$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft File: hA_W9-iR44BKfbMJ0EzoXBr3htE.mft (raw, json) Hash identifier: ht5oIx1rEiSfQSV56a7lzoTilD0S6k58aTPK7FTTIjI= Subject key identifier: 6D:18:92:F2:7F:9F:95:60:B2:F1:FF:45:9D:ED:13:6B:9B:99:EA:56 Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft Manifest number: 0140 Signing time: Mon 20 Jul 2026 19:34:55 +0000 Manifest this update: Mon 20 Jul 2026 19:34:54 +0000 Manifest next update: Mon 27 Jul 2026 19:34:54 +0000 Files and hashes: 1: hA_W9-iR44BKfbMJ0EzoXBr3htE.crl (hash: HO9VBl8NGYIaTzdkWtMN8tFg7dPWuxgxhsVlkUs9Ogg=) 2: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (hash: dPEhTQP3qeAR4yGjatb5GQPGEIi2y0rBsSN9VqRiVX4=) 3: 245F176CA81311F0A8A82B85C4F9AE02.roa (hash: eX1W6sEO6qSGiwMhq2AqfocdX9JRjmM9eN6Q3NFHq5U=) 4: 7B73A414A81311F0A69E5E49C4F9AE02.roa (hash: CmfJtzvbUDIWlxCuJc7fM+dnWaJ+FXCzjzg3v0W8Rc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Jul 20 19:34:54 2026 GMT Not After : Jul 27 19:34:54 2026 GMT Subject: CN=6a5e785f-7dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:3a:f2:78:8b:47:9b:ca:59:ac:f5:39:3e: cf:d1:28:9f:fc:8a:64:08:3c:2c:93:ce:52:28:b8: bc:90:f0:7b:1a:88:dd:0b:20:cb:63:13:4e:6e:c3: f8:40:1c:fb:b9:f7:27:63:33:62:ae:d1:0e:02:21: 81:27:6c:68:6b:20:9a:23:7a:a9:ed:64:fe:4f:29: b8:28:d4:28:41:5a:2b:f1:19:c9:6d:b4:22:db:db: 6f:e0:19:43:fe:c2:f0:1e:83:e1:7e:89:55:0c:ff: 62:d4:21:9b:68:36:2d:c2:f5:e2:34:83:c1:73:fd: fb:6d:f6:9d:12:f0:2b:19:42:ff:79:31:a2:f8:29: c5:91:66:e6:7f:e4:64:03:6f:0f:e1:ec:7d:6b:00: 39:e0:68:ba:1d:b5:32:98:84:d4:f7:29:f8:ee:bc: 32:c1:12:dd:23:f0:fc:c3:ce:e3:04:84:ec:1c:34: 7f:21:b9:0e:c1:d8:f1:e6:c4:1e:48:61:d8:45:fe: 20:e6:1f:26:30:5b:b9:e8:a1:5c:a0:a5:90:45:70: a8:a9:b6:06:25:73:0c:cd:b9:b6:4b:5f:56:26:e2: 1d:93:7b:1d:bc:86:18:85:31:59:8d:e5:d1:d2:47: f2:27:b8:25:c8:fb:09:4a:bc:46:7b:89:77:16:66: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:18:92:F2:7F:9F:95:60:B2:F1:FF:45:9D:ED:13:6B:9B:99:EA:56 X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:66:6e:ba:66:4b:3c:e4:39:8c:11:88:40:5d:fd:64:cb:c5: 80:20:5b:85:6a:95:b7:64:63:84:bd:5a:a0:3e:dc:60:0a:d3: 16:59:f9:c8:81:e5:74:fe:1e:db:8e:c7:32:76:53:13:c2:83: e8:70:37:9f:84:07:e2:11:61:11:b2:00:85:6d:ba:c3:8b:51: 97:14:4d:0e:1b:19:b8:a0:10:73:0a:59:eb:2f:78:b6:3f:46: b3:e3:17:64:ca:d9:a3:bb:b9:07:b4:40:1e:fe:5c:d8:72:59: b7:af:28:52:67:40:e8:cd:1b:a6:61:4e:83:8b:35:62:2e:f4: d8:5e:10:8f:fa:99:4b:9c:fc:26:80:7e:88:30:ae:a1:9c:e3: e9:98:86:95:8e:9c:b0:cb:fa:81:83:fd:9f:c5:d8:98:01:5f: b4:21:9e:8d:e1:36:bb:ae:08:26:78:82:eb:91:af:ec:61:6a: ff:58:3e:e0:c5:e0:15:3c:5c:ff:0b:26:13:61:1a:2f:54:41: 46:a4:06:68:ca:30:fa:8c:f0:4b:59:5b:c3:f6:57:58:6c:c4: 7e:3d:c5:11:47:81:fe:ad:38:e9:11:2c:78:dd:20:b4:4f:28: de:5c:3f:a7:97:3b:6b:72:0b:9a:ea:d9:65:83:83:e3:33:5e: 8c:69:f9:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjYwNzIwMTkzNDU0WhcNMjYwNzI3MTkzNDU0WjAYMRYwFAYD VQQDEw02YTVlNzg1Zi03ZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25468niLR5vKWaz1OT7P0Sif/IpkCDwsk85SKLi8kPB7GojdCyDLYxNObsP4 QBz7ufcnYzNirtEOAiGBJ2xoayCaI3qp7WT+Tym4KNQoQVor8RnJbbQi29tv4BlD /sLwHoPhfolVDP9i1CGbaDYtwvXiNIPBc/37bfadEvArGUL/eTGi+CnFkWbmf+Rk A28P4ex9awA54Gi6HbUymITU9yn47rwywRLdI/D8w87jBITsHDR/IbkOwdjx5sQe SGHYRf4g5h8mMFu56KFcoKWQRXCoqbYGJXMMzbm2S19WJuIdk3sdvIYYhTFZjeXR 0kfyJ7glyPsJSrxGe4l3FmY6hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0YkvJ/ n5VgsvH/RZ3tE2ubmepWMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi8xOTdGRjdBMkI0MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0 QktmYk1KMEV6b1hCcjNodEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkWZuumZLPOQ5jBGIQF39ZMvFgCBbhWqVt2RjhL1aoD7cYArTFln5yIHldP4e 247HMnZTE8KD6HA3n4QH4hFhEbIAhW26w4tRlxRNDhsZuKAQcwpZ6y94tj9Gs+MX ZMrZo7u5B7RAHv5c2HJZt68oUmdA6M0bpmFOg4s1Yi702F4Qj/qZS5z8JoB+iDCu oZzj6ZiGlY6csMv6gYP9n8XYmAFftCGejeE2u64IJniC65Gv7GFq/1g+4MXgFTxc /wsmE2EaL1RBRqQGaMow+ozwS1lbw/ZXWGzEfj3FEUeB/q046REseN0gtE8o3lw/ p5c7a3ILmurZZYOD4zNejGn5FQ== -----END CERTIFICATE-----Generated at Tue Jul 21 12:52:51 2026 by rpki-client