$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft File: mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json) Hash identifier: afpZ4Tbu7ZLQ7QXQMsgOb/50jZvaiqdyYMPzj6r6eNY= Subject key identifier: 02:C1:2F:95:BB:32:DC:BE:EA:4B:B4:5B:E8:41:C9:AE:77:A8:1C:3A Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 Certificate issuer: /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft Manifest number: 032B Signing time: Tue 21 Jul 2026 02:03:59 +0000 Manifest this update: Tue 21 Jul 2026 02:03:59 +0000 Manifest next update: Tue 28 Jul 2026 02:03:59 +0000 Files and hashes: 1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: W8vzVWydsaKSMcjry27AkM++ygKxdOtpWq93MeIH36o=) 2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: HIwqlmntoeFwo+S7UDebJJRPpqNaEv4Pryk7jDC+0qM=) 3: E79D93681C1F11F1B2DF50D0313D8C67.roa (hash: W4I4DorhQtZcnS22ft48DnGQCDVeftj54k6lXf7w3f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Validity Not Before: Jul 21 02:03:59 2026 GMT Not After : Jul 28 02:03:59 2026 GMT Subject: CN=6a5ed38f-b000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:13:a9:03:d9:67:b7:53:27:34:f7:6e:28: 6a:9a:4c:47:9c:73:2a:ff:9a:58:5e:05:29:35:e8: a2:5f:eb:e8:6b:8a:89:9d:33:4f:ee:e2:fc:27:a6: 39:3a:d5:87:e7:37:01:1c:76:73:ba:06:9c:31:3d: 7d:15:f9:37:f7:8b:b1:3d:15:f6:0a:8e:43:6e:9b: c0:12:b2:88:24:79:a3:92:d1:db:15:3f:c7:8a:34: 9f:fa:ab:aa:f3:72:ad:ac:5e:45:21:42:1f:c3:8a: de:f4:04:51:b1:ba:bb:b7:02:ab:b3:46:1d:d1:17: 54:be:e7:6f:d9:31:fb:9f:f3:f5:c0:11:d3:f2:8f: 2e:0b:8b:12:ae:94:5a:95:d9:bb:f0:8e:a1:e4:8e: ec:fc:66:34:78:34:cd:90:5b:08:9a:07:3b:43:91: 30:82:48:3b:48:c0:4a:b8:a7:6c:5e:75:60:e6:83: 16:6b:4a:b0:fc:5a:a4:b4:00:f1:cf:24:8c:fb:ae: ac:67:76:98:4d:71:7b:6a:b3:4d:84:55:54:db:82: 1c:79:c5:a6:0e:9e:1c:28:61:71:96:26:1f:8a:f9: 70:26:64:9a:61:f6:00:5c:94:14:e6:8b:19:d0:05: db:19:e1:23:96:35:81:d6:11:80:90:e3:55:11:8a: f5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C1:2F:95:BB:32:DC:BE:EA:4B:B4:5B:E8:41:C9:AE:77:A8:1C:3A X509v3 Authority Key Identifier: keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:47:fb:9c:e3:7a:ff:8a:5a:4f:52:81:d9:dd:03:87:29:22: 0c:c7:b6:41:5c:6c:3f:3e:86:89:99:79:53:71:db:b4:70:52: 1c:cc:37:0c:46:43:f0:94:14:80:38:61:c0:9d:57:50:06:bd: 2b:80:47:1e:24:2c:76:fe:ea:ab:b0:2d:8f:94:42:31:50:7f: cb:f6:63:e3:bf:6e:43:8d:0c:07:fb:59:5e:02:74:bf:e7:8c: fa:0b:b8:cd:ac:78:8d:a6:9b:77:af:c7:54:92:fc:6e:44:ae: 59:ce:a3:6d:f0:27:fe:07:27:51:2b:08:da:57:d3:1d:f2:ff: 1b:28:a3:01:05:2b:97:36:45:88:bb:aa:8a:c2:b9:78:b0:c3: 08:16:2d:c0:ca:55:b7:77:1b:a6:6e:19:e6:e3:cd:9b:b9:7a: 78:71:03:54:9e:df:a0:bf:93:b8:e4:a7:d8:a4:f3:58:8c:a6: d9:26:d9:7b:e2:86:06:8a:f1:27:7d:4c:95:fe:3e:9c:ed:12: f5:c4:1e:06:d7:b4:c4:21:04:b8:5a:1a:43:a7:34:36:98:36: f6:ba:34:d0:9f:05:48:b1:1f:f0:81:5b:62:40:09:63:96:4a: f0:d5:c1:b6:ee:1d:43:7d:80:97:01:b5:0a:35:0e:9a:ce:74: 31:5d:58:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKDlBMDY0RUE2QjY2REI0REUyMEM5M0NDMDQxQjg1QTE3 MDZDODA2NzIwHhcNMjYwNzIxMDIwMzU5WhcNMjYwNzI4MDIwMzU5WjAYMRYwFAYD VQQDEw02YTVlZDM4Zi1iMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCcTqQPZZ7dTJzT3bihqmkxHnHMq/5pYXgUpNeiiX+voa4qJnTNP7uL8J6Y5 OtWH5zcBHHZzugacMT19Ffk394uxPRX2Co5DbpvAErKIJHmjktHbFT/HijSf+quq 83KtrF5FIUIfw4re9ARRsbq7twKrs0Yd0RdUvudv2TH7n/P1wBHT8o8uC4sSrpRa ldm78I6h5I7s/GY0eDTNkFsImgc7Q5Ewgkg7SMBKuKdsXnVg5oMWa0qw/FqktADx zySM+66sZ3aYTXF7arNNhFVU24IcecWmDp4cKGFxliYfivlwJmSaYfYAXJQU5osZ 0AXbGeEjljWB1hGAkONVEYr10wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALBL5W7 Mty+6ku0W+hBya53qBw6MB8GA1UdIwQYMBaAFJoGTqa2bbTeIMk8wEG4WhcGyAZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC81NEVFRjUxNDFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRONGd5VHpBUWJoYUZ3YklC bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21nWk9wclp0dE40Z3lUekFRYmhhRndiSUJuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC81NEVFRjUxNDFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRO NGd5VHpBUWJoYUZ3YklCbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJEf7nON6/4paT1KB2d0DhykiDMe2QVxsPz6GiZl5U3HbtHBSHMw3DEZD8JQU gDhhwJ1XUAa9K4BHHiQsdv7qq7Atj5RCMVB/y/Zj479uQ40MB/tZXgJ0v+eM+gu4 zax4jaabd6/HVJL8bkSuWc6jbfAn/gcnUSsI2lfTHfL/GyijAQUrlzZFiLuqisK5 eLDDCBYtwMpVt3cbpm4Z5uPNm7l6eHEDVJ7foL+TuOSn2KTzWIym2SbZe+KGBorx J31Mlf4+nO0S9cQeBte0xCEEuFoaQ6c0Npg29ro00J8FSLEf8IFbYkAJY5ZK8NXB tu4dQ32AlwG1CjUOms50MV1Y9A== -----END CERTIFICATE-----Generated at Wed Jul 22 00:46:09 2026 by rpki-client