$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft File: f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json) Hash identifier: 91tJWV9nP27LBZM1WYiYbZbo2gAk7Z3PpSJHiJ/Oc5k= Subject key identifier: 5F:A9:C4:AF:18:B6:2B:CA:AC:4D:13:B9:AE:35:F6:92:1C:4B:B4:7E Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 Certificate issuer: /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft Manifest number: 5B Signing time: Thu 23 Jul 2026 10:07:40 +0000 Manifest this update: Thu 23 Jul 2026 10:07:39 +0000 Manifest next update: Thu 30 Jul 2026 10:07:39 +0000 Files and hashes: 1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: w0CYzqiWzTJUWL3T8VIeduOfueeq7JLMgYRzGlthBQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Validity Not Before: Jul 23 10:07:39 2026 GMT Not After : Jul 30 10:07:39 2026 GMT Subject: CN=6a61e7ec-b622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:07:12:19:bd:b4:7c:fb:e8:a1:05:37:45: 43:03:a0:d9:c8:89:58:92:20:cc:86:90:ff:50:f0: b0:9b:28:aa:1f:66:24:e7:d2:f4:6c:5a:bb:cf:11: c3:9e:83:42:75:84:c8:1e:a1:fc:7d:0e:a5:24:af: b7:f7:25:87:d2:fd:60:52:2a:f9:a3:2f:e6:ce:66: f0:bf:cc:cc:5f:bc:43:42:ed:e8:31:90:c3:f5:54: 4e:b2:e0:63:29:4d:5b:89:1d:da:56:eb:15:e7:7a: 6c:9e:bb:a5:97:ea:93:d6:78:8e:1a:12:da:45:44: d4:4b:ab:45:48:3d:42:6b:63:70:b8:00:5d:72:2f: 10:c0:73:45:7c:f9:9c:7e:4f:e5:ff:14:86:a7:e8: 3d:db:73:52:9e:b3:f3:47:a6:3e:dc:ff:26:6b:9e: f1:e7:92:48:d0:9e:b6:a2:3f:1f:c7:94:66:fa:76: 37:8f:1d:e0:07:e0:4d:fb:7c:5c:f0:47:7c:5a:ae: f1:ee:81:15:43:cd:23:94:e7:28:25:11:03:3b:aa: 46:b5:db:b7:0e:07:aa:f3:12:92:09:e4:e6:a1:36: e9:db:37:56:38:16:b5:c1:d1:d5:a5:22:bf:1f:db: 85:7f:51:5c:77:f2:77:1e:36:3d:1c:4d:33:49:90: 33:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A9:C4:AF:18:B6:2B:CA:AC:4D:13:B9:AE:35:F6:92:1C:4B:B4:7E X509v3 Authority Key Identifier: keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:58:94:52:f7:05:60:fb:4c:17:88:0c:27:fb:47:62:a7:62: a8:41:2a:f1:c6:d9:5b:ba:cc:f6:66:24:bc:65:4b:fa:eb:8f: 4b:26:8c:31:68:12:08:95:a5:92:1e:a1:4e:9a:ae:05:ee:9c: 09:d8:01:5c:1c:c0:90:6b:4a:95:96:76:95:fb:56:bc:8d:cb: 7f:32:4b:cd:72:a3:3e:9a:2a:dc:1a:fb:31:c4:25:6e:7c:55: e7:ea:7e:27:22:c5:a7:dc:13:61:e2:5b:3c:f3:0b:cf:5c:6d: 48:91:a6:ad:79:af:0f:36:e5:f3:ec:8e:4f:af:83:62:fa:b5: 3d:2d:6c:c3:07:d5:31:01:d1:93:9f:09:70:30:64:a9:95:39: 29:ff:4d:59:64:4e:1e:f8:97:46:11:c0:b4:55:04:7e:1f:c0: a9:be:5f:d8:af:6c:00:e7:93:39:ef:72:61:98:9f:1f:a2:49: a6:49:a2:6a:44:db:ce:d7:20:55:b2:eb:ed:16:32:7d:5b:c4: 24:07:ce:01:c4:01:9a:b9:8c:ff:52:15:01:25:2c:8a:8e:17: be:5d:1e:ba:2b:28:d2:49:fb:6e:fa:73:fb:30:6c:dc:eb:27: ea:cd:bd:6d:9b:37:f5:f3:65:62:43:32:ee:f2:5d:0a:7b:7f: 9b:f9:83:f1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoN0Y2MzhFMTBENkJGM0Y0QTg1NEJDNjBBMTNDMjM5QjJG MzVEMTRFMTAeFw0yNjA3MjMxMDA3MzlaFw0yNjA3MzAxMDA3MzlaMBgxFjAUBgNV BAMTDTZhNjFlN2VjLWI2MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMwQcSGb20fPvooQU3RUMDoNnIiViSIMyGkP9Q8LCbKKofZiTn0vRsWrvPEcOe g0J1hMgeofx9DqUkr7f3JYfS/WBSKvmjL+bOZvC/zMxfvENC7egxkMP1VE6y4GMp TVuJHdpW6xXnemyeu6WX6pPWeI4aEtpFRNRLq0VIPUJrY3C4AF1yLxDAc0V8+Zx+ T+X/FIan6D3bc1Kes/NHpj7c/yZrnvHnkkjQnraiPx/HlGb6djePHeAH4E37fFzw R3xarvHugRVDzSOU5yglEQM7qka127cOB6rzEpIJ5OahNunbN1Y4FrXB0dWlIr8f 24V/UVx38nceNj0cTTNJkDOvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUX6nErxi2 K8qsTRO5rjX2khxLtH4wHwYDVR0jBBgwFoAUf2OOENa/P0qFS8YKE8I5svNdFOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzJBQTZFMjQ0RkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBxRlM4WUtFOEk1c3ZOZEZP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjJPT0VOYV9QMHFGUzhZS0U4STVzdk5kRk9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzJBQTZFMjQ0RkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBx RlM4WUtFOEk1c3ZOZEZPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxWJRS9wVg+0wXiAwn+0dip2KoQSrxxtlbusz2ZiS8ZUv6649LJowxaBIIlaWS HqFOmq4F7pwJ2AFcHMCQa0qVlnaV+1a8jct/MkvNcqM+mircGvsxxCVufFXn6n4n IsWn3BNh4ls88wvPXG1Ikaatea8PNuXz7I5Pr4Ni+rU9LWzDB9UxAdGTnwlwMGSp lTkp/01ZZE4e+JdGEcC0VQR+H8Cpvl/Yr2wA55M573JhmJ8fokmmSaJqRNvO1yBV suvtFjJ9W8QkB84BxAGauYz/UhUBJSyKjhe+XR66KyjSSftu+nP7MGzc6yfqzb1t mzf182ViQzLu8l0Ke3+b+YPx -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:33 2026 by rpki-client