$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: JU+lHb88J0TAdI3LIvZalAFwkrV+pv3ZU6pkIm4d68Y= Subject key identifier: 03:B0:97:C3:4C:E4:1B:9F:11:83:86:32:10:70:CE:8E:1A:11:5C:35 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0615 Signing time: Mon 20 Jul 2026 23:48:33 +0000 Manifest this update: Mon 20 Jul 2026 23:48:32 +0000 Manifest next update: Mon 27 Jul 2026 23:48:32 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: Q4Pp8Hsvv2wEJPglYB1KVfrErX1skDYcVNn8kPIik/0=) 2: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=) 3: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (hash: 34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=) 4: B589332C498611EF90B46962C4F9AE02.roa (hash: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jul 20 23:48:32 2026 GMT Not After : Jul 27 23:48:32 2026 GMT Subject: CN=6a5eb3d1-7b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:3b:c2:42:f0:82:87:c7:38:85:f4:a8:6a: 61:49:fa:ec:c5:aa:6f:d4:7b:2c:7c:70:a3:ad:25: 55:99:90:c6:d7:6c:a9:b5:d7:8a:d4:7c:73:08:d2: ab:59:29:f4:ac:ef:a7:e4:cc:c0:5a:b8:5c:2a:7b: 2a:cb:34:df:f2:14:a0:62:53:0f:75:0b:c4:14:03: a1:c6:0a:bc:91:04:3a:17:d9:1c:dc:12:0e:2a:17: 5b:44:70:b0:8b:47:99:70:9c:3b:25:48:1d:29:05: 72:04:f1:c1:0a:41:0d:d7:32:e7:46:5c:39:26:4c: e4:e8:b8:70:a0:77:e6:3f:e6:2d:e3:a0:5c:89:ab: 6b:4c:78:ee:5d:84:65:ba:f8:e6:d0:d4:2e:10:f7: e1:74:dd:d1:1a:47:1c:a4:d7:0c:dc:6c:d8:7d:af: a7:c4:fb:a3:07:54:2b:cb:55:bd:54:10:13:4e:b8: a0:69:d3:08:d4:38:5a:6c:81:27:4b:5d:e4:62:e9: 41:f9:79:ef:ca:5e:e3:49:2b:2e:96:93:ed:69:c6: c1:47:af:83:c3:a7:3e:a1:c2:74:6a:12:25:1b:b0: 18:dc:63:29:7e:ea:ab:93:f0:ba:e4:08:5c:48:af: 55:99:85:6e:08:7d:62:72:b5:74:18:4d:2b:6c:25: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B0:97:C3:4C:E4:1B:9F:11:83:86:32:10:70:CE:8E:1A:11:5C:35 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:4f:bc:77:bd:dd:5b:33:0c:fb:f0:2c:8a:a6:fc:a1:44:2b: d6:c5:6c:b5:2e:f1:97:9e:b1:66:76:e9:47:03:79:06:48:d9: 3d:b6:64:a6:13:7b:c1:7f:f0:c2:bc:38:d3:95:36:f4:e3:08: 79:bd:4a:9f:c7:1f:09:93:e2:7c:cc:e7:7b:77:78:05:36:70: 31:a9:ab:62:7b:02:69:d0:ee:f3:0a:21:68:16:df:3c:c7:70: 18:68:a6:9c:ad:8b:2e:56:16:1d:02:9a:ba:5b:f4:d2:18:ab: 72:6d:d8:73:49:bc:f7:d3:86:1f:cf:1e:27:ba:ee:4c:cd:0c: db:ca:33:aa:70:2a:cd:73:a5:cd:1c:8b:4f:73:c4:b3:b8:a0: e4:fe:7e:83:fd:42:2f:93:60:ea:92:42:88:38:19:f5:72:c6: d8:08:be:60:ca:3d:df:4d:9b:0f:80:5a:23:14:bd:de:ce:d2: 56:01:1c:53:d0:61:b0:9d:26:bf:85:25:79:54:6f:58:09:01: c0:be:34:62:53:c4:59:cd:c7:8c:16:6f:4a:2f:ad:87:80:61: 30:46:b9:fc:fa:0f:b3:bb:ae:55:69:f1:c0:bd:82:a8:cb:b6: cf:3c:45:b7:bb:b8:4a:05:58:e3:7e:12:39:33:7d:01:da:fe: f5:11:5e:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjYwNzIwMjM0ODMyWhcNMjYwNzI3MjM0ODMyWjAYMRYwFAYD VQQDEw02YTVlYjNkMS03YjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfM7wkLwgofHOIX0qGphSfrsxapv1HssfHCjrSVVmZDG12yptdeK1HxzCNKr WSn0rO+n5MzAWrhcKnsqyzTf8hSgYlMPdQvEFAOhxgq8kQQ6F9kc3BIOKhdbRHCw i0eZcJw7JUgdKQVyBPHBCkEN1zLnRlw5Jkzk6LhwoHfmP+Yt46BciatrTHjuXYRl uvjm0NQuEPfhdN3RGkccpNcM3GzYfa+nxPujB1Qry1W9VBATTrigadMI1DhabIEn S13kYulB+Xnvyl7jSSsulpPtacbBR6+Dw6c+ocJ0ahIlG7AY3GMpfuqrk/C65Ahc SK9VmYVuCH1icrV0GE0rbCURtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOwl8NM 5BufEYOGMhBwzo4aEVw1MB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeU+8d73dWzMM+/Asiqb8oUQr1sVstS7xl56xZnbpRwN5BkjZPbZkphN7wX/w wrw405U29OMIeb1Kn8cfCZPifMzne3d4BTZwMamrYnsCadDu8wohaBbfPMdwGGim nK2LLlYWHQKaulv00hircm3Yc0m899OGH88eJ7ruTM0M28ozqnAqzXOlzRyLT3PE s7ig5P5+g/1CL5Ng6pJCiDgZ9XLG2Ai+YMo9302bD4BaIxS93s7SVgEcU9BhsJ0m v4UleVRvWAkBwL40YlPEWc3HjBZvSi+th4BhMEa5/PoPs7uuVWnxwL2CqMu2zzxF t7u4SgVY434SOTN9Adr+9RFeQw== -----END CERTIFICATE-----Generated at Tue Jul 21 09:52:45 2026 by rpki-client