$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: Nh82d0D9c1lcmqfj2MZylgD+avw7Bk9gVi+VwZp7Rxo= Subject key identifier: 57:11:C9:24:48:20:A5:DC:44:95:05:EE:03:8F:07:52:AD:B1:15:49 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0601 Signing time: Wed 22 Jul 2026 23:44:36 +0000 Manifest this update: Wed 22 Jul 2026 23:44:35 +0000 Manifest next update: Wed 29 Jul 2026 23:44:35 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: hKAjrDU6QMZC8wZTO3uQe94/QWeGoJdhW5ZqItbE34U=) 2: A486779E6FED11F1B401E8288CA30FBC.roa (hash: ZNuiSSyrHubK4AwyZlfjhIr65U0V5dbY5FcmNw+d+MA=) 3: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=) 4: 6DD2A340714011F191B402BC77A30FBC.roa (hash: a48AG/pGOmK4TOseQPCOrM/Wg8LOw5p4urOR/siiycQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Jul 22 23:44:35 2026 GMT Not After : Jul 29 23:44:35 2026 GMT Subject: CN=6a6155e4-fe77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:4b:b9:8d:1d:15:9c:bf:24:c4:9d:b9:4f: 6f:9f:3f:ac:ca:62:62:d1:19:58:18:18:a6:6e:4e: 20:cf:dc:e0:53:04:09:f6:d6:77:92:8a:0f:85:ed: a6:19:0a:28:bc:01:32:92:5e:66:a6:28:c1:b4:a6: 2b:52:e0:f7:b7:e0:ab:be:d2:4b:e1:4d:52:33:10: 26:e2:02:59:a9:85:cc:8a:be:58:70:f3:29:71:1f: db:ff:46:21:5c:97:ab:eb:1a:c3:e4:d4:29:43:4f: 17:bc:78:71:ce:3b:09:42:83:59:75:98:4d:cc:f1: 32:73:bf:c3:1e:42:94:23:54:2f:b8:ed:87:2f:52: 4b:cb:83:30:ab:c9:f8:5f:22:5e:aa:e2:bf:50:58: 26:4b:2a:df:24:17:b3:f2:d5:b0:2e:3f:89:4d:49: 79:6a:1c:6f:16:26:21:80:90:d4:a3:8a:d3:2f:37: e7:63:f6:bc:5b:b0:6f:ec:41:14:11:b5:02:1d:27: 62:58:13:8a:1e:f5:c6:32:de:57:4e:a1:74:4b:44: 97:4c:01:95:74:14:48:de:16:86:22:83:f1:b6:34: a7:41:ae:7a:89:4f:3c:bc:14:7e:08:52:09:d0:21: 3b:fb:b8:fe:af:58:cc:71:15:2d:eb:d3:ea:7c:71: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:11:C9:24:48:20:A5:DC:44:95:05:EE:03:8F:07:52:AD:B1:15:49 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f3:8e:c7:4f:f5:e0:18:d6:3d:fc:a2:7c:fe:59:00:e7:99: 7e:1a:fe:55:d1:90:7b:e7:07:6f:50:be:69:3a:80:72:91:45: 8b:71:58:f5:7e:64:ab:15:e8:6f:af:8e:15:90:1c:7d:8a:a6: b8:2a:46:18:d9:8b:26:95:72:4b:f0:00:25:fe:df:1a:16:ff: da:c6:35:d2:12:67:a6:55:bf:b2:42:ca:87:f0:8b:76:cb:d3: ae:8d:fd:bf:ba:af:a3:2b:47:83:95:ee:6e:b4:9f:9b:d7:aa: e2:d5:1b:d8:a7:6f:d8:28:6f:c9:de:65:68:4b:73:79:dc:10: 40:d7:2c:b8:76:15:71:9e:05:d9:81:cd:43:9d:a2:57:55:b8: b8:8d:ee:ce:6f:d1:bb:a1:a0:d6:38:77:8d:1a:5a:b6:43:10: bc:0d:8a:34:4d:d6:85:0c:7f:64:20:43:26:08:d8:cd:f1:53: 71:16:99:38:1e:fa:d5:21:c7:da:84:a3:84:c4:b2:04:37:b4: 7a:f7:e3:32:2b:fc:65:49:52:f5:5d:87:8f:77:91:65:6d:67: 68:63:1b:87:1b:79:e8:52:9a:f9:39:8e:3f:63:77:70:f0:b8: 7c:3b:c8:0d:80:1c:dd:cb:61:c4:1e:62:23:ea:b0:bb:2d:0a: 25:1f:6b:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjYwNzIyMjM0NDM1WhcNMjYwNzI5MjM0NDM1WjAYMRYwFAYD VQQDEw02YTYxNTVlNC1mZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybBLuY0dFZy/JMSduU9vnz+symJi0RlYGBimbk4gz9zgUwQJ9tZ3kooPhe2m GQoovAEykl5mpijBtKYrUuD3t+CrvtJL4U1SMxAm4gJZqYXMir5YcPMpcR/b/0Yh XJer6xrD5NQpQ08XvHhxzjsJQoNZdZhNzPEyc7/DHkKUI1QvuO2HL1JLy4Mwq8n4 XyJequK/UFgmSyrfJBez8tWwLj+JTUl5ahxvFiYhgJDUo4rTLzfnY/a8W7Bv7EEU EbUCHSdiWBOKHvXGMt5XTqF0S0SXTAGVdBRI3haGIoPxtjSnQa56iU88vBR+CFIJ 0CE7+7j+r1jMcRUt69PqfHGTpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcRySRI IKXcRJUF7gOPB1KtsRVJMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjPOOx0/14BjWPfyifP5ZAOeZfhr+VdGQe+cHb1C+aTqAcpFFi3FY9X5kqxXo b6+OFZAcfYqmuCpGGNmLJpVyS/AAJf7fGhb/2sY10hJnplW/skLKh/CLdsvTro39 v7qvoytHg5XubrSfm9eq4tUb2Kdv2Chvyd5laEtzedwQQNcsuHYVcZ4F2YHNQ52i V1W4uI3uzm/Ru6Gg1jh3jRpatkMQvA2KNE3WhQx/ZCBDJgjYzfFTcRaZOB761SHH 2oSjhMSyBDe0evfjMiv8ZUlS9V2Hj3eRZW1naGMbhxt56FKa+TmOP2N3cPC4fDvI DYAc3cthxB5iI+qwuy0KJR9rMw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:33:08 2026 by rpki-client