$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft File: d9okgAToxYcr33K6wSIsfMtujjc.mft (raw, json) Hash identifier: oJFCL+z4mv08qOsHwsPjuXoAd11rE84uCmkAy5f3tvU= Subject key identifier: 7C:24:DB:41:5A:2C:5D:30:C3:F1:79:5E:52:01:BF:02:E9:66:51:25 Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft Manifest number: 0A3B Signing time: Sun 02 Aug 2026 19:59:22 +0000 Manifest this update: Sun 02 Aug 2026 19:59:21 +0000 Manifest next update: Sun 09 Aug 2026 19:59:21 +0000 Files and hashes: 1: d9okgAToxYcr33K6wSIsfMtujjc.crl (hash: g1ojNG3J2ZWOnwIZMSO8HcMLbD216ZdzLXCANQSeWHU=) 2: 3A58D9F499E611EAB3C00943C4F9AE02.roa (hash: Ix/A1HAv4E1o+T96OwAx6diCaMu8Un7l8lL1cR9lZ0I=) 3: 3AFD491C99E611EAB3C00943C4F9AE02.roa (hash: hAA41RG01uNOAJq/J2qFIRJdJvtjuAyTCQh8VD7YTr4=) 4: 3BABBD7699E611EAB3C00943C4F9AE02.roa (hash: goeW12JBA3cKKGwjatqM92u32XRcfD8Zb78gB6ELWSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 19:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156342, serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Validity Not Before: Aug 2 19:59:21 2026 GMT Not After : Aug 9 19:59:21 2026 GMT Subject: CN=6a6fa19a-d94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:14:f9:49:be:f7:4c:57:87:74:4c:42:40: a7:36:aa:ec:5b:65:81:8d:88:2a:3f:d8:28:eb:34: 07:b6:af:81:f4:a2:a8:c4:1a:92:c2:97:0a:ec:0a: b5:24:cf:aa:6d:ac:fd:01:5e:61:f2:c6:8c:e1:04: 96:01:9f:2c:38:3d:de:2d:93:6c:7f:10:aa:4a:90: 76:fb:4f:f4:93:80:c7:f6:55:85:1b:52:e6:20:be: 5c:43:5c:49:33:e0:91:6e:6f:2e:30:a4:cc:dd:48: 67:25:71:69:83:99:7d:1d:55:ad:0e:11:c7:ca:f7: bb:83:70:1b:8b:88:ea:3d:d2:58:37:1e:45:7b:e2: 37:7a:d6:53:70:63:97:da:67:f0:23:cc:fb:9c:1c: 3a:12:53:c4:ee:73:5c:aa:a2:1b:96:d2:49:57:16: 63:7b:cf:f8:5e:6c:ac:df:f3:4b:63:ad:a5:38:36: 6b:c6:d3:4b:48:40:5d:99:56:41:a5:62:b5:e1:86: 9b:a2:5a:c3:0a:54:2a:01:75:86:fe:45:34:99:43: bf:72:85:fb:56:a5:77:e9:6b:8e:3c:45:33:64:59: 65:06:96:fb:f5:80:16:a8:c9:ae:ac:7d:fc:52:13: 8b:a2:73:48:bd:27:d5:9c:6d:fd:94:a1:b3:33:f5: 02:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:24:DB:41:5A:2C:5D:30:C3:F1:79:5E:52:01:BF:02:E9:66:51:25 X509v3 Authority Key Identifier: keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b5:cf:c1:b0:a5:f1:c8:0d:48:b5:33:6c:ae:00:e4:ce:5d: 3f:84:fa:3a:5c:65:0b:9f:4c:cf:57:b2:9a:17:a9:12:f6:69: 81:db:71:ec:9e:fb:d4:a3:db:f5:3b:c6:ab:1b:79:64:d3:a4: a4:27:42:7b:0d:34:66:a8:e2:62:34:84:40:b4:4c:72:77:a2: cb:a6:58:db:a7:a3:fb:b6:19:23:5f:db:c3:ad:d5:0a:22:61: 61:83:a5:19:10:4b:27:d4:e7:78:35:ae:e1:7a:ea:da:92:82: 7e:46:56:06:9a:d9:88:7d:82:be:ca:2b:5a:52:71:7b:5d:e8: 72:bb:22:0c:6e:4b:0f:af:f8:40:08:af:e5:2c:72:c9:c9:01: 45:65:48:9a:e8:7c:6c:b9:ff:63:81:dd:43:49:70:37:34:49: e2:9c:b3:45:17:b4:9a:ad:99:54:8f:6b:97:cb:d4:ed:3d:80: ae:13:43:83:e9:31:e5:82:f8:c9:85:cf:8b:67:d5:9b:30:3d: b5:a0:ad:46:16:ce:f7:98:a5:e8:58:c6:79:02:3d:14:96:dc: 92:f9:f4:6f:6a:95:7c:59:4b:bb:10:c1:e7:66:23:53:b8:5b: a8:27:c3:45:55:d1:dc:50:64:a5:31:e5:d3:5d:5e:55:06:14: c9:c0:6e:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzNDIxMTAvBgNVBAUTKDc3REEyNDgwMDRFOEM1ODcyQkRGNzJCQUMxMjIyQzdD Q0I2RThFMzcwHhcNMjYwODAyMTk1OTIxWhcNMjYwODA5MTk1OTIxWjAYMRYwFAYD VQQDEw02YTZmYTE5YS1kOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xoU+Um+90xXh3RMQkCnNqrsW2WBjYgqP9go6zQHtq+B9KKoxBqSwpcK7Aq1 JM+qbaz9AV5h8saM4QSWAZ8sOD3eLZNsfxCqSpB2+0/0k4DH9lWFG1LmIL5cQ1xJ M+CRbm8uMKTM3UhnJXFpg5l9HVWtDhHHyve7g3Abi4jqPdJYNx5Fe+I3etZTcGOX 2mfwI8z7nBw6ElPE7nNcqqIbltJJVxZje8/4Xmys3/NLY62lODZrxtNLSEBdmVZB pWK14YabolrDClQqAXWG/kU0mUO/coX7VqV36WuOPEUzZFllBpb79YAWqMmurH38 UhOLonNIvSfVnG39lKGzM/UCWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHwk20Fa LF0ww/F5XlIBvwLpZlElMB8GA1UdIwQYMBaAFHfaJIAE6MWHK99yusEiLHzLbo43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjM0Mi9CREY4OTA4MDk5 RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZY3IzM0s2d1NJc2ZNdHVq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q5b2tnQVRveFljcjMzSzZ3U0lzZk10dWpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjM0Mi9CREY4OTA4MDk5RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZ Y3IzM0s2d1NJc2ZNdHVqamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm7XPwbCl8cgNSLUzbK4A5M5dP4T6OlxlC59Mz1eymhepEvZpgdtx7J771KPb 9TvGqxt5ZNOkpCdCew00ZqjiYjSEQLRMcneiy6ZY26ej+7YZI1/bw63VCiJhYYOl GRBLJ9TneDWu4Xrq2pKCfkZWBprZiH2CvsorWlJxe13ocrsiDG5LD6/4QAiv5Sxy yckBRWVImuh8bLn/Y4HdQ0lwNzRJ4pyzRRe0mq2ZVI9rl8vU7T2ArhNDg+kx5YL4 yYXPi2fVmzA9taCtRhbO95il6FjGeQI9FJbckvn0b2qVfFlLuxDB52YjU7hbqCfD RVXR3FBkpTHl011eVQYUycBuow== -----END CERTIFICATE-----Generated at Tue Aug 4 18:57:23 2026 by rpki-client