$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft File: dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft (raw, json) Hash identifier: nDeQeYukBgf1r2ngfrYDi2mwan5h4wF/rmc/x7wfDA0= Subject key identifier: 27:5A:A1:C6:18:3D:75:6B:CF:C7:C9:CB:99:1D:9A:90:1F:90:7E:A7 Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 Certificate issuer: /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft Manifest number: 9C Signing time: Thu 23 Jul 2026 09:13:07 +0000 Manifest this update: Thu 23 Jul 2026 09:13:07 +0000 Manifest next update: Thu 30 Jul 2026 09:13:07 +0000 Files and hashes: 1: dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl (hash: LjCxa2dIuAR2Fi2ARs7Un5p1KfSdCmmKNk2sEzw+wro=) 2: 991FC9309CFA11F08F0A1549C4F9AE02.roa (hash: u3oEvbx75itItu1LUPoKhhJ7vNGvSPwwEcVgmBYaNDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13 Validity Not Before: Jul 23 09:13:07 2026 GMT Not After : Jul 30 09:13:07 2026 GMT Subject: CN=6a61db23-1862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:34:52:2c:dd:d3:d6:c3:c7:93:c2:94:44: dc:8f:b0:48:23:92:d3:7f:f2:e1:c4:2a:2b:a2:cf: 28:f1:fa:44:55:28:6d:44:c0:9c:f1:7a:31:f6:c8: b1:f2:d0:4c:55:a4:7c:ce:81:8c:c8:4c:ac:b5:9c: 8a:2b:0c:74:14:79:1b:b1:db:1c:62:af:7a:31:d1: 07:68:de:02:93:d8:06:2b:d8:77:d1:e3:96:e4:0f: 16:31:12:ff:3f:35:71:45:6d:32:54:d1:3c:62:bd: 78:50:1a:79:9c:de:48:40:9b:e2:f6:c2:c0:04:0a: c9:02:c0:8d:56:94:46:4e:bd:9e:3f:70:25:a6:ca: b4:00:fd:9e:0a:a3:95:98:8e:2c:7d:00:7e:a1:d2: 82:ac:07:ce:ec:69:05:e0:a2:44:b3:a0:fc:df:21: db:8b:16:4e:fc:75:0f:88:b3:2d:77:40:f6:76:ac: 5c:3f:f5:94:17:c4:eb:be:4c:c9:cb:bf:93:5b:2f: ff:db:80:87:2a:3e:d5:81:28:56:26:6f:2c:c4:dd: ee:6b:19:68:b9:96:08:05:47:c0:48:44:57:88:80: 47:08:a0:6c:20:38:34:85:5c:c9:4f:2c:19:eb:01: 9e:35:47:5c:d7:56:d2:f0:be:22:97:b8:ff:75:a9: be:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5A:A1:C6:18:3D:75:6B:CF:C7:C9:CB:99:1D:9A:90:1F:90:7E:A7 X509v3 Authority Key Identifier: keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b6:92:d7:59:9a:40:ab:f5:1e:ad:45:fe:a0:92:d3:cc:da: 20:d4:b3:8c:3d:1e:d3:54:0f:39:86:48:a9:07:e3:86:5d:3d: 90:10:e7:c4:b7:6f:79:0f:af:2f:96:f4:a4:93:2a:1c:6a:65: 06:72:64:34:90:b4:1c:68:4c:36:c5:83:f0:43:58:60:78:e7: 22:2b:ae:64:06:d8:3d:67:a5:8b:10:3d:6d:1b:fe:e2:c4:3a: 82:c8:5e:0f:b2:b8:8a:5a:1e:0f:6c:4f:df:3a:f9:9c:3b:6f: 92:a3:a9:d6:27:77:eb:4a:ca:31:33:43:fc:61:59:53:37:f8: f3:73:eb:5c:cd:0d:02:3a:3d:3e:1b:3b:46:f6:37:dc:47:b2: 87:99:84:62:83:2e:aa:02:88:3d:b6:79:88:0c:56:f5:4b:6a: fe:dc:21:72:f0:f8:5d:80:e9:8d:f1:86:61:29:93:85:61:03: 4c:73:b7:67:f0:6a:99:b2:79:fe:ef:a8:88:d7:c0:0d:d0:08: cf:16:61:20:bc:eb:60:50:8e:a0:e7:2f:3f:f3:52:60:29:14: 78:bc:45:af:21:2a:60:89:17:d5:37:1a:86:1e:80:4d:1f:9b: 5a:f9:80:22:a0:2c:7e:08:11:a1:a1:f6:95:9a:b6:c2:61:7a: 16:21:98:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyNTkxMTAvBgNVBAUTKDc0NTAzNjA5NzQyOUNDMUFDNzZDNEM5OTg5OEQwNkY4 M0UwNzVDMTMwHhcNMjYwNzIzMDkxMzA3WhcNMjYwNzMwMDkxMzA3WjAYMRYwFAYD VQQDEw02YTYxZGIyMy0xODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXU0Uizd09bDx5PClETcj7BII5LTf/LhxCoros8o8fpEVShtRMCc8Xox9six 8tBMVaR8zoGMyEystZyKKwx0FHkbsdscYq96MdEHaN4Ck9gGK9h30eOW5A8WMRL/ PzVxRW0yVNE8Yr14UBp5nN5IQJvi9sLABArJAsCNVpRGTr2eP3Alpsq0AP2eCqOV mI4sfQB+odKCrAfO7GkF4KJEs6D83yHbixZO/HUPiLMtd0D2dqxcP/WUF8TrvkzJ y7+TWy//24CHKj7VgShWJm8sxN3uaxlouZYIBUfASERXiIBHCKBsIDg0hVzJTywZ 6wGeNUdc11bS8L4il7j/dam+rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdaocYY PXVrz8fJy5kdmpAfkH6nMB8GA1UdIwQYMBaAFHRQNgl0Kcwax2xMmYmNBvg+B1wT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI1OS9GRjkwOTI4QzlD RjgxMUYwODgxMkRFMUVDNEY5QUUwMi9kRkEyQ1hRcHpCckhiRXlaaVkwRy1ENEhY Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RGQTJDWFFwekJySGJFeVppWTBHLUQ0SFhCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTI1OS9GRjkwOTI4QzlDRjgxMUYwODgxMkRFMUVDNEY5QUUwMi9kRkEyQ1hRcHpC ckhiRXlaaVkwRy1ENEhYQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmbaS11maQKv1Hq1F/qCS08zaINSzjD0e01QPOYZIqQfjhl09kBDnxLdveQ+v L5b0pJMqHGplBnJkNJC0HGhMNsWD8ENYYHjnIiuuZAbYPWelixA9bRv+4sQ6gshe D7K4iloeD2xP3zr5nDtvkqOp1id360rKMTND/GFZUzf483PrXM0NAjo9Phs7RvY3 3Eeyh5mEYoMuqgKIPbZ5iAxW9Utq/twhcvD4XYDpjfGGYSmThWEDTHO3Z/BqmbJ5 /u+oiNfADdAIzxZhILzrYFCOoOcvP/NSYCkUeLxFryEqYIkX1Tcahh6ATR+bWvmA IqAsfggRoaH2lZq2wmF6FiGYQA== -----END CERTIFICATE-----Generated at Fri Jul 24 21:28:57 2026 by rpki-client