$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft File: 9ezJNiwdO3OCT11Cma2_q0r4TY0.mft (raw, json) Hash identifier: X9ZdfP2BO6IzC3PD07sTXzDFDv+GIZte2MqNWGgNsQA= Subject key identifier: 95:75:42:34:BA:AD:ED:F2:C5:4F:E1:D7:83:CC:E9:C1:74:56:6A:DA Authority key identifier: F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D Certificate issuer: /CN=A91D2432/serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft Manifest number: 09 Signing time: Thu 23 Jul 2026 11:20:08 +0000 Manifest this update: Thu 23 Jul 2026 11:20:07 +0000 Manifest next update: Thu 30 Jul 2026 11:20:07 +0000 Files and hashes: 1: 9ezJNiwdO3OCT11Cma2_q0r4TY0.crl (hash: XefOXSRkmPQo3IATQIy1vPZpF3VvKZaSUF1GExVW2Kg=) 2: D07522FE831D11F1B418DC1191A30FBC.roa (hash: dzwge0kLLVVM1zxaXdNhUuJZI22hm2h7bCabK14OXlI=) 3: 91081448865411F19BB65DC391A30FBC.roa (hash: KQThDFgH3S96reEeW3vQJ/X6asGbM7uiHbfVKZ5LTlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2432, serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D Validity Not Before: Jul 23 11:20:07 2026 GMT Not After : Jul 30 11:20:07 2026 GMT Subject: CN=6a61f8e7-ce45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:45:5c:e8:34:3d:8f:05:34:d1:f0:1d:47:32: 83:5c:88:5d:fa:51:68:7c:62:1b:0f:b3:58:1e:a7: a6:9e:1e:65:56:d0:1d:b6:f2:01:75:ed:b7:30:b9: ea:e4:e3:8d:1a:13:b8:aa:eb:3b:3f:c8:63:1a:26: 3e:09:a6:9b:ed:58:c3:60:25:40:8e:9b:f3:77:ac: 8f:e8:70:1d:9d:73:d9:a6:ef:b2:36:a6:42:8c:53: 2a:63:c3:c1:b2:fd:7f:00:a5:b7:15:f6:44:5a:f9: ca:50:41:9d:e9:b7:0f:5e:44:2b:af:aa:e2:ad:5e: 49:2b:a4:9c:9e:0c:3b:dd:63:35:28:4b:1a:d6:6c: 89:ff:e7:33:f3:f4:36:84:a4:c1:07:92:59:b8:0c: 05:f7:c1:da:76:5f:1c:87:f6:4b:46:64:17:3b:4e: f2:23:19:57:e9:f9:4a:21:89:23:8c:b1:33:0a:4b: 1a:22:ab:68:44:af:98:cc:b5:63:c2:c8:54:92:4a: b0:dd:58:9b:78:17:ed:e7:5f:4f:ce:00:5e:ba:1a: df:58:e2:32:f2:91:cd:c8:65:89:f2:1f:7d:b2:7c: 34:7c:b2:2d:38:e5:62:dd:d0:b0:30:3a:4e:2e:df: ef:0f:f8:71:69:47:ea:c3:a5:3b:f6:71:86:53:32: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:75:42:34:BA:AD:ED:F2:C5:4F:E1:D7:83:CC:E9:C1:74:56:6A:DA X509v3 Authority Key Identifier: keyid:F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:cb:9f:41:a1:b8:3c:d7:71:e8:f2:77:96:20:86:e1:fb:fb: 9a:33:4d:50:cc:d7:21:53:4d:c8:53:21:6f:44:fe:f6:50:5c: 83:bc:01:26:9f:0d:8d:3d:46:d6:3c:6f:e6:de:d7:46:70:93: 17:0d:c4:cc:97:d1:6d:02:4d:92:27:45:7b:0c:8b:c4:f6:3f: bb:29:57:3d:b7:86:4d:5f:64:93:c2:07:01:b5:37:b4:29:f2: 3a:d2:c0:42:18:bd:02:fe:e8:be:e6:a5:3f:e7:c3:1e:70:c6: 24:70:ed:a6:ee:b3:b0:0a:23:e5:6c:14:5e:0b:06:35:76:b2: 6c:71:e0:e6:6f:31:fc:fc:c4:f2:ce:ea:f5:2d:f2:61:ce:df: 65:82:45:9c:50:37:4a:a7:9a:f2:51:d4:6c:a5:24:29:90:d9: a1:11:ee:2e:f0:29:f7:a3:00:e2:3e:e8:4e:bf:da:2c:c9:62: 58:80:d6:5c:c6:c0:85:99:ec:a8:e4:e0:08:16:a0:99:c8:fb: 1e:bc:87:63:ce:09:73:70:db:76:0c:cd:ea:d7:6e:f7:68:2a: b1:af:09:4f:bd:27:9f:29:ba:14:c5:bd:2a:c9:16:fe:ac:0a: ef:01:be:71:2c:aa:fd:96:6f:4c:38:ce:02:72:2c:a5:72:ed: 50:f5:78:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjQzMjExMC8GA1UEBRMoRjVFQ0M5MzYyQzFEM0I3MzgyNEY1RDQyOTlBREJGQUI0 QUY4NEQ4RDAeFw0yNjA3MjMxMTIwMDdaFw0yNjA3MzAxMTIwMDdaMBgxFjAUBgNV BAMTDTZhNjFmOGU3LWNlNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSRVzoND2PBTTR8B1HMoNciF36UWh8YhsPs1gep6aeHmVW0B228gF17bcwuerk 440aE7iq6zs/yGMaJj4JppvtWMNgJUCOm/N3rI/ocB2dc9mm77I2pkKMUypjw8Gy /X8ApbcV9kRa+cpQQZ3ptw9eRCuvquKtXkkrpJyeDDvdYzUoSxrWbIn/5zPz9DaE pMEHklm4DAX3wdp2XxyH9ktGZBc7TvIjGVfp+UohiSOMsTMKSxoiq2hEr5jMtWPC yFSSSrDdWJt4F+3nX0/OAF66Gt9Y4jLykc3IZYnyH32yfDR8si045WLd0LAwOk4u 3+8P+HFpR+rDpTv2cYZTMpAZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlXVCNLqt 7fLFT+HXg8zpwXRWatowHwYDVR0jBBgwFoAU9ezJNiwdO3OCT11Cma2/q0r4TY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNDMyL0E3MDc2NEY2ODJD QjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNPQ1QxMUNtYTJfcTByNFRZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWV6Sk5pd2RPM09DVDExQ21hMl9xMHI0VFkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NDMyL0E3MDc2NEY2ODJDQjExRjFCNTRBQjg3RDc3QTMwRkJDLzllekpOaXdkTzNP Q1QxMUNtYTJfcTByNFRZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqy59Bobg813Ho8neWIIbh+/uaM01QzNchU03IUyFvRP72UFyDvAEmnw2NPUbW PG/m3tdGcJMXDcTMl9FtAk2SJ0V7DIvE9j+7KVc9t4ZNX2STwgcBtTe0KfI60sBC GL0C/ui+5qU/58MecMYkcO2m7rOwCiPlbBReCwY1drJsceDmbzH8/MTyzur1LfJh zt9lgkWcUDdKp5ryUdRspSQpkNmhEe4u8Cn3owDiPuhOv9osyWJYgNZcxsCFmeyo 5OAIFqCZyPsevIdjzglzcNt2DM3q1273aCqxrwlPvSefKboUxb0qyRb+rArvAb5x LKr9lm9MOM4Cciylcu1Q9Xia -----END CERTIFICATE-----Generated at Fri Jul 24 03:49:32 2026 by rpki-client