$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft File: 2H4ClpVGrcVaesygjK2yh5vGmck.mft (raw, json) Hash identifier: bZnAwYGzdYubzBCUxhWyxwm4Gw57IZBd9WPaFwB+SN8= Subject key identifier: B8:84:C7:FF:BE:AD:9F:8A:52:DE:92:CF:A3:F9:A4:8C:54:06:0C:C6 Authority key identifier: D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9 Certificate issuer: /CN=A9185B5F/serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft Manifest number: 025A Signing time: Thu 23 Jul 2026 03:25:15 +0000 Manifest this update: Thu 23 Jul 2026 03:25:15 +0000 Manifest next update: Thu 30 Jul 2026 03:25:15 +0000 Files and hashes: 1: 2H4ClpVGrcVaesygjK2yh5vGmck.crl (hash: NJesn+Q3YNqN11W7nEE8+BCNiD+bDc0Twj6eQriUKao=) 2: A4B0D326F0A311ED99A1471CC4F9AE02.roa (hash: 96xubeejwotb/hrUfi/Ps7KKGla8pOPnZEA9PFgwYCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B5F, serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9 Validity Not Before: Jul 23 03:25:15 2026 GMT Not After : Jul 30 03:25:15 2026 GMT Subject: CN=6a61899b-c1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:33:93:a3:4b:87:cd:02:cf:9e:83:d5:83: 18:9c:cc:cf:36:92:81:19:26:e3:72:33:29:a8:24: 79:f3:7c:91:eb:8d:1a:fa:1d:ac:c8:1a:21:24:b7: f0:f4:9b:44:21:60:05:02:f7:53:c3:3a:19:01:e8: bb:76:1a:1a:96:e5:cc:b6:e1:4b:fa:19:49:d0:95: 1d:fc:ba:de:1b:47:79:0f:6e:45:43:e5:96:26:87: 0c:c7:73:26:26:cd:6c:e0:db:86:68:a1:47:cd:4f: 65:02:86:88:7a:77:fc:ab:7f:5d:81:ee:4c:13:a2: a9:93:8f:fd:4d:28:f8:c7:93:65:59:04:0c:03:cb: 52:99:4a:e5:9f:f8:3d:ec:6b:4f:aa:98:c2:20:bf: e3:f0:c7:30:2b:3b:cb:8b:15:fb:14:60:16:97:9b: bb:00:98:5f:e8:6c:47:5a:55:60:f5:da:30:34:97: 92:35:81:eb:6c:6d:b0:50:ab:dc:95:3f:bc:aa:00: 94:59:45:73:5a:ee:9d:1a:fc:35:cd:de:75:3f:7f: 42:48:69:f0:bc:06:70:c0:a9:ab:ab:0a:ba:bd:7f: 23:ca:a5:70:39:40:f4:a6:70:7d:62:3b:78:03:61: 5e:5d:bb:75:d3:aa:30:1e:fd:16:32:cb:94:d5:12: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:84:C7:FF:BE:AD:9F:8A:52:DE:92:CF:A3:F9:A4:8C:54:06:0C:C6 X509v3 Authority Key Identifier: keyid:D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f9:06:96:b1:4a:8d:1d:47:2e:93:8d:3c:79:33:2a:a6:7d: f0:68:33:13:de:3d:fc:64:93:c6:44:94:44:15:60:ea:30:c1: e1:c2:8e:b4:e9:b5:3a:bd:09:e7:22:cf:2e:bd:ce:5e:a8:45: f3:b8:83:de:dd:a0:4c:6c:b8:99:dd:b6:a0:c7:02:e0:44:38: d9:00:72:1d:4e:26:c9:07:27:0d:88:78:a5:c7:4f:5a:ed:87: 0f:cc:19:ab:3f:45:1e:ba:42:a9:4e:82:1d:3c:cf:2b:8d:e9: 22:41:66:a2:ab:f0:18:f8:b0:58:5d:cb:17:58:86:ef:d2:b1: df:db:b2:81:bc:90:93:98:e6:37:7a:c8:26:be:e1:94:c7:8d: 46:2b:5f:94:8e:00:22:95:89:26:23:35:18:b0:bb:9d:b9:b9: 4c:ee:e1:78:47:a0:0a:b0:34:62:a8:6f:37:d2:5e:de:67:40: 93:16:ed:d0:63:36:90:ba:a6:94:c9:5c:e5:2f:28:09:07:a6: be:19:63:20:b7:43:f5:d6:0c:c1:3c:7d:ab:7d:f6:29:38:e7: 4b:67:6d:ec:4d:c5:08:7f:14:d5:c1:6d:1f:dc:91:76:d5:da: ff:80:89:95:23:cc:a8:e2:de:2f:59:24:57:4f:83:5d:8d:44: 47:c0:54:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNUYxMTAvBgNVBAUTKEQ4N0UwMjk2OTU0NkFEQzU1QTdBQ0NBMDhDQURCMjg3 OUJDNjk5QzkwHhcNMjYwNzIzMDMyNTE1WhcNMjYwNzMwMDMyNTE1WjAYMRYwFAYD VQQDEw02YTYxODk5Yi1jMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Kszk6NLh80Cz56D1YMYnMzPNpKBGSbjcjMpqCR583yR640a+h2syBohJLfw 9JtEIWAFAvdTwzoZAei7dhoaluXMtuFL+hlJ0JUd/LreG0d5D25FQ+WWJocMx3Mm Js1s4NuGaKFHzU9lAoaIenf8q39dge5ME6Kpk4/9TSj4x5NlWQQMA8tSmUrln/g9 7GtPqpjCIL/j8McwKzvLixX7FGAWl5u7AJhf6GxHWlVg9dowNJeSNYHrbG2wUKvc lT+8qgCUWUVzWu6dGvw1zd51P39CSGnwvAZwwKmrqwq6vX8jyqVwOUD0pnB9Yjt4 A2FeXbt106owHv0WMsuU1RJHlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiEx/++ rZ+KUt6Sz6P5pIxUBgzGMB8GA1UdIwQYMBaAFNh+ApaVRq3FWnrMoIytsoebxpnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI1Ri84RTQxODAyMEYw OUIxMUVEQTYwNkJENjJDNEY5QUUwMi8ySDRDbHBWR3JjVmFlc3lnaksyeWg1dkdt Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJINENscFZHcmNWYWVzeWdqSzJ5aDV2R21jay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI1Ri84RTQxODAyMEYwOUIxMUVEQTYwNkJENjJDNEY5QUUwMi8ySDRDbHBWR3Jj VmFlc3lnaksyeWg1dkdtY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL/kGlrFKjR1HLpONPHkzKqZ98GgzE949/GSTxkSURBVg6jDB4cKOtOm1Or0J 5yLPLr3OXqhF87iD3t2gTGy4md22oMcC4EQ42QByHU4myQcnDYh4pcdPWu2HD8wZ qz9FHrpCqU6CHTzPK43pIkFmoqvwGPiwWF3LF1iG79Kx39uygbyQk5jmN3rIJr7h lMeNRitflI4AIpWJJiM1GLC7nbm5TO7heEegCrA0YqhvN9Je3mdAkxbt0GM2kLqm lMlc5S8oCQemvhljILdD9dYMwTx9q332KTjnS2dt7E3FCH8U1cFtH9yRdtXa/4CJ lSPMqOLeL1kkV0+DXY1ER8BUzQ== -----END CERTIFICATE-----Generated at Fri Jul 24 02:10:53 2026 by rpki-client