$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft File: ax_z7YHR7aC43YxdpE5A-css0q8.mft (raw, json) Hash identifier: qLj751OBVYsxn1etsngbWUMXlaDrY1+FiUycuyn9XH4= Subject key identifier: F5:A0:55:B9:1B:89:5E:E7:32:C5:69:76:BB:A5:6F:91:39:37:30:2A Authority key identifier: 6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF Certificate issuer: /CN=A9175C96/serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft Manifest number: 10 Signing time: Thu 23 Jul 2026 11:11:27 +0000 Manifest this update: Thu 23 Jul 2026 11:11:26 +0000 Manifest next update: Thu 30 Jul 2026 11:11:26 +0000 Files and hashes: 1: ax_z7YHR7aC43YxdpE5A-css0q8.crl (hash: RtTA7Xi0mMPkuYcaLaE8v0eT+GZpbgHTWIytai54+eA=) 2: F9F4A9C6710511F1AB87369C65A30FBC.roa (hash: vF7yzq71bKd9/EBHrcKUsFw6zWZiI9lEWL6wZYfxLto=) 3: CC84D0BA710511F1A8E0DB7B65A30FBC.roa (hash: W/k3tTym2pPqddOTOs65rSq65DSs2mHOJ53vJkYkUlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175C96, serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF Validity Not Before: Jul 23 11:11:26 2026 GMT Not After : Jul 30 11:11:26 2026 GMT Subject: CN=6a61f6df-c102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:6b:62:51:55:9a:04:16:aa:53:94:58:32: 37:ae:a7:99:7b:97:fe:90:38:29:2b:18:bc:e6:b4: ff:86:62:88:ae:0c:7a:a6:9a:88:c6:9f:df:35:a6: 45:33:f9:3c:40:92:6f:97:13:cd:0c:bc:8f:4d:2e: 09:00:38:ff:c2:54:b2:00:4b:f8:35:b8:0c:c4:af: bd:6c:d1:1d:1d:c8:ee:64:a4:79:c1:0c:90:fd:cd: de:11:9e:46:25:d0:39:df:fa:4c:e6:eb:96:e4:29: 19:af:3f:51:b0:40:c6:27:d6:b3:c4:71:d0:7c:ee: 61:85:60:7a:ec:90:a2:d3:8f:c5:31:20:cc:b6:56: 37:37:a3:b9:21:72:b3:29:44:50:18:ab:53:d0:30: 56:5f:d7:f4:8b:39:73:62:fc:5d:1a:d5:b7:a0:de: 29:69:61:f8:ad:cb:5f:d2:73:4f:1e:23:7b:81:18: 52:8a:af:e6:e2:0e:31:44:4c:7d:c1:69:a8:d9:71: fc:b7:d1:85:76:40:64:48:c0:2c:e8:6d:52:c3:0e: 9a:9a:4d:5c:f2:fe:4e:6f:85:90:cd:69:7f:2d:bc: 0e:88:28:03:51:84:29:d6:7c:ac:b8:b5:fb:c3:ea: 85:1c:5c:c4:93:7e:c8:09:28:50:b9:66:2b:2e:9e: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:55:B9:1B:89:5E:E7:32:C5:69:76:BB:A5:6F:91:39:37:30:2A X509v3 Authority Key Identifier: keyid:6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1a:78:10:c8:e3:26:d3:69:38:d6:8d:fe:31:be:f9:d4:3a: 8e:a0:3c:a1:5a:a1:e8:ad:bf:86:00:8b:dc:86:63:8a:42:b3: 06:2c:fb:7e:ad:e9:a5:7a:5f:63:53:db:0b:a9:ea:e6:84:79: a4:ca:7f:d8:92:38:68:14:8c:ff:51:c2:e7:5c:45:e2:e1:b5: 9a:30:7b:ae:32:81:7d:bf:43:73:63:c1:7c:51:ca:97:61:73: d9:15:dd:73:33:22:d1:09:06:c8:76:67:a8:40:57:37:c4:4f: 9d:9f:41:78:ba:5c:f0:f7:38:37:f5:6f:b0:9a:e2:0f:aa:f5: 7d:54:e4:fa:c2:c1:73:7c:5b:5b:22:78:aa:e3:73:e7:b5:82: b8:6f:9a:33:25:f4:f3:70:5f:d6:73:8b:41:4b:97:fa:72:64: d5:9c:c9:ba:d3:20:17:e0:85:54:dc:83:ac:65:d1:30:39:cb: 4f:4a:f2:8d:8f:bb:ca:5e:ca:d7:11:c0:05:49:23:5e:46:9b: a4:00:3e:b9:d5:92:02:b6:32:05:5e:6e:1d:5f:b5:95:25:6d: 3f:e8:61:9e:bf:63:7a:84:af:7c:b9:42:3c:92:73:3b:bc:96: 35:f4:6e:10:87:7a:8d:3d:17:f4:e4:0f:4c:44:16:10:fb:1e: a6:2e:7f:70 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUM5NjExMC8GA1UEBRMoNkIxRkYzRUQ4MUQxRURBMEI4REQ4QzVEQTQ0RTQwRjlD QjJDRDJBRjAeFw0yNjA3MjMxMTExMjZaFw0yNjA3MzAxMTExMjZaMBgxFjAUBgNV BAMTDTZhNjFmNmRmLWMxMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTUWtiUVWaBBaqU5RYMjeup5l7l/6QOCkrGLzmtP+GYoiuDHqmmojGn981pkUz +TxAkm+XE80MvI9NLgkAOP/CVLIAS/g1uAzEr71s0R0dyO5kpHnBDJD9zd4RnkYl 0Dnf+kzm65bkKRmvP1GwQMYn1rPEcdB87mGFYHrskKLTj8UxIMy2Vjc3o7khcrMp RFAYq1PQMFZf1/SLOXNi/F0a1beg3ilpYfity1/Sc08eI3uBGFKKr+biDjFETH3B aajZcfy30YV2QGRIwCzobVLDDpqaTVzy/k5vhZDNaX8tvA6IKANRhCnWfKy4tfvD 6oUcXMSTfsgJKFC5Zisunp5JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9aBVuRuJ XucyxWl2u6VvkTk3MCowHwYDVR0jBBgwFoAUax/z7YHR7aC43YxdpE5A+css0q8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1Qzk2LzcxQTcyRTJDNzEw NTExRjE4OEMwMDYxRTY1QTMwRkJDL2F4X3o3WUhSN2FDNDNZeGRwRTVBLWNzczBx OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXhfejdZSFI3YUM0M1l4ZHBFNUEtY3NzMHE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 Qzk2LzcxQTcyRTJDNzEwNTExRjE4OEMwMDYxRTY1QTMwRkJDL2F4X3o3WUhSN2FD NDNZeGRwRTVBLWNzczBxOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLGngQyOMm02k41o3+Mb751DqOoDyhWqHorb+GAIvchmOKQrMGLPt+remlel9j U9sLqermhHmkyn/YkjhoFIz/UcLnXEXi4bWaMHuuMoF9v0NzY8F8UcqXYXPZFd1z MyLRCQbIdmeoQFc3xE+dn0F4ulzw9zg39W+wmuIPqvV9VOT6wsFzfFtbIniq43Pn tYK4b5ozJfTzcF/Wc4tBS5f6cmTVnMm60yAX4IVU3IOsZdEwOctPSvKNj7vKXsrX EcAFSSNeRpukAD651ZICtjIFXm4dX7WVJW0/6GGev2N6hK98uUI8knM7vJY19G4Q h3qNPRf05A9MRBYQ+x6mLn9w -----END CERTIFICATE-----Generated at Fri Jul 24 12:32:32 2026 by rpki-client