$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: P4hEpKTGSl8vxn1xYfH0n3+oRSczchon+3pFKF/5Fcw= Subject key identifier: EA:1A:E6:A1:7E:7C:9D:99:33:61:06:E4:18:05:6D:A0:22:F4:ED:7F Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0CE3 Signing time: Fri 24 Jul 2026 18:46:29 +0000 Manifest this update: Fri 24 Jul 2026 18:46:29 +0000 Manifest next update: Fri 31 Jul 2026 18:46:29 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: O5taomcT8RE1DoOF5vKeIN33t1Dj0gvLbgpmF14KVEM=) 2: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: pUo1M6Sm4lp9c2XrgF+LDSj3mLXP2pG6wm3MhRuMa6w=) 3: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: 4GtPeohLS8OTUPDc8RgozS35ewcE3lUXQAukx2eqQRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 18:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: Jul 24 18:46:29 2026 GMT Not After : Jul 31 18:46:29 2026 GMT Subject: CN=6a63b305-6fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9c:96:9b:4a:77:7c:c2:0f:1f:d3:6b:1f:43: 44:00:67:f9:28:e6:7c:de:d9:f7:8f:6c:4d:b6:c0: 68:8a:a1:3c:d1:c5:a2:f6:8e:bc:56:55:32:5a:a6: cd:7d:8a:42:9f:ce:30:3e:26:12:31:74:2e:93:4d: d1:2b:30:fa:ef:99:81:76:f0:94:be:43:8a:21:0e: 0d:b1:79:5a:85:e6:94:87:b6:cc:0b:d0:da:7f:cb: 22:26:22:48:38:64:35:88:8b:43:e5:bf:01:71:3c: a9:ed:72:54:31:7e:b6:67:b5:41:5d:e5:18:da:58: 06:4a:fb:1a:9a:a1:46:c1:30:ae:e6:5f:2a:c5:18: 69:3d:65:78:20:48:fd:c6:01:db:5e:2a:2e:58:5f: 9b:29:b8:0c:9a:e0:98:c2:58:a5:15:6d:11:6f:d3: 67:0b:66:07:16:3c:bc:32:38:9c:de:31:da:05:6a: 41:8c:a6:e0:5e:91:bb:30:40:4b:97:1c:5d:c2:59: 82:64:9a:ec:3f:e4:b3:85:e9:78:08:25:44:13:8e: aa:66:13:9a:83:7a:22:41:40:d9:d6:c5:dc:41:e3: 5b:10:56:e6:20:82:ed:31:3b:1e:e8:9f:9c:04:10: eb:5d:1d:76:bb:6f:d4:7b:af:6f:cd:b6:47:18:3b: e6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1A:E6:A1:7E:7C:9D:99:33:61:06:E4:18:05:6D:A0:22:F4:ED:7F X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:b4:0a:94:4d:41:53:8b:2e:d2:cf:18:63:ec:e8:1f:53:46: 65:a9:63:2d:a4:3e:bb:84:f9:f8:49:db:c2:87:97:b5:09:7d: 6a:39:b5:f9:cd:3a:78:65:b4:bd:ac:1c:4c:f0:4f:62:c2:ca: fb:5e:22:fc:ee:50:e4:ad:21:03:38:eb:6f:cf:5a:c3:d2:5e: 2e:2d:b0:9a:4f:b6:db:22:91:94:16:18:82:51:a8:d4:6e:8a: f0:38:a6:e8:75:cd:6b:61:2e:ae:38:3d:13:4c:b9:8f:67:48: 1f:b1:9e:4d:b0:88:8a:45:06:f8:c9:fa:fa:98:8a:34:4c:3d: e0:9f:84:c9:76:31:01:43:09:8a:8e:87:04:1b:cb:ca:85:d7: 9a:8f:94:a0:10:74:d7:3c:63:d6:51:91:ee:73:cf:5e:d1:7c: 1b:1c:ab:1c:bf:06:5d:2e:53:b4:0f:85:16:42:42:30:65:ab: df:05:11:55:ba:95:c6:5f:8a:f9:9e:b4:19:75:83:92:5a:a6: 08:23:18:3f:0f:54:d3:90:68:ce:50:4e:a1:17:08:69:63:a1: 55:0a:b9:de:6e:8a:9a:32:66:bf:98:d6:38:3c:d4:9c:4d:1a: 0d:ea:d6:db:10:01:c5:01:ea:5a:fa:74:b9:c3:ed:55:48:be: 59:ad:6a:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjYwNzI0MTg0NjI5WhcNMjYwNzMxMTg0NjI5WjAYMRYwFAYD VQQDEw02YTYzYjMwNS02ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pyWm0p3fMIPH9NrH0NEAGf5KOZ83tn3j2xNtsBoiqE80cWi9o68VlUyWqbN fYpCn84wPiYSMXQuk03RKzD675mBdvCUvkOKIQ4NsXlaheaUh7bMC9Daf8siJiJI OGQ1iItD5b8BcTyp7XJUMX62Z7VBXeUY2lgGSvsamqFGwTCu5l8qxRhpPWV4IEj9 xgHbXiouWF+bKbgMmuCYwlilFW0Rb9NnC2YHFjy8Mjic3jHaBWpBjKbgXpG7MEBL lxxdwlmCZJrsP+Szhel4CCVEE46qZhOag3oiQUDZ1sXcQeNbEFbmIILtMTse6J+c BBDrXR12u2/Ue69vzbZHGDvmGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoa5qF+ fJ2ZM2EG5BgFbaAi9O1/MB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArLQKlE1BU4su0s8YY+zoH1NGZaljLaQ+u4T5+EnbwoeXtQl9ajm1+c06eGW0 vawcTPBPYsLK+14i/O5Q5K0hAzjrb89aw9JeLi2wmk+22yKRlBYYglGo1G6K8Dim 6HXNa2Eurjg9E0y5j2dIH7GeTbCIikUG+Mn6+piKNEw94J+EyXYxAUMJio6HBBvL yoXXmo+UoBB01zxj1lGR7nPPXtF8GxyrHL8GXS5TtA+FFkJCMGWr3wURVbqVxl+K +Z60GXWDklqmCCMYPw9U05BozlBOoRcIaWOhVQq53m6KmjJmv5jWODzUnE0aDerW 2xABxQHqWvp0ucPtVUi+Wa1q4A== -----END CERTIFICATE-----Generated at Fri Jul 24 22:15:29 2026 by rpki-client