:5a:40:fc:8d:63:b1:67:21:02:95: 36:93:b9:f0:9e:58:22:8e:10:a0:f8:23:ad:c9:2e: 84:dc:5c:3b:46:8e:71:6b:a9:b3:31:08:65:d7:dd: b2:cd:47:ad:6c:79:d6:11:c4:f7:35:3b:0b:4f:85: 29:9d:51:32:69:66:d4:16:23:87:cb:15:cd:4c:e4: 97:e4:d5:e7:5b:ad:57:bf:c2:0a:2c:0c:ac:d9:da: 4e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1B:8E:73:20:9B:27:A9:03:88:1C:27:89:8E:44:B2:0F:A7:9E:B2 X509v3 Authority Key Identifier: keyid:00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a8:79:fc:5a:34:cb:dd:6c:83:cd:4c:32:5f:f0:fc:7a:41: bf:e6:e2:3b:38:bd:f2:20:70:3f:13:09:44:66:92:73:69:a1: fb:27:40:fb:b5:94:72:ee:96:4d:be:5c:31:39:15:e2:e4:86: e8:9a:22:bd:fc:4a:66:48:4d:f7:21:04:8d:59:84:6f:56:45: 38:16:4d:30:b0:0a:c2:c3:5f:99:0d:d8:0a:05:cf:a3:b2:10: 18:26:6c:07:4e:8a:54:6b:59:48:0e:91:0a:3d:dd:a3:14:9b: ef:2e:b3:79:65:60:33:1f:b0:18:0c:c7:8b:0e:99:d7:ef:39: 3c:d4:b7:2e:07:ed:63:5e:a3:e5:89:f6:8e:8b:a3:bd:16:6f: 74:e9:5d:6e:eb:67:df:7f:eb:86:33:09:48:c1:6e:62:b7:a5: 49:17:81:f2:27:7d:b0:b4:4a:b3:eb:2a:4f:e7:06:90:fc:c2: 7c:38:15:9d:7d:92:2f:e9:cc:c0:ba:68:03:a7:e5:fc:10:3f: b2:18:f5:90:c1:b5:2e:70:d9:78:d5:1e:3d:62:5d:f7:96:db: b1:b8:e9:6a:e7:2f:d3:5a:c2:25:79:d9:cf:49:79:48:12:fd: 59:83:9d:0c:96:93:89:6c:88:89:66:81:f2:b5:9f:48:19:b9: 08:99:a3:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERjAxMTAvBgNVBAUTKDAwMDhFMkVFQkU2QzU1RjI1OTQ5NDlBNDc3Rjg2NzdC RkY0QTdGRTQwHhcNMjYwNzIzMDM1NTQ1WhcNMjYwNzMwMDM1NTQ1WjAYMRYwFAYD VQQDEw02YTYxOTBjMS1iYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTQtbjGmSO4hnWOVHsnp1E89xkLiOVkB70q8XcW0ZNemQpt6x+gzF2Qimj7B xef92TVDs0odEjLC1DhfDzgZCWme0WxBc1cWjZ05PwlWjtr8NIVevTI6hzhZIlyB SWuscEb9ONATgF8ZLpYKUnxLlvFGBEsXBLqzq+RpZzBW4I8Nlk4x0RcluEuOkdi6 tAFcEweXeYXkHQnbzg1CfDxY3EFDUgMOEXt94VpA/I1jsWchApU2k7nwnlgijhCg +COtyS6E3Fw7Ro5xa6mzMQhl192yzUetbHnWEcT3NTsLT4UpnVEyaWbUFiOHyxXN TOSX5NXnW61Xv8IKLAys2dpO8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUbjnMg myepA4gcJ4mORLIPp56yMB8GA1UdIwQYMBaAFAAI4u6+bFXyWUlJpHf4Z3v/Sn/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MERGMC81REVGQUNGMDM2 NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1ZmSlpTVW1rZF9obmVfOUtm LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FBamk3cjVzVmZKWlNVbWtkX2huZV85S2YtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MERGMC81REVGQUNGMDM2NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1Zm SlpTVW1rZF9obmVfOUtmLVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApKh5/Fo0y91sg81MMl/w/HpBv+biOzi98iBwPxMJRGaSc2mh+ydA+7WUcu6W Tb5cMTkV4uSG6JoivfxKZkhN9yEEjVmEb1ZFOBZNMLAKwsNfmQ3YCgXPo7IQGCZs B06KVGtZSA6RCj3doxSb7y6zeWVgMx+wGAzHiw6Z1+85PNS3LgftY16j5Yn2jouj vRZvdOldbutn33/rhjMJSMFuYrelSReB8id9sLRKs+sqT+cGkPzCfDgVnX2SL+nM wLpoA6fl/BA/shj1kMG1LnDZeNUePWJd95bbsbjpaucv01rCJXnZz0l5SBL9WYOd DJaTiWyIiWaB8rWfSBm5CJmj4Q== -----END CERTIFICATE-----Generated at Thu Jul 23 22:49:27 2026 by rpki-client