$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: VWskNxbvhjG4wbBIrueGs2lN4I9PauuGy7DmC9iLn98= Subject key identifier: C4:1A:72:54:19:B5:E3:EF:AB:F4:64:7C:B4:1A:CC:EF:0C:6C:3F:97 Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 0247 Signing time: Thu 23 Jul 2026 03:36:25 +0000 Manifest this update: Thu 23 Jul 2026 03:36:24 +0000 Manifest next update: Thu 30 Jul 2026 03:36:24 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: DtvRu2kFNC7jBiRX4nqYfZ3dBj/X8FpC2UH9gxYhTbo=) 2: 27623F48040711F193DC81CA173D8C67.roa (hash: mzCIZfKTucgozxw0jlm4c47n5Z3DTwwALFRuv9z3XQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Jul 23 03:36:24 2026 GMT Not After : Jul 30 03:36:24 2026 GMT Subject: CN=6a618c38-7c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:67:5b:fe:e6:e7:c2:92:d3:3d:f7:68:66: 0f:99:a8:e8:7f:0f:bf:5c:e4:a6:b5:a4:d3:5d:f9: ef:48:fa:dd:8c:1e:69:fc:dd:45:3c:3f:e5:54:d3: 3c:8f:dc:f4:04:2b:19:62:59:3c:7b:cf:af:fd:73: 4b:08:de:df:32:ed:87:2d:2f:de:de:2f:af:5f:da: 36:54:36:56:04:b8:da:a6:7b:89:7f:2a:ca:cc:31: 39:b0:40:60:d0:93:81:2b:87:86:f0:49:ba:49:fd: 98:67:91:a7:6b:83:8c:74:3c:15:8d:88:7f:77:53: fa:5e:24:35:15:5e:e1:39:b8:0c:9a:37:60:7e:37: a9:20:aa:a2:38:ca:75:ce:f7:58:cd:95:32:af:9d: 82:dd:2e:3b:76:6c:72:23:c0:2a:24:4e:b3:05:68: 00:b4:57:03:23:13:ce:31:d5:fd:d0:5a:60:27:63: 6c:88:aa:cf:27:28:b7:cc:d2:b6:50:12:64:85:62: 84:d9:69:ef:cd:04:b8:b4:67:5c:be:20:ee:c4:1f: 3b:8b:ce:a4:82:d6:c5:a1:8a:45:f5:b4:a8:92:5b: 62:f3:79:a7:32:93:0d:b7:09:3c:2b:06:65:eb:9c: 86:8b:96:09:47:e1:d1:62:f0:d9:14:7b:06:dc:57: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1A:72:54:19:B5:E3:EF:AB:F4:64:7C:B4:1A:CC:EF:0C:6C:3F:97 X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b2:22:61:57:d3:67:2c:ce:c8:1b:f1:9d:a8:70:16:cf:99: 08:93:27:11:f1:96:c7:b4:3c:9a:04:15:75:52:52:91:5d:a1: 78:9a:4b:e9:f8:69:37:46:b8:bb:f3:bc:ea:d6:86:3b:17:94: bc:02:a6:a1:d6:a9:94:7d:d4:8e:5e:07:b7:ac:51:0d:0d:e9: 57:c9:86:d1:7d:0b:78:37:c8:22:98:c6:65:ab:92:69:ea:fc: 10:a9:24:ff:55:0d:0c:f3:9f:6e:92:c8:c5:24:82:f8:45:33: 4c:99:42:3c:de:e2:9f:5f:3f:07:e9:8f:82:e0:f0:a0:cc:c9: 45:b5:c2:f9:74:50:23:f3:2e:3a:ad:f2:bb:66:42:f0:a3:50: 09:cc:8e:e8:1a:fc:f5:72:8e:9e:c1:ba:80:1e:b5:d9:ab:18: 69:9b:8e:95:85:40:08:83:cf:64:a5:79:1e:23:1b:84:97:24: 49:cf:76:bf:f1:8a:eb:29:1e:35:72:c6:d0:da:e6:05:2d:a7: 8a:dd:02:fb:cd:df:46:54:ba:04:c9:c8:27:83:2e:b0:e4:dd: 13:a9:84:6b:50:17:ba:76:82:c6:f2:25:14:2b:41:97:b0:a8: 4a:b7:b5:f3:3e:06:d2:c9:53:dd:9e:03:83:c6:fb:1e:d0:9e: 1f:21:4d:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjYwNzIzMDMzNjI0WhcNMjYwNzMwMDMzNjI0WjAYMRYwFAYD VQQDEw02YTYxOGMzOC03YzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy15nW/7m58KS0z33aGYPmajofw+/XOSmtaTTXfnvSPrdjB5p/N1FPD/lVNM8 j9z0BCsZYlk8e8+v/XNLCN7fMu2HLS/e3i+vX9o2VDZWBLjapnuJfyrKzDE5sEBg 0JOBK4eG8Em6Sf2YZ5Gna4OMdDwVjYh/d1P6XiQ1FV7hObgMmjdgfjepIKqiOMp1 zvdYzZUyr52C3S47dmxyI8AqJE6zBWgAtFcDIxPOMdX90FpgJ2NsiKrPJyi3zNK2 UBJkhWKE2WnvzQS4tGdcviDuxB87i86kgtbFoYpF9bSoklti83mnMpMNtwk8KwZl 65yGi5YJR+HRYvDZFHsG3FfbeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQaclQZ tePvq/RkfLQazO8MbD+XMB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHbIiYVfTZyzOyBvxnahwFs+ZCJMnEfGWx7Q8mgQVdVJSkV2heJpL6fhpN0a4 u/O86taGOxeUvAKmodaplH3Ujl4Ht6xRDQ3pV8mG0X0LeDfIIpjGZauSaer8EKkk /1UNDPOfbpLIxSSC+EUzTJlCPN7in18/B+mPguDwoMzJRbXC+XRQI/MuOq3yu2ZC 8KNQCcyO6Br89XKOnsG6gB612asYaZuOlYVACIPPZKV5HiMbhJckSc92v/GK6yke NXLG0NrmBS2nit0C+83fRlS6BMnIJ4MusOTdE6mEa1AXunaCxvIlFCtBl7CoSre1 8z4G0slT3Z4Dg8b7HtCeHyFNKw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:58:51 2026 by rpki-client