$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft File: sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json) Hash identifier: nk7CiBHMy7yOOlsGtmUiXEfM1NMkaw79hSl7xoVMnH8= Subject key identifier: 6F:EA:40:6B:8B:43:5C:A4:16:62:C1:05:CE:75:9E:3B:C6:59:CA:31 Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED Certificate issuer: /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft Manifest number: 085A Signing time: Wed 22 Jul 2026 21:26:25 +0000 Manifest this update: Wed 22 Jul 2026 21:26:24 +0000 Manifest next update: Wed 29 Jul 2026 21:26:24 +0000 Files and hashes: 1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: Kru1bptKbiTAtNKWQfgQKG5jlU4PbaHQGfTBakAZnuo=) 2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: xQ5Osl/g5IBEyHi+z/+JpV9FYOt4yj/DoqbHsRmNM28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Validity Not Before: Jul 22 21:26:24 2026 GMT Not After : Jul 29 21:26:24 2026 GMT Subject: CN=6a613581-184b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:47:5b:13:34:a9:86:3d:0a:cd:bc:f4:78: c5:b3:60:36:63:86:4d:dd:69:8e:15:46:ab:f4:37: 41:44:a2:e4:53:6f:e3:11:5e:ee:d7:cd:ac:73:34: bb:3c:9d:59:14:56:90:3d:f8:10:bd:3a:35:93:0a: 84:d0:78:6f:12:be:a1:84:8d:fe:9b:5c:b5:9b:dc: c3:c6:9a:d1:64:72:43:86:27:77:4b:6e:c5:38:8a: 15:de:bf:e9:56:e6:27:ed:48:f0:4d:3a:64:2d:f4: 0b:b2:af:27:f0:71:77:94:95:77:fa:2c:64:2b:60: df:be:73:a3:63:6a:30:c8:30:89:04:54:69:b7:2a: c4:3c:9b:d8:24:1b:a6:35:ba:25:20:ba:ce:82:08: 3b:3b:91:94:8b:37:ea:d4:88:dc:a2:46:3c:90:eb: e7:34:9f:bf:78:3c:5d:55:e5:85:4f:d7:ca:07:aa: d7:e0:f7:66:c0:9c:08:75:27:b4:af:fe:90:80:06: 9a:05:13:16:41:92:6c:f3:9b:ed:7b:2f:67:fc:3e: 48:04:fe:26:e3:7c:6f:d3:14:0c:b9:47:d0:28:69: d0:b8:fd:79:cf:fe:f3:94:cf:2c:17:ae:2e:f3:c3: e3:0e:1f:82:79:9b:8d:ff:03:21:b1:83:d1:0c:3e: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EA:40:6B:8B:43:5C:A4:16:62:C1:05:CE:75:9E:3B:C6:59:CA:31 X509v3 Authority Key Identifier: keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1f:16:9a:65:78:f4:a2:be:63:67:f2:2c:4e:97:7b:0a:5c: f5:3f:52:df:29:3f:08:6b:21:a5:8b:61:21:18:5d:fa:18:4b: 57:a9:cf:a5:df:aa:65:c8:bd:2d:3d:28:bc:92:fb:5f:8c:93: b9:ec:4b:56:85:57:aa:11:c7:ff:83:2d:dd:e2:9b:06:59:0c: 9c:bf:21:cd:92:ee:1e:91:c5:39:13:d1:08:be:fd:7d:b6:0e: fe:ba:23:fe:63:ff:9c:f2:0b:45:84:80:a0:10:af:76:7f:68: 42:c4:a5:1b:b9:9f:8d:23:5c:d6:80:a4:8a:ae:94:a3:80:b0: 9c:23:e4:96:a2:c3:4c:26:12:5b:fe:93:db:04:08:3d:06:87: e9:94:05:76:70:39:67:ec:b4:f4:ac:20:fa:e0:09:ea:41:e1: 6b:fa:da:32:df:65:bb:29:ab:00:46:2a:86:f2:d7:c3:c4:29: ac:ee:0e:aa:ae:fb:5a:14:ff:58:0d:11:84:53:76:3b:7f:fc: f9:f1:5f:69:22:fd:58:9b:22:3e:c2:ae:ec:53:e3:f1:ba:1a: 16:db:9f:dc:bc:a2:09:7d:b3:61:1a:5d:27:23:18:6f:37:06: 06:79:e1:36:5e:97:30:da:ee:d6:af:bf:33:e7:0e:75:8d:0f: 14:90:d5:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCODUxMTAvBgNVBAUTKEIyMDc3RDVEMzkwQUM3MkUzQkQ4ODVCMTFGM0FFNkQy QTUyNkE5RUQwHhcNMjYwNzIyMjEyNjI0WhcNMjYwNzI5MjEyNjI0WjAYMRYwFAYD VQQDEw02YTYxMzU4MS0xODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1ZHWxM0qYY9Cs289HjFs2A2Y4ZN3WmOFUar9DdBRKLkU2/jEV7u182sczS7 PJ1ZFFaQPfgQvTo1kwqE0HhvEr6hhI3+m1y1m9zDxprRZHJDhid3S27FOIoV3r/p VuYn7UjwTTpkLfQLsq8n8HF3lJV3+ixkK2DfvnOjY2owyDCJBFRptyrEPJvYJBum NbolILrOggg7O5GUizfq1IjcokY8kOvnNJ+/eDxdVeWFT9fKB6rX4PdmwJwIdSe0 r/6QgAaaBRMWQZJs85vtey9n/D5IBP4m43xv0xQMuUfQKGnQuP15z/7zlM8sF64u 88PjDh+CeZuN/wMhsYPRDD4XSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/qQGuL Q1ykFmLBBc51njvGWcoxMB8GA1UdIwQYMBaAFLIHfV05CscuO9iFsR865tKlJqnt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUI4NS80MkQ3QzAwQzEy Q0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5NDcySVd4SHpybTBxVW1x ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnZDlYVGtLeHk0NzJJV3hIenJtMHFVbXFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUI4NS80MkQ3QzAwQzEyQ0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5 NDcySVd4SHpybTBxVW1xZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKh8WmmV49KK+Y2fyLE6Xewpc9T9S3yk/CGshpYthIRhd+hhLV6nPpd+qZci9 LT0ovJL7X4yTuexLVoVXqhHH/4Mt3eKbBlkMnL8hzZLuHpHFORPRCL79fbYO/roj /mP/nPILRYSAoBCvdn9oQsSlG7mfjSNc1oCkiq6Uo4CwnCPklqLDTCYSW/6T2wQI PQaH6ZQFdnA5Z+y09Kwg+uAJ6kHha/raMt9luymrAEYqhvLXw8QprO4Oqq77WhT/ WA0RhFN2O3/8+fFfaSL9WJsiPsKu7FPj8boaFtuf3LyiCX2zYRpdJyMYbzcGBnnh Nl6XMNru1q+/M+cOdY0PFJDVuQ== -----END CERTIFICATE-----Generated at Fri Jul 24 08:02:23 2026 by rpki-client