$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft File: ChYfF3ryrIp11Br-R61A0quRh8o.mft (raw, json) Hash identifier: 8JL8dkYz1h6sTPPLoV1beKGH67O33UpZwOZNUFYyLu8= Subject key identifier: 53:4D:54:A0:16:20:FB:85:93:35:AF:42:49:F5:9F:98:62:2F:82:F0 Authority key identifier: 0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA Certificate issuer: /CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft Manifest number: 02B4 Signing time: Thu 23 Jul 2026 02:39:18 +0000 Manifest this update: Thu 23 Jul 2026 02:39:18 +0000 Manifest next update: Thu 30 Jul 2026 02:39:18 +0000 Files and hashes: 1: ChYfF3ryrIp11Br-R61A0quRh8o.crl (hash: R7PECZOf40z2cv9w6EMDghglveYbG5PkBzZBRogxWxc=) 2: 7817D2327A5C11EDA0156D76C4F9AE02.roa (hash: Rq+tZUOjeaItK065Mwn6s2PgGSWpFi22osco/w96fYU=) 3: 1376B9341FAE11F0B3E41E84C4F9AE02.roa (hash: PtDZ91mnT8EbY3+b/UvFfpQljI6ctCClP32Mn4w89n8=) 4: 130A89761FAE11F0B3E41E84C4F9AE02.roa (hash: D/XxgpTmAqVDQH9jHYni1JxMUh1+GB1xdzs9QThZoNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Validity Not Before: Jul 23 02:39:18 2026 GMT Not After : Jul 30 02:39:18 2026 GMT Subject: CN=6a617ed6-9018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:ee:2a:16:fe:ae:b3:82:56:df:fe:ca:9e: e3:3f:44:a0:3c:c2:ef:b9:07:6d:50:0b:bd:99:b3: 07:51:8a:98:a8:bc:bf:d7:e3:ed:cc:b5:63:da:3d: bf:a4:6b:1f:1c:7d:c4:a0:23:0a:38:13:03:b9:46: 46:f0:f8:a8:2c:77:62:f6:74:a0:4d:08:cb:ec:34: 71:4e:f9:67:71:e4:08:c8:26:35:6c:a1:1b:90:ea: ac:09:68:a7:2d:00:2e:09:9c:ea:be:19:85:69:af: 59:2d:bf:25:22:ed:21:2b:7b:75:89:98:41:6d:00: 7e:a9:0f:c9:a0:a7:28:a2:63:3b:e4:43:fa:61:a1: dc:85:86:4b:94:8a:8a:5a:10:4c:d4:85:f4:32:de: d2:2e:9c:43:db:78:2d:41:0d:48:9b:1e:87:94:81: 6a:3c:68:ed:62:b3:59:bc:ac:2d:9f:42:00:1c:c4: df:80:8e:f7:96:cf:49:ec:5b:a4:42:0c:47:64:06: 75:06:36:7f:b9:2c:ed:65:77:0e:67:e6:06:ae:6d: 2d:6b:20:4f:3f:2d:84:d5:20:70:4e:6f:16:5a:23: 57:45:fa:ca:1b:6c:4b:4a:c2:89:60:23:17:80:8c: 83:80:c4:09:6a:80:2c:45:8d:9b:a2:fb:5c:f8:0a: 5d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:54:A0:16:20:FB:85:93:35:AF:42:49:F5:9F:98:62:2F:82:F0 X509v3 Authority Key Identifier: keyid:0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7e:8b:ff:af:0f:64:2c:86:e7:ef:3e:d6:0f:b8:b4:0f:73: 54:c9:0a:85:33:51:bd:67:ff:c4:99:39:02:60:2f:8d:ff:7c: 2a:c8:e0:8b:f1:e4:4c:13:a8:2f:19:83:a4:f3:14:10:19:c1: c3:3b:9e:f5:20:e1:a2:c6:8f:40:80:50:9f:a7:0a:26:1c:d9: 65:eb:56:67:ef:e6:07:12:47:94:fc:e4:a7:0c:c5:e9:18:b6: 85:95:01:50:ab:a1:d1:81:eb:f8:09:84:fd:44:46:0e:fd:c3: 7f:67:ec:db:db:94:80:07:94:d8:e8:95:22:03:f7:5d:2c:8b: de:5b:a4:10:fc:87:2d:3b:23:f8:37:ff:f9:15:ee:8f:0e:8f: 2f:99:4f:c8:f3:a3:8d:27:32:a9:f3:87:d5:80:ce:65:50:0a: c7:4b:62:1b:0a:93:92:50:ff:5f:e2:8a:c3:52:91:29:54:8d: 2c:f7:1d:ff:6b:2d:e9:d1:36:c0:18:5f:29:39:e0:32:60:68: a4:3e:97:9b:64:c3:6c:18:88:22:1e:b9:ac:eb:4d:b5:f1:fe: 02:3c:41:02:47:1f:41:7e:8a:c3:fd:a2:5c:e4:91:5a:d7:e5: 58:c4:04:07:f4:eb:3d:f1:02:73:76:ef:7c:24:12:54:26:da: 6d:f9:19:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDBBMTYxRjE3N0FGMkFDOEE3NUQ0MUFGRTQ3QUQ0MEQy QUI5MTg3Q0EwHhcNMjYwNzIzMDIzOTE4WhcNMjYwNzMwMDIzOTE4WjAYMRYwFAYD VQQDEw02YTYxN2VkNi05MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjLuKhb+rrOCVt/+yp7jP0SgPMLvuQdtUAu9mbMHUYqYqLy/1+PtzLVj2j2/ pGsfHH3EoCMKOBMDuUZG8PioLHdi9nSgTQjL7DRxTvlnceQIyCY1bKEbkOqsCWin LQAuCZzqvhmFaa9ZLb8lIu0hK3t1iZhBbQB+qQ/JoKcoomM75EP6YaHchYZLlIqK WhBM1IX0Mt7SLpxD23gtQQ1Imx6HlIFqPGjtYrNZvKwtn0IAHMTfgI73ls9J7Fuk QgxHZAZ1BjZ/uSztZXcOZ+YGrm0tayBPPy2E1SBwTm8WWiNXRfrKG2xLSsKJYCMX gIyDgMQJaoAsRY2bovtc+Apd3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNNVKAW IPuFkzWvQkn1n5hiL4LwMB8GA1UdIwQYMBaAFAoWHxd68qyKddQa/ketQNKrkYfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8zNjVCQ0NFQzdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJcDExQnItUjYxQTBxdVJo OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoWWZGM3J5cklwMTFCci1SNjFBMHF1Umg4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8zNjVCQ0NFQzdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJ cDExQnItUjYxQTBxdVJoOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARH6L/68PZCyG5+8+1g+4tA9zVMkKhTNRvWf/xJk5AmAvjf98Ksjgi/HkTBOo LxmDpPMUEBnBwzue9SDhosaPQIBQn6cKJhzZZetWZ+/mBxJHlPzkpwzF6Ri2hZUB UKuh0YHr+AmE/URGDv3Df2fs29uUgAeU2OiVIgP3XSyL3lukEPyHLTsj+Df/+RXu jw6PL5lPyPOjjScyqfOH1YDOZVAKx0tiGwqTklD/X+KKw1KRKVSNLPcd/2st6dE2 wBhfKTngMmBopD6Xm2TDbBiIIh65rOtNtfH+AjxBAkcfQX6Kw/2iXOSRWtflWMQE B/TrPfECc3bvfCQSVCbabfkZOg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:09:30 2026 by rpki-client