$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: 3rvrWu3xZMs97jDqAmSU1MAL2XdNr/5tbbCO5afrLEQ= Subject key identifier: DE:5A:9F:9D:DE:70:8F:96:CA:6F:71:2A:6A:B8:D4:42:5A:CE:B9:C4 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 04CC Signing time: Tue 21 Jul 2026 00:39:31 +0000 Manifest this update: Tue 21 Jul 2026 00:39:30 +0000 Manifest next update: Tue 28 Jul 2026 00:39:30 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: +v/17iscZhBQWl+hhGSLIxvweLCWOKcP2w5tsgA6AaE=) 2: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (hash: Q/WW69HDFqBmPazKy9CWTwg7ADAfQr3xucgCfcoGH6o=) 3: EFAA6C1CD16911F08A99D95BC4F9AE02.roa (hash: Jq67A+F4rIfzW8WwGVI/74n9tCcPV6PLGYDBFsxh/v4=) 4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: W6dMaUqeZUZ5yl2vrB4kDnmuCp2AkA9688MbXMn1Iu0=) 5: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: woJiUlfh+5rrMBDG7PnsvNBeiKjiLhLTkpDWmy2sy4w=) 6: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: 3jewHBb77PCvairN2996ZvKaBpoln62DoJ8FtmWYmYo=) 7: 4B167396E74111EC80E35542C4F9AE02.roa (hash: s3LCy4JitIxrk8TrdHNnZ3pFI/mZ0+J3BlkxeqJMpVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Jul 21 00:39:30 2026 GMT Not After : Jul 28 00:39:30 2026 GMT Subject: CN=6a5ebfc3-23f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:b3:30:05:0d:ab:e4:6f:e8:76:26:23:d8: 58:a1:27:24:a1:f7:d3:e3:09:44:e1:73:b8:ff:99: 51:37:96:2b:d7:2e:a5:b2:f3:dc:d5:88:bb:e4:3a: f9:39:ec:59:01:ce:3c:38:24:f0:da:6d:52:db:70: 0a:59:4c:e4:b3:22:a8:17:c4:06:ca:e7:4b:30:ea: 07:08:3d:cb:e2:8f:00:0b:46:d2:ed:fd:4a:d3:52: 0c:a7:62:66:4e:a6:7a:78:73:de:44:75:ba:60:c1: 00:73:83:56:e4:9b:6c:19:0c:b6:11:bc:21:97:66: 60:ee:0f:b5:87:24:1f:1b:eb:14:da:8b:a0:01:7d: 6c:87:cc:f6:f2:3a:74:90:be:83:a0:76:e7:53:b3: 17:79:d8:1c:42:8f:ed:35:5a:ab:7a:4a:e7:91:eb: 8e:ed:22:b2:63:f9:df:2a:b1:a1:a0:23:ac:48:7a: 88:b2:33:9c:aa:9d:24:54:74:4b:61:e4:0c:56:4f: 04:75:bb:ba:cb:06:64:bf:de:1e:50:92:ee:76:cf: e5:13:37:60:8e:59:a1:ca:89:01:9b:f8:f7:db:0c: 67:ec:5a:a2:88:31:8e:54:4d:9a:6f:7f:81:f3:b6: 6c:8a:f7:44:5d:73:26:bb:68:fe:ba:3e:1a:e6:d2: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5A:9F:9D:DE:70:8F:96:CA:6F:71:2A:6A:B8:D4:42:5A:CE:B9:C4 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:27:18:fd:5c:40:80:bf:7d:13:93:74:11:59:7c:2c:df:82: 5d:4f:4a:f5:36:73:f3:c9:9b:4e:66:85:62:33:ed:65:fe:11: d7:89:af:08:fb:c1:63:f4:31:01:4d:27:cf:cf:1c:a2:c3:37: 06:a6:45:f7:3b:5b:c5:d4:94:e5:14:bb:8f:75:a0:9c:4c:a5: b1:d5:e9:dc:f6:d7:ee:f9:c2:9b:bc:d3:fb:1c:56:ec:8f:6d: 94:02:71:12:be:fe:05:8f:e4:00:14:76:cb:2f:99:77:3e:1e: 19:71:63:89:e0:98:dc:11:c7:72:fc:d2:77:02:d8:db:0c:f7: d7:30:f4:01:2e:e8:38:80:b8:b3:38:0b:26:3d:f0:d7:4d:2b: 46:6f:9f:15:76:36:58:69:ca:9e:5d:86:ed:21:0e:46:00:ed: cc:60:0e:93:ac:99:f7:6b:33:b1:10:a7:57:f3:62:22:2c:13: 1a:19:d4:26:93:6f:ae:55:b1:82:9d:46:c4:79:3a:b0:f4:52: 44:4b:a3:cf:8d:40:2d:bf:cd:58:ec:2b:85:a6:84:37:74:ff: ef:18:4b:b7:02:13:d4:ef:9d:65:5d:e1:b1:bf:00:77:d6:92: 49:9d:95:e0:fd:59:12:a9:32:94:07:1a:f4:08:58:5a:50:2d: ed:e4:d7:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYwNzIxMDAzOTMwWhcNMjYwNzI4MDAzOTMwWjAYMRYwFAYD VQQDEw02YTVlYmZjMy0yM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsizMAUNq+Rv6HYmI9hYoSckoffT4wlE4XO4/5lRN5Yr1y6lsvPc1Yi75Dr5 OexZAc48OCTw2m1S23AKWUzksyKoF8QGyudLMOoHCD3L4o8AC0bS7f1K01IMp2Jm TqZ6eHPeRHW6YMEAc4NW5JtsGQy2Ebwhl2Zg7g+1hyQfG+sU2ougAX1sh8z28jp0 kL6DoHbnU7MXedgcQo/tNVqrekrnkeuO7SKyY/nfKrGhoCOsSHqIsjOcqp0kVHRL YeQMVk8Edbu6ywZkv94eUJLuds/lEzdgjlmhyokBm/j32wxn7FqiiDGOVE2ab3+B 87ZsivdEXXMmu2j+uj4a5tKrNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5an53e cI+Wym9xKmq41EJazrnEMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEScY/VxAgL99E5N0EVl8LN+CXU9K9TZz88mbTmaFYjPtZf4R14mvCPvBY/Qx AU0nz88cosM3BqZF9ztbxdSU5RS7j3WgnEylsdXp3PbX7vnCm7zT+xxW7I9tlAJx Er7+BY/kABR2yy+Zdz4eGXFjieCY3BHHcvzSdwLY2wz31zD0AS7oOIC4szgLJj3w 100rRm+fFXY2WGnKnl2G7SEORgDtzGAOk6yZ92szsRCnV/NiIiwTGhnUJpNvrlWx gp1GxHk6sPRSREujz41ALb/NWOwrhaaEN3T/7xhLtwIT1O+dZV3hsb8Ad9aSSZ2V 4P1ZEqkylAca9AhYWlAt7eTXfw== -----END CERTIFICATE-----Generated at Tue Jul 21 23:28:52 2026 by rpki-client