$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: ewFvudcTkmiWHw6L/mQ0JyUneZpXgqELeB4eOyEO0NI= Subject key identifier: 22:CB:94:E4:14:33:35:34:FD:77:99:F7:77:27:DE:66:AF:C1:52:1A Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 0290 Signing time: Tue 21 Jul 2026 02:58:14 +0000 Manifest this update: Tue 21 Jul 2026 02:58:13 +0000 Manifest next update: Tue 28 Jul 2026 02:58:13 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: 38K+P4d7v2zjZiGLHEHIa/ttNpOJxCzZ+iFzt1jMwW8=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: Jul 21 02:58:13 2026 GMT Not After : Jul 28 02:58:13 2026 GMT Subject: CN=6a5ee046-9c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5f:a3:c0:ea:01:30:9d:ca:b6:cd:92:5f:a6: 57:db:6d:80:70:ee:0b:7f:ac:d2:e4:79:df:f3:9e: db:11:14:08:60:f6:1e:54:10:32:8e:3d:0c:5b:1a: 99:ef:42:49:f3:a8:2c:05:2b:3c:91:ba:0b:50:e7: 53:ae:2f:59:34:a2:36:e4:3a:16:e0:50:0b:c3:de: 89:83:47:f6:0f:26:05:83:62:ed:3b:43:f6:43:71: 89:dd:ef:12:28:0f:bc:8e:96:af:49:3e:50:57:80: 33:80:66:28:c6:34:bc:35:e4:26:a4:d5:09:b5:c5: 31:5e:c1:c2:25:89:fa:14:f0:ed:dc:1f:28:2e:3c: bf:b4:ac:25:d2:9c:46:6e:6c:4d:40:ea:aa:87:b0: f7:34:9b:18:2a:25:ad:2e:0c:70:5a:c9:58:7f:d1: 82:44:e6:92:ba:78:e7:8e:a2:40:71:b4:b9:9e:52: 2d:55:d1:f5:21:65:5a:29:e6:5e:1a:06:1c:81:8c: f3:d4:f7:a1:10:bc:19:9c:22:ce:04:2d:5c:a6:5c: 9a:48:5b:9e:ed:a3:20:f8:c1:b8:e0:18:d0:0e:65: 56:1b:ca:74:1c:d1:65:17:08:0c:30:b4:03:47:43: 79:a6:5c:b9:cc:97:ee:bc:3f:d8:c3:56:f5:3b:6e: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CB:94:E4:14:33:35:34:FD:77:99:F7:77:27:DE:66:AF:C1:52:1A X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e7:e3:81:9e:1c:86:9d:ca:2c:0b:66:6f:92:2c:f0:e9:92: c4:f9:e7:fe:cf:cd:88:2f:2c:eb:a7:f3:09:80:ea:0d:e0:0b: 9a:2e:d1:21:92:14:95:5b:c3:22:23:a5:03:37:e0:c3:68:27: 41:74:a0:f5:ff:33:55:3b:30:cf:51:18:0d:49:6d:31:01:f5: 35:b9:f7:b6:65:0d:3a:f7:a6:77:04:44:57:00:33:91:01:f1: df:97:a0:0e:cc:20:ec:c0:4b:94:33:aa:37:3b:38:2b:8c:72: 7d:b1:c0:eb:c6:22:67:a0:e3:3e:f8:64:5b:82:4f:60:37:94: cd:9c:c6:a2:0e:a8:58:cd:4b:e8:ab:07:39:23:5f:6b:85:85: b5:52:85:73:74:96:6e:7d:63:94:f7:d5:d2:50:b0:78:2f:2e: 9a:68:db:ed:b9:e6:ea:53:af:48:8d:ef:7e:37:0b:3a:a3:9b: 5b:d9:a1:4d:f7:65:a2:c6:77:ed:0a:f4:57:d1:15:91:ae:d4: c8:35:26:3b:68:22:1e:ad:a8:a1:be:d1:b6:31:90:93:60:a7: ff:2e:7b:93:58:ef:0f:6f:55:20:53:8d:29:71:d4:75:b9:9f: 1f:fe:a5:19:09:35:da:13:ab:25:87:59:73:68:fc:5a:ca:93: 1e:50:36:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjYwNzIxMDI1ODEzWhcNMjYwNzI4MDI1ODEzWjAYMRYwFAYD VQQDEw02YTVlZTA0Ni05YzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7F+jwOoBMJ3Kts2SX6ZX222AcO4Lf6zS5Hnf857bERQIYPYeVBAyjj0MWxqZ 70JJ86gsBSs8kboLUOdTri9ZNKI25DoW4FALw96Jg0f2DyYFg2LtO0P2Q3GJ3e8S KA+8jpavST5QV4AzgGYoxjS8NeQmpNUJtcUxXsHCJYn6FPDt3B8oLjy/tKwl0pxG bmxNQOqqh7D3NJsYKiWtLgxwWslYf9GCROaSunjnjqJAcbS5nlItVdH1IWVaKeZe GgYcgYzz1PehELwZnCLOBC1cplyaSFue7aMg+MG44BjQDmVWG8p0HNFlFwgMMLQD R0N5ply5zJfuvD/Yw1b1O26wawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLLlOQU MzU0/XeZ93cn3mavwVIaMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQOfjgZ4chp3KLAtmb5Is8OmSxPnn/s/NiC8s66fzCYDqDeALmi7RIZIUlVvD IiOlAzfgw2gnQXSg9f8zVTswz1EYDUltMQH1Nbn3tmUNOvemdwREVwAzkQHx35eg Dswg7MBLlDOqNzs4K4xyfbHA68YiZ6DjPvhkW4JPYDeUzZzGog6oWM1L6KsHOSNf a4WFtVKFc3SWbn1jlPfV0lCweC8ummjb7bnm6lOvSI3vfjcLOqObW9mhTfdlosZ3 7Qr0V9EVka7UyDUmO2giHq2oob7RtjGQk2Cn/y57k1jvD29VIFONKXHUdbmfH/6l GQk12hOrJYdZc2j8WsqTHlA2FA== -----END CERTIFICATE-----Generated at Wed Jul 22 03:05:41 2026 by rpki-client