$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft File: 5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json) Hash identifier: Zqk/xqOZc6vbyac2DKTAYVlUJWu0ASLFFQ8TZcHfZrw= Subject key identifier: 2E:21:A3:DD:48:ED:F3:66:D4:EB:7A:8B:57:DB:97:FD:6B:F9:EE:D9 Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft Manifest number: 01F2 Signing time: Thu 23 Jul 2026 04:41:30 +0000 Manifest this update: Thu 23 Jul 2026 04:41:30 +0000 Manifest next update: Thu 30 Jul 2026 04:41:30 +0000 Files and hashes: 1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: w3SHZDOX8cDTA6chDH89qMO7aWN2xYzIub1iot2v9pQ=) 2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: JqhFhmjTQ7lTEerY4ZxrMkv0NK26Qh/GjDI/YArXFV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: Jul 23 04:41:30 2026 GMT Not After : Jul 30 04:41:30 2026 GMT Subject: CN=6a619b7a-101a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:e5:c6:2f:06:2a:1e:de:bc:7e:dc:7d:18: 41:e1:3a:38:2d:69:b1:23:2a:a7:a4:37:2a:98:1d: 6f:01:bc:1e:cf:4f:ce:c2:6d:64:94:77:d3:5f:25: e0:21:d0:af:97:8e:7a:9d:04:fc:fa:62:ae:27:32: 90:69:0d:d0:29:6a:0b:6a:6a:7b:60:ee:ba:32:5e: c6:03:7b:c6:01:92:5d:08:6c:51:8e:8d:d3:3f:10: cb:81:fb:1e:ca:f1:3f:53:3f:ca:70:38:db:22:a5: cf:5d:b2:7b:09:bc:58:65:f2:c3:a6:36:e9:41:a1: ea:b3:4d:ee:5a:06:c0:b8:8b:59:76:68:b3:18:30: 6b:a9:87:1e:7c:b5:51:8e:5e:dd:d5:61:7a:73:06: f3:e6:58:ff:a8:d4:7a:55:e1:05:53:93:7c:4b:52: 9e:78:0b:96:bd:0c:9c:00:47:dd:7e:90:e6:db:73: 9f:f4:d6:01:37:a2:cf:e4:11:dc:cd:2c:93:4f:50: 57:a5:00:d2:42:64:61:82:3b:d2:2c:c4:f6:a7:1b: 2d:2e:ce:8f:64:6e:81:a2:7f:00:19:87:81:7f:43: bf:1f:27:d5:8a:72:8c:bb:14:ad:cb:86:de:7f:03: eb:f6:c8:22:af:62:28:98:4b:b2:d2:9e:26:1b:0c: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:21:A3:DD:48:ED:F3:66:D4:EB:7A:8B:57:DB:97:FD:6B:F9:EE:D9 X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:27:c4:f4:d4:33:4c:de:9d:0c:78:6d:40:f4:45:e6:1b:2d: cf:30:a9:9b:9a:da:36:02:43:ee:3c:85:55:d5:20:3a:8f:47: 38:b8:3b:2a:3c:6a:65:4f:69:9c:45:e9:c1:21:e6:0e:19:73: 80:97:c3:19:eb:25:cf:79:7c:5c:31:88:e1:52:67:02:92:3a: 78:ef:74:e2:93:07:5d:f4:69:21:33:ee:3a:03:2a:25:58:aa: fa:8e:05:6d:bb:78:6a:60:b2:89:17:79:15:3b:15:10:85:53: 31:12:cc:84:3a:58:ca:64:c1:33:3c:f2:51:cc:7e:9f:d7:c8: 32:38:f8:e7:da:32:9e:eb:e4:f6:ae:db:b6:a2:c4:8f:b9:d4: 3c:58:9f:db:47:35:83:4d:19:ce:94:4d:dd:3b:4f:5a:7c:9c: 23:b1:45:d7:95:64:2a:94:90:d0:c2:dc:e3:f2:fb:24:69:1e: ea:bd:a8:df:78:ee:9c:96:99:a6:71:ad:a8:7d:d6:42:70:98: 94:7e:d1:43:ce:88:27:49:27:7b:36:78:48:f3:ab:eb:47:2e: 48:fe:53:08:94:1a:f8:2f:ef:02:29:b9:14:3f:8c:c5:68:4e: d7:e7:ae:5c:a9:5c:56:bf:fa:5a:6a:af:9f:81:41:95:60:24: d5:58:5a:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIyMEQxMTAvBgNVBAUTKEU1NTZEQzg2Qjk0RTkxQ0Y5QjJFMjk0NEE4NUY3MTY5 MkRBMDk0RDIwHhcNMjYwNzIzMDQ0MTMwWhcNMjYwNzMwMDQ0MTMwWjAYMRYwFAYD VQQDEw02YTYxOWI3YS0xMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApd7lxi8GKh7evH7cfRhB4To4LWmxIyqnpDcqmB1vAbwez0/Owm1klHfTXyXg IdCvl456nQT8+mKuJzKQaQ3QKWoLamp7YO66Ml7GA3vGAZJdCGxRjo3TPxDLgfse yvE/Uz/KcDjbIqXPXbJ7CbxYZfLDpjbpQaHqs03uWgbAuItZdmizGDBrqYcefLVR jl7d1WF6cwbz5lj/qNR6VeEFU5N8S1KeeAuWvQycAEfdfpDm23Of9NYBN6LP5BHc zSyTT1BXpQDSQmRhgjvSLMT2pxstLs6PZG6Bon8AGYeBf0O/HyfVinKMuxSty4be fwPr9sgir2IomEuy0p4mGwwihQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4ho91I 7fNm1Ot6i1fbl/1r+e7ZMB8GA1UdIwQYMBaAFOVW3Ia5TpHPmy4pRKhfcWktoJTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjIwRC82MUFDQkY0Njkz QTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tjLWJMaWxFcUY5eGFTMmds TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjIwRC82MUFDQkY0NjkzQTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tj LWJMaWxFcUY5eGFTMmdsTkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaifE9NQzTN6dDHhtQPRF5hstzzCpm5raNgJD7jyFVdUgOo9HOLg7KjxqZU9p nEXpwSHmDhlzgJfDGeslz3l8XDGI4VJnApI6eO904pMHXfRpITPuOgMqJViq+o4F bbt4amCyiRd5FTsVEIVTMRLMhDpYymTBMzzyUcx+n9fIMjj459oynuvk9q7btqLE j7nUPFif20c1g00ZzpRN3TtPWnycI7FF15VkKpSQ0MLc4/L7JGke6r2o33junJaZ pnGtqH3WQnCYlH7RQ86IJ0knezZ4SPOr60cuSP5TCJQa+C/vAim5FD+MxWhO1+eu XKlcVr/6Wmqvn4FBlWAk1VhaAA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:06:01 2026 by rpki-client