$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: pqXC0NbSOH3hRIEhTP5gBq7yWA8p8pwBxxX1YgjFLdc= Subject key identifier: BF:29:78:D9:2F:99:F3:A9:C6:F4:8A:62:9E:6C:69:66:FA:E7:8E:8A Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 022B Signing time: Thu 23 Jul 2026 03:54:21 +0000 Manifest this update: Thu 23 Jul 2026 03:54:21 +0000 Manifest next update: Thu 30 Jul 2026 03:54:21 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: JlOQlHn1njvgaSZCzPHo2PwWhqvFJjVsdC3WRFSN3yo=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: Jy8XOiA0kN27oXJXLhTzYwQbS1Mw45QfiLEVZ4JMgEM=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: +VGb3DLO/rVhkz02/GwA3CkCqPb4QLi9bk86uPT+tR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Jul 23 03:54:21 2026 GMT Not After : Jul 30 03:54:21 2026 GMT Subject: CN=6a61906d-7c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:62:83:9f:03:bd:18:50:49:86:9e:8c:3f: bb:fa:6a:78:be:79:25:ec:57:06:bd:08:f0:25:47: 2a:6f:91:52:cc:73:a5:53:39:b4:93:fe:d5:24:5d: fb:ae:09:a3:82:9a:64:3f:ae:17:ac:75:a9:10:ac: 1b:1b:1c:fd:31:53:2b:81:c7:d5:2f:1b:ac:34:15: 13:bc:22:3e:36:d3:9f:7b:e9:bc:22:10:ee:f7:1e: e3:f6:5e:34:c0:62:4d:2b:94:86:01:c7:65:ea:39: 30:f1:22:db:8d:8f:1e:6b:97:03:4b:83:37:dc:d3: a5:79:f7:65:94:da:00:01:ed:10:e6:6a:e4:d8:6d: 26:06:d9:21:4b:8a:62:2e:e6:5f:e3:7e:10:47:cf: 9d:43:65:55:5c:67:86:03:f9:d2:3a:1a:bc:43:2b: 2d:24:3f:8b:4d:eb:85:22:4d:92:8a:7a:af:83:d8: 5b:16:3f:d6:aa:d9:49:93:fe:f8:a2:96:47:4c:74: a7:7c:20:46:b4:aa:33:c3:6b:aa:cf:1e:69:d8:b0: 81:1e:4d:21:b0:93:20:fd:87:96:d7:32:6e:8e:f3: 8e:ad:1c:79:46:22:b2:78:5c:b9:c5:03:3c:2d:1e: 9a:5d:c9:02:f7:08:bc:27:c0:50:fc:b6:c0:14:84: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:29:78:D9:2F:99:F3:A9:C6:F4:8A:62:9E:6C:69:66:FA:E7:8E:8A X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:83:ea:cd:5e:06:76:34:09:22:ac:6c:66:f5:77:0f:66:f9: 39:f4:69:ba:0e:cb:ca:ed:1a:89:56:b5:ca:63:ff:fa:8c:d5: 1f:af:d6:95:f4:5d:d6:a1:5b:3e:c6:08:9b:2e:9e:98:7e:3d: 29:a7:b9:49:18:44:13:fe:ea:c5:1f:2b:27:d5:1f:f4:dc:db: 1a:51:31:01:86:f3:fd:9c:a4:1e:85:2f:b6:27:15:b0:85:ad: 76:71:d4:29:de:58:86:bd:5b:4a:ac:c5:20:30:4a:eb:0f:20: 1d:ba:ad:f8:bc:d8:c3:fe:c5:ad:10:87:c9:06:d2:a5:fc:8d: 38:02:4c:53:10:c3:74:a8:57:e0:1b:a0:53:0e:71:a9:a2:0c: 6e:a0:65:0e:f0:3c:42:ab:82:5a:d7:c2:ce:85:56:dc:59:61: a0:34:0e:1f:4b:6a:f1:38:75:73:6f:8c:49:ce:4a:b1:7b:30: 62:ab:e0:a7:03:10:7c:f1:e7:2d:7c:cc:05:38:b2:56:3e:87: 8a:8d:ec:5b:10:43:61:d4:72:6b:82:0d:14:11:ae:f8:05:38: 3d:46:34:35:0e:6b:c8:c1:3e:5f:65:f9:7f:72:04:8b:f6:ed: ca:61:46:35:a4:a3:98:0e:16:07:8d:9e:1a:0c:06:c8:2d:24: 22:f7:82:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjYwNzIzMDM1NDIxWhcNMjYwNzMwMDM1NDIxWjAYMRYwFAYD VQQDEw02YTYxOTA2ZC03YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL1ig58DvRhQSYaejD+7+mp4vnkl7FcGvQjwJUcqb5FSzHOlUzm0k/7VJF37 rgmjgppkP64XrHWpEKwbGxz9MVMrgcfVLxusNBUTvCI+NtOfe+m8IhDu9x7j9l40 wGJNK5SGAcdl6jkw8SLbjY8ea5cDS4M33NOlefdllNoAAe0Q5mrk2G0mBtkhS4pi LuZf434QR8+dQ2VVXGeGA/nSOhq8QystJD+LTeuFIk2Sinqvg9hbFj/WqtlJk/74 opZHTHSnfCBGtKozw2uqzx5p2LCBHk0hsJMg/YeW1zJujvOOrRx5RiKyeFy5xQM8 LR6aXckC9wi8J8BQ/LbAFIQiGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8peNkv mfOpxvSKYp5saWb6546KMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIoPqzV4GdjQJIqxsZvV3D2b5OfRpug7Lyu0aiVa1ymP/+ozVH6/WlfRd1qFb PsYImy6emH49Kae5SRhEE/7qxR8rJ9Uf9NzbGlExAYbz/ZykHoUvticVsIWtdnHU Kd5Yhr1bSqzFIDBK6w8gHbqt+LzYw/7FrRCHyQbSpfyNOAJMUxDDdKhX4BugUw5x qaIMbqBlDvA8QquCWtfCzoVW3FlhoDQOH0tq8Th1c2+MSc5KsXswYqvgpwMQfPHn LXzMBTiyVj6Hio3sWxBDYdRya4INFBGu+AU4PUY0NQ5ryME+X2X5f3IEi/btymFG NaSjmA4WB42eGgwGyC0kIveCSA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:23:31 2026 by rpki-client