$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: uv5+TH0ILAO3qjBBib3CT4AzMN/UmBZ9yWXYHUdU1H8= Subject key identifier: CA:BD:15:5B:44:1A:DA:DB:D1:92:E3:CD:74:D5:7D:A0:7C:3C:A5:41 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0E11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0DE9 Signing time: Sun 26 Jul 2026 18:07:56 +0000 Manifest this update: Sun 26 Jul 2026 18:07:55 +0000 Manifest next update: Sun 02 Aug 2026 18:07:55 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: k+oa/f/Sqbd96DFhBq+5AiVHzMBRLzlMyzFvuV750zQ=) 2: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=) 3: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=) 4: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=) 5: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=) 6: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=) 7: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3601 (0xe11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Jul 26 18:07:55 2026 GMT Not After : Aug 2 18:07:55 2026 GMT Subject: CN=6a664cfb-b7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0b:35:75:36:d2:0c:c9:40:b7:ea:c3:fd:03: 05:7d:9e:2e:26:c0:ca:08:5c:24:fb:7d:e8:a9:5e: df:2d:b9:4e:63:6f:e2:f8:f6:59:ba:5b:b5:b8:57: 5c:63:70:46:d6:c6:db:a9:25:1c:b8:38:86:8c:9b: 75:d4:a6:d7:eb:94:3f:97:f6:e9:ca:64:30:1b:23: 0d:d3:0e:91:ed:28:48:d4:d0:37:1d:55:81:de:a5: 86:3b:28:85:84:81:c6:64:d6:54:2b:6a:65:57:23: 30:ea:2c:eb:13:1d:ad:9c:4b:47:84:88:2a:49:e5: 2a:5b:2e:a2:d0:23:00:9a:32:bf:de:c1:d3:0f:ae: 79:13:fc:f3:5c:b8:63:d0:a1:f8:51:1a:b7:0a:3b: 8b:1f:96:0f:78:d7:2e:05:ba:03:5f:cd:18:10:dd: f5:43:dd:7e:75:ff:9b:ad:92:90:8b:0a:eb:3c:b7: 4d:63:29:8b:65:77:27:e4:6d:b4:fb:7a:aa:c6:f1: a3:2c:84:8f:d7:64:30:62:74:af:ef:06:4e:90:a5: 2a:25:21:e8:ef:f4:6a:22:6c:1b:54:75:ee:9b:38: f9:8f:4d:03:5e:29:95:f5:47:e4:26:1f:56:ea:b0: f1:be:e5:a7:78:1f:83:d7:59:5a:aa:13:1b:43:d9: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BD:15:5B:44:1A:DA:DB:D1:92:E3:CD:74:D5:7D:A0:7C:3C:A5:41 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:71:2e:e4:ce:43:8c:ce:ef:cc:bf:32:1e:ed:dd:a5:b3:75: 65:35:6c:9e:a8:f5:68:a9:19:05:76:66:06:93:c6:16:32:06: f5:23:6e:5a:a1:93:25:a3:48:7f:6c:ed:49:60:48:b2:8e:f7: ca:10:72:d8:85:4d:7e:08:73:7d:28:ce:93:8b:05:39:03:a2: 6f:07:00:29:2e:37:6d:6f:c8:52:ac:ce:ae:d5:a8:71:82:e5: 12:ef:4d:21:0c:dd:4a:8b:a3:28:6d:59:76:e6:a4:55:b7:cc: 43:92:a8:53:77:8a:5c:d9:6b:47:82:04:43:16:e3:fa:8b:db: b8:69:47:1b:5b:d8:1d:f4:db:01:d1:fe:7d:8a:ee:fc:cc:03: b6:8e:20:ab:02:0f:3e:2d:09:35:a0:04:83:e1:6b:87:cd:41: e5:23:ad:66:28:b6:a5:89:b9:45:10:2d:ac:df:37:74:8b:bc: 42:13:b2:54:4f:29:65:43:80:db:f9:28:03:d0:e7:a1:82:4b: 47:0b:17:69:c8:d5:48:a3:71:6a:07:09:8b:f1:f2:0a:82:1c: eb:38:0b:80:45:ba:20:56:c2:cc:1d:e2:49:fc:e1:be:e7:07: 6d:9f:35:a9:16:36:74:63:74:29:7e:cc:f3:bd:24:74:2c:15: e2:59:7a:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYwNzI2MTgwNzU1WhcNMjYwODAyMTgwNzU1WjAYMRYwFAYD VQQDEw02YTY2NGNmYi1iN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ws1dTbSDMlAt+rD/QMFfZ4uJsDKCFwk+33oqV7fLblOY2/i+PZZulu1uFdc Y3BG1sbbqSUcuDiGjJt11KbX65Q/l/bpymQwGyMN0w6R7ShI1NA3HVWB3qWGOyiF hIHGZNZUK2plVyMw6izrEx2tnEtHhIgqSeUqWy6i0CMAmjK/3sHTD655E/zzXLhj 0KH4URq3CjuLH5YPeNcuBboDX80YEN31Q91+df+brZKQiwrrPLdNYymLZXcn5G20 +3qqxvGjLISP12QwYnSv7wZOkKUqJSHo7/RqImwbVHXumzj5j00DXimV9UfkJh9W 6rDxvuWneB+D11laqhMbQ9lUxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMq9FVtE Gtrb0ZLjzXTVfaB8PKVBMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIXEu5M5DjM7vzL8yHu3dpbN1ZTVsnqj1aKkZBXZmBpPGFjIG9SNuWqGTJaNI f2ztSWBIso73yhBy2IVNfghzfSjOk4sFOQOibwcAKS43bW/IUqzOrtWocYLlEu9N IQzdSoujKG1ZduakVbfMQ5KoU3eKXNlrR4IEQxbj+ovbuGlHG1vYHfTbAdH+fYru /MwDto4gqwIPPi0JNaAEg+Frh81B5SOtZii2pYm5RRAtrN83dIu8QhOyVE8pZUOA 2/koA9DnoYJLRwsXacjVSKNxagcJi/HyCoIc6zgLgEW6IFbCzB3iSfzhvucHbZ81 qRY2dGN0KX7M870kdCwV4ll6sg== -----END CERTIFICATE-----Generated at Mon Jul 27 00:53:52 2026 by rpki-client