$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft File: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json) Hash identifier: AsyAP/1ygmThhBT69Z2+pgkx6TbbnAQ5c9KhB7GqjGU= Subject key identifier: F0:3C:1D:DB:3D:AA:91:4F:64:8F:FE:3B:3E:75:C2:08:85:A3:23:BC Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft Manifest number: 0D37 Signing time: Sat 04 Jul 2026 18:08:01 +0000 Manifest this update: Sat 04 Jul 2026 18:08:00 +0000 Manifest next update: Sat 11 Jul 2026 18:08:00 +0000 Files and hashes: 1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: eJSQgjsEdaPZsmt7h0DLwaeIVDvXdwxCVJPEapM2uhs=) 2: C21D3A065B7E11F0A8B76B2EC4F9AE02.roa (hash: XGpY3RP8rp7DjJ1Txu21meaiyAARXZvjCzho1tEWn3o=) 3: 44FEC394589711F0B981A181C4F9AE02.roa (hash: wWWoExLKhdXKo+c07T6lvKy7CHheLkRqNVGs3DlMLvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 18:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: Jul 4 18:08:00 2026 GMT Not After : Jul 11 18:08:00 2026 GMT Subject: CN=6a494c00-96ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:57:97:40:90:72:14:86:c9:28:a5:67:98: 8c:7d:45:7e:20:11:ae:5d:e6:3b:f0:ff:27:2e:2d: 62:9b:1f:c4:d6:ae:99:e3:86:2e:90:b8:c7:74:c5: 01:d3:2b:6b:46:7e:a2:1d:52:39:d5:38:ac:2f:91: 99:a0:9f:75:88:85:4a:1d:9d:12:88:fd:10:c2:ee: d3:ba:b7:f7:eb:44:55:27:d6:48:1a:20:ee:e8:ce: e0:a1:1b:4d:70:ea:7e:d4:01:b1:47:95:5a:81:af: 00:c0:39:54:6e:8e:bf:80:31:e4:5d:c4:87:e3:1d: 6f:5f:0e:72:8a:b5:48:f9:8e:43:fa:e5:a4:a3:61: d1:b4:ad:6b:8c:e4:24:3e:f7:42:48:d9:28:d2:51: 95:4b:7f:45:7f:f5:93:08:e6:2f:24:40:85:41:c7: 21:73:40:10:08:1e:5c:77:bc:ed:d3:28:2e:fe:5b: 4c:ab:89:49:2d:23:c2:cd:67:de:0e:44:5a:34:26: 32:bf:9e:af:7e:2f:d1:36:30:e2:7d:0d:46:95:cf: 23:16:69:77:b6:8f:ba:fb:0b:0d:5f:01:17:88:aa: 53:42:0a:f2:ba:d8:4d:41:58:7b:45:91:01:93:7b: 29:bb:67:8c:65:a5:3b:24:9f:9f:aa:8f:90:ea:35: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3C:1D:DB:3D:AA:91:4F:64:8F:FE:3B:3E:75:C2:08:85:A3:23:BC X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:85:f1:0e:e7:f8:ec:ac:ea:aa:19:b2:a4:81:4b:22:e6:5a: 19:7a:c7:53:87:f2:4e:85:59:87:45:7c:c5:e2:6f:d7:c8:b8: 51:b8:8b:95:9a:2c:29:86:4c:c3:32:53:c0:55:f9:e9:27:c0: 87:a5:52:10:e0:44:31:e8:8f:67:38:f1:c8:56:10:17:4d:77: c8:4c:4e:cb:56:5b:0d:9a:b3:dd:0e:44:a4:60:df:f2:22:59: 37:7a:d6:1f:41:80:91:0d:2f:5a:06:61:48:8e:64:4c:2d:12: ee:90:ac:dc:fe:70:6c:62:5e:2f:75:1a:b9:d7:59:7c:a9:63: 75:0e:57:8a:99:4b:6b:e5:81:dd:86:c2:2d:38:ed:a5:4b:97: 6b:99:38:cd:c6:12:de:04:32:b4:24:e2:1e:bd:4a:08:53:00: 9a:40:64:75:9e:b1:46:5e:9c:83:6f:bc:5c:7d:08:4b:ba:ec: fa:3a:45:5b:5b:68:9a:a1:79:bb:e4:dc:3c:27:07:f6:3b:3b: 53:01:86:3c:03:91:2e:02:c9:43:3e:c9:11:f5:6d:64:f4:af: 7c:83:36:c7:0c:91:81:76:5d:96:a3:f5:0f:bb:dc:04:4b:37: 38:7a:9f:5b:c4:4d:2e:2f:20:bb:0b:15:7b:df:05:00:21:fc: dc:6c:81:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjYwNzA0MTgwODAwWhcNMjYwNzExMTgwODAwWjAYMRYwFAYD VQQDEw02YTQ5NGMwMC05NmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtudXl0CQchSGySilZ5iMfUV+IBGuXeY78P8nLi1imx/E1q6Z44YukLjHdMUB 0ytrRn6iHVI51TisL5GZoJ91iIVKHZ0SiP0Qwu7Turf360RVJ9ZIGiDu6M7goRtN cOp+1AGxR5Vaga8AwDlUbo6/gDHkXcSH4x1vXw5yirVI+Y5D+uWko2HRtK1rjOQk PvdCSNko0lGVS39Ff/WTCOYvJECFQcchc0AQCB5cd7zt0ygu/ltMq4lJLSPCzWfe DkRaNCYyv56vfi/RNjDifQ1Glc8jFml3to+6+wsNXwEXiKpTQgryuthNQVh7RZEB k3spu2eMZaU7JJ+fqo+Q6jULzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPA8Hds9 qpFPZI/+Oz51wgiFoyO8MB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU2Ni83MDYzOUVGQ0ZGNkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JS N1B0b1I2R3dkREs5aDdHZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo4XxDuf47KzqqhmypIFLIuZaGXrHU4fyToVZh0V8xeJv18i4UbiLlZosKYZM wzJTwFX56SfAh6VSEOBEMeiPZzjxyFYQF013yExOy1ZbDZqz3Q5EpGDf8iJZN3rW H0GAkQ0vWgZhSI5kTC0S7pCs3P5wbGJeL3UauddZfKljdQ5XiplLa+WB3YbCLTjt pUuXa5k4zcYS3gQytCTiHr1KCFMAmkBkdZ6xRl6cg2+8XH0IS7rs+jpFW1tomqF5 u+TcPCcH9js7UwGGPAORLgLJQz7JEfVtZPSvfIM2xwyRgXZdlqP1D7vcBEs3OHqf W8RNLi8guwsVe98FACH83GyBiw== -----END CERTIFICATE-----Generated at Sun Jul 5 07:55:22 2026 by rpki-client