$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft File: kIoYD5SUlgetwBExSb6IKuqo6I8.mft (raw, json) Hash identifier: zGSmT/hMPQQY1XYC5ZAA6rOzWHWY35gTWGkcaHeUO1I= Subject key identifier: 64:BF:59:B4:DB:90:4B:2D:A7:52:11:61:A5:A2:4C:C8:26:88:72:EA Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft Manifest number: 0273 Signing time: Thu 23 Jul 2026 03:16:52 +0000 Manifest this update: Thu 23 Jul 2026 03:16:52 +0000 Manifest next update: Thu 30 Jul 2026 03:16:52 +0000 Files and hashes: 1: kIoYD5SUlgetwBExSb6IKuqo6I8.crl (hash: GU3Aw3KdxDvMK2Hj5ENzXG4e6k8aSsa/KzBYEt4ZU0w=) 2: CC0BA4E0E17F11EFA4CE224CC4F9AE02.roa (hash: txSvzTPr2599JY/devjyQjZpXUdF6ZNG1hcHHYqrLIA=) 3: 9BE6554CB72411EF98F7D577C4F9AE02.roa (hash: OGuYh+AxdFGbpXMOTasU8EIj52mT5htTsl1m4is8Y4w=) 4: E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa (hash: z04Vftmrg2QbTvPdZ6E5RXhqc7guf0iEptckFIG+yc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Validity Not Before: Jul 23 03:16:52 2026 GMT Not After : Jul 30 03:16:52 2026 GMT Subject: CN=6a6187a4-e392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e2:af:b5:c8:e2:3c:43:e2:9e:d2:90:97:f5: 4f:bf:96:86:77:27:fe:7f:84:83:f6:a4:3f:9e:5a: d0:e8:84:d2:a8:9f:7a:9b:49:ba:1d:53:91:20:42: 6c:f2:19:88:ad:cd:1d:bd:60:a8:54:55:c8:84:54: 97:6f:59:56:62:fc:af:ae:76:6c:01:30:c8:93:21: 2e:eb:62:82:dc:2d:9a:84:db:2e:c4:e4:ab:cc:68: 46:64:51:97:c2:d1:66:7c:f3:f1:bc:1a:73:16:36: ed:7a:2d:59:05:ff:20:8c:fc:70:9b:ce:37:37:a2: 3b:0b:bf:38:8e:c2:12:92:8c:89:84:e4:79:55:4b: f1:a8:3a:54:96:35:7d:22:02:45:57:3a:6e:6d:2e: e0:de:8f:dd:b4:fa:3a:7a:27:f2:4a:df:f9:6e:df: e2:26:2f:a6:01:cf:0b:12:f8:5f:cb:f9:6d:e7:2c: 1c:09:df:68:d9:cc:49:bd:54:0e:e0:b0:83:d6:f1: 11:25:68:af:af:8f:ee:09:98:7e:66:e1:0f:fb:1a: 41:af:d7:a6:cb:e0:d0:b1:1e:f6:96:ab:56:b7:07: dd:23:1c:51:c5:dd:9e:72:dd:15:87:f6:90:3a:b3: a9:a3:fd:50:f9:2b:05:7e:45:35:06:ba:14:72:0f: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:59:B4:DB:90:4B:2D:A7:52:11:61:A5:A2:4C:C8:26:88:72:EA X509v3 Authority Key Identifier: keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b6:cf:ee:41:03:ee:18:8b:2f:4c:e1:2e:cd:7b:d1:11:8d: 22:c5:4b:79:45:81:06:6e:72:db:82:ed:6c:42:c8:7f:52:92: d0:57:79:c0:ab:cd:c4:50:3f:1f:50:0d:2e:c1:13:5c:ae:0f: c9:6f:44:af:d9:03:a6:7b:3f:1d:90:b9:a9:91:78:f2:4d:6b: 84:2b:6a:fb:47:8f:31:10:94:5d:6f:a0:85:d9:b3:04:19:3d: 5c:91:c2:e3:c7:44:9c:35:ba:63:a6:7c:1b:d8:58:7f:e0:e9: b0:c0:a0:9b:ac:53:39:c5:c3:7f:f9:b1:65:99:66:ac:eb:bf: 8a:d4:e2:02:3d:68:ac:74:b9:3d:43:1d:25:4f:d3:bd:94:40: f3:6f:4c:c1:7c:57:43:42:74:d9:23:6b:67:e9:1b:25:2a:3f: 54:19:54:08:b2:1b:4a:73:dc:f4:ba:9c:c9:f6:a8:1f:86:5f: 11:ac:a9:90:c9:e7:a1:70:d8:71:8d:c2:b0:33:45:b2:dd:68: fd:c9:63:bb:53:60:d2:d1:da:b5:f4:22:91:0d:9c:cf:71:94: ef:00:83:86:17:d4:dc:c8:d3:96:8e:c5:2b:b9:7d:36:a0:27: e2:d1:c0:35:3d:f6:97:53:8a:f9:ba:1c:ad:a9:c4:b6:be:13: a8:18:db:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDNjMxMTAvBgNVBAUTKDkwOEExODBGOTQ5NDk2MDdBREMwMTEzMTQ5QkU4ODJB RUFBOEU4OEYwHhcNMjYwNzIzMDMxNjUyWhcNMjYwNzMwMDMxNjUyWjAYMRYwFAYD VQQDEw02YTYxODdhNC1lMzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+KvtcjiPEPintKQl/VPv5aGdyf+f4SD9qQ/nlrQ6ITSqJ96m0m6HVORIEJs 8hmIrc0dvWCoVFXIhFSXb1lWYvyvrnZsATDIkyEu62KC3C2ahNsuxOSrzGhGZFGX wtFmfPPxvBpzFjbtei1ZBf8gjPxwm843N6I7C784jsISkoyJhOR5VUvxqDpUljV9 IgJFVzpubS7g3o/dtPo6eifySt/5bt/iJi+mAc8LEvhfy/lt5ywcCd9o2cxJvVQO 4LCD1vERJWivr4/uCZh+ZuEP+xpBr9emy+DQsR72lqtWtwfdIxxRxd2ect0Vh/aQ OrOpo/1Q+SsFfkU1BroUcg99nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGS/WbTb kEstp1IRYaWiTMgmiHLqMB8GA1UdIwQYMBaAFJCKGA+UlJYHrcARMUm+iCrqqOiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M2My80RDExMzE5Q0Q4 NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxnZXR3QkV4U2I2SUt1cW82 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJb1lENVNVbGdldHdCRXhTYjZJS3VxbzZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M2My80RDExMzE5Q0Q4NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxn ZXR3QkV4U2I2SUt1cW82STgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcrbP7kED7hiLL0zhLs170RGNIsVLeUWBBm5y24LtbELIf1KS0Fd5wKvNxFA/ H1ANLsETXK4PyW9Er9kDpns/HZC5qZF48k1rhCtq+0ePMRCUXW+ghdmzBBk9XJHC 48dEnDW6Y6Z8G9hYf+DpsMCgm6xTOcXDf/mxZZlmrOu/itTiAj1orHS5PUMdJU/T vZRA829MwXxXQ0J02SNrZ+kbJSo/VBlUCLIbSnPc9LqcyfaoH4ZfEaypkMnnoXDY cY3CsDNFst1o/clju1Ng0tHatfQikQ2cz3GU7wCDhhfU3MjTlo7FK7l9NqAn4tHA NT32l1OK+bocranEtr4TqBjblA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:05:56 2026 by rpki-client