$ rpki-client -vvf rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft File: Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft (raw, json) Hash identifier: pQtyfed9YTf9O49OW2x3BD66j950Exz1OeUX8aeXHxE= Subject key identifier: CE:A5:3C:B4:E4:5C:63:80:0D:C0:A6:1B:38:3D:D3:3A:8A:EC:41:AA Authority key identifier: 11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 Certificate issuer: /CN=A9142C40/serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft Manifest number: 0E Signing time: Wed 05 Aug 2026 10:52:35 +0000 Manifest this update: Wed 05 Aug 2026 10:52:34 +0000 Manifest next update: Wed 12 Aug 2026 10:52:34 +0000 Files and hashes: 1: Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl (hash: MS9/bQcaiN9i9XPQqPpU1UeX91mE7QqVGvWUyJy3Hq4=) 2: BA2F8ECC7F4811F1990DB98295A30FBC.roa (hash: B0ehoAhHlNvECD8MrwXSLG+T0N6cMbbYGRxsUCIbqxg=) 3: BAD07DD27F4811F1990DB98295A30FBC.roa (hash: VBBLrjGrqCd0Wu3hf1qDG8C18Uo1AAMHQGWoL8gJlLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 10:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142C40, serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Validity Not Before: Aug 5 10:52:34 2026 GMT Not After : Aug 12 10:52:34 2026 GMT Subject: CN=6a7315f3-39be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:18:90:e2:8f:a0:c0:7c:55:96:79:48:c2: fd:3d:06:5b:6b:78:ab:fd:98:b3:4c:c8:2a:22:18: 22:ff:64:a7:6b:ad:9d:22:59:d7:08:66:45:d3:8d: 8e:11:9d:9b:a3:d9:6f:4a:27:d7:7b:64:fd:69:99: 1c:a9:11:99:1a:f5:b5:94:80:af:6e:27:41:25:02: 87:85:0a:1b:67:c4:a4:24:c5:62:74:13:c3:09:e8: e7:fb:6f:e0:76:73:95:7d:b8:6b:b9:3e:60:7b:3c: f4:c2:57:59:ed:db:8a:8d:80:cd:41:a5:68:70:c8: af:5b:b9:8e:fc:82:4b:ff:dc:ea:46:46:48:cf:93: 3d:5e:e8:ef:29:f5:43:43:3f:1f:59:9e:de:1c:16: d5:3c:f6:24:56:df:10:69:5c:c8:40:59:82:4a:c6: 21:e6:7d:8d:85:5b:27:5c:10:e3:93:9a:e9:94:f4: 6b:9d:7f:6c:25:44:0f:f4:bc:af:7a:7a:07:84:cb: 85:f6:57:f4:92:22:c4:04:b8:a2:38:d0:b4:86:82: 8b:76:d7:f2:1f:e2:52:99:f6:45:83:72:6c:20:96: 9c:8b:89:89:f9:ff:42:6c:49:8b:c7:a7:60:21:41: 45:8e:f7:cb:b6:6f:92:83:73:a0:30:aa:76:3e:82: 99:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A5:3C:B4:E4:5C:63:80:0D:C0:A6:1B:38:3D:D3:3A:8A:EC:41:AA X509v3 Authority Key Identifier: keyid:11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fd:be:66:7c:33:28:a2:17:22:51:05:e0:66:80:7c:53:cc: 09:a7:89:65:42:f2:78:dd:d6:eb:f9:e2:59:56:b9:f0:08:fb: cf:88:ed:76:5e:bb:d6:31:93:47:7b:9c:35:d0:a9:a0:e5:1f: 7a:93:82:33:78:d9:6d:51:74:c0:2c:28:45:72:07:64:3c:51: 1e:b5:c1:a6:18:ec:55:df:33:20:b5:8a:94:af:34:22:4c:d1: d2:f5:57:28:28:2e:29:cb:46:dd:29:57:44:ee:66:46:89:cd: 30:ce:38:69:3b:f9:71:60:e2:9c:c7:dc:3d:76:ad:b1:db:8f: a8:a2:4b:7e:1a:3c:b1:55:76:02:b2:a2:f1:5b:e7:e8:09:19: 27:bb:62:f3:34:dc:f0:d4:4a:ee:69:de:28:59:a4:72:59:0f: c0:d1:f3:83:a5:b4:c9:a4:c7:6a:bf:c8:d8:ef:0c:65:b4:16: f6:d4:43:ba:33:db:2c:6a:23:4b:00:3e:a2:10:62:a2:f7:d3: d0:32:72:d9:21:25:0b:86:2b:74:c2:66:44:a6:fc:d6:cd:57: 2e:03:74:b3:00:e8:01:3c:7d:9a:1a:9b:ea:c9:38:e7:52:d2: 75:43:7e:4f:6e:3f:9e:03:8b:3a:e0:ce:aa:60:8a:85:d6:d3: 30:b0:06:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkM0MDExMC8GA1UEBRMoMTFDRTRFNUEyQzA4QTc3QzQyNzlFMDFDQ0I1QkFFOEM4 QTA5QzI5MzAeFw0yNjA4MDUxMDUyMzRaFw0yNjA4MTIxMDUyMzRaMBgxFjAUBgNV BAMTDTZhNzMxNWYzLTM5YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzIhiQ4o+gwHxVlnlIwv09BltreKv9mLNMyCoiGCL/ZKdrrZ0iWdcIZkXTjY4R nZuj2W9KJ9d7ZP1pmRypEZka9bWUgK9uJ0ElAoeFChtnxKQkxWJ0E8MJ6Of7b+B2 c5V9uGu5PmB7PPTCV1nt24qNgM1BpWhwyK9buY78gkv/3OpGRkjPkz1e6O8p9UND Px9Znt4cFtU89iRW3xBpXMhAWYJKxiHmfY2FWydcEOOTmumU9Gudf2wlRA/0vK96 egeEy4X2V/SSIsQEuKI40LSGgot21/If4lKZ9kWDcmwglpyLiYn5/0JsSYvHp2Ah QUWO98u2b5KDc6AwqnY+gpmRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzqU8tORc Y4ANwKYbOD3TOorsQaowHwYDVR0jBBgwFoAUEc5OWiwIp3xCeeAcy1uujIoJwpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQzQwLzcwMUNFOEZBN0Y0 NTExRjFCQThBQTcwQzk1QTMwRkJDL0VjNU9XaXdJcDN4Q2VlQWN5MXV1aklvSndw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWM1T1dpd0lwM3hDZWVBY3kxdXVqSW9Kd3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QzQwLzcwMUNFOEZBN0Y0NTExRjFCQThBQTcwQzk1QTMwRkJDL0VjNU9XaXdJcDN4 Q2VlQWN5MXV1aklvSndwTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+/b5mfDMoohciUQXgZoB8U8wJp4llQvJ43dbr+eJZVrnwCPvPiO12XrvWMZNH e5w10Kmg5R96k4IzeNltUXTALChFcgdkPFEetcGmGOxV3zMgtYqUrzQiTNHS9Vco KC4py0bdKVdE7mZGic0wzjhpO/lxYOKcx9w9dq2x24+ookt+GjyxVXYCsqLxW+fo CRknu2LzNNzw1Eruad4oWaRyWQ/A0fODpbTJpMdqv8jY7wxltBb21EO6M9ssaiNL AD6iEGKi99PQMnLZISULhit0wmZEpvzWzVcuA3SzAOgBPH2aGpvqyTjnUtJ1Q35P bj+eA4s64M6qYIqF1tMwsAZz -----END CERTIFICATE-----Generated at Wed Aug 5 13:32:57 2026 by rpki-client