$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: M3e2mWyjS5Fl2PpckspzI6XEQD/gXOZdBfwYIv1GO8Y= Subject key identifier: 47:FA:E1:43:B6:B1:17:16:55:72:B2:58:1F:B2:EB:A7:AB:50:8D:F2 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 01EF Signing time: Tue 21 Jul 2026 04:41:43 +0000 Manifest this update: Tue 21 Jul 2026 04:41:42 +0000 Manifest next update: Tue 28 Jul 2026 04:41:42 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: vAtMaAKscGTnfHI0CaqbXGuu7+G8db3ArfvpzmAjOhI=) 2: A2C289B63B0E11F1ABA6C37BA3833773.roa (hash: jmWcCNtWVugfcNe6D5Skhd/Vluv6OV5nBx2KESd91tA=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Jul 21 04:41:42 2026 GMT Not After : Jul 28 04:41:42 2026 GMT Subject: CN=6a5ef886-9ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:91:2b:c7:44:5f:ae:2e:40:01:3f:9b:be: 5d:c0:5d:b6:7a:10:61:69:c6:1a:91:ec:38:e7:72: 4c:b5:1f:f9:59:dd:27:a1:4d:ac:69:1a:4c:8f:e9: 65:30:28:62:f8:91:8e:37:c6:37:cc:05:34:71:21: a7:eb:fd:43:44:3e:d1:bc:ee:90:84:93:af:90:35: 94:b5:82:10:4c:de:b8:b7:23:01:0f:41:68:30:a2: 7d:2a:88:88:57:e1:44:ee:6c:f0:f8:8f:e1:16:ce: fe:e6:ae:5f:62:c1:95:d2:28:81:71:12:a9:c7:71: 75:ce:f8:59:3d:c3:e6:db:dd:51:51:d2:a7:ef:c1: 94:d3:ec:60:c1:d2:8f:5a:e4:e5:5b:52:03:94:37: 99:d2:a2:62:58:96:46:9e:7a:f2:25:c4:82:80:0b: d9:a1:0a:23:05:e3:a0:53:9a:c3:3c:c8:7c:8a:5e: fd:46:8f:fa:e8:61:27:8d:27:f2:77:ff:b4:2f:fe: 12:a2:f2:32:e1:cf:b0:39:00:ca:6c:16:64:28:6e: f1:bb:12:de:44:0f:53:09:5b:2f:66:df:b3:44:16: 35:84:a8:a8:09:a6:20:e2:05:2b:2b:f8:73:81:4d: 4b:df:53:7f:79:f1:a9:79:85:2b:85:7b:e4:a7:45: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FA:E1:43:B6:B1:17:16:55:72:B2:58:1F:B2:EB:A7:AB:50:8D:F2 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:aa:46:d5:9e:6a:c4:d4:33:83:f4:dd:05:5d:0e:39:3b:81: 38:bc:fe:5b:df:a4:5a:5e:13:72:97:6b:7b:44:ba:82:23:71: 02:6b:92:42:b5:77:bc:6e:10:94:00:3d:77:2f:89:99:9a:45: 5d:1e:f6:7b:65:ee:df:37:2e:22:11:cd:e1:19:d8:b5:c5:c0: 56:7a:ba:c6:8c:fd:c2:48:11:b9:d8:5b:ed:e1:18:a6:f0:b5: 52:b8:d0:1b:f7:bc:73:4a:0a:a9:7c:01:d3:8d:c9:1a:71:6a: a9:fc:e8:d7:7a:6c:dc:e2:49:39:b5:cf:6e:ea:fa:e6:cc:40: c6:55:32:69:4e:fa:5b:74:eb:51:0d:b6:cf:f7:88:71:19:71: 37:63:c2:78:3d:55:12:0d:29:9a:9e:94:0a:bb:c6:44:4b:a1: 12:1b:3a:68:92:fe:e7:17:df:37:35:96:80:9a:01:7d:ab:b1: 74:7a:7c:83:43:16:8c:b1:c8:59:f8:84:2f:11:99:f2:fe:dd: 24:6c:c6:f7:4d:19:13:d3:5b:bb:23:81:44:46:f0:a0:07:a2: c9:52:73:0e:2c:c6:bf:07:a6:e5:54:4f:42:ef:96:82:87:bb: aa:0b:a9:54:de:67:48:91:1d:e9:a4:d8:66:8e:e9:17:84:4e: b5:f5:ad:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjYwNzIxMDQ0MTQyWhcNMjYwNzI4MDQ0MTQyWjAYMRYwFAYD VQQDEw02YTVlZjg4Ni05YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKWRK8dEX64uQAE/m75dwF22ehBhacYakew453JMtR/5Wd0noU2saRpMj+ll MChi+JGON8Y3zAU0cSGn6/1DRD7RvO6QhJOvkDWUtYIQTN64tyMBD0FoMKJ9KoiI V+FE7mzw+I/hFs7+5q5fYsGV0iiBcRKpx3F1zvhZPcPm291RUdKn78GU0+xgwdKP WuTlW1IDlDeZ0qJiWJZGnnryJcSCgAvZoQojBeOgU5rDPMh8il79Ro/66GEnjSfy d/+0L/4SovIy4c+wOQDKbBZkKG7xuxLeRA9TCVsvZt+zRBY1hKioCaYg4gUrK/hz gU1L31N/efGpeYUrhXvkp0VmJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEf64UO2 sRcWVXKyWB+y66erUI3yMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlqpG1Z5qxNQzg/TdBV0OOTuBOLz+W9+kWl4Tcpdre0S6giNxAmuSQrV3vG4Q lAA9dy+JmZpFXR72e2Xu3zcuIhHN4RnYtcXAVnq6xoz9wkgRudhb7eEYpvC1UrjQ G/e8c0oKqXwB043JGnFqqfzo13ps3OJJObXPbur65sxAxlUyaU76W3TrUQ22z/eI cRlxN2PCeD1VEg0pmp6UCrvGREuhEhs6aJL+5xffNzWWgJoBfauxdHp8g0MWjLHI WfiELxGZ8v7dJGzG900ZE9NbuyOBREbwoAeiyVJzDizGvwem5VRPQu+Wgoe7qgup VN5nSJEd6aTYZo7pF4ROtfWtlA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:06:15 2026 by rpki-client