$ rpki-client -vvf rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft File: lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft (raw, json) Hash identifier: M9QaxHQEYY3CfCW7i+LDbmFbz7UClci+78+imhI9GAs= Subject key identifier: 8F:04:67:99:95:F6:CC:3A:BC:5F:A4:53:8A:66:56:1E:79:32:C0:BD Authority key identifier: 94:01:75:72:1E:70:B6:20:8C:5C:A0:29:38:B3:0E:04:51:B9:9C:44 Certificate issuer: /CN=A9185308/serialNumber=940175721E70B6208C5CA02938B30E0451B99C44 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft Manifest number: 21 Signing time: Thu 23 Jul 2026 10:57:21 +0000 Manifest this update: Thu 23 Jul 2026 10:57:21 +0000 Manifest next update: Thu 30 Jul 2026 10:57:21 +0000 Files and hashes: 1: lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl (hash: rEG8silLFotrX6/OYc8FGpFjIvK63lchR38XyAOOqFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185308, serialNumber=940175721E70B6208C5CA02938B30E0451B99C44 Validity Not Before: Jul 23 10:57:21 2026 GMT Not After : Jul 30 10:57:21 2026 GMT Subject: CN=6a61f391-5ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:5e:2d:e1:33:b0:34:e0:43:8c:b6:2c:b5: 40:aa:49:18:cb:a9:3d:65:c9:4a:a3:e4:8c:da:81: 2d:f5:eb:04:61:f4:5f:30:90:93:24:58:5a:a2:fb: f1:21:64:26:8a:b6:89:3c:f8:8b:81:d4:e7:a3:0e: a8:05:54:50:ec:26:a6:d5:65:e5:0f:dc:9d:f7:97: 95:e0:5f:b2:ff:1c:7d:e3:95:be:b7:80:70:00:e0: 73:4e:9d:21:db:2b:50:73:3a:21:56:e5:1f:7d:91: c9:74:8e:87:4e:54:80:0a:d3:c5:a3:06:3b:2b:16: 23:f7:71:05:1d:f9:c9:2b:f8:35:c5:af:e6:be:3a: 80:b3:aa:06:9f:f2:46:65:28:e5:ef:cc:34:f2:d6: 71:cb:7d:46:61:de:ef:c0:92:f0:4d:61:95:94:29: 58:43:04:e6:af:c4:2b:42:35:d2:ab:7b:e7:7a:9f: d4:d7:b9:56:db:02:9a:16:6c:e7:30:02:64:a6:c4: 11:8c:db:21:52:cd:8f:2f:7f:c8:ff:8d:6f:9c:56: c5:76:64:6c:df:88:74:b3:3f:38:cc:fe:d4:09:3c: 1c:76:e9:a8:a9:a7:5b:1f:f0:37:80:d2:49:d5:9f: 34:32:12:0a:d3:64:af:38:29:fa:41:46:35:be:89: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:04:67:99:95:F6:CC:3A:BC:5F:A4:53:8A:66:56:1E:79:32:C0:BD X509v3 Authority Key Identifier: keyid:94:01:75:72:1E:70:B6:20:8C:5C:A0:29:38:B3:0E:04:51:B9:9C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b3:cc:9d:ab:5e:38:2d:72:2c:c5:a4:53:b8:d7:bf:c1:c5: 21:0b:ed:b9:52:ce:c7:68:73:b5:25:24:58:ce:46:76:1a:88: 39:1d:b4:e7:17:95:dd:2d:4b:b1:92:ef:c6:70:07:1b:4b:92: ad:4f:23:f6:93:eb:c7:4e:26:9d:bf:c4:51:35:ee:24:b9:f5: 0c:33:8a:0d:f7:8a:15:1a:10:81:d5:5d:27:14:61:ce:53:f9: 4d:9c:23:63:94:de:2b:0f:2c:a2:1a:f3:8e:df:f4:10:54:9e: 4d:99:47:13:7c:84:6c:29:2a:da:20:00:2d:db:70:eb:f4:46: d6:4d:89:02:95:53:cf:6e:15:6d:0f:cf:63:c5:d2:99:72:a5: 05:4c:11:f4:e0:53:bf:fc:c7:ed:c4:3a:44:b5:12:9a:7f:d2: 0c:3d:fa:c3:02:ff:54:e6:dc:2e:58:c5:46:64:48:3e:60:3d: 8e:60:28:72:d9:3c:64:27:16:f5:9e:4d:97:8d:71:58:51:0a: 44:fc:67:3e:b8:7c:45:8f:c4:13:7c:0e:df:2c:28:c7:a4:39: 51:c2:7f:27:cf:18:fa:8b:85:6f:5a:6d:7e:13:cb:f6:cb:50: c8:69:4d:b3:8a:a6:8f:42:80:fa:cb:fd:52:59:2a:9e:9a:98: 24:78:08:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTMwODExMC8GA1UEBRMoOTQwMTc1NzIxRTcwQjYyMDhDNUNBMDI5MzhCMzBFMDQ1 MUI5OUM0NDAeFw0yNjA3MjMxMDU3MjFaFw0yNjA3MzAxMDU3MjFaMBgxFjAUBgNV BAMTDTZhNjFmMzkxLTVlZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIkV4t4TOwNOBDjLYstUCqSRjLqT1lyUqj5IzagS316wRh9F8wkJMkWFqi+/Eh ZCaKtok8+IuB1OejDqgFVFDsJqbVZeUP3J33l5XgX7L/HH3jlb63gHAA4HNOnSHb K1BzOiFW5R99kcl0jodOVIAK08WjBjsrFiP3cQUd+ckr+DXFr+a+OoCzqgaf8kZl KOXvzDTy1nHLfUZh3u/AkvBNYZWUKVhDBOavxCtCNdKre+d6n9TXuVbbApoWbOcw AmSmxBGM2yFSzY8vf8j/jW+cVsV2ZGzfiHSzPzjM/tQJPBx26aipp1sf8DeA0knV nzQyEgrTZK84KfpBRjW+iWa3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjwRnmZX2 zDq8X6RTimZWHnkywL0wHwYDVR0jBBgwFoAUlAF1ch5wtiCMXKApOLMOBFG5nEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MzA4L0VCQ0REMjc0NTU3 QTExRjE4OEY4MzI3OUNCODMzNzczL2xBRjFjaDV3dGlDTVhLQXBPTE1PQkZHNW5F US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbEFGMWNoNXd0aUNNWEtBcE9MTU9CRkc1bkVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MzA4L0VCQ0REMjc0NTU3QTExRjE4OEY4MzI3OUNCODMzNzczL2xBRjFjaDV3dGlD TVhLQXBPTE1PQkZHNW5FUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHs8ydq144LXIsxaRTuNe/wcUhC+25Us7HaHO1JSRYzkZ2Gog5HbTnF5XdLUux ku/GcAcbS5KtTyP2k+vHTiadv8RRNe4kufUMM4oN94oVGhCB1V0nFGHOU/lNnCNj lN4rDyyiGvOO3/QQVJ5NmUcTfIRsKSraIAAt23Dr9EbWTYkClVPPbhVtD89jxdKZ cqUFTBH04FO//MftxDpEtRKaf9IMPfrDAv9U5twuWMVGZEg+YD2OYChy2TxkJxb1 nk2XjXFYUQpE/Gc+uHxFj8QTfA7fLCjHpDlRwn8nzxj6i4VvWm1+E8v2y1DIaU2z iqaPQoD6y/1SWSqempgkeAil -----END CERTIFICATE-----Generated at Thu Jul 23 21:35:18 2026 by rpki-client