$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json) Hash identifier: 0i99GmrUEybIkNIZ4STEYAjMuyOEDR0XXmbeEfAYdI8= Subject key identifier: C6:D8:07:89:12:11:5D:55:A6:10:9F:12:3C:B3:50:36:C1:46:F3:94 Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Certificate serial: 085A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft Manifest number: 0850 Signing time: Mon 20 Jul 2026 16:00:57 +0000 Manifest this update: Mon 20 Jul 2026 16:00:56 +0000 Manifest next update: Mon 27 Jul 2026 16:00:56 +0000 Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: sqxmaG+vSFfUQOp1O8hmSqHvDvsaS+z//R4JiAdhfKQ=) 2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: zMVM5XvHUSFuCWzCvYIz2LcqG9igaxxQSY0E3/h4FG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Validity Not Before: Jul 20 16:00:56 2026 GMT Not After : Jul 27 16:00:56 2026 GMT Subject: CN=6a5e4639-a20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:01:aa:99:4b:2b:35:86:a7:7b:ab:80:f7: 2f:3b:c8:0d:1f:76:1a:05:33:7f:77:ab:91:b1:d2: 75:c5:b1:08:d3:f1:b3:9a:12:b2:da:2c:32:a4:50: 0f:52:43:9a:bd:84:7a:e4:42:c5:5a:00:80:9e:95: 90:3c:b4:a6:47:d5:f9:34:b3:73:2e:db:f3:d2:23: 45:54:4c:ad:7e:86:c1:47:d4:2d:67:b7:9a:d5:d0: ad:a7:06:7c:48:9c:67:f3:66:61:be:e4:71:a1:82: f9:08:b1:7f:ff:2d:4f:5e:d9:91:2b:62:6e:eb:5b: 63:3e:fa:80:b3:b9:22:63:55:11:9b:7a:d3:82:8d: 12:34:66:8c:ca:22:0a:44:f0:22:7a:16:76:7f:d8: a4:eb:47:66:b4:0c:95:ed:52:96:fa:f2:2c:2b:00: 22:fe:d3:47:13:a7:25:27:b0:8b:e2:d1:11:99:47: f8:54:f9:73:be:0f:80:e9:8f:cb:f9:77:9c:63:96: 21:5a:d6:d7:87:5d:4b:a6:d7:1f:f7:81:95:cd:8f: 51:0c:85:9c:a2:a7:91:f8:cb:5e:54:ce:d8:36:2f: 3e:f1:11:bf:9e:50:bd:3a:eb:18:6e:16:93:8b:6d: d6:b5:1e:08:56:96:03:84:d4:f1:72:64:4e:47:00: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D8:07:89:12:11:5D:55:A6:10:9F:12:3C:B3:50:36:C1:46:F3:94 X509v3 Authority Key Identifier: keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3e:7c:47:f0:e7:71:be:60:c0:56:19:cc:ca:81:61:5c:d4: 67:98:bc:24:49:da:fe:5e:97:2f:3b:40:48:e7:8e:35:07:b4: 25:33:b0:ae:a4:c4:d2:9e:d3:4f:73:ae:a2:43:82:b3:52:5b: 3e:95:9c:bd:da:18:27:c8:3b:c6:57:04:1f:45:9e:95:32:d1: e6:b7:0a:46:e2:18:94:e9:52:97:a4:bf:10:04:c3:60:c5:0b: 70:14:5d:b0:27:bf:82:5d:39:5d:56:ca:10:ce:c8:63:38:77: b3:fc:13:35:0f:9b:36:8e:da:68:2f:e0:d6:a3:83:d6:ea:dc: 8d:da:31:a4:c7:39:1a:1a:df:4c:87:98:cc:18:55:85:42:28: cd:e7:7d:ee:60:ca:26:f9:e1:4d:8c:e5:36:62:5f:43:e5:39: f8:ab:e0:60:5d:f4:b8:7a:3f:6e:55:9a:ec:19:7e:b9:c0:bb: 9e:db:6f:63:86:cd:15:33:a8:ee:a2:d5:aa:bb:08:71:03:40: f1:4b:ba:b0:c9:4f:a1:c4:a5:35:d4:ae:fe:b0:75:99:d5:ee: 97:8d:55:3a:46:d8:03:69:6e:06:a2:d7:2f:09:7e:dd:d6:64: 2d:d6:57:3d:6b:ea:64:bf:5e:f1:94:c4:44:fd:9b:fb:ab:1d: 9c:3d:23:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5 RDUyNjIwMzIwHhcNMjYwNzIwMTYwMDU2WhcNMjYwNzI3MTYwMDU2WjAYMRYwFAYD VQQDEw02YTVlNDYzOS1hMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIoBqplLKzWGp3urgPcvO8gNH3YaBTN/d6uRsdJ1xbEI0/GzmhKy2iwypFAP UkOavYR65ELFWgCAnpWQPLSmR9X5NLNzLtvz0iNFVEytfobBR9QtZ7ea1dCtpwZ8 SJxn82ZhvuRxoYL5CLF//y1PXtmRK2Ju61tjPvqAs7kiY1URm3rTgo0SNGaMyiIK RPAiehZ2f9ik60dmtAyV7VKW+vIsKwAi/tNHE6clJ7CL4tERmUf4VPlzvg+A6Y/L +XecY5YhWtbXh11Lptcf94GVzY9RDIWcoqeR+MteVM7YNi8+8RG/nlC9OusYbhaT i23WtR4IVpYDhNTxcmRORwBCnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbYB4kS EV1VphCfEjyzUDbBRvOUMB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y cDhNbXJ3NkRrOHVkVW1JREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASj58R/Dncb5gwFYZzMqBYVzUZ5i8JEna/l6XLztASOeONQe0JTOwrqTE0p7T T3OuokOCs1JbPpWcvdoYJ8g7xlcEH0WelTLR5rcKRuIYlOlSl6S/EATDYMULcBRd sCe/gl05XVbKEM7IYzh3s/wTNQ+bNo7aaC/g1qOD1urcjdoxpMc5GhrfTIeYzBhV hUIozed97mDKJvnhTYzlNmJfQ+U5+KvgYF30uHo/blWa7Bl+ucC7nttvY4bNFTOo 7qLVqrsIcQNA8Uu6sMlPocSlNdSu/rB1mdXul41VOkbYA2luBqLXLwl+3dZkLdZX PWvqZL9e8ZTERP2b+6sdnD0j3Q== -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:33 2026 by rpki-client