$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: AyyGeSfLwmLd3YYVyDr2laOFNx8KliEh0YA0db9Q8eo= Subject key identifier: FB:C7:F6:8D:81:6F:BE:96:A6:8B:3D:D5:4B:F4:6E:43:16:7F:12:63 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 2A24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2916 Signing time: Mon 20 Jul 2026 15:42:17 +0000 Manifest this update: Mon 20 Jul 2026 15:42:17 +0000 Manifest next update: Mon 27 Jul 2026 15:42:17 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: cWF8Zm1+kgZTRN8O+rICOt2oeqrN/wF5MaVbZbbk8N0=) 2: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: DC/CiNTewEy9AjzNKO1rCpeeQC3b7v2RZLNf6CbyhHI=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: IkqwubhChyAi/RsPzQUJ2UaEZb1ZNZg9N1N26san5I8=) 4: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: THnuk88BmBSAnI45lh48WjXHbq0OqH6ZzkCu47KlOw0=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b6hQv7rPPh2NoXSYCy1LQfz1KDKIPOQY1rtTl5hURj0=) 6: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: z422r+0bSl4JOQTLZbDePZuu5kvTrdyMBLvSzmsZIos=) 7: 31F783DA536411F1B090DEB29E833773.roa (hash: f6hA5qbUgKKr5/8VU0jGR+KREuyEbQoFsNzq3xgo1g4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10788 (0x2a24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Jul 20 15:42:17 2026 GMT Not After : Jul 27 15:42:17 2026 GMT Subject: CN=6a5e41d9-0382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:3f:1a:cc:1f:55:26:8f:63:6a:98:f1:54: 9d:d6:c0:1b:5e:ac:ae:cf:22:67:91:69:85:57:78: b1:eb:ca:eb:3f:f9:d4:ef:3d:14:6b:6d:9a:b8:08: 7e:99:15:a8:6e:cd:8c:bd:6e:f4:ce:53:48:e7:e0: 6d:fb:88:8d:ae:d9:fa:f3:69:41:d5:5a:bc:5f:ec: dd:6c:a7:d0:8c:34:7d:ba:1b:4a:33:e3:f2:e9:42: 06:26:8b:92:6e:b2:16:20:ce:5b:49:ea:b5:79:48: bf:7b:83:44:67:fa:62:fa:37:4b:93:2b:db:83:6d: 2c:14:b2:79:6b:46:13:87:56:a0:d8:7e:27:5a:06: c6:b8:68:17:69:b9:51:04:47:70:e6:4a:3b:ff:80: 2b:68:2a:c7:9a:b1:8d:e1:d7:4d:27:a4:fa:6b:d8: 39:df:92:19:cd:c3:87:2a:ea:76:6b:a2:55:16:a2: 57:5a:33:43:5c:41:f9:c4:e7:6a:74:97:02:93:57: 57:ad:5f:55:22:0b:a4:64:88:05:ed:40:c0:be:34: 18:38:10:6c:d7:93:e0:41:f3:80:ec:2d:6a:f1:11: 44:96:a1:f0:77:67:69:c9:63:40:c6:58:0f:f6:84: c4:a8:11:31:56:a6:01:a7:b3:7a:5f:9b:a4:d6:68: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C7:F6:8D:81:6F:BE:96:A6:8B:3D:D5:4B:F4:6E:43:16:7F:12:63 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:21:6a:3a:39:69:7a:77:a5:80:5b:83:46:64:30:fc:98:b1: e5:13:fb:1e:4c:1e:f0:52:b3:47:76:38:61:25:04:2c:8f:0b: db:fb:8d:c1:1e:9d:d9:a8:a1:3c:e2:98:c9:68:58:4b:ea:24: 34:98:21:d7:32:d9:70:5f:eb:e8:6a:ce:91:8d:f8:38:09:b3: 64:f9:dd:17:58:ca:49:c9:da:5e:d5:05:5c:27:1d:03:30:a1: ca:06:8d:17:e5:c6:1d:26:45:65:11:f9:7a:9d:01:48:12:20: 44:24:03:37:38:27:03:b8:3a:31:be:11:58:c9:a0:9e:cf:21: 84:78:b7:fb:17:16:85:97:cd:0b:27:c7:81:0e:ef:24:e8:7a: 2d:ab:c2:60:f4:11:05:67:10:6f:bd:54:fe:9c:4f:dd:c1:03: 1b:b3:63:71:59:66:8f:35:f8:3f:e1:cf:e0:7a:ce:cd:c7:07: 84:77:36:eb:5b:1b:28:e2:2b:d7:b7:16:92:80:36:da:61:aa: 66:3f:fe:20:50:16:47:56:c5:da:93:ac:12:90:fa:0e:e8:a1: 17:eb:46:f4:bc:29:bf:19:c6:f7:9d:24:c8:0b:d2:fb:09:ce: 1f:e5:d3:42:cb:b3:9b:24:43:4e:95:9b:6d:bd:ae:03:02:c2: ae:47:2b:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYwNzIwMTU0MjE3WhcNMjYwNzI3MTU0MjE3WjAYMRYwFAYD VQQDEw02YTVlNDFkOS0wMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplI/GswfVSaPY2qY8VSd1sAbXqyuzyJnkWmFV3ix68rrP/nU7z0Ua22auAh+ mRWobs2MvW70zlNI5+Bt+4iNrtn682lB1Vq8X+zdbKfQjDR9uhtKM+Py6UIGJouS brIWIM5bSeq1eUi/e4NEZ/pi+jdLkyvbg20sFLJ5a0YTh1ag2H4nWgbGuGgXablR BEdw5ko7/4AraCrHmrGN4ddNJ6T6a9g535IZzcOHKup2a6JVFqJXWjNDXEH5xOdq dJcCk1dXrV9VIgukZIgF7UDAvjQYOBBs15PgQfOA7C1q8RFElqHwd2dpyWNAxlgP 9oTEqBExVqYBp7N6X5uk1mgPpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvH9o2B b76Wpos91Uv0bkMWfxJjMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiyFqOjlpenelgFuDRmQw/Jix5RP7Hkwe8FKzR3Y4YSUELI8L2/uNwR6d2aih POKYyWhYS+okNJgh1zLZcF/r6GrOkY34OAmzZPndF1jKScnaXtUFXCcdAzChygaN F+XGHSZFZRH5ep0BSBIgRCQDNzgnA7g6Mb4RWMmgns8hhHi3+xcWhZfNCyfHgQ7v JOh6LavCYPQRBWcQb71U/pxP3cEDG7NjcVlmjzX4P+HP4HrOzccHhHc261sbKOIr 17cWkoA22mGqZj/+IFAWR1bF2pOsEpD6DuihF+tG9LwpvxnG950kyAvS+wnOH+XT QsuzmyRDTpWbbb2uAwLCrkcr3w== -----END CERTIFICATE-----Generated at Tue Jul 21 23:47:10 2026 by rpki-client