$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: ieya1141EmW6rDLFOXhWtTroH6M7O+4Y2+P223+/314= Subject key identifier: 6D:87:05:C2:13:C9:7C:51:D8:2A:A9:EF:E3:20:4A:F4:B5:C9:72:84 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 04B0 Signing time: Tue 21 Jul 2026 00:46:14 +0000 Manifest this update: Tue 21 Jul 2026 00:46:13 +0000 Manifest next update: Tue 28 Jul 2026 00:46:13 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: QkWVPvlPkZNvH0u+gCwHZLatFupnktvNflS1r5m2kiw=) 2: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: Pmqjaf05ZJypDFe8YtfZZnEUHZ02b2LTX1bmYry5Vhw=) 3: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: HLjD7Dlj4QNO0JkX6mdLipIuyOmY6BPG8xeaEhp4ZP8=) 4: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: T3sBWx7WsASIvXJipD/8/WgUdUsv5wiiZndfgeUi8xY=) 5: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: CKul+kVwMWY4jLfuuuUbRh3TQkde1chI2jW7GmtTDpI=) 6: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: rB0rGnSozJU8NojAc45M//byk+WcellFqqyoYGAw7jI=) 7: 0BDDA52C7E4711F1A538061D81A30FBC.roa (hash: HsWAdOU5aGRJlW8FY2L3nkNFibcMLbUNXEEQ7VNVJdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Jul 21 00:46:13 2026 GMT Not After : Jul 28 00:46:13 2026 GMT Subject: CN=6a5ec156-53ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:42:2d:45:b6:3e:0d:93:18:d6:c7:14:dd: 9c:ce:a5:68:01:2f:c3:4a:71:66:c7:c2:b2:82:cb: cb:5e:11:fe:3e:5b:28:ac:1e:3a:62:eb:b2:4a:96: 4d:37:8c:f4:c6:d1:f6:11:86:93:c0:44:54:4d:58: 9a:03:54:1f:f4:c2:84:72:73:6d:e2:3e:a0:ce:72: 5d:3b:13:cc:2f:7b:ed:c2:61:75:2f:c4:63:0a:c0: 74:14:dd:64:06:e9:a5:63:6c:f9:2f:1c:40:b5:ba: d6:6c:a3:29:13:90:91:3d:35:99:5b:9a:1c:f0:2f: 8f:76:11:0c:0e:c1:85:df:f9:6a:ae:c9:13:de:0d: e4:aa:98:bf:e7:03:c1:d2:5b:51:a0:cf:25:e1:87: 23:bb:2d:a6:18:8f:27:63:52:e7:4c:ee:7d:bb:a5: b9:e8:10:a1:ec:1d:9d:73:b7:ec:13:51:bd:4f:51: c4:e2:92:e8:7d:ed:f8:eb:64:ab:15:10:d0:43:c8: 78:7c:e2:c8:34:c7:ad:31:58:8c:85:e4:46:5e:3c: 59:7e:b3:e1:28:1b:e1:e0:f0:9b:bf:5d:09:fd:1b: 78:d8:4e:4a:4e:5c:a0:f7:e1:2b:cc:8d:c3:23:21: 62:e4:de:e1:88:c1:db:3f:dd:54:2c:56:26:02:b6: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:87:05:C2:13:C9:7C:51:D8:2A:A9:EF:E3:20:4A:F4:B5:C9:72:84 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:ca:0a:0c:f5:65:0b:21:9a:7a:d0:b8:34:28:5d:ab:d2:ad: cc:0d:00:e3:fd:77:c1:11:6c:c0:d0:33:d3:9d:65:c7:16:68: 79:77:cd:d3:53:10:15:04:c9:d3:64:b8:19:c5:cb:c1:c7:c3: e6:03:0f:19:59:18:42:e0:d9:fc:7e:61:da:5b:22:43:a0:81: 07:92:47:37:ce:c7:5c:f7:8c:83:de:4a:95:ce:e0:1b:d1:1d: 20:50:2e:5e:36:a4:0a:5e:c7:79:a4:66:08:95:68:d6:c1:90: e9:c3:f4:5e:fc:be:36:e2:8b:59:41:70:fc:4b:ad:2e:a5:de: fe:0a:76:da:14:ab:0d:7b:b8:c9:1f:5c:7b:e4:68:a6:70:ab: 97:9a:40:18:31:e1:33:34:06:a7:e8:ca:5c:6c:4e:dc:56:77: 75:8b:4d:73:c8:42:a1:e6:26:ff:19:b2:ce:75:31:a5:21:6d: 28:0a:6e:59:66:dc:6e:a8:da:8b:1f:bc:df:77:17:a6:57:88: ed:c7:d4:92:4c:80:36:02:62:58:f6:79:2d:a4:64:e4:ab:ce: 51:23:0e:d6:58:fc:bd:3c:46:89:c9:b0:67:37:2c:df:a2:f9: 26:c5:3a:24:24:a7:f2:35:00:c7:36:8b:8b:95:c4:9d:6b:a5: 64:74:7d:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjYwNzIxMDA0NjEzWhcNMjYwNzI4MDA0NjEzWjAYMRYwFAYD VQQDEw02YTVlYzE1Ni01M2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnlCLUW2Pg2TGNbHFN2czqVoAS/DSnFmx8KygsvLXhH+PlsorB46YuuySpZN N4z0xtH2EYaTwERUTViaA1Qf9MKEcnNt4j6gznJdOxPML3vtwmF1L8RjCsB0FN1k BumlY2z5LxxAtbrWbKMpE5CRPTWZW5oc8C+PdhEMDsGF3/lqrskT3g3kqpi/5wPB 0ltRoM8l4Ycjuy2mGI8nY1LnTO59u6W56BCh7B2dc7fsE1G9T1HE4pLofe3462Sr FRDQQ8h4fOLINMetMViMheRGXjxZfrPhKBvh4PCbv10J/Rt42E5KTlyg9+ErzI3D IyFi5N7hiMHbP91ULFYmArYGhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2HBcIT yXxR2Cqp7+MgSvS1yXKEMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAecoKDPVlCyGaetC4NChdq9KtzA0A4/13wRFswNAz051lxxZoeXfN01MQFQTJ 02S4GcXLwcfD5gMPGVkYQuDZ/H5h2lsiQ6CBB5JHN87HXPeMg95Klc7gG9EdIFAu XjakCl7HeaRmCJVo1sGQ6cP0Xvy+NuKLWUFw/EutLqXe/gp22hSrDXu4yR9ce+Ro pnCrl5pAGDHhMzQGp+jKXGxO3FZ3dYtNc8hCoeYm/xmyznUxpSFtKApuWWbcbqja ix+833cXpleI7cfUkkyANgJiWPZ5LaRk5KvOUSMO1lj8vTxGicmwZzcs36L5JsU6 JCSn8jUAxzaLi5XEnWulZHR9uA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:19:40 2026 by rpki-client