$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json) Hash identifier: irGvsKPhJ/0XLpllkzlHuQ8knUSAKjZ1KJauIUbh5UQ= Subject key identifier: 9F:80:19:EF:BE:5A:67:37:C1:DB:79:1D:75:F0:36:8C:9E:91:6C:5B Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft Manifest number: 0CAD Signing time: Sun 26 Jul 2026 18:52:44 +0000 Manifest this update: Sun 26 Jul 2026 18:52:44 +0000 Manifest next update: Sun 02 Aug 2026 18:52:44 +0000 Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: 6mkl8qFIUv5ZqySzibLDk4MdJ79+Xl+CdBOAbJ9nSrs=) 2: 021496F2A4EC11F0A8EB5F7EC4F9AE02.roa (hash: wgK4ZuIIb0twemfmKGJQ9J4VlAgOAeotYnSBFamHuz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Validity Not Before: Jul 26 18:52:44 2026 GMT Not After : Aug 2 18:52:44 2026 GMT Subject: CN=6a66577c-cf98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:2f:76:09:82:98:7e:f4:c3:b0:d6:fc:1a: a1:30:02:f7:b7:01:ff:e6:2a:af:d9:1d:e1:7e:7d: b3:04:19:a5:0b:9e:90:56:da:14:27:94:b9:fa:b7: 9e:d5:03:f9:2c:c1:1f:6e:9b:a1:01:3c:a4:5b:08: 42:78:15:1f:e3:1f:8c:73:1e:3b:d1:aa:5f:34:86: 12:1b:27:ee:04:44:85:b8:00:cf:3a:d3:fb:06:ad: 06:0c:33:58:77:1e:49:4a:53:63:86:cd:34:37:25: 16:dc:e3:f1:4a:27:31:e0:7e:bd:f8:ff:cd:a1:31: b9:41:88:78:6f:e8:05:de:bd:70:f2:30:58:f1:a8: f6:83:c2:3f:e6:c8:df:a2:69:b2:58:f2:3f:2c:88: 9e:10:df:49:50:81:e5:49:81:05:ad:71:a5:97:3e: 64:26:77:8c:17:5c:a5:58:dc:dc:9a:26:ed:8f:ab: 40:fa:a9:59:63:57:b1:7a:0c:5c:75:cd:a7:f9:a9: 07:f3:6c:3b:98:46:e8:08:52:99:d3:41:ac:49:df: 7f:6f:a5:59:90:c3:0a:bf:f1:3a:1b:2b:3e:ee:14: 49:00:4b:4f:44:6f:78:3a:08:39:60:95:0b:9f:07: 91:9b:f5:80:82:c0:8c:4e:cd:4b:01:34:71:09:57: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:80:19:EF:BE:5A:67:37:C1:DB:79:1D:75:F0:36:8C:9E:91:6C:5B X509v3 Authority Key Identifier: keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:71:0d:bc:1d:f8:02:00:20:af:bf:d8:f6:75:de:79:78:6f: 17:fe:6d:6e:e2:cf:ab:76:ec:75:67:58:8f:f7:27:4b:6d:0e: 6e:87:58:72:82:f3:39:79:dc:55:b5:dd:2a:ad:a0:42:21:c7: d0:8c:36:b5:4e:6a:39:cb:ca:6e:c9:9a:72:21:ba:99:df:09: 7b:1b:73:91:e0:b5:ee:18:c1:76:0d:53:9f:38:93:ef:36:3b: a4:03:9e:fb:f4:be:2e:58:96:13:73:ad:08:46:a9:60:a1:c9: f2:bd:41:cc:5b:f9:5e:4a:0b:fd:d1:eb:f2:0b:4f:1f:9c:7c: 95:02:67:b4:79:dd:69:36:d3:3b:d5:a8:4d:10:33:72:a4:85: 1a:e8:5a:92:07:8e:b1:28:96:7c:e3:a1:e8:f0:31:c3:b3:cf: 19:96:89:0a:9e:9e:87:f3:b4:91:c7:d1:a0:c3:5e:10:41:82: 4e:be:63:15:b9:f7:46:22:6e:c8:69:23:f6:37:2c:ae:a7:30: 97:2e:4e:ce:a5:00:7f:e0:37:1b:4a:ad:87:89:8b:60:15:66: 6a:89:65:ad:a7:57:89:c1:96:e5:78:5f:6f:c6:30:b3:29:63: a2:d1:c1:c9:3e:0d:cd:c3:c0:11:fd:8e:a0:d0:f9:05:6f:61: bf:a3:57:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFFMjIxMTAvBgNVBAUTKDcyNjIyMEQ5OEJDQzdEQzY2QTNDQ0YzNzY3N0VBMEEz REIwOTBEQTQwHhcNMjYwNzI2MTg1MjQ0WhcNMjYwODAyMTg1MjQ0WjAYMRYwFAYD VQQDEw02YTY2NTc3Yy1jZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/0vdgmCmH70w7DW/BqhMAL3twH/5iqv2R3hfn2zBBmlC56QVtoUJ5S5+ree 1QP5LMEfbpuhATykWwhCeBUf4x+Mcx470apfNIYSGyfuBESFuADPOtP7Bq0GDDNY dx5JSlNjhs00NyUW3OPxSicx4H69+P/NoTG5QYh4b+gF3r1w8jBY8aj2g8I/5sjf ommyWPI/LIieEN9JUIHlSYEFrXGllz5kJneMF1ylWNzcmibtj6tA+qlZY1exegxc dc2n+akH82w7mEboCFKZ00GsSd9/b6VZkMMKv/E6Gys+7hRJAEtPRG94Ogg5YJUL nweRm/WAgsCMTs1LATRxCVfgCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+AGe++ Wmc3wdt5HXXwNoyekWxbMB8GA1UdIwQYMBaAFHJiINmLzH3GajzPN2d+oKPbCQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUUyMi9CMTc4NDM5RTFC QkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZjWnFQTTgzWjM2Z285c0pE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtSWcyWXZNZmNacVBNODNaMzZnbzlzSkRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUUyMi9CMTc4NDM5RTFCQkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZj WnFQTTgzWjM2Z285c0pEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArHENvB34AgAgr7/Y9nXeeXhvF/5tbuLPq3bsdWdYj/cnS20ObodYcoLzOXnc VbXdKq2gQiHH0Iw2tU5qOcvKbsmaciG6md8JextzkeC17hjBdg1TnziT7zY7pAOe +/S+LliWE3OtCEapYKHJ8r1BzFv5XkoL/dHr8gtPH5x8lQJntHndaTbTO9WoTRAz cqSFGuhakgeOsSiWfOOh6PAxw7PPGZaJCp6eh/O0kcfRoMNeEEGCTr5jFbn3RiJu yGkj9jcsrqcwly5OzqUAf+A3G0qth4mLYBVmaollradXicGW5Xhfb8YwsyljotHB yT4NzcPAEf2OoND5BW9hv6NXYQ== -----END CERTIFICATE-----Generated at Mon Jul 27 04:15:32 2026 by rpki-client