$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: EybKNmoq7w1kYxksBdKZGT/0SmEUBvIc0cPlyNAgTxE= Subject key identifier: 22:13:7E:23:7A:E6:BE:7F:53:41:CA:A8:FF:75:40:0D:49:54:74:85 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0DA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D79 Signing time: Wed 22 Jul 2026 18:13:58 +0000 Manifest this update: Wed 22 Jul 2026 18:13:58 +0000 Manifest next update: Wed 29 Jul 2026 18:13:58 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: CCPKdSjC06EMTJ7vOI2PuRJnP+wKKBJq7ocUz7P4Fkc=) 2: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: y1B49VYXe0SRw82YvaswxQk2lKZMwXfDS055uUW8x9s=) 3: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: pMlh6GaUpQCHOF5jp4VeA1i4PMVxZyqL5Xz+a1jzwLQ=) 4: 4AD97410632C11EE96048122C4F9AE02.roa (hash: mpeuILXtK20evHO15vrz42Wl9KtS1A8R8Bhu34AGTf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3488 (0xda0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Jul 22 18:13:58 2026 GMT Not After : Jul 29 18:13:58 2026 GMT Subject: CN=6a610866-0542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:d9:d9:f9:fc:0c:fe:63:36:0a:c6:7b:ed: 96:61:99:0c:a5:ca:41:c5:b1:aa:fb:e7:b4:cf:60: c8:f7:66:25:4d:af:a0:de:eb:57:e5:df:87:64:71: 04:c9:34:e0:e7:4c:f4:ae:ce:56:24:6e:ea:4a:84: fd:22:9e:a2:28:be:f8:96:94:4d:a7:06:88:8d:fb: b9:0e:39:7d:7b:7a:5a:3c:94:fd:2c:40:84:c3:7c: 7d:a4:dd:9c:ca:9f:6b:93:59:5d:22:28:cf:30:cd: 32:63:15:44:81:38:28:51:32:f0:38:aa:e4:20:02: 10:e4:2f:53:8c:3a:19:91:de:48:82:da:d1:97:7c: d1:f7:9d:37:ec:81:97:68:33:2e:20:19:56:c7:a5: 00:84:05:8f:bb:33:f7:27:aa:aa:fa:94:86:06:c0: 4d:1c:ae:96:d3:13:12:e9:b3:b1:4a:10:4d:a1:e6: f0:22:b3:8f:9a:45:76:69:5a:af:f4:92:da:73:48: 4a:5c:66:5a:a9:b6:36:74:bc:52:05:02:5b:17:e5: 94:ab:1f:49:58:16:1a:5a:d8:95:b2:9f:d8:c4:2f: a4:55:dc:67:9e:d5:d0:3f:b0:b9:bf:1d:07:06:fc: 36:99:40:17:8e:7e:09:de:5e:7c:f9:c4:95:bd:a7: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:13:7E:23:7A:E6:BE:7F:53:41:CA:A8:FF:75:40:0D:49:54:74:85 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:9a:91:58:51:41:a2:6c:57:e3:84:cf:3b:c6:7b:e0:de:a2: c3:0b:66:7c:bc:e2:1e:df:ac:4d:c6:3e:b3:7c:1c:64:11:ac: 65:7e:8c:de:50:9e:f2:ec:38:a0:90:3f:b1:83:e3:ad:93:15: c3:dc:e2:5a:15:0a:32:4a:bb:83:c1:ef:69:94:79:f4:3f:1f: df:64:c3:51:5f:4f:1f:be:fd:b8:d9:31:24:42:04:73:2a:b0: ed:fa:1c:c8:54:c2:67:9f:26:f8:30:aa:84:6f:ce:1a:ae:ab: 1c:59:fe:de:2c:2b:e9:b8:e6:39:3d:57:20:2a:0e:97:74:d7: 87:a2:06:a2:d6:e2:e9:33:c4:53:50:51:b0:23:8b:ac:52:36: 1b:b3:da:99:4c:61:28:5a:08:f7:19:bc:14:f4:38:8b:43:56: 21:f7:87:e7:a0:5d:3c:f5:a2:8a:64:72:96:85:cd:72:54:dc: 21:36:47:46:17:5e:89:3a:e9:43:30:b3:55:d0:a1:16:ea:9b: 5b:39:2b:ce:82:88:86:00:b1:40:d7:da:e1:1f:63:6a:cc:c6: 89:95:c4:d8:2f:6e:a0:28:92:da:aa:84:c6:7f:99:f2:27:69: 2d:21:9a:23:ee:94:be:a3:e9:e9:f8:50:03:09:cf:83:43:19: 1c:bc:d1:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwNzIyMTgxMzU4WhcNMjYwNzI5MTgxMzU4WjAYMRYwFAYD VQQDEw02YTYxMDg2Ni0wNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3rZ2fn8DP5jNgrGe+2WYZkMpcpBxbGq++e0z2DI92YlTa+g3utX5d+HZHEE yTTg50z0rs5WJG7qSoT9Ip6iKL74lpRNpwaIjfu5Djl9e3paPJT9LECEw3x9pN2c yp9rk1ldIijPMM0yYxVEgTgoUTLwOKrkIAIQ5C9TjDoZkd5IgtrRl3zR95037IGX aDMuIBlWx6UAhAWPuzP3J6qq+pSGBsBNHK6W0xMS6bOxShBNoebwIrOPmkV2aVqv 9JLac0hKXGZaqbY2dLxSBQJbF+WUqx9JWBYaWtiVsp/YxC+kVdxnntXQP7C5vx0H Bvw2mUAXjn4J3l58+cSVvacpsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCITfiN6 5r5/U0HKqP91QA1JVHSFMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAupqRWFFBomxX44TPO8Z74N6iwwtmfLziHt+sTcY+s3wcZBGsZX6M3lCe8uw4 oJA/sYPjrZMVw9ziWhUKMkq7g8HvaZR59D8f32TDUV9PH779uNkxJEIEcyqw7foc yFTCZ58m+DCqhG/OGq6rHFn+3iwr6bjmOT1XICoOl3TXh6IGotbi6TPEU1BRsCOL rFI2G7PamUxhKFoI9xm8FPQ4i0NWIfeH56BdPPWiimRyloXNclTcITZHRhdeiTrp QzCzVdChFuqbWzkrzoKIhgCxQNfa4R9jaszGiZXE2C9uoCiS2qqExn+Z8idpLSGa I+6UvqPp6fhQAwnPg0MZHLzRsA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:59:13 2026 by rpki-client