$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json) Hash identifier: 0wbAMUiBctTu3JSzudCu7DM4mXlFgYdiTIScrBFpFDc= Subject key identifier: 85:67:EB:06:51:3A:04:D2:77:B5:0B:F0:52:DC:E1:09:63:4F:06:48 Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft Manifest number: 0711 Signing time: Wed 22 Jul 2026 22:42:51 +0000 Manifest this update: Wed 22 Jul 2026 22:42:51 +0000 Manifest next update: Wed 29 Jul 2026 22:42:51 +0000 Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: wad0mLnwcTuZf0tb5ZDCKS9uFkcZpajgetcA0Ljb274=) 2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: Xp4lD/QSImDCE4efuMgqe92Y/4E3I4XjwfeB+l5VEAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Validity Not Before: Jul 22 22:42:51 2026 GMT Not After : Jul 29 22:42:51 2026 GMT Subject: CN=6a61476b-ad32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:d4:b5:44:82:25:78:8a:ca:67:9d:92:b9: dd:3c:f6:5a:0e:4f:71:53:94:a3:dc:0e:d0:7a:c9: 4a:b9:65:8e:d5:4c:9a:83:66:f7:3d:fb:fe:79:48: 83:ce:fd:04:9e:af:53:0a:87:39:e3:6a:a5:c7:0c: f1:82:c6:ca:70:3b:9a:83:04:31:47:3a:1d:f1:73: 10:59:0e:ce:63:51:3e:05:64:13:f8:f5:1e:d6:ac: e3:fb:7f:1c:0c:55:14:35:7e:95:40:b9:98:3f:07: 98:49:78:c7:6a:ed:dc:8e:2b:66:92:3b:d4:74:d7: 10:3e:e0:ce:12:bf:e4:bf:63:67:08:93:c8:9b:0f: 84:d8:2d:71:2a:69:d6:02:ee:08:1d:b4:30:85:40: 85:30:9d:2c:a7:f3:04:14:0f:8a:ea:2d:bb:08:a8: 11:02:a6:ee:44:b4:0b:80:de:42:73:e1:0c:8d:96: c8:19:20:0f:f9:13:46:88:80:1e:bc:47:e1:aa:3c: 4f:3c:5c:f0:ad:d3:f5:ed:8e:ef:75:a3:ee:bd:d1: 25:40:86:3a:f7:3f:e5:aa:aa:6e:41:83:02:bc:83: 0c:8b:a3:12:5f:f0:b0:c1:9e:0b:c9:25:e1:1b:0e: 5e:00:01:5e:d1:3f:dd:76:85:96:e9:42:73:f2:d4: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:67:EB:06:51:3A:04:D2:77:B5:0B:F0:52:DC:E1:09:63:4F:06:48 X509v3 Authority Key Identifier: keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3f:7f:78:7c:e1:db:b4:43:db:81:6c:37:42:1c:c3:87:03: 02:78:c2:97:aa:81:8e:9e:90:a8:4a:56:26:6b:1e:ae:4a:71: a1:db:cb:3b:39:84:b9:b1:05:e6:ac:5b:e3:c3:7a:36:90:1b: fd:1d:67:ae:61:e6:fb:ae:8e:6b:37:4b:93:b8:38:e4:41:04: 78:26:07:d2:68:4a:c3:ee:4e:60:ff:0f:6f:ff:3c:4d:89:5d: 5b:b2:7c:c3:8a:e7:32:08:9e:f6:14:7d:76:82:50:eb:1a:84: e1:90:f8:4d:67:cf:2a:8d:a1:a9:3a:12:ee:86:0b:da:0d:d6: d2:35:01:70:ac:b2:e3:d0:39:f4:94:96:13:dc:41:ed:93:fb: a7:cd:1d:14:24:7c:ab:0c:4b:06:86:4d:e5:72:a8:e7:ec:da: b8:04:55:4c:75:f4:a2:8c:ca:c4:5d:5a:8a:f1:3c:f8:3c:f3: 94:1a:63:a9:e0:a3:db:54:94:7c:78:8f:a6:20:a4:30:f3:a7: 9a:43:3a:b3:11:76:23:94:e8:e4:1c:bd:8e:11:1b:a6:df:f4: 21:59:48:fe:9f:14:96:7a:7d:21:d7:3a:77:93:84:d6:9a:6e: 6c:d2:34:93:2f:2a:d0:59:cc:3d:c3:84:75:d9:08:ae:68:fc: f7:5d:aa:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRUQxMTAvBgNVBAUTKDk1NEE3MDFCQUEwQzkzMUQwMTc2RTQ4NUI3QTI4N0Mx MzE2NTI2MEUwHhcNMjYwNzIyMjI0MjUxWhcNMjYwNzI5MjI0MjUxWjAYMRYwFAYD VQQDEw02YTYxNDc2Yi1hZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXHUtUSCJXiKymedkrndPPZaDk9xU5Sj3A7QeslKuWWO1Uyag2b3Pfv+eUiD zv0Enq9TCoc542qlxwzxgsbKcDuagwQxRzod8XMQWQ7OY1E+BWQT+PUe1qzj+38c DFUUNX6VQLmYPweYSXjHau3cjitmkjvUdNcQPuDOEr/kv2NnCJPImw+E2C1xKmnW Au4IHbQwhUCFMJ0sp/MEFA+K6i27CKgRAqbuRLQLgN5Cc+EMjZbIGSAP+RNGiIAe vEfhqjxPPFzwrdP17Y7vdaPuvdElQIY69z/lqqpuQYMCvIMMi6MSX/CwwZ4LySXh Gw5eAAFe0T/ddoWW6UJz8tR0CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVn6wZR OgTSd7UL8FLc4QljTwZIMB8GA1UdIwQYMBaAFJVKcBuqDJMdAXbkhbeih8ExZSYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNFRC8xQUFGN0Q5NDky MjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4MEJkdVNGdDZLSHdURmxK ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xVcHdHNm9Na3gwQmR1U0Z0NktId1RGbEpnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNFRC8xQUFGN0Q5NDkyMjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4 MEJkdVNGdDZLSHdURmxKZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbT9/eHzh27RD24FsN0Icw4cDAnjCl6qBjp6QqEpWJmserkpxodvLOzmEubEF 5qxb48N6NpAb/R1nrmHm+66OazdLk7g45EEEeCYH0mhKw+5OYP8Pb/88TYldW7J8 w4rnMgie9hR9doJQ6xqE4ZD4TWfPKo2hqToS7oYL2g3W0jUBcKyy49A59JSWE9xB 7ZP7p80dFCR8qwxLBoZN5XKo5+zauARVTHX0oozKxF1aivE8+DzzlBpjqeCj21SU fHiPpiCkMPOnmkM6sxF2I5To5By9jhEbpt/0IVlI/p8Ulnp9Idc6d5OE1ppubNI0 ky8q0FnMPcOEddkIrmj8912q0A== -----END CERTIFICATE-----Generated at Fri Jul 24 14:23:11 2026 by rpki-client