$ rpki-client -vvf rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft File: _2UQNIiSuqqxtzMf9wTDQbiaGHY.mft (raw, json) Hash identifier: EaZ30+xsbxUcQfVkVchQyI/rBOlxJY9WeybR/GgwUZA= Subject key identifier: 0F:70:FA:A9:3A:CC:DB:9A:25:E0:1A:F6:05:50:D8:56:F6:80:3B:1B Authority key identifier: FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76 Certificate issuer: /CN=A9189C03/serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft Manifest number: 5A Signing time: Thu 23 Jul 2026 10:07:50 +0000 Manifest this update: Thu 23 Jul 2026 10:07:49 +0000 Manifest next update: Thu 30 Jul 2026 10:07:49 +0000 Files and hashes: 1: _2UQNIiSuqqxtzMf9wTDQbiaGHY.crl (hash: PifQNTtnqylvl7w0T8cQ7HScaHCfe8nI2kiw2QN38UY=) 2: C0B4841002B011F19551BA913E3D8C67.roa (hash: mlBDMtNCdtUEDeCgXegQmevuYhexij5GGyJcwWWK/bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189C03, serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876 Validity Not Before: Jul 23 10:07:49 2026 GMT Not After : Jul 30 10:07:49 2026 GMT Subject: CN=6a61e7f6-1280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:70:0c:14:e9:b7:5a:57:46:99:ce:2a:37: b8:ea:45:d7:38:8b:73:f3:58:84:23:08:60:d2:af: ed:5a:28:d1:70:d8:83:c6:35:88:b1:e1:01:2b:81: 67:e3:0b:6f:de:0b:c7:0a:da:10:53:49:10:dd:f2: 71:9c:d8:22:6f:32:5f:f5:08:5e:08:e0:c3:b7:94: 52:99:ec:42:3a:96:f8:06:57:4f:4d:cd:a7:6a:aa: a0:38:54:ac:f9:8a:06:07:c4:2e:58:46:cf:5d:24: 48:8c:95:08:65:8d:51:62:f3:4d:d1:b6:20:e1:ef: 83:e8:47:70:fb:78:3a:44:7f:15:87:05:20:2d:70: fc:6c:ab:c0:cd:f3:dd:43:4a:a1:9e:b1:ed:d7:9e: 42:1b:56:32:99:29:04:15:f2:04:eb:a0:16:bb:7f: 88:79:9e:3a:97:63:d5:1a:bd:26:ca:7e:db:0b:8d: b8:3a:42:9f:40:e7:7e:ff:8f:c6:43:64:e0:da:06: 12:66:9f:a2:ac:8b:21:53:d6:23:bb:ba:c5:df:3e: 32:79:ad:98:67:64:f6:0c:fb:79:e8:fc:17:75:12: c3:4b:43:15:93:33:82:c1:06:04:d2:5a:0a:ff:7b: 53:7d:aa:ce:5f:e4:b0:9f:9d:26:33:b7:97:1c:4a: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:70:FA:A9:3A:CC:DB:9A:25:E0:1A:F6:05:50:D8:56:F6:80:3B:1B X509v3 Authority Key Identifier: keyid:FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:1c:dd:08:fa:29:f5:c7:87:7b:d2:23:a0:8f:03:82:cb:75: 81:23:1a:5f:ee:91:77:8a:95:1b:a1:6a:f1:7b:60:1e:6a:22: 66:b2:a1:0a:5f:2f:52:8a:c3:6d:df:20:4a:23:98:cf:0a:b0: 12:bd:c2:16:59:3f:58:11:61:e4:29:be:9e:48:d5:8c:fc:f0: 90:7c:46:e0:67:3b:b5:ee:dd:c3:fd:0b:49:cb:0b:a8:bb:28: 88:ce:fc:e4:e2:f0:9f:69:2e:1c:13:fa:05:82:38:7f:86:34: cc:fc:2e:10:e3:f1:62:25:0e:a3:d5:b2:10:41:3f:35:ec:6c: 96:fd:4c:dc:c1:ac:45:f5:a5:1e:fa:43:65:8c:dc:58:34:f4: e9:b8:07:9a:14:a4:85:63:a9:64:9e:1d:09:fd:4f:02:3c:76: ba:52:b8:7b:e2:27:9a:51:23:91:7a:90:0e:ed:4c:78:86:90: 78:9e:03:a3:43:b2:47:84:0c:e9:60:45:67:41:23:4d:45:61: 29:9e:3a:6e:85:c2:36:aa:f3:7b:12:64:ef:f0:19:71:b6:01: fd:2d:59:79:53:df:17:61:da:a7:77:71:10:a3:48:41:1e:08: f9:b9:6c:8f:ee:51:6d:8a:10:d3:a0:8e:8d:ca:6e:7f:08:30: ab:c4:7e:ca -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUMwMzExMC8GA1UEBRMoRkY2NTEwMzQ4ODkyQkFBQUIxQjczMzFGRjcwNEMzNDFC ODlBMTg3NjAeFw0yNjA3MjMxMDA3NDlaFw0yNjA3MzAxMDA3NDlaMBgxFjAUBgNV BAMTDTZhNjFlN2Y2LTEyODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE7XAMFOm3WldGmc4qN7jqRdc4i3PzWIQjCGDSr+1aKNFw2IPGNYix4QErgWfj C2/eC8cK2hBTSRDd8nGc2CJvMl/1CF4I4MO3lFKZ7EI6lvgGV09NzadqqqA4VKz5 igYHxC5YRs9dJEiMlQhljVFi803RtiDh74PoR3D7eDpEfxWHBSAtcPxsq8DN891D SqGese3XnkIbVjKZKQQV8gTroBa7f4h5njqXY9UavSbKftsLjbg6Qp9A537/j8ZD ZODaBhJmn6KsiyFT1iO7usXfPjJ5rZhnZPYM+3no/Bd1EsNLQxWTM4LBBgTSWgr/ e1N9qs5f5LCfnSYzt5ccSvdXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUD3D6qTrM 25ol4Br2BVDYVvaAOxswHwYDVR0jBBgwFoAU/2UQNIiSuqqxtzMf9wTDQbiaGHYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5QzAzL0RCNjkxRDBBMDE2 ODExRjE4MEUzOEZEMzU5NkY1NkJDL18yVVFOSWlTdXFxeHR6TWY5d1REUWJpYUdI WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvXzJVUU5JaVN1cXF4dHpNZjl3VERRYmlhR0hZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 QzAzL0RCNjkxRDBBMDE2ODExRjE4MEUzOEZEMzU5NkY1NkJDL18yVVFOSWlTdXFx eHR6TWY5d1REUWJpYUdIWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZHN0I+in1x4d70iOgjwOCy3WBIxpf7pF3ipUboWrxe2AeaiJmsqEKXy9SisNt 3yBKI5jPCrASvcIWWT9YEWHkKb6eSNWM/PCQfEbgZzu17t3D/QtJywuouyiIzvzk 4vCfaS4cE/oFgjh/hjTM/C4Q4/FiJQ6j1bIQQT817GyW/UzcwaxF9aUe+kNljNxY NPTpuAeaFKSFY6lknh0J/U8CPHa6Urh74ieaUSORepAO7Ux4hpB4ngOjQ7JHhAzp YEVnQSNNRWEpnjpuhcI2qvN7EmTv8BlxtgH9LVl5U98XYdqnd3EQo0hBHgj5uWyP 7lFtihDToI6Nym5/CDCrxH7K -----END CERTIFICATE-----Generated at Fri Jul 24 00:57:20 2026 by rpki-client