$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: aGGE0RffNednJAyT61Krq3TJJ+E4WL0xsivzwbs6Zl4= Subject key identifier: DC:6D:D8:A0:59:4F:B7:4E:26:63:AE:B0:00:80:59:01:AD:2C:84:19 Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 1922 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 18F9 Signing time: Wed 22 Jul 2026 16:33:32 +0000 Manifest this update: Wed 22 Jul 2026 16:33:32 +0000 Manifest next update: Wed 29 Jul 2026 16:33:32 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: VaTpTQ90815HNlbrLonptFveDjX8HpWV7bm6kU6n8BU=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: u9b8xi9VJzwkucgePmf7GxJbrJFJHrJEf5pCf7m+hrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6434 (0x1922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Jul 22 16:33:32 2026 GMT Not After : Jul 29 16:33:32 2026 GMT Subject: CN=6a60f0dc-22bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:23:b6:6d:b6:f3:77:5f:9f:4e:d3:36:80:90: c5:dc:a8:46:93:b1:a3:75:d6:fb:fe:86:45:7b:48: 03:a8:e0:66:0f:85:c4:78:f8:dc:03:4c:aa:9d:b4: a0:49:50:fd:06:89:c5:96:16:2a:f9:14:11:45:df: b5:ef:c5:68:ac:08:87:5e:87:5e:80:54:3a:22:b1: a5:4a:f5:5c:ca:6d:46:e9:d0:01:5e:77:4e:33:9c: 8d:f0:7d:83:4f:4c:03:f3:28:9f:55:b0:78:47:df: dc:31:f1:15:04:4e:f5:1c:f2:00:7e:68:76:c6:db: 24:ce:7a:bf:27:dd:ab:5a:0b:eb:14:b6:ac:f1:f7: cb:cd:d8:eb:2e:57:88:e4:6c:ab:f6:de:9e:07:5e: 36:ec:77:6e:8a:ae:61:48:d5:fa:6e:2f:66:c4:73: 16:5b:e8:1e:4d:79:3f:15:6a:af:d6:4f:e2:d3:48: 29:84:95:cc:cc:85:c2:59:20:f4:64:07:d9:75:1d: 3d:43:c4:9f:ea:81:a0:1d:48:c8:c4:9e:19:56:f4: 10:16:18:ba:4a:de:bb:17:70:5b:aa:5b:6e:67:72: 30:fa:73:7a:9c:b1:a8:d4:ea:82:f9:ea:4f:83:b5: 7d:ab:94:74:b8:8a:16:f3:46:aa:ca:50:04:68:d6: c6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6D:D8:A0:59:4F:B7:4E:26:63:AE:B0:00:80:59:01:AD:2C:84:19 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0a:96:ec:f5:d6:ed:31:ff:d3:e2:71:a8:44:0c:13:93:02: b9:c4:4a:8b:1b:a3:bc:ec:1d:ee:e5:7c:1f:5d:cd:4f:8b:66: 04:58:b0:ef:fd:ba:c1:7f:da:ca:56:00:ea:e9:10:bf:cd:88: f3:1d:d4:ef:ec:01:2e:83:10:ce:26:0a:6d:24:88:cf:c5:5f: 24:68:a5:9b:aa:de:ca:ac:19:f7:25:13:e3:71:e8:d7:15:91: 8d:a7:cd:63:e4:0b:a1:a1:d9:2f:da:05:2d:49:0c:fe:b1:74: f7:b3:b6:ec:8e:86:22:10:bf:df:ca:41:25:c5:11:22:bb:3f: b8:33:8d:2b:31:34:a0:4c:b2:43:c7:19:b2:ab:06:a7:99:73: 4e:46:6e:9b:55:03:b0:e0:82:ba:3e:11:91:d5:27:95:1d:69: 71:62:5d:a6:0e:93:2a:9a:9e:d6:78:6d:44:af:f9:a9:f2:22: c0:27:e7:a7:48:54:24:05:85:29:99:59:74:8b:f7:2d:51:f6: 9e:3b:fc:d1:2d:4a:e9:4b:3f:ad:f4:ca:28:b8:d9:ad:1a:cf: c2:33:a1:1e:5b:4c:fb:0d:81:89:d0:62:46:f1:62:17:70:0e: 50:d0:f9:98:bb:9a:48:7c:5b:26:68:af:50:28:d5:d1:6d:87: ec:e8:7f:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjYwNzIyMTYzMzMyWhcNMjYwNzI5MTYzMzMyWjAYMRYwFAYD VQQDEw02YTYwZjBkYy0yMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SO2bbbzd1+fTtM2gJDF3KhGk7Gjddb7/oZFe0gDqOBmD4XEePjcA0yqnbSg SVD9BonFlhYq+RQRRd+178VorAiHXodegFQ6IrGlSvVcym1G6dABXndOM5yN8H2D T0wD8yifVbB4R9/cMfEVBE71HPIAfmh2xtskznq/J92rWgvrFLas8ffLzdjrLleI 5Gyr9t6eB1427Hduiq5hSNX6bi9mxHMWW+geTXk/FWqv1k/i00gphJXMzIXCWSD0 ZAfZdR09Q8Sf6oGgHUjIxJ4ZVvQQFhi6St67F3BbqltuZ3Iw+nN6nLGo1OqC+epP g7V9q5R0uIoW80aqylAEaNbGvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxt2KBZ T7dOJmOusACAWQGtLIQZMB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATQqW7PXW7TH/0+JxqEQME5MCucRKixujvOwd7uV8H13NT4tmBFiw7/26wX/a ylYA6ukQv82I8x3U7+wBLoMQziYKbSSIz8VfJGilm6reyqwZ9yUT43Ho1xWRjafN Y+QLoaHZL9oFLUkM/rF097O27I6GIhC/38pBJcURIrs/uDONKzE0oEyyQ8cZsqsG p5lzTkZum1UDsOCCuj4RkdUnlR1pcWJdpg6TKpqe1nhtRK/5qfIiwCfnp0hUJAWF KZlZdIv3LVH2njv80S1K6Us/rfTKKLjZrRrPwjOhHltM+w2BidBiRvFiF3AOUND5 mLuaSHxbJmivUCjV0W2H7Oh/EA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:26:21 2026 by rpki-client