$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: q7uvEiN8NtGva2j/ytz2UKVXUuzALR0CGO0UyZELMWM= Subject key identifier: A2:A3:CB:5B:75:A1:C5:69:D1:45:F9:A3:23:5B:9B:EE:F7:C5:33:9C Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 0150 Signing time: Thu 23 Jul 2026 06:51:18 +0000 Manifest this update: Thu 23 Jul 2026 06:51:17 +0000 Manifest next update: Thu 30 Jul 2026 06:51:17 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: 0ZXKxo7J4j+lr3x+Ez4/qbJszgFl9hkToU3oqj/mC2E=) 2: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=) 3: C4C01E3800D111F19FE1BBA3726F56BC.roa (hash: 7TdxN5pwG9InxHjLBF8NeXCwHbUoryPl86+yQHm4dE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Jul 23 06:51:17 2026 GMT Not After : Jul 30 06:51:17 2026 GMT Subject: CN=6a61b9e5-dce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:0c:9d:96:12:9d:d9:d8:5b:37:11:27:bf: d2:a8:1f:bd:d5:fd:32:d8:98:7b:71:ab:84:fc:5c: ca:b6:d7:89:29:39:d2:d7:df:98:f1:9e:40:64:e0: 9d:25:02:2b:a6:b3:b3:d6:b7:a3:aa:b9:a0:19:e3: 2a:7a:5c:ec:a0:a1:cd:b4:25:85:40:e4:7e:90:ee: f2:ea:5e:8e:72:32:a1:fc:48:0a:6a:3d:2a:b5:cb: 75:4e:22:35:87:3c:1d:b8:de:56:c9:a4:29:f0:66: 4e:72:a0:77:ee:c2:2c:43:8a:51:89:a2:e9:1e:c6: df:81:94:2d:b8:f0:41:2e:ae:be:ee:fa:f1:0a:8e: 48:bf:ec:17:49:d6:16:c4:48:c3:00:2f:f1:3d:d7: 07:9f:4e:a0:57:77:89:f2:e9:f7:6c:24:12:9a:97: 01:7b:48:8a:fd:ca:eb:f7:b5:43:69:17:61:c4:7a: 79:10:32:3a:7f:91:da:5c:ed:2e:9e:c4:a9:aa:28: c3:5b:3e:43:71:df:9b:d3:38:64:6b:fc:41:d2:6d: 34:5f:49:50:63:19:3f:e3:10:7d:2f:2b:04:1e:ac: 18:ca:cb:a6:dc:d2:6d:4a:1c:85:64:24:01:9b:dc: f8:4d:1f:11:71:3a:93:a2:de:bd:bd:5f:ff:88:13: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A3:CB:5B:75:A1:C5:69:D1:45:F9:A3:23:5B:9B:EE:F7:C5:33:9C X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:0d:d1:da:52:2c:f5:34:d6:35:7c:95:fb:da:d1:c4:18:5c: a9:ab:21:cd:fe:eb:53:49:91:52:e3:9e:5c:f8:f0:e3:6c:e2: 51:3c:e0:be:44:33:8b:55:09:be:ad:32:d8:cd:2c:49:99:53: 5b:de:ab:df:94:71:06:d6:6d:5b:b5:13:82:f1:45:d9:a6:46: 65:bb:16:89:ec:19:78:92:20:1a:29:4c:f9:38:fb:7c:55:95: ce:32:d3:77:c8:00:a6:b4:a3:d6:76:38:24:8e:74:66:35:f5: 37:3d:3e:7e:b8:bf:59:b1:cf:f5:74:48:c0:17:03:56:c5:2a: df:18:dc:f0:fe:25:9b:1e:c5:02:54:2c:fc:93:8a:53:4c:28: d6:90:cc:b2:36:5c:52:3a:57:84:4b:1f:01:14:56:6a:69:3f: 0e:ef:31:ed:1f:20:bc:aa:b3:bf:c5:42:b7:e8:98:3e:12:16: 59:82:10:6e:c1:48:9a:fc:52:a3:b9:b3:3e:6e:c8:1b:92:a6: 40:dc:4a:5e:61:43:ab:45:45:b2:41:1e:23:4c:91:65:d1:70: c5:8b:2b:d2:d8:6e:65:41:62:31:df:39:4b:62:c7:be:44:9d: e7:81:dc:fa:bb:fb:ff:4e:f6:93:ee:ea:f8:bf:77:8f:7d:67: 09:bb:18:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjYwNzIzMDY1MTE3WhcNMjYwNzMwMDY1MTE3WjAYMRYwFAYD VQQDEw02YTYxYjllNS1kY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgYMnZYSndnYWzcRJ7/SqB+91f0y2Jh7cauE/FzKtteJKTnS19+Y8Z5AZOCd JQIrprOz1rejqrmgGeMqelzsoKHNtCWFQOR+kO7y6l6OcjKh/EgKaj0qtct1TiI1 hzwduN5WyaQp8GZOcqB37sIsQ4pRiaLpHsbfgZQtuPBBLq6+7vrxCo5Iv+wXSdYW xEjDAC/xPdcHn06gV3eJ8un3bCQSmpcBe0iK/crr97VDaRdhxHp5EDI6f5HaXO0u nsSpqijDWz5Dcd+b0zhka/xB0m00X0lQYxk/4xB9LysEHqwYysum3NJtShyFZCQB m9z4TR8RcTqTot69vV//iBNezwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKjy1t1 ocVp0UX5oyNbm+73xTOcMB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgw3R2lIs9TTWNXyV+9rRxBhcqashzf7rU0mRUuOeXPjw42ziUTzgvkQzi1UJ vq0y2M0sSZlTW96r35RxBtZtW7UTgvFF2aZGZbsWiewZeJIgGilM+Tj7fFWVzjLT d8gAprSj1nY4JI50ZjX1Nz0+fri/WbHP9XRIwBcDVsUq3xjc8P4lmx7FAlQs/JOK U0wo1pDMsjZcUjpXhEsfARRWamk/Du8x7R8gvKqzv8VCt+iYPhIWWYIQbsFImvxS o7mzPm7IG5KmQNxKXmFDq0VFskEeI0yRZdFwxYsr0thuZUFiMd85S2LHvkSd54Hc +rv7/072k+7q+L93j31nCbsYWw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:02:41 2026 by rpki-client