$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft File: pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json) Hash identifier: qFNWH18nvNqLQ2eUNYK57ujffCkPhIy0QaKwNU1dNZU= Subject key identifier: D8:ED:35:24:9A:65:01:9A:8D:E2:3A:29:D0:39:9F:54:6E:3A:17:91 Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42 Certificate issuer: /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642 Certificate serial: 2D17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft Manifest number: 2D14 Signing time: Mon 20 Jul 2026 14:27:20 +0000 Manifest this update: Mon 20 Jul 2026 14:27:20 +0000 Manifest next update: Mon 27 Jul 2026 14:27:20 +0000 Files and hashes: 1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: 58aF8LwAteMICHvAltLkddiY/JM5frQoVFm3tZSansk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11543 (0x2d17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642 Validity Not Before: Jul 20 14:27:20 2026 GMT Not After : Jul 27 14:27:20 2026 GMT Subject: CN=6a5e3048-8de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:90:b0:a9:7b:e4:28:4b:11:cd:c1:43:3d: e4:b3:7a:eb:0f:ba:c4:4e:e9:f0:4e:c1:bf:31:2e: 1b:dc:2a:72:9b:b3:09:f4:22:4b:6c:34:ff:01:72: 00:91:db:cc:11:60:c0:02:63:06:9a:7c:7f:bd:fa: 2e:79:9b:d4:f9:8e:7f:42:b9:59:41:4a:95:99:e3: a3:da:98:d7:e1:11:ea:3d:f3:5d:d4:fd:85:11:ec: 47:47:71:08:b9:ee:ae:c0:96:43:b0:fe:5a:ae:d1: 19:78:55:00:39:3b:88:ea:11:00:e0:0c:42:d3:f2: e1:b2:ad:66:f7:52:2a:2c:71:0c:75:03:5a:85:28: 29:7f:29:4c:27:75:87:a9:5d:af:aa:27:bb:8d:dd: 61:14:42:f8:0f:de:45:58:04:50:a1:14:0c:9b:77: e7:3d:19:4f:ba:38:ca:4a:b1:90:88:df:5b:6f:2a: 95:f4:54:d9:56:83:18:8a:a4:43:1c:a4:c8:86:4d: 27:6b:c9:da:74:2d:82:6a:5f:81:22:49:a3:04:c9: 4f:79:c3:70:7f:db:ea:b5:82:42:60:b5:46:d3:c2: e7:ef:76:1d:47:ee:5d:fe:15:ad:e8:db:ee:08:d4: f5:3f:ba:79:ec:d3:da:97:10:74:c0:ba:51:69:7f: 79:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:ED:35:24:9A:65:01:9A:8D:E2:3A:29:D0:39:9F:54:6E:3A:17:91 X509v3 Authority Key Identifier: keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:67:21:67:fb:28:31:b7:f3:89:3d:2c:39:a7:04:d7:37:c6: 8b:c5:eb:19:25:58:5d:33:2d:7d:03:2d:96:94:bc:02:1b:54: 06:f0:87:09:37:c8:58:59:a9:00:54:59:00:5a:90:ee:8c:87: 46:c0:5d:1e:60:17:b6:7f:2b:ff:d3:87:63:44:c5:79:23:4e: da:51:c7:2c:f7:17:8b:57:e6:53:15:98:6d:53:ba:54:20:17: ad:b8:0c:98:91:c4:f4:e9:a6:10:ca:36:43:ae:9b:09:76:6e: 94:f2:b4:e5:b0:7a:e6:74:1a:1b:d0:73:80:07:21:81:36:0e: 9f:6e:6f:24:fd:31:80:a0:36:19:6e:78:de:42:4f:85:b1:cd: fd:c5:8c:ed:6c:00:97:8b:57:cf:04:09:d3:2e:11:81:75:41: ab:f0:30:58:24:37:e1:2e:51:13:b1:36:fc:ff:72:a9:b8:7f: 04:53:5e:43:fd:f1:d8:de:88:e9:e2:49:26:ea:3e:0e:4d:6c: fb:6e:76:d4:04:b5:e0:dc:05:81:bf:6d:ee:aa:e3:c8:cd:95: 72:da:ce:c7:84:49:c6:1e:aa:67:f5:87:a5:84:67:37:2a:04: 52:e7:d9:49:1e:15:a8:1c:25:54:c2:7b:3f:de:4c:7a:96:cb: 92:4b:ee:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEE0RTk1NzZDRTg2MEM4RkY1Rjk3MkFGNTkzQjQwNTRF NzgyM0U2NDIwHhcNMjYwNzIwMTQyNzIwWhcNMjYwNzI3MTQyNzIwWjAYMRYwFAYD VQQDEw02YTVlMzA0OC04ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXOQsKl75ChLEc3BQz3ks3rrD7rETunwTsG/MS4b3Cpym7MJ9CJLbDT/AXIA kdvMEWDAAmMGmnx/vfoueZvU+Y5/QrlZQUqVmeOj2pjX4RHqPfNd1P2FEexHR3EI ue6uwJZDsP5artEZeFUAOTuI6hEA4AxC0/Lhsq1m91IqLHEMdQNahSgpfylMJ3WH qV2vqie7jd1hFEL4D95FWARQoRQMm3fnPRlPujjKSrGQiN9bbyqV9FTZVoMYiqRD HKTIhk0na8nadC2Cal+BIkmjBMlPecNwf9vqtYJCYLVG08Ln73YdR+5d/hWt6Nvu CNT1P7p57NPalxB0wLpRaX95FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjtNSSa ZQGajeI6KdA5n1RuOheRMB8GA1UdIwQYMBaAFKTpV2zoYMj/X5cq9ZO0BU54I+ZC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9BNjRGQkNFMEMw NTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQOWZseXIxazdRRlRuZ2o1 a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPbFhiT2hneVA5Zmx5cjFrN1FGVG5najVrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9BNjRGQkNFMEMwNTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQ OWZseXIxazdRRlRuZ2o1a0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMWchZ/soMbfziT0sOacE1zfGi8XrGSVYXTMtfQMtlpS8AhtUBvCHCTfIWFmp AFRZAFqQ7oyHRsBdHmAXtn8r/9OHY0TFeSNO2lHHLPcXi1fmUxWYbVO6VCAXrbgM mJHE9OmmEMo2Q66bCXZulPK05bB65nQaG9BzgAchgTYOn25vJP0xgKA2GW543kJP hbHN/cWM7WwAl4tXzwQJ0y4RgXVBq/AwWCQ34S5RE7E2/P9yqbh/BFNeQ/3x2N6I 6eJJJuo+Dk1s+2521AS14NwFgb9t7qrjyM2VctrOx4RJxh6qZ/WHpYRnNyoEUufZ SR4VqBwlVMJ7P95MepbLkkvu0g== -----END CERTIFICATE-----Generated at Tue Jul 21 17:51:13 2026 by rpki-client