$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft File: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json) Hash identifier: KZWS59XoJf7Rq4XvXu+ZOqhBgeXWClFAreNV9DBrwkU= Subject key identifier: 37:70:F8:27:D0:49:9F:EF:21:3E:67:B1:E7:D1:95:52:9E:4B:0B:CD Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Certificate serial: 1A9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft Manifest number: 1A24 Signing time: Fri 24 Jul 2026 16:28:27 +0000 Manifest this update: Fri 24 Jul 2026 16:28:27 +0000 Manifest next update: Fri 31 Jul 2026 16:28:27 +0000 Files and hashes: 1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: Y2Fp6kx+/eXKr1YgINuuhYKj+4Yw2dToxKMvVPq7/Is=) 2: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: YkCRNqQCS8jVIHV+a7IJFYqulDisT+tl/2C+71L8pZ0=) 3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: cMSDuBT3kjpyehv0+lJ2MFU5CMopK6TVvtYRY4GXdzU=) 4: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: oitbivbdUYSMdXh7VLPNdxq472u6AbzxgvTVwLHL+so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 16:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6813 (0x1a9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Validity Not Before: Jul 24 16:28:27 2026 GMT Not After : Jul 31 16:28:27 2026 GMT Subject: CN=6a6392ab-9d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:c4:e8:29:83:2e:c2:dd:53:be:a1:78:95: dc:d4:2a:62:d6:6c:14:f1:47:65:e5:0c:5e:e3:e6: be:b5:f0:ca:b4:3d:50:0c:0d:2d:60:44:d1:cf:25: 8c:8e:76:88:c4:f8:1f:bb:c3:85:65:f5:74:d6:4d: e5:f5:90:3a:87:23:38:e9:8b:3a:d2:b5:b4:29:d6: 1d:91:49:8a:71:30:8b:6c:35:f4:6f:87:55:24:45: a7:ab:38:e0:46:b4:13:a6:f2:46:68:e7:a0:4c:88: 56:d9:d7:01:4a:f7:da:e9:2a:97:76:08:38:9d:4f: 94:0d:dd:33:3f:ef:b5:02:42:cb:94:a8:9a:16:1d: f2:50:e3:60:ef:f9:b7:f3:91:34:94:94:ca:77:a5: 68:ad:99:83:ff:f8:35:53:33:88:be:14:37:d8:42: 51:8a:59:bb:ea:c8:5c:75:d6:4a:6b:da:f8:77:9a: 39:83:8f:87:eb:06:af:fd:11:2c:a0:07:5c:ce:e2: de:5f:82:10:7e:3f:b2:17:37:dc:be:d1:62:33:b5: 9f:90:3f:12:d2:8c:11:77:2c:ea:ea:0c:90:69:fa: ee:45:b1:61:2c:0e:b5:d2:89:e6:2d:6e:b6:53:65: 43:00:53:44:b9:8c:02:23:34:d4:4c:dd:ae:02:9a: 10:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:F8:27:D0:49:9F:EF:21:3E:67:B1:E7:D1:95:52:9E:4B:0B:CD X509v3 Authority Key Identifier: keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:99:a5:89:51:c3:ef:ca:31:74:8a:ff:99:ab:c4:2f:66:a2: 2e:30:75:a1:e9:44:94:c3:39:1d:a6:43:d5:e1:d0:15:32:2c: be:33:ac:78:40:2f:d9:e6:1c:24:cc:28:bf:4b:83:23:98:23: 58:0c:25:e6:a3:14:0b:02:d1:8e:5a:91:ff:87:60:7c:24:58: 9b:00:05:b6:1e:25:1d:46:df:0a:c9:43:20:e5:66:5c:33:3a: 2a:0b:20:fa:59:3b:98:1a:83:04:bb:e0:07:25:66:f1:83:5b: 70:4d:ce:80:2c:94:76:c1:b9:3e:bd:fb:24:e1:ec:11:1a:be: 3a:d7:bb:ab:5c:0b:82:82:44:9d:79:5f:e3:b4:63:4e:8b:c5: 10:5b:84:0e:18:08:33:70:5a:06:f3:f7:52:2a:68:af:b3:91: 83:db:fe:6d:55:6e:c8:b6:61:ba:9a:bb:1f:aa:07:dd:6a:64: 4e:0c:b0:21:88:24:7b:e5:9f:f1:3d:4b:3b:37:ba:b3:68:7f: 08:0e:e1:fb:7d:5c:ef:4f:92:92:53:a9:55:b9:e5:dc:db:7c: e3:b5:21:ff:75:da:b2:f7:d9:de:4d:e6:e4:b9:77:79:08:a6: 6f:db:5e:59:ea:a1:40:5e:df:58:47:de:2b:e4:e1:51:07:f3: 80:e3:8c:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMTMxMTAvBgNVBAUTKEU1NjcyQkJGMThDNENGRUJEM0Y0NzJEMTNCNDg3NzEz NzJEMzRFREYwHhcNMjYwNzI0MTYyODI3WhcNMjYwNzMxMTYyODI3WjAYMRYwFAYD VQQDEw02YTYzOTJhYi05ZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyv/E6CmDLsLdU76heJXc1Cpi1mwU8Udl5Qxe4+a+tfDKtD1QDA0tYETRzyWM jnaIxPgfu8OFZfV01k3l9ZA6hyM46Ys60rW0KdYdkUmKcTCLbDX0b4dVJEWnqzjg RrQTpvJGaOegTIhW2dcBSvfa6SqXdgg4nU+UDd0zP++1AkLLlKiaFh3yUONg7/m3 85E0lJTKd6VorZmD//g1UzOIvhQ32EJRilm76shcddZKa9r4d5o5g4+H6wav/REs oAdczuLeX4IQfj+yFzfcvtFiM7WfkD8S0owRdyzq6gyQafruRbFhLA610onmLW62 U2VDAFNEuYwCIzTUTN2uApoQlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdw+CfQ SZ/vIT5nsefRlVKeSwvNMB8GA1UdIwQYMBaAFOVnK78YxM/r0/Ry0TtIdxNy007f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMxMy8zQzM0RUMwQTc3 NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXotdlQ5SExSTzBoM0UzTFRU dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVXY3J2eGpFei12VDlITFJPMGgzRTNMVFR0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMxMy8zQzM0RUMwQTc3NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXot dlQ5SExSTzBoM0UzTFRUdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGJmliVHD78oxdIr/mavEL2aiLjB1oelElMM5HaZD1eHQFTIsvjOseEAv2eYc JMwov0uDI5gjWAwl5qMUCwLRjlqR/4dgfCRYmwAFth4lHUbfCslDIOVmXDM6Kgsg +lk7mBqDBLvgByVm8YNbcE3OgCyUdsG5Pr37JOHsERq+Ote7q1wLgoJEnXlf47Rj TovFEFuEDhgIM3BaBvP3Uipor7ORg9v+bVVuyLZhupq7H6oH3WpkTgywIYgke+Wf 8T1LOze6s2h/CA7h+31c70+SklOpVbnl3Nt847Uh/3XasvfZ3k3m5Ll3eQimb9te WeqhQF7fWEfeK+ThUQfzgOOMiw== -----END CERTIFICATE-----Generated at Fri Jul 24 19:53:01 2026 by rpki-client