$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft File: ctH2ecltIFwtRxyUqA3vYNkRJhw.mft (raw, json) Hash identifier: kjQEbdTt6BbKe9jsRjKgIeVlAWpXRi34T+lbwkf36Sw= Subject key identifier: AE:99:F3:3C:F8:1F:9E:EC:13:F0:CC:B6:1A:F4:C9:02:34:F9:E7:A5 Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C Certificate issuer: /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft Manifest number: 01AF Signing time: Thu 23 Jul 2026 05:25:18 +0000 Manifest this update: Thu 23 Jul 2026 05:25:17 +0000 Manifest next update: Thu 30 Jul 2026 05:25:17 +0000 Files and hashes: 1: ctH2ecltIFwtRxyUqA3vYNkRJhw.crl (hash: D1bHDqkGNCqwf4zZ93pO0/hinniuBUF9UFfMNv7onEA=) 2: 255842A2EFF411EE853CC833C4F9AE02.roa (hash: LehxYUyNY+Aih3/gKb031XwxWefiznlK8xHHelOl+ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E85E, serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C Validity Not Before: Jul 23 05:25:17 2026 GMT Not After : Jul 30 05:25:17 2026 GMT Subject: CN=6a61a5be-3bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:19:68:e3:ca:f3:9d:07:43:ec:10:b6:00: 7a:ec:8d:50:93:b7:ca:7d:92:ca:b1:98:17:07:f9: fc:24:96:60:5b:13:97:5c:a9:0f:68:57:87:6a:5b: c9:e0:98:14:25:50:3c:53:cf:d1:5e:99:3f:7a:ef: 41:5b:f8:73:a4:6a:07:6a:e1:a9:25:ff:dd:df:22: 5f:b1:5b:18:67:8b:de:b6:b6:0c:96:b2:d7:1d:63: 9c:6f:4a:ae:62:4e:ef:90:69:d0:f9:c2:e6:81:4a: a2:c0:c7:7d:88:91:0b:e3:f3:0e:b2:c3:61:b5:73: 96:c1:ad:40:f1:10:01:f9:8a:b7:c7:df:c8:e7:07: 26:c6:4b:54:18:5c:92:c1:a8:fc:97:50:a8:47:c9: 14:c0:f9:f4:1e:46:6e:bc:ee:7b:27:8f:97:85:b7: 54:c7:f7:76:cf:d1:f4:ba:b0:ca:39:d7:d2:d0:39: f0:7e:2a:4e:39:32:c0:9c:86:22:60:ba:d2:85:8f: dd:05:44:0e:f5:d3:ee:61:f2:26:11:e3:6c:e5:48: 79:05:25:e5:d7:d7:27:7d:fc:0f:20:06:8f:a2:34: 97:87:ee:5b:80:3f:e6:e4:a2:b2:76:c3:fe:7d:c3: 64:72:f7:c1:65:c7:22:89:0f:7f:02:8c:29:d9:d8: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:99:F3:3C:F8:1F:9E:EC:13:F0:CC:B6:1A:F4:C9:02:34:F9:E7:A5 X509v3 Authority Key Identifier: keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:5b:bb:fa:5b:ea:a6:bc:4d:3b:9e:a6:af:7b:de:09:6c:d2: b2:92:82:d7:0f:86:55:27:d4:5f:d4:70:4c:a3:b0:26:3b:e6: 9c:8f:8e:bf:29:cd:36:77:a2:3b:83:d8:d4:a3:18:c9:9b:14: 6b:07:8e:a8:d8:66:cb:51:cc:5a:08:01:92:ff:e9:7a:ce:19: 81:64:2e:05:c7:27:74:a3:39:4e:29:4c:db:f4:9f:0e:45:ed: 2c:c5:2c:5c:33:5c:e5:3d:ab:96:60:74:d7:d0:70:3a:f7:83: 7d:aa:d5:86:3d:4c:61:5a:69:3b:9b:ad:e5:c4:3c:2e:f6:9c: cd:1e:e2:d4:c6:71:49:ef:a3:5f:1f:b2:b4:83:71:cf:8e:ef: c7:16:60:a2:3a:2c:26:cd:6c:6e:a2:da:e2:e6:7c:b9:f0:77: e5:a3:c5:e6:5f:b2:8a:7b:a6:4f:39:e8:cb:58:59:77:76:e9: 45:39:ba:37:a1:f2:db:62:c8:5e:4f:2c:3c:f2:6d:25:b0:81: ac:3b:6a:b2:78:7e:b4:5e:71:cd:52:92:02:e1:93:98:93:11: 2e:70:57:5c:50:74:24:7c:83:cc:de:fa:1d:6a:db:01:5c:1b: cf:67:28:5d:f5:a0:61:46:f8:3c:94:24:6c:31:37:3f:53:a3: 87:28:b7:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NUUxMTAvBgNVBAUTKDcyRDFGNjc5Qzk2RDIwNUMyRDQ3MUM5NEE4MERFRjYw RDkxMTI2MUMwHhcNMjYwNzIzMDUyNTE3WhcNMjYwNzMwMDUyNTE3WjAYMRYwFAYD VQQDEw02YTYxYTViZS0zYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrMZaOPK850HQ+wQtgB67I1Qk7fKfZLKsZgXB/n8JJZgWxOXXKkPaFeHalvJ 4JgUJVA8U8/RXpk/eu9BW/hzpGoHauGpJf/d3yJfsVsYZ4vetrYMlrLXHWOcb0qu Yk7vkGnQ+cLmgUqiwMd9iJEL4/MOssNhtXOWwa1A8RAB+Yq3x9/I5wcmxktUGFyS waj8l1CoR8kUwPn0HkZuvO57J4+XhbdUx/d2z9H0urDKOdfS0DnwfipOOTLAnIYi YLrShY/dBUQO9dPuYfImEeNs5Uh5BSXl19cnffwPIAaPojSXh+5bgD/m5KKydsP+ fcNkcvfBZcciiQ9/Aowp2djWfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK6Z8zz4 H57sE/DMthr0yQI0+eelMB8GA1UdIwQYMBaAFHLR9nnJbSBcLUcclKgN72DZESYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg1RS81QkMxMjY3QUVG RjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi9jdEgyZWNsdElGd3RSeHlVcUEzdllOa1JK aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2N0SDJlY2x0SUZ3dFJ4eVVxQTN2WU5rUkpody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg1RS81QkMxMjY3QUVGRjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi9jdEgyZWNsdElG d3RSeHlVcUEzdllOa1JKaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcFu7+lvqprxNO56mr3veCWzSspKC1w+GVSfUX9RwTKOwJjvmnI+OvynNNnei O4PY1KMYyZsUaweOqNhmy1HMWggBkv/pes4ZgWQuBccndKM5TilM2/SfDkXtLMUs XDNc5T2rlmB019BwOveDfarVhj1MYVppO5ut5cQ8LvaczR7i1MZxSe+jXx+ytINx z47vxxZgojosJs1sbqLa4uZ8ufB35aPF5l+yinumTznoy1hZd3bpRTm6N6Hy22LI Xk8sPPJtJbCBrDtqsnh+tF5xzVKSAuGTmJMRLnBXXFB0JHyDzN76HWrbAVwbz2co XfWgYUb4PJQkbDE3P1Ojhyi3EQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:23:58 2026 by rpki-client