$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: kTKPKNp/ENFzwPJRv7GmZBT2siH2o345/w2GM6idgcY= Subject key identifier: DA:5E:0B:0B:12:F4:2E:66:60:F5:5F:7F:54:C4:7B:8B:FE:A3:9A:95 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 01C9 Signing time: Thu 23 Jul 2026 05:23:21 +0000 Manifest this update: Thu 23 Jul 2026 05:23:20 +0000 Manifest next update: Thu 30 Jul 2026 05:23:20 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: Pm7VzPTHVaaxDHr0GAGkkdBNHOOVvCVlMVZ5uIqmUAw=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 7eQsc3jFfyJA5G5xsvQGlnjUsJ7FXLyXJQcnFpGfOuU=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Y5OchRYZWCfXmYyEmnL2P8kc7yv28yWNLEvFTKE+MGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Jul 23 05:23:20 2026 GMT Not After : Jul 30 05:23:20 2026 GMT Subject: CN=6a61a549-82fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4e:4a:aa:7a:05:67:33:93:55:39:87:bd:e1: c4:b6:0c:bb:d9:6a:3a:e0:94:39:fe:c8:58:69:a1: 7b:2b:0c:0f:d4:c3:0a:ff:11:86:8c:7a:7a:4b:9d: 55:e0:3d:73:75:63:93:4a:f2:4b:ff:4c:55:34:41: 9c:0d:3d:30:63:e8:72:da:19:e5:91:12:d9:7c:da: bb:88:43:16:17:aa:be:e3:5f:b9:aa:bb:9a:d2:e3: 02:e6:a2:24:51:e8:77:eb:5d:b6:69:0d:31:0a:fa: ce:ec:18:ae:d4:02:c0:04:a1:fa:58:10:d3:95:cd: 28:aa:11:dc:1e:1a:33:c5:c8:77:e8:f2:a3:26:66: 2b:85:12:eb:be:c3:69:c2:d4:49:2e:b2:fe:81:19: 44:c9:30:af:4f:f8:38:b6:2e:e2:42:ae:4d:d8:48: 02:d1:33:a4:c5:f8:68:33:cd:31:2b:6d:d0:8e:8b: 13:fb:7e:0b:1a:cf:13:f2:2c:e5:4c:0a:da:92:c4: 37:61:63:85:14:2d:cc:ff:8c:a7:68:8b:9b:98:52: e2:0a:56:3c:76:30:eb:fb:b7:fb:65:73:60:ff:d5: e4:a1:e6:fd:88:b8:6f:c0:77:00:03:d4:f0:ae:46: 4f:75:ea:9c:f9:f1:69:f3:7c:39:24:c2:5c:64:ad: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5E:0B:0B:12:F4:2E:66:60:F5:5F:7F:54:C4:7B:8B:FE:A3:9A:95 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f2:98:a2:6d:85:7d:71:11:98:ed:1f:6b:0c:78:93:51:16: bc:f9:14:ac:93:30:f0:12:8a:2b:02:7e:84:9a:95:08:2f:04: 5c:ea:e9:59:0f:1c:55:7e:a6:4a:92:19:6f:92:68:d4:a0:4d: e6:70:32:53:40:ba:f8:f1:53:bb:ab:8c:71:bb:1f:2a:83:97: 5e:4a:40:c6:9f:54:9f:e8:01:ee:2f:6f:47:dc:8d:1f:ec:c7: 1c:6a:24:fd:90:4c:1b:dc:2b:3a:dd:0a:26:b1:85:d2:e8:a4: 89:31:d1:60:1f:bc:ba:09:b4:3b:fc:eb:be:69:13:aa:57:7c: 2d:dd:7b:78:44:5b:da:ce:6c:53:20:5b:e5:b4:ef:cf:8a:d2: a2:13:fa:7e:f1:83:78:83:f7:c3:20:53:1e:47:a0:92:24:04: 03:61:0d:28:a6:28:96:2b:15:38:63:86:6a:85:af:ea:97:64: 54:b0:d3:fb:5e:ad:28:27:00:09:d8:8b:c6:9b:0a:3a:6e:c2: be:74:d6:08:37:d3:5f:0d:6e:03:c9:ae:50:fd:e7:5f:88:f9: d5:3d:db:aa:08:53:13:d1:4b:ec:88:fa:3d:3e:76:08:4d:c6: db:3e:09:83:9e:37:ff:91:16:5e:94:bd:b9:23:a0:b2:56:22: 5c:7c:03:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjYwNzIzMDUyMzIwWhcNMjYwNzMwMDUyMzIwWjAYMRYwFAYD VQQDEw02YTYxYTU0OS04MmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmU5KqnoFZzOTVTmHveHEtgy72Wo64JQ5/shYaaF7KwwP1MMK/xGGjHp6S51V 4D1zdWOTSvJL/0xVNEGcDT0wY+hy2hnlkRLZfNq7iEMWF6q+41+5qrua0uMC5qIk Ueh36122aQ0xCvrO7Biu1ALABKH6WBDTlc0oqhHcHhozxch36PKjJmYrhRLrvsNp wtRJLrL+gRlEyTCvT/g4ti7iQq5N2EgC0TOkxfhoM80xK23QjosT+34LGs8T8izl TAraksQ3YWOFFC3M/4ynaIubmFLiClY8djDr+7f7ZXNg/9Xkoeb9iLhvwHcAA9Tw rkZPdeqc+fFp83w5JMJcZK3VOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpeCwsS 9C5mYPVff1TEe4v+o5qVMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW/KYom2FfXERmO0fawx4k1EWvPkUrJMw8BKKKwJ+hJqVCC8EXOrpWQ8cVX6m SpIZb5Jo1KBN5nAyU0C6+PFTu6uMcbsfKoOXXkpAxp9Un+gB7i9vR9yNH+zHHGok /ZBMG9wrOt0KJrGF0uikiTHRYB+8ugm0O/zrvmkTqld8Ld17eERb2s5sUyBb5bTv z4rSohP6fvGDeIP3wyBTHkegkiQEA2ENKKYolisVOGOGaoWv6pdkVLDT+16tKCcA CdiLxpsKOm7CvnTWCDfTXw1uA8muUP3nX4j51T3bqghTE9FL7Ij6PT52CE3G2z4J g543/5EWXpS9uSOgslYiXHwDug== -----END CERTIFICATE-----Generated at Sat Jul 25 00:39:36 2026 by rpki-client