$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: BP3gmGObQytvWuTLaH7CEhzh9OJBu0mG/V9bGhlA8dA= Subject key identifier: 6F:56:FE:F9:9D:FC:D0:D6:9F:A2:85:87:75:F4:7C:02:BA:D3:72:2D Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0B3C Signing time: Sun 26 Jul 2026 19:42:54 +0000 Manifest this update: Sun 26 Jul 2026 19:42:54 +0000 Manifest next update: Sun 02 Aug 2026 19:42:54 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: UhYq06mU1G9ZSPcYlAR72A1uknPPmEVsvlqch4rFsdw=) 2: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: eo+fVmREjn0E/C8IX23s1pespE6vPSqglnEAEQntZB8=) 3: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: XwrzlM0letqZh+/RvWS8GdyBop29NFs5TR8e33g5dvY=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: 7AD0EtO6OgTcq7iPrxEzW9VN1IAYjbMxwXVENNdHRmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Jul 26 19:42:54 2026 GMT Not After : Aug 2 19:42:54 2026 GMT Subject: CN=6a66633e-a20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:58:5b:96:cb:55:45:80:b4:4c:96:6a:44: 31:06:b0:50:2c:cc:65:b5:e7:3e:74:df:7f:8d:f2: d7:ab:c3:a9:f1:23:bf:bc:9c:1b:65:5b:17:15:35: 8c:15:cb:c2:19:67:4f:27:22:09:7c:a0:40:8b:d5: 68:46:0c:ce:3f:9c:b8:95:58:d6:0f:cd:7c:2f:61: 06:c0:f7:e3:a0:9b:c5:0b:a6:e0:6e:01:9c:f2:3a: 3c:33:05:13:b9:c0:2b:3f:b8:81:2e:19:52:1c:a3: 1d:44:07:1b:2f:d2:36:79:e5:50:41:c2:d7:4d:dc: 4b:6b:30:07:1b:a0:3c:99:f7:4a:f5:9d:1c:1a:94: af:34:a6:1c:01:59:30:a5:98:80:eb:2c:fd:c7:9d: db:59:6c:77:ad:61:be:10:08:49:99:1a:cc:fa:15: 04:0d:47:11:98:e5:b1:69:93:2f:52:f3:8b:9c:e4: ee:9a:1c:19:c4:8d:f8:5f:bc:3c:d7:4b:98:e2:30: 45:6c:da:1a:68:a4:17:d1:29:a8:84:d8:ee:17:15: 5e:56:62:06:66:13:31:4b:76:37:a9:26:2c:f7:d3: 83:96:7e:d9:0c:c8:12:b9:3f:61:01:80:3d:fe:a7: 57:f9:ad:27:c4:31:43:f2:88:3d:c8:77:2a:a6:61: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:56:FE:F9:9D:FC:D0:D6:9F:A2:85:87:75:F4:7C:02:BA:D3:72:2D X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ac:9f:71:94:aa:e0:51:63:42:55:0b:51:4d:ef:17:62:fd: c1:67:43:81:42:d5:05:81:ac:97:f0:5a:e8:72:b7:d3:a1:af: 55:cd:97:f9:4d:74:83:1d:2a:5f:5b:7b:f9:57:77:39:08:72: 9c:1d:e5:ed:78:2c:a9:8b:5a:53:92:57:6c:31:55:b3:27:59: 51:d7:4b:b8:10:5e:81:29:8f:a8:2e:d5:46:ee:25:66:11:f6: 5a:fe:ed:1d:dd:23:fa:37:bd:74:6e:1c:9f:55:43:04:d2:38: ca:32:82:e8:78:54:fa:f5:d7:2d:f4:57:95:fe:f1:40:d6:5d: 1c:5c:f1:4d:82:b2:b6:d2:65:f2:98:4b:04:36:4f:4f:ab:49: a8:e7:1d:9f:87:90:0f:96:67:22:92:94:d4:1d:e4:16:24:99: 99:6f:98:82:83:99:99:18:e4:a0:59:21:ba:e9:fd:1d:e9:ed: c9:7e:4b:a9:cd:93:27:c1:c8:df:24:dc:24:5c:04:f6:88:be: f4:53:28:58:fd:84:c8:fa:f3:99:d3:72:f6:c0:6a:4e:2f:48: d0:89:cc:e6:67:4c:10:d2:45:2f:c9:3b:99:63:f5:34:3f:8c: 2a:a8:a1:1c:a9:a7:04:11:5c:db:b6:91:e2:05:91:cb:77:50: 48:d4:b5:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjYwNzI2MTk0MjU0WhcNMjYwODAyMTk0MjU0WjAYMRYwFAYD VQQDEw02YTY2NjMzZS1hMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVBYW5bLVUWAtEyWakQxBrBQLMxltec+dN9/jfLXq8Op8SO/vJwbZVsXFTWM FcvCGWdPJyIJfKBAi9VoRgzOP5y4lVjWD818L2EGwPfjoJvFC6bgbgGc8jo8MwUT ucArP7iBLhlSHKMdRAcbL9I2eeVQQcLXTdxLazAHG6A8mfdK9Z0cGpSvNKYcAVkw pZiA6yz9x53bWWx3rWG+EAhJmRrM+hUEDUcRmOWxaZMvUvOLnOTumhwZxI34X7w8 10uY4jBFbNoaaKQX0SmohNjuFxVeVmIGZhMxS3Y3qSYs99ODln7ZDMgSuT9hAYA9 /qdX+a0nxDFD8og9yHcqpmG0hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9W/vmd /NDWn6KFh3X0fAK603ItMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK6yfcZSq4FFjQlULUU3vF2L9wWdDgULVBYGsl/Ba6HK306GvVc2X+U10gx0q X1t7+Vd3OQhynB3l7XgsqYtaU5JXbDFVsydZUddLuBBegSmPqC7VRu4lZhH2Wv7t Hd0j+je9dG4cn1VDBNI4yjKC6HhU+vXXLfRXlf7xQNZdHFzxTYKyttJl8phLBDZP T6tJqOcdn4eQD5ZnIpKU1B3kFiSZmW+YgoOZmRjkoFkhuun9HentyX5Lqc2TJ8HI 3yTcJFwE9oi+9FMoWP2EyPrzmdNy9sBqTi9I0InM5mdMENJFL8k7mWP1ND+MKqih HKmnBBFc27aR4gWRy3dQSNS1AA== -----END CERTIFICATE-----Generated at Mon Jul 27 18:47:07 2026 by rpki-client