$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json) Hash identifier: pJzFPtGVgS64bVBUaFpiDa8QUawTCmTLsCUrvk9KX5g= Subject key identifier: 3A:D7:0E:9A:BA:A9:D5:79:EB:6F:9A:D6:80:EF:F8:B8:EA:D5:8C:78 Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Certificate serial: 0868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft Manifest number: 0860 Signing time: Wed 22 Jul 2026 21:23:17 +0000 Manifest this update: Wed 22 Jul 2026 21:23:17 +0000 Manifest next update: Wed 29 Jul 2026 21:23:17 +0000 Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: Dw29vED8BXz9MzqNCyqpFQZMKF+aZ5sOlmt1FxXedmg=) 2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: bh9ab/euQ6z8B/L2XgiWVFQe1HHd439JaCqfvm92Ja8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Validity Not Before: Jul 22 21:23:17 2026 GMT Not After : Jul 29 21:23:17 2026 GMT Subject: CN=6a6134c5-e9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:78:e5:ea:2c:bc:19:53:47:9b:f3:98:76: 9d:12:5d:61:9b:49:87:9e:a9:d6:a5:62:29:18:e3: 0c:15:6d:d4:c6:33:9e:54:06:2d:db:5d:0a:f1:5a: da:0f:6e:66:3a:81:13:08:06:e9:6b:f8:48:b9:2c: 40:c4:55:a9:47:ca:d2:b2:dc:40:62:bc:93:56:4d: 4c:18:d5:e2:d6:51:50:9b:b6:b8:68:a9:38:8e:ee: 65:6a:35:94:7b:be:f4:37:6b:58:d8:46:01:f6:c6: 67:c9:55:c2:94:3e:8f:7c:11:55:cf:2e:a6:cd:29: 06:b8:65:ce:85:ae:86:ae:fe:06:97:5e:50:83:ae: 7c:01:1a:25:7b:d3:94:a8:44:b1:c5:64:ea:74:c9: 8d:d7:56:9b:3f:c4:4e:1d:66:fb:f9:64:c0:6b:69: f2:ef:98:4b:57:b0:2f:da:8f:8d:bb:f1:e7:d4:a5: b9:0c:cd:f0:68:16:80:0d:59:26:e6:4c:ff:a1:17: 0e:b0:34:ba:82:6c:74:b4:f7:49:ba:e5:d4:54:d6: 32:d7:ec:74:b3:41:07:47:5d:67:ea:7e:94:9e:fd: 43:db:22:bb:4a:4c:d2:a0:97:a6:b5:50:0c:fe:96: fa:0d:6f:b8:40:0a:fb:42:bf:0c:28:86:d2:53:94: 1d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D7:0E:9A:BA:A9:D5:79:EB:6F:9A:D6:80:EF:F8:B8:EA:D5:8C:78 X509v3 Authority Key Identifier: keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e3:b6:0c:bf:ad:94:7a:1f:20:6f:62:8f:8a:e2:72:fa:25: 9f:ad:a4:c5:a3:1a:74:ed:f0:77:26:51:9b:96:14:62:9b:c2: 2d:7d:1b:2b:14:d4:ea:a7:99:ad:67:2c:a4:63:ba:89:17:5c: 30:20:cd:20:30:51:8e:ee:9e:65:5d:d9:6f:e4:f5:19:14:82: 33:fe:62:2c:4f:38:54:8d:07:0d:66:2c:4a:5d:9e:79:16:9a: 43:5f:37:b9:16:5e:5e:27:c2:e4:a4:0b:a3:9a:fc:17:ed:82: 63:af:49:83:d1:ad:6c:37:a1:78:51:8a:91:73:47:32:2a:5a: e2:90:63:21:f4:60:a7:28:5a:f0:79:a7:9e:ff:3c:47:4d:4f: e9:e7:84:41:c2:1f:7c:83:b1:2c:0d:05:dd:62:d2:8c:5a:c4: 1b:1a:43:d9:af:ba:2c:e9:8c:c2:49:3c:b8:c2:1a:7b:9e:10: 3b:db:b1:26:8b:53:aa:ae:7c:fb:38:a4:b4:6e:2c:66:c6:7f: 3e:a9:81:ee:a2:a8:7c:81:1b:d6:a4:f2:4d:9c:8a:ba:98:9f: f9:2a:99:54:70:cf:6c:58:68:23:5f:20:cd:a7:5f:eb:a3:11: f2:99:90:03:9e:50:1e:64:99:6b:c4:c3:a3:d5:00:a2:99:ec: 88:c5:f9:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw QjhFMzcxNkMwHhcNMjYwNzIyMjEyMzE3WhcNMjYwNzI5MjEyMzE3WjAYMRYwFAYD VQQDEw02YTYxMzRjNS1lOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DN45eosvBlTR5vzmHadEl1hm0mHnqnWpWIpGOMMFW3UxjOeVAYt210K8Vra D25mOoETCAbpa/hIuSxAxFWpR8rSstxAYryTVk1MGNXi1lFQm7a4aKk4ju5lajWU e770N2tY2EYB9sZnyVXClD6PfBFVzy6mzSkGuGXOha6Grv4Gl15Qg658ARole9OU qESxxWTqdMmN11abP8ROHWb7+WTAa2ny75hLV7Av2o+Nu/Hn1KW5DM3waBaADVkm 5kz/oRcOsDS6gmx0tPdJuuXUVNYy1+x0s0EHR11n6n6Unv1D2yK7SkzSoJemtVAM /pb6DW+4QAr7Qr8MKIbSU5QdbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrXDpq6 qdV562+a1oDv+Ljq1Yx4MB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf ZmUtcWFNQi10QndMampjV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWOO2DL+tlHofIG9ij4ricvoln62kxaMadO3wdyZRm5YUYpvCLX0bKxTU6qeZ rWcspGO6iRdcMCDNIDBRju6eZV3Zb+T1GRSCM/5iLE84VI0HDWYsSl2eeRaaQ183 uRZeXifC5KQLo5r8F+2CY69Jg9GtbDeheFGKkXNHMipa4pBjIfRgpyha8Hmnnv88 R01P6eeEQcIffIOxLA0F3WLSjFrEGxpD2a+6LOmMwkk8uMIae54QO9uxJotTqq58 +ziktG4sZsZ/PqmB7qKofIEb1qTyTZyKupif+SqZVHDPbFhoI18gzadf66MR8pmQ A55QHmSZa8TDo9UAopnsiMX5kg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:45:53 2026 by rpki-client