$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: qdxss4w6z0ZBO5d42sKfxXUzKKAhChvRqd0LiUlFSow= Subject key identifier: B7:A6:89:CE:0B:C5:C0:60:9D:07:E2:9B:3A:75:A8:75:AE:87:01:DB Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 038B Signing time: Thu 23 Jul 2026 01:46:24 +0000 Manifest this update: Thu 23 Jul 2026 01:46:24 +0000 Manifest next update: Thu 30 Jul 2026 01:46:24 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: bXifBbXLUgIdjsiPtoS0xLFQYJZX5sjlBkjkGsuLiYE=) 2: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: kqpliSLk4gpJx/EOT2g+xNj5gqC5mlAWqnW//7mPB5E=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: S96e2L/6aXmXiFJ00QZgjPrWRuJuyQ7qqjj+2N0NuLQ=) 4: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: SiY7LuS+ZlIJQnelc/yqPh4vr6EgWEyfHgpapGWLzMQ=) 5: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: FYMzyNcEn5qwGYhJASILxE4oZoESG/51dhB+oC1Em0M=) 6: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: /voKyazUys3+SCuvprRad6peYAmU9/zZXHb+lbxgXpY=) 7: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: WEjLCi1DlMb0pJbL9Z4xrjtw1122zr6GBemO2jaZ1hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Jul 23 01:46:24 2026 GMT Not After : Jul 30 01:46:24 2026 GMT Subject: CN=6a617270-7c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:cf:5b:44:bc:fe:a2:7f:ff:7d:b8:69:dc: 73:a4:88:82:f2:d1:a3:18:91:38:5c:19:9f:a3:f4: 52:6f:7d:f3:78:ca:d2:a8:65:7d:df:e0:96:a5:13: b7:cc:29:66:c6:f4:77:e6:2f:70:f5:d1:f4:76:49: e3:45:94:3f:8d:91:52:42:3d:c8:9a:c1:72:fe:8e: d4:56:b2:77:16:a0:c1:e9:ad:83:1f:43:cb:27:81: 89:6e:24:ea:4d:62:6e:5d:95:d0:39:aa:a8:e6:73: c0:e4:bd:cb:30:35:f4:db:d5:16:a3:f6:b1:9a:20: 73:e7:73:44:d5:3b:f9:f1:cd:c7:22:7b:da:13:4a: b0:97:c0:c0:62:83:63:90:21:e3:67:40:e5:29:31: 65:31:2e:68:6c:09:24:08:7b:d1:83:e3:b6:bc:3d: c1:b2:e4:85:43:8e:6f:fe:16:ff:79:a1:6b:56:e8: f5:32:02:b0:6a:89:c5:45:f5:e2:b7:99:b4:fe:46: 15:5d:97:82:9b:89:19:e9:30:af:2f:98:0b:04:55: e8:e9:09:3d:10:fa:95:48:bb:d4:74:d6:96:a4:dd: 81:7e:55:92:f7:8a:93:24:95:b0:09:bf:09:01:02: 27:e8:a0:38:d5:90:6e:1c:fc:05:57:97:03:f4:54: 95:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A6:89:CE:0B:C5:C0:60:9D:07:E2:9B:3A:75:A8:75:AE:87:01:DB X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:09:2d:02:b0:bc:7b:49:2c:73:79:0c:e8:13:53:e8:b6:c2: e8:1d:2f:ab:38:7c:ab:7d:01:ec:19:6a:12:d9:41:48:78:be: 10:15:19:cf:d6:83:e2:7a:f0:37:6e:1d:49:ae:21:f9:ee:36: 25:f0:21:9c:20:56:59:37:ba:5c:9c:6a:70:b0:58:18:46:9b: 09:fd:78:35:94:55:e2:51:49:7a:56:c3:71:60:d2:21:f2:64: a7:f2:4f:33:98:5e:2f:a0:e0:0a:f1:79:2a:24:34:e5:44:1d: 6d:fe:a4:73:ae:5e:e7:9a:79:dc:ce:a9:df:97:1b:fc:bb:e3: d9:5e:e1:44:d6:4e:58:6a:ac:eb:01:92:61:3b:bb:37:6c:fe: fd:8c:4e:9a:ca:c7:17:66:a9:45:75:4c:78:72:43:63:e1:c3: f1:75:11:16:4d:f4:61:ef:62:77:d2:ae:09:a3:12:eb:ad:be: 9c:0b:8b:7d:9e:63:ec:16:3e:20:8d:09:16:6e:9d:fd:11:80: f8:2b:56:bb:69:cd:8c:2c:72:6c:f7:83:01:ed:53:21:5d:3f: d1:d0:70:e4:36:b7:ef:ac:e4:dc:e5:6f:74:38:16:f6:0a:59: 15:9b:6f:b4:36:49:bf:fa:68:f3:84:df:f4:6b:76:9b:ee:34: 2c:3a:38:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjYwNzIzMDE0NjI0WhcNMjYwNzMwMDE0NjI0WjAYMRYwFAYD VQQDEw02YTYxNzI3MC03YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuXPW0S8/qJ//324adxzpIiC8tGjGJE4XBmfo/RSb33zeMrSqGV93+CWpRO3 zClmxvR35i9w9dH0dknjRZQ/jZFSQj3ImsFy/o7UVrJ3FqDB6a2DH0PLJ4GJbiTq TWJuXZXQOaqo5nPA5L3LMDX029UWo/axmiBz53NE1Tv58c3HInvaE0qwl8DAYoNj kCHjZ0DlKTFlMS5obAkkCHvRg+O2vD3BsuSFQ45v/hb/eaFrVuj1MgKwaonFRfXi t5m0/kYVXZeCm4kZ6TCvL5gLBFXo6Qk9EPqVSLvUdNaWpN2BflWS94qTJJWwCb8J AQIn6KA41ZBuHPwFV5cD9FSVTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLemic4L xcBgnQfimzp1qHWuhwHbMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPQktArC8e0ksc3kM6BNT6LbC6B0vqzh8q30B7BlqEtlBSHi+EBUZz9aD4nrw N24dSa4h+e42JfAhnCBWWTe6XJxqcLBYGEabCf14NZRV4lFJelbDcWDSIfJkp/JP M5heL6DgCvF5KiQ05UQdbf6kc65e55p53M6p35cb/Lvj2V7hRNZOWGqs6wGSYTu7 N2z+/YxOmsrHF2apRXVMeHJDY+HD8XURFk30Ye9id9KuCaMS662+nAuLfZ5j7BY+ II0JFm6d/RGA+CtWu2nNjCxybPeDAe1TIV0/0dBw5Da376zk3OVvdDgW9gpZFZtv tDZJv/po84Tf9Gt2m+40LDo4Cw== -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:54 2026 by rpki-client