$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft File: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json) Hash identifier: K6i8wKx1aWaqMIUVFPQKqnGNKMiJGqVAzeGwcwH6j6s= Subject key identifier: A4:60:E8:F0:65:AA:E1:19:A1:5A:5F:73:9D:36:8C:39:EC:07:1C:9E Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F Certificate issuer: /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft Manifest number: A2 Signing time: Thu 23 Jul 2026 09:05:22 +0000 Manifest this update: Thu 23 Jul 2026 09:05:21 +0000 Manifest next update: Thu 30 Jul 2026 09:05:21 +0000 Files and hashes: 1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: /yi08HeBwL8pofgC6GgP/X+ppG2vMZStq6sKwD47do0=) 2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: dtOyJXL7fADe0DAPUWAD6cAvQxtHj2xT44MMlwLS1gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Validity Not Before: Jul 23 09:05:21 2026 GMT Not After : Jul 30 09:05:21 2026 GMT Subject: CN=6a61d952-62f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:44:83:e3:bd:f7:ce:a8:37:f3:33:2e:a3:88: 2a:08:2b:72:46:db:0a:55:1a:40:92:ed:a4:e4:46: 20:8a:fc:cf:e7:e4:33:f3:0c:cb:55:5e:53:18:42: ae:03:2d:4d:8e:4a:6e:17:a0:70:3e:40:b7:d9:a1: 53:81:7c:48:a2:7b:6e:25:d4:22:42:7d:ac:7e:c7: cc:b8:39:0f:f1:19:ce:08:22:0b:a6:fb:38:23:11: 30:9c:30:15:23:c1:af:60:d8:f5:39:e7:dd:e5:d2: be:79:07:8b:fa:35:e6:49:0b:8c:fc:59:2f:e9:00: 0f:5c:fc:22:4a:28:dc:85:bb:41:c9:d0:39:f9:80: 7d:01:36:e3:f5:0b:cc:bf:2d:d5:27:b2:e8:89:39: a3:49:1f:a8:4f:84:82:25:91:bc:04:73:ad:45:c8: f3:54:b2:e1:6f:b1:d9:86:6e:5a:18:fc:ef:21:41: 37:18:fc:9a:90:cc:1b:75:b5:4e:17:f2:79:d2:e3: ec:f0:aa:8a:00:90:f8:9c:63:59:72:05:4d:fa:e9: 23:79:a6:18:ed:a1:ed:0c:cf:52:a9:37:ca:40:ef: fa:9c:ca:a1:c6:98:97:61:dd:e0:b9:82:37:b1:79: 99:ee:c8:8a:f9:87:9d:62:ff:b4:51:8c:f4:8e:24: 97:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:60:E8:F0:65:AA:E1:19:A1:5A:5F:73:9D:36:8C:39:EC:07:1C:9E X509v3 Authority Key Identifier: keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3b:2b:9f:8b:7b:4f:62:5f:d8:e1:65:49:7f:ac:1e:0e:2d: 4a:58:3e:b5:7b:fe:b5:16:47:9d:ad:1a:5b:74:ed:86:0b:dd: b7:8d:6e:ae:bc:05:0b:b3:16:bb:9d:5b:e0:5c:c3:f6:25:b1: 0e:ee:65:3b:cd:37:ee:3f:e1:91:a4:78:09:8d:6b:7b:d3:0b: 51:b1:d3:e8:e1:a5:da:42:34:8d:1d:52:a1:ec:25:27:41:65: 32:73:05:84:d0:9b:43:9e:17:89:de:43:85:67:e0:ba:c1:81: 59:22:7a:df:d9:ce:64:19:c0:c7:78:07:a8:7c:b8:ad:32:52: e5:4f:2f:7f:a0:71:92:75:89:32:de:cf:1e:97:2c:9b:9e:34: 08:50:19:b8:50:d1:c0:84:21:3c:1b:7b:90:a3:9b:df:8c:cc: 1d:a5:6c:ff:56:f4:cd:45:a2:55:ba:1f:f5:19:3c:d6:cb:5b: 1f:37:4a:fb:eb:a7:08:e0:cc:de:a8:a4:85:a3:d2:bb:97:96: 8a:53:39:74:9c:92:27:15:27:b5:78:73:26:fb:6b:59:33:a9: d6:da:82:ad:82:6b:39:b7:cd:2a:ee:d6:3e:f6:da:f4:53:bc: fa:f5:b9:50:21:25:4d:e7:59:59:bd:03:e6:92:86:40:d0:b9: d9:b6:0b:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRTUxMTAvBgNVBAUTKDI3QTBBMkRERjM1QzE5N0Q0RkMyNjI5MEMyOTU3RDQ5 NjhDRjE1OEYwHhcNMjYwNzIzMDkwNTIxWhcNMjYwNzMwMDkwNTIxWjAYMRYwFAYD VQQDEw02YTYxZDk1Mi02MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzESD4733zqg38zMuo4gqCCtyRtsKVRpAku2k5EYgivzP5+Qz8wzLVV5TGEKu Ay1NjkpuF6BwPkC32aFTgXxIontuJdQiQn2sfsfMuDkP8RnOCCILpvs4IxEwnDAV I8GvYNj1Oefd5dK+eQeL+jXmSQuM/Fkv6QAPXPwiSijchbtBydA5+YB9ATbj9QvM vy3VJ7LoiTmjSR+oT4SCJZG8BHOtRcjzVLLhb7HZhm5aGPzvIUE3GPyakMwbdbVO F/J50uPs8KqKAJD4nGNZcgVN+ukjeaYY7aHtDM9SqTfKQO/6nMqhxpiXYd3guYI3 sXmZ7siK+YedYv+0UYz0jiSX3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRg6PBl quEZoVpfc502jDnsBxyeMB8GA1UdIwQYMBaAFCegot3zXBl9T8JikMKVfUlozxWP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJFNS9BNkM1NDBGNjhD OTcxMUYwQTAwOUQ1NzJDNEY5QUUwMi9KNkNpM2ZOY0dYMVB3bUtRd3BWOVNXalBG WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0o2Q2kzZk5jR1gxUHdtS1F3cFY5U1dqUEZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJFNS9BNkM1NDBGNjhDOTcxMUYwQTAwOUQ1NzJDNEY5QUUwMi9KNkNpM2ZOY0dY MVB3bUtRd3BWOVNXalBGWTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYjsrn4t7T2Jf2OFlSX+sHg4tSlg+tXv+tRZHna0aW3Tthgvdt41urrwFC7MW u51b4FzD9iWxDu5lO8037j/hkaR4CY1re9MLUbHT6OGl2kI0jR1SoewlJ0FlMnMF hNCbQ54Xid5DhWfgusGBWSJ639nOZBnAx3gHqHy4rTJS5U8vf6BxknWJMt7PHpcs m540CFAZuFDRwIQhPBt7kKOb34zMHaVs/1b0zUWiVbof9Rk81stbHzdK++unCODM 3qikhaPSu5eWilM5dJySJxUntXhzJvtrWTOp1tqCrYJrObfNKu7WPvba9FO8+vW5 UCElTedZWb0D5pKGQNC52bYLyA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:40:30 2026 by rpki-client