$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft File: 5-hBazlJjR8g7vTYMdsv_s3l8wE.mft (raw, json) Hash identifier: 7aW6XA6F+u8PHRdC7H2cvY6sxqtvF/Dm/MSF5xAOSVM= Subject key identifier: FD:63:61:1C:47:E5:10:B3:ED:A7:C4:CC:3E:CF:A3:A4:FB:D3:99:06 Authority key identifier: E7:E8:41:6B:39:49:8D:1F:20:EE:F4:D8:31:DB:2F:FE:CD:E5:F3:01 Certificate issuer: /CN=A918FE64/serialNumber=E7E8416B39498D1F20EEF4D831DB2FFECDE5F301 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft Manifest number: 1A Signing time: Thu 23 Jul 2026 11:01:14 +0000 Manifest this update: Thu 23 Jul 2026 11:01:14 +0000 Manifest next update: Thu 30 Jul 2026 11:01:14 +0000 Files and hashes: 1: 5-hBazlJjR8g7vTYMdsv_s3l8wE.crl (hash: /HNcOGtkcGLJ3MAuLRP8hHVukazRemiK0dyuB4hpfZ8=) 2: A966E0CA5E3911F1AE025C80017AAC22.roa (hash: pmtjjwkJfcllfi5+ob6MblnqfEjyL3i5W+8VkNGojAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.crl rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE64, serialNumber=E7E8416B39498D1F20EEF4D831DB2FFECDE5F301 Validity Not Before: Jul 23 11:01:14 2026 GMT Not After : Jul 30 11:01:14 2026 GMT Subject: CN=6a61f47a-d4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:ee:83:23:76:32:bd:57:7a:24:a8:8d:db: 69:14:51:6b:30:d9:61:ce:97:45:9a:14:3e:ff:df: 83:b3:45:51:3d:0a:a7:b4:ee:e2:f3:1e:67:56:81: 53:d8:88:b2:ef:4e:2b:05:2e:a7:0e:c9:fe:59:9a: bf:de:31:f7:d9:70:1d:85:32:1a:62:6b:86:3f:0b: 21:0c:9d:69:dc:da:df:4e:ec:47:30:54:4d:ae:0e: a9:6e:0d:7a:85:2a:ff:08:90:1f:ef:58:bf:09:fa: 77:72:f9:00:1e:24:c5:90:1a:45:99:e7:93:8f:f7: 92:4f:e3:96:2c:54:46:d8:db:7b:32:1e:8c:0e:03: f6:96:c4:37:ac:15:98:58:19:b3:86:ce:a0:58:e8: 34:1b:4e:25:ca:e0:0d:ad:f9:3c:75:5d:9f:91:77: 5d:e1:c0:98:f0:2c:d6:d4:c4:7a:ee:23:b0:17:ad: 6d:2d:5e:e9:e1:c6:9d:0e:ab:73:65:1e:f8:ad:12: dc:3e:12:e9:03:09:6f:9c:26:99:99:9f:50:d6:bc: 4f:3c:b2:25:42:40:b4:37:37:92:4d:d3:ab:0e:48: be:7d:75:f0:3c:aa:17:e5:9c:48:51:cf:49:c8:b5: 93:99:7b:fc:d2:20:10:42:6f:40:7d:6a:1a:6b:69: 2b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:63:61:1C:47:E5:10:B3:ED:A7:C4:CC:3E:CF:A3:A4:FB:D3:99:06 X509v3 Authority Key Identifier: keyid:E7:E8:41:6B:39:49:8D:1F:20:EE:F4:D8:31:DB:2F:FE:CD:E5:F3:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c4:8c:c4:cd:f6:05:e9:19:40:dd:1c:df:14:56:eb:84:61: 0a:3f:5d:73:c3:60:1c:30:0e:a8:86:6c:1b:46:45:af:a2:71: 2c:0e:82:5e:11:0e:a8:e7:9a:99:26:bd:a1:14:c4:89:a8:fa: a0:f4:bd:da:40:9d:19:f5:91:99:62:f3:1f:e9:b8:a2:ad:01: 9c:5e:61:08:59:4c:21:f4:b5:81:0f:2a:3f:51:54:d3:c5:4d: 72:3b:b8:77:a1:f4:22:80:f8:3c:37:a9:23:77:94:96:11:92: 09:b4:ba:06:fd:4b:76:ae:9f:03:52:26:c3:7a:be:e9:6c:68: de:51:9c:08:7a:a9:db:ae:b1:79:ad:f5:8e:b9:ba:52:3b:8c: ea:80:a4:fb:f6:b4:2a:78:23:7b:ac:62:fe:87:e9:6a:94:fc: 53:9e:7d:6d:8b:39:5a:8c:41:78:dc:11:f0:22:4f:a8:a9:ca: 25:b7:a2:d0:7b:54:92:e4:71:cd:bf:9b:dc:5b:1b:fb:61:e1: d9:88:7a:99:6f:27:2d:99:e4:72:29:5b:23:bd:1e:0f:30:48: 97:d6:79:3e:a8:d6:0b:fc:ee:5a:02:ae:d3:51:26:87:7c:33: f2:88:8f:99:83:db:f8:70:85:c2:18:0f:18:68:75:33:9d:41: ae:63:98:54 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkU2NDExMC8GA1UEBRMoRTdFODQxNkIzOTQ5OEQxRjIwRUVGNEQ4MzFEQjJGRkVD REU1RjMwMTAeFw0yNjA3MjMxMTAxMTRaFw0yNjA3MzAxMTAxMTRaMBgxFjAUBgNV BAMTDTZhNjFmNDdhLWQ0ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYQ+6DI3YyvVd6JKiN22kUUWsw2WHOl0WaFD7/34OzRVE9Cqe07uLzHmdWgVPY iLLvTisFLqcOyf5Zmr/eMffZcB2FMhpia4Y/CyEMnWnc2t9O7EcwVE2uDqluDXqF Kv8IkB/vWL8J+ndy+QAeJMWQGkWZ55OP95JP45YsVEbY23syHowOA/aWxDesFZhY GbOGzqBY6DQbTiXK4A2t+Tx1XZ+Rd13hwJjwLNbUxHruI7AXrW0tXunhxp0Oq3Nl HvitEtw+EukDCW+cJpmZn1DWvE88siVCQLQ3N5JN06sOSL59dfA8qhflnEhRz0nI tZOZe/zSIBBCb0B9ahpraSuVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/WNhHEfl ELPtp8TMPs+jpPvTmQYwHwYDVR0jBBgwFoAU5+hBazlJjR8g7vTYMdsv/s3l8wEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTY0LzE2NDFEMERFNUUz OTExRjFCMTA0OTlDRjAwN0FBQzIyLzUtaEJhemxKalI4Zzd2VFlNZHN2X3MzbDh3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNS1oQmF6bEpqUjhnN3ZUWU1kc3ZfczNsOHdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG RTY0LzE2NDFEMERFNUUzOTExRjFCMTA0OTlDRjAwN0FBQzIyLzUtaEJhemxKalI4 Zzd2VFlNZHN2X3MzbDh3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8xIzEzfYF6RlA3RzfFFbrhGEKP11zw2AcMA6ohmwbRkWvonEsDoJeEQ6o55qZ Jr2hFMSJqPqg9L3aQJ0Z9ZGZYvMf6biirQGcXmEIWUwh9LWBDyo/UVTTxU1yO7h3 ofQigPg8N6kjd5SWEZIJtLoG/Ut2rp8DUibDer7pbGjeUZwIeqnbrrF5rfWOubpS O4zqgKT79rQqeCN7rGL+h+lqlPxTnn1tizlajEF43BHwIk+oqcolt6LQe1SS5HHN v5vcWxv7YeHZiHqZbyctmeRyKVsjvR4PMEiX1nk+qNYL/O5aAq7TUSaHfDPyiI+Z g9v4cIXCGA8YaHUznUGuY5hU -----END CERTIFICATE-----Generated at Fri Jul 24 17:40:14 2026 by rpki-client