$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft File: _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json) Hash identifier: LwTZTQp4vhFxXrfmmcwtF1bCb+LcvH5/aE30iYACSRI= Subject key identifier: 40:65:F7:11:30:01:D2:A3:C9:1B:9A:44:C3:19:87:0F:AA:53:56:3C Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Certificate serial: 091A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft Manifest number: 08FB Signing time: Wed 22 Jul 2026 20:47:20 +0000 Manifest this update: Wed 22 Jul 2026 20:47:20 +0000 Manifest next update: Wed 29 Jul 2026 20:47:20 +0000 Files and hashes: 1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: eTex/WaP3Cl3/p7RfCOHyL0jBe6kLDdRpKb54Uus2Kw=) 2: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: d8G/TfpNpL6HX37ocKvM5TsVlVjVR76JD7mZYT1iKdk=) 3: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: +lxeSugWEuY86E4w4UGBy7QvT+6uw0dBO3CLwKjhb3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2330 (0x91a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Validity Not Before: Jul 22 20:47:20 2026 GMT Not After : Jul 29 20:47:20 2026 GMT Subject: CN=6a612c58-a755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:89:6c:9e:0c:df:8d:ed:80:3e:c7:60:4f: 49:bc:62:74:a1:26:f5:9b:e0:bd:01:34:44:be:60: 7b:d9:c9:7f:27:e7:79:7f:8f:8d:3d:16:ea:f0:d4: 8e:c5:c0:fe:bd:37:96:b2:e3:bb:22:f5:85:82:5b: be:5e:ca:6d:f3:b5:b8:32:c5:8b:9d:d4:cf:79:fb: be:85:0b:08:74:c3:40:df:09:f1:41:f8:1f:a1:be: 01:8b:1c:12:76:bd:61:32:f1:1e:cd:56:86:52:de: f9:fe:2d:6e:64:2f:47:dc:01:81:0e:82:f9:98:78: 5c:11:fc:34:5f:9f:2d:f1:65:b6:8a:08:4a:ab:08: e9:81:fe:27:39:ab:25:a0:23:e3:4a:8e:e7:fe:9d: 74:ef:9c:cb:77:9f:01:78:57:75:e5:5e:db:06:c4: d4:0b:25:0e:0e:4f:5f:6c:7b:7c:b9:00:87:0a:05: 05:e0:a0:ef:96:59:4c:5d:9d:10:0b:9b:2a:4e:60: e6:b6:84:f3:97:6b:ba:92:53:4c:8e:bc:5b:13:1d: 0f:5a:70:1c:d1:9c:d5:c8:db:95:8d:38:58:98:3c: db:e2:a1:2e:15:9e:32:73:b6:23:68:3c:ec:cb:5d: 85:82:b0:ac:df:07:c1:06:33:cb:a8:ee:f6:4a:3f: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:65:F7:11:30:01:D2:A3:C9:1B:9A:44:C3:19:87:0F:AA:53:56:3C X509v3 Authority Key Identifier: keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:39:05:fa:02:bf:14:a1:9d:dc:c4:f6:66:21:56:f9:7b:96: aa:f7:e6:7a:3a:e0:a0:53:41:72:7a:fa:34:6a:a2:a4:84:bb: 77:54:f5:0f:fa:66:ab:fe:8f:fa:be:23:10:a3:37:18:f1:94: f9:55:c6:1a:cd:57:f1:e4:97:61:a3:bd:3b:47:80:2b:7a:ef: a8:42:f0:88:45:a6:df:cb:ed:b7:cf:1e:89:eb:37:c5:39:de: 20:cb:b1:36:f3:ef:13:c4:cd:01:4f:f7:8a:d2:53:39:56:90: fb:c2:c5:67:52:6a:b5:5a:f0:b9:c0:36:3c:fc:95:06:1a:6d: 89:c1:49:3d:45:8a:34:56:41:ba:8f:a9:c9:e8:d2:b0:32:b6: 52:19:7d:04:bf:79:cc:88:b6:fc:44:a4:c5:86:06:2f:3a:bf: 49:49:df:bc:72:45:02:9d:48:fd:a2:ba:27:97:a2:4e:11:28: 2b:27:cc:b0:f2:35:58:77:35:d0:62:98:4b:9e:62:58:1a:47: 09:e4:9f:04:6f:82:64:fa:47:11:c4:ea:83:51:57:d9:53:ec: b7:d9:a5:14:60:ec:94:29:a0:93:79:8e:f8:49:7a:21:75:39: 32:a3:82:82:db:20:7d:84:c8:db:f1:38:19:08:95:85:55:0c: 2c:1e:69:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMDIxMTAvBgNVBAUTKEZDRTM2ODU1NDU2MDdBQzNCQ0MzMzQwRDAzOUIyMTY4 ODI3MTI3QkUwHhcNMjYwNzIyMjA0NzIwWhcNMjYwNzI5MjA0NzIwWjAYMRYwFAYD VQQDEw02YTYxMmM1OC1hNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4eJbJ4M343tgD7HYE9JvGJ0oSb1m+C9ATREvmB72cl/J+d5f4+NPRbq8NSO xcD+vTeWsuO7IvWFglu+Xspt87W4MsWLndTPefu+hQsIdMNA3wnxQfgfob4BixwS dr1hMvEezVaGUt75/i1uZC9H3AGBDoL5mHhcEfw0X58t8WW2ighKqwjpgf4nOasl oCPjSo7n/p1075zLd58BeFd15V7bBsTUCyUODk9fbHt8uQCHCgUF4KDvlllMXZ0Q C5sqTmDmtoTzl2u6klNMjrxbEx0PWnAc0ZzVyNuVjThYmDzb4qEuFZ4yc7YjaDzs y12FgrCs3wfBBjPLqO72Sj96iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBl9xEw AdKjyRuaRMMZhw+qU1Y8MB8GA1UdIwQYMBaAFPzjaFVFYHrDvMM0DQObIWiCcSe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQwMi8yOEE1MDZGQUQ4 NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2VzTzh3elFOQTVzaGFJSnhK NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PTm9WVVZnZXNPOHd6UU5BNXNoYUlKeEo3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQwMi8yOEE1MDZGQUQ4NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2Vz Tzh3elFOQTVzaGFJSnhKNzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMTkF+gK/FKGd3MT2ZiFW+XuWqvfmejrgoFNBcnr6NGqipIS7d1T1D/pmq/6P +r4jEKM3GPGU+VXGGs1X8eSXYaO9O0eAK3rvqELwiEWm38vtt88eies3xTneIMux NvPvE8TNAU/3itJTOVaQ+8LFZ1JqtVrwucA2PPyVBhpticFJPUWKNFZBuo+pyejS sDK2Uhl9BL95zIi2/ESkxYYGLzq/SUnfvHJFAp1I/aK6J5eiThEoKyfMsPI1WHc1 0GKYS55iWBpHCeSfBG+CZPpHEcTqg1FX2VPst9mlFGDslCmgk3mO+El6IXU5MqOC gtsgfYTI2/E4GQiVhVUMLB5p2Q== -----END CERTIFICATE-----Generated at Thu Jul 23 23:24:06 2026 by rpki-client