$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft File: JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json) Hash identifier: 2UlcfHhELi/6P8ZLQJMuqSFOv2+wQihPlt59X8AxRds= Subject key identifier: 40:12:3B:A8:C7:7A:4A:F5:1E:D5:4F:B5:3A:56:42:97:C8:62:79:2C Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft Manifest number: 025A Signing time: Sun 05 Jul 2026 02:54:01 +0000 Manifest this update: Sun 05 Jul 2026 02:54:00 +0000 Manifest next update: Sun 12 Jul 2026 02:54:00 +0000 Files and hashes: 1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: wDe7ZLk1fl6YOEEYFvIxW64JyeO0SmvwEz1vY8To8HQ=) 2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: YXAoNWpBZgAb9OgrXxqM1zjvNiMjLHb2Nw6mTAt3Mio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 02:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE24, serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Validity Not Before: Jul 5 02:54:00 2026 GMT Not After : Jul 12 02:54:00 2026 GMT Subject: CN=6a49c749-ecd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:ff:d3:bc:03:27:3d:ba:f2:93:5a:79:25: 77:62:d1:3d:7f:02:d8:8f:6a:56:7e:25:89:e0:45: 7e:90:13:fe:c0:0c:29:dc:44:77:0f:1c:a8:ef:a1: 20:39:b3:03:f3:00:9c:64:4a:0a:d8:ca:19:87:b1: 82:4a:d0:aa:c5:0a:39:ca:33:93:fb:47:1b:45:4f: 31:18:fd:fe:f5:43:b2:3a:f0:93:50:d9:44:e3:b7: 2f:b6:6e:be:61:43:ae:96:d2:9a:61:f5:2f:49:d7: 7c:02:b5:08:70:53:c4:65:fc:f3:f7:aa:2f:c7:fe: 60:85:ae:49:64:09:2b:66:e8:6e:45:24:65:5d:d7: 0f:54:c4:26:d1:7d:57:97:78:c7:e4:9c:d0:3a:b8: 4f:d7:a2:b2:1f:11:95:8a:e1:80:a7:e4:18:87:02: 64:a3:d7:60:4a:46:91:22:cd:03:6b:3f:3b:1f:33: 8f:77:f0:ce:9d:b6:24:ea:e8:23:0f:2c:d3:a3:b1: d1:f0:11:50:7d:e4:d1:b3:e1:a4:12:62:b3:be:a2: 5d:92:21:be:3a:af:17:10:cd:39:35:d8:d9:e7:7e: 1b:fc:50:a8:57:80:71:5c:bc:e7:23:26:78:8d:bd: 39:1e:82:62:a3:73:ef:7e:ae:a3:06:cb:78:70:af: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:12:3B:A8:C7:7A:4A:F5:1E:D5:4F:B5:3A:56:42:97:C8:62:79:2C X509v3 Authority Key Identifier: keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:13:6a:61:9b:b0:ba:2d:e3:9c:c0:8a:e1:04:45:a8:59:6c: 5b:4b:44:09:53:c8:6d:3a:04:f2:38:4a:e8:c1:95:63:62:9c: 5f:96:2b:c4:05:9d:bf:d4:93:99:f0:6e:f0:1a:d8:b3:d7:ed: d9:08:5f:9c:88:87:65:c2:67:43:13:20:62:c3:41:fc:56:a3: b3:42:95:1c:a3:2d:7b:e2:3e:92:c4:f7:0b:89:98:92:33:75: cb:89:57:2b:a0:c5:f2:d6:13:dc:b5:77:d0:e1:62:2d:a3:1c: de:b9:1b:e2:90:76:69:50:2b:3c:c3:60:67:10:8b:9c:87:10: d2:e5:4b:90:f5:29:86:0f:ec:fc:7d:37:f1:52:1a:ed:71:ee: ae:71:b2:d1:bd:a1:27:62:8f:a7:e5:f2:a7:a6:90:6c:33:ca: ff:71:f6:da:4f:69:e3:4a:4d:eb:ea:6b:3d:cf:c9:57:74:77: 91:7c:9d:fe:02:0d:c9:bd:ca:cd:3e:b5:1f:48:45:24:0b:85: 04:a7:b9:dc:43:d1:2b:21:40:cd:04:fb:b8:69:d1:28:c4:14: 46:bb:e5:fe:77:7b:2d:65:0c:9f:e6:e2:72:93:64:d7:d0:fc: 77:0a:aa:5b:0b:64:bf:4d:7d:df:90:e5:fe:c9:fd:f3:06:a1: ce:e0:56:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFMjQxMTAvBgNVBAUTKDI0MjIzRDBDN0QxMDFEQjdBRDdFM0NCOEREQjE3MDYy OTM2NUNBRUUwHhcNMjYwNzA1MDI1NDAwWhcNMjYwNzEyMDI1NDAwWjAYMRYwFAYD VQQDEw02YTQ5Yzc0OS1lY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Jr/07wDJz268pNaeSV3YtE9fwLYj2pWfiWJ4EV+kBP+wAwp3ER3Dxyo76Eg ObMD8wCcZEoK2MoZh7GCStCqxQo5yjOT+0cbRU8xGP3+9UOyOvCTUNlE47cvtm6+ YUOultKaYfUvSdd8ArUIcFPEZfzz96ovx/5gha5JZAkrZuhuRSRlXdcPVMQm0X1X l3jH5JzQOrhP16KyHxGViuGAp+QYhwJko9dgSkaRIs0Daz87HzOPd/DOnbYk6ugj DyzTo7HR8BFQfeTRs+GkEmKzvqJdkiG+Oq8XEM05NdjZ534b/FCoV4BxXLznIyZ4 jb05HoJio3Pvfq6jBst4cK/pmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEASO6jH ekr1HtVPtTpWQpfIYnksMB8GA1UdIwQYMBaAFCQiPQx9EB23rX48uN2xcGKTZcru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUUyNC9GMkY2NzVGRUYz RkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhiZXRmank0M2JGd1lwTmx5 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDSTlESDBRSGJldGZqeTQzYkZ3WXBObHl1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUUyNC9GMkY2NzVGRUYzRkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhi ZXRmank0M2JGd1lwTmx5dTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvxNqYZuwui3jnMCK4QRFqFlsW0tECVPIbToE8jhK6MGVY2KcX5YrxAWdv9ST mfBu8BrYs9ft2QhfnIiHZcJnQxMgYsNB/Fajs0KVHKMte+I+ksT3C4mYkjN1y4lX K6DF8tYT3LV30OFiLaMc3rkb4pB2aVArPMNgZxCLnIcQ0uVLkPUphg/s/H038VIa 7XHurnGy0b2hJ2KPp+Xyp6aQbDPK/3H22k9p40pN6+prPc/JV3R3kXyd/gINyb3K zT61H0hFJAuFBKe53EPRKyFAzQT7uGnRKMQURrvl/nd7LWUMn+bicpNk19D8dwqq Wwtkv01935Dl/sn98wahzuBWsA== -----END CERTIFICATE-----Generated at Sun Jul 5 08:39:55 2026 by rpki-client