$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: VHryB9wjCSys1Xk9/PYnNjqhmwaYDRMZgdwoPT7hFC0= Subject key identifier: 42:D5:6F:8E:5E:1A:A2:EC:52:B2:DD:87:AC:6D:10:B2:9C:13:47:9D Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 0437 Signing time: Thu 23 Jul 2026 01:08:32 +0000 Manifest this update: Thu 23 Jul 2026 01:08:32 +0000 Manifest next update: Thu 30 Jul 2026 01:08:32 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: WmQSMod/EKK7Azy+s2ym3HsRuqSNM0ks3WHxb3V6t+o=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: s8YJHb+stY5uowp1aYz9CMh3CieUulWCEWzyjMliPJ0=) 3: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: nSCtkyME0OPFIQuGYl4VSkayTNuGmQDZdJ+nhdKyDqA=) 4: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: cDFKFHhC5GlJqNQ2HDJvUzee5BZxbAM3dWkd8XKUt+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Jul 23 01:08:32 2026 GMT Not After : Jul 30 01:08:32 2026 GMT Subject: CN=6a616990-1c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:8c:93:16:67:16:6c:68:4e:b8:c0:54:db: b1:dd:14:33:91:f2:69:4b:15:f8:9f:17:09:da:00: c9:10:b2:df:6c:fa:6e:a3:13:1a:a2:53:b0:20:ae: 7c:58:7d:93:e5:18:35:44:d4:35:92:a9:55:c3:d2: 3e:ae:b3:d9:90:ca:f2:bc:03:a9:96:30:60:d1:90: d7:a3:ed:1f:df:0b:81:fa:53:20:f7:1d:3c:2a:a4: 7d:8f:51:13:5f:40:64:d2:42:f1:b6:f8:2e:7e:79: 80:1f:77:00:46:f0:59:65:13:d1:e7:67:19:96:d5: 53:e6:1a:75:9e:38:a0:40:05:f8:61:c4:88:10:16: 74:59:86:8a:86:93:2b:21:0f:7c:24:65:60:07:45: c8:1c:a1:96:c7:26:db:83:19:20:63:df:64:63:54: 72:0c:ce:c5:8d:34:e1:22:af:5e:e0:a3:f0:76:ae: 8c:49:ff:14:db:9a:16:36:90:f2:e2:18:fb:2e:e3: 51:5a:1c:23:36:29:35:b2:54:3a:76:72:77:2d:d2: f1:87:98:3b:5c:5c:27:0d:56:b7:e9:41:87:58:75: 10:e6:0e:5e:1c:5b:08:47:69:d7:2f:be:22:83:c2: 00:0e:8c:6f:2b:d6:8f:7d:49:ec:ef:b4:54:4c:78: 6d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D5:6F:8E:5E:1A:A2:EC:52:B2:DD:87:AC:6D:10:B2:9C:13:47:9D X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c7:f2:da:16:7b:95:99:6c:1d:5b:b6:c6:52:12:d5:f8:fa: 2d:9e:a8:9a:a7:6c:44:f1:ee:e1:01:51:2e:b8:68:cd:44:2d: 4e:0c:ec:23:be:7a:f8:f2:cb:6f:7b:be:28:24:4a:93:b3:10: 31:2e:ac:a2:c3:09:4a:26:9f:9e:9c:6b:49:a8:7b:4a:d4:d0: 63:9e:f8:9b:f9:2e:ea:eb:d0:0b:44:cf:f4:6f:69:07:59:b6: d5:47:67:3a:34:4a:19:f4:3f:67:67:7a:6f:9a:f0:54:be:55: 86:5e:87:20:13:81:14:d3:dc:f7:89:46:56:4d:f9:28:9c:b2: 54:9a:b6:2b:3c:57:b5:19:6c:30:25:d8:5b:a9:47:d2:83:4d: 21:61:03:cc:5c:46:13:7c:d9:10:b7:99:94:f2:04:82:2f:e1: eb:4d:6d:a0:05:07:c3:50:71:fe:68:92:56:87:3b:ab:63:14: 2d:ce:e0:3d:3b:01:40:5e:76:14:06:00:b4:c0:65:cd:52:74: 46:c9:7b:ac:20:5f:ca:b8:ca:8b:10:46:8d:ef:f7:23:08:7d: d0:74:0a:28:ff:4c:10:00:98:85:2b:d0:ec:f3:09:a3:7d:c2: 0d:a1:d9:46:33:3a:69:12:c9:6f:95:67:f2:74:14:24:9c:c1: c8:87:1e:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjYwNzIzMDEwODMyWhcNMjYwNzMwMDEwODMyWjAYMRYwFAYD VQQDEw02YTYxNjk5MC0xYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNOMkxZnFmxoTrjAVNux3RQzkfJpSxX4nxcJ2gDJELLfbPpuoxMaolOwIK58 WH2T5Rg1RNQ1kqlVw9I+rrPZkMryvAOpljBg0ZDXo+0f3wuB+lMg9x08KqR9j1ET X0Bk0kLxtvgufnmAH3cARvBZZRPR52cZltVT5hp1njigQAX4YcSIEBZ0WYaKhpMr IQ98JGVgB0XIHKGWxybbgxkgY99kY1RyDM7FjTThIq9e4KPwdq6MSf8U25oWNpDy 4hj7LuNRWhwjNik1slQ6dnJ3LdLxh5g7XFwnDVa36UGHWHUQ5g5eHFsIR2nXL74i g8IADoxvK9aPfUns77RUTHhtiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELVb45e GqLsUrLdh6xtELKcE0edMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgsfy2hZ7lZlsHVu2xlIS1fj6LZ6omqdsRPHu4QFRLrhozUQtTgzsI756+PLL b3u+KCRKk7MQMS6sosMJSiafnpxrSah7StTQY574m/ku6uvQC0TP9G9pB1m21Udn OjRKGfQ/Z2d6b5rwVL5Vhl6HIBOBFNPc94lGVk35KJyyVJq2KzxXtRlsMCXYW6lH 0oNNIWEDzFxGE3zZELeZlPIEgi/h601toAUHw1Bx/miSVoc7q2MULc7gPTsBQF52 FAYAtMBlzVJ0Rsl7rCBfyrjKixBGje/3Iwh90HQKKP9MEACYhSvQ7PMJo33CDaHZ RjM6aRLJb5Vn8nQUJJzByIce/g== -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:15 2026 by rpki-client