$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: Uc0uayu0GYBQDpcvCoCLoIkBWSqGkCcUH2bYod6ZPv0= Subject key identifier: B4:66:3F:FB:31:99:59:05:91:A7:48:3F:3A:CA:24:9B:18:E7:52:37 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 360D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 35C1 Signing time: Mon 06 Jul 2026 14:22:34 +0000 Manifest this update: Mon 06 Jul 2026 14:22:33 +0000 Manifest next update: Mon 13 Jul 2026 14:22:33 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: oyFJGsi1CExAxF/yC6BshlDSdmbzfgFp5YzX9qjmDmA=) 2: 8064BD9A531811F19CFFFF86C0833773.roa (hash: 6eSWI3lacVFYWJ6Y3LXT4o1eDdujYg9oUunVgvcKPVw=) 3: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=) 4: 34013D1A69E911F18D43391FA247A888.roa (hash: TU4h3PTGkuJs0cClNzVxXAJnxXSrF11ivP3gcFNPm7A=) 5: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=) 6: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: +vcVP3Vc/xQrceGKHxptusion7qC1wdDocXyLDBF9wk=) 7: 6193036675CA11F1B93BCE9E67A30FBC.roa (hash: n8jo7OOyKoEMXrPDLqPZ0GKTDNmrCmsRnCo2kxsObx0=) 8: 783697D2107A11F1854A0E192E3D8C67.roa (hash: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=) 9: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=) 10: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: qOOSzovo+PYCi2hcGVMepWRZjfhHlcX70ZUUrgBUwaI=) 11: 0C79C6F678D811F192CB568F96A30FBC.roa (hash: ssvnbnbPiJy1G5RE7lDBvaD1kbNv/PwbXJ9FfnkTt1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 14:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13837 (0x360d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Jul 6 14:22:33 2026 GMT Not After : Jul 13 14:22:33 2026 GMT Subject: CN=6a4bba2a-ff01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:a3:a6:49:40:b7:fd:39:39:1f:9a:4d:30: 65:fd:7f:e6:d0:d9:f0:fb:5b:af:56:bd:9c:9d:4a: 4f:26:36:53:d7:6e:eb:67:a1:bc:da:ed:10:be:e2: 10:20:91:d6:a6:96:3b:25:d4:7e:ad:c9:33:5b:f5: d8:4f:30:19:ea:1f:3d:b2:3b:d5:07:d0:80:0e:06: 61:c8:70:3b:60:17:d3:6b:c6:44:8a:96:df:a2:e6: 43:fc:94:85:b4:0b:d6:b6:40:dd:16:d0:74:a8:8c: 24:2c:f2:04:a4:1d:fe:55:82:c2:72:f7:69:17:2a: 6f:0a:31:eb:1b:e9:53:6b:1f:fa:58:3c:84:33:2d: 26:cc:a4:7d:6b:e7:d0:22:54:b7:41:f4:2c:f5:1e: 84:bb:e2:b5:be:a4:58:8b:30:55:d0:1e:40:92:a5: 4d:1d:77:53:22:74:3d:34:2f:5f:85:9c:03:52:be: 60:a7:45:94:4d:7d:38:d5:d2:04:8e:28:91:6a:5d: 23:6a:dc:c3:02:19:ee:31:9d:b6:c1:ae:b8:1b:c4: fc:e4:3d:bd:9e:53:c4:4f:45:37:4c:d2:48:c4:9b: ef:8b:15:2e:8d:a7:92:23:94:45:d8:92:ec:75:b4: 17:1c:db:e5:10:99:ba:40:f6:4d:de:9d:78:dc:c9: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:66:3F:FB:31:99:59:05:91:A7:48:3F:3A:CA:24:9B:18:E7:52:37 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:75:7d:c3:79:89:32:03:51:2c:ac:ce:ef:7e:4f:3a:cb:79: 87:ba:b5:00:59:86:52:de:9a:87:8f:72:c1:dc:fd:f7:5f:8f: 09:42:15:bf:d3:9e:97:cf:62:bc:aa:dd:c4:d2:2d:c2:e6:4a: 5a:bd:f9:3a:f8:3b:1a:3c:e9:83:90:1b:27:01:de:6f:bc:8a: a1:be:c5:11:75:46:6e:10:e5:1f:18:a1:88:12:b1:3e:88:58: b2:9f:ab:e0:96:a9:18:03:cf:45:3e:13:82:7b:fd:ae:4e:b4: 04:f2:68:37:7d:6b:df:bf:9e:24:f8:44:19:26:d2:28:2b:8a: 4b:bd:2c:3d:e3:02:af:ab:d2:14:6a:05:0c:be:c2:1f:43:6a: a6:8c:77:a5:f5:3b:a0:5a:e3:97:45:95:b1:ec:7d:ed:20:bc: 59:70:47:00:36:d3:0f:90:34:df:b7:44:0b:a5:ec:9c:e9:29: 10:c5:7f:33:5d:b1:31:e9:eb:5f:0b:10:f0:3a:d1:d2:16:fc: 99:0e:72:68:91:40:98:56:75:a6:c9:8a:45:8d:e1:36:9e:0b: 54:37:5e:9a:69:1a:73:06:f4:0d:11:8b:e3:24:4d:5b:68:6c: ef:02:57:a1:1e:f9:a7:95:bb:a0:06:d1:6c:f2:3f:ca:f7:d4: ba:7d:73:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwNzA2MTQyMjMzWhcNMjYwNzEzMTQyMjMzWjAYMRYwFAYD VQQDEw02YTRiYmEyYS1mZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMSjpklAt/05OR+aTTBl/X/m0Nnw+1uvVr2cnUpPJjZT127rZ6G82u0QvuIQ IJHWppY7JdR+rckzW/XYTzAZ6h89sjvVB9CADgZhyHA7YBfTa8ZEipbfouZD/JSF tAvWtkDdFtB0qIwkLPIEpB3+VYLCcvdpFypvCjHrG+lTax/6WDyEMy0mzKR9a+fQ IlS3QfQs9R6Eu+K1vqRYizBV0B5AkqVNHXdTInQ9NC9fhZwDUr5gp0WUTX041dIE jiiRal0jatzDAhnuMZ22wa64G8T85D29nlPET0U3TNJIxJvvixUujaeSI5RF2JLs dbQXHNvlEJm6QPZN3p143MmZTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLRmP/sx mVkFkadIPzrKJJsY51I3MB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsnV9w3mJMgNRLKzO735POst5h7q1AFmGUt6ah49ywdz991+PCUIVv9Oel89i vKrdxNItwuZKWr35Ovg7Gjzpg5AbJwHeb7yKob7FEXVGbhDlHxihiBKxPohYsp+r 4JapGAPPRT4Tgnv9rk60BPJoN31r37+eJPhEGSbSKCuKS70sPeMCr6vSFGoFDL7C H0Nqpox3pfU7oFrjl0WVsex97SC8WXBHADbTD5A037dEC6XsnOkpEMV/M12xMenr XwsQ8DrR0hb8mQ5yaJFAmFZ1psmKRY3hNp4LVDdemmkacwb0DRGL4yRNW2hs7wJX oR75p5W7oAbRbPI/yvfUun1znQ== -----END CERTIFICATE-----Generated at Mon Jul 6 19:18:37 2026 by rpki-client