$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json) Hash identifier: ubDoKaaFYTH0Orl8ycqgtePKJZkf5TomjGQYxAhtaNk= Subject key identifier: 87:B7:82:21:BE:D5:6F:02:BD:93:E9:E3:B7:08:C8:57:35:E8:35:58 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft Manifest number: 052E Signing time: Sun 26 Jul 2026 17:09:25 +0000 Manifest this update: Sun 26 Jul 2026 17:09:24 +0000 Manifest next update: Sun 02 Aug 2026 17:09:24 +0000 Files and hashes: 1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: j7xrzbv6rVBNl/Dy7AsxN2QS/YtsrADtqnU1eew4MnA=) 2: F5A921B85BE911EF8624AA20C4F9AE02.roa (hash: HtAUxiV2GGFLsnw5Ftue8AlO9jul/mJwmhYMXTb/CeY=) 3: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: bjkkedoEzbUfC4GQvKwdaQZgxgq0YTl5qOigfpRvGaU=) 4: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: Ylv7wHI65XMnQYhoDyQSygUwHrURYMjzNieL/UaPiGU=) 5: 1479C514596A11ECB1394271C4F9AE02.roa (hash: wpAJJYnFAicDNwa71hcmrPmPcdiAdvkl0r/mHo7+0do=) 6: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: 5Z7fKb2b95O7xf2REenK7dbH8KrSrAmTwTpVkXBeeOI=) 7: 9CD16392309711F09EFD0C4CC4F9AE02.roa (hash: 76p1LWBSiAURuIgRIP/lu1qZCJd79sZFpOsF7Mk4V7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 17:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Jul 26 17:09:24 2026 GMT Not After : Aug 2 17:09:24 2026 GMT Subject: CN=6a663f45-1272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:a9:47:8d:c5:1c:5e:d5:7d:ab:8d:4e:c4: 5a:fe:16:62:f4:ee:b0:ca:34:38:21:0a:b6:87:23: fe:23:d1:7c:29:11:4a:86:97:a6:cb:31:95:92:fd: 68:bf:ac:c4:d4:c5:43:68:b5:af:5f:58:d2:c1:ac: da:2c:e3:c6:c4:71:6e:79:a4:b4:b2:1a:a1:c2:c2: 40:55:1c:12:d8:b4:10:19:dc:12:0c:ef:ae:3a:54: c4:2e:ae:a4:28:89:70:50:91:b7:06:7a:a2:dc:18: c3:4e:13:5e:21:e5:4f:53:13:7f:95:ca:3b:d4:dd: 18:58:49:52:1f:1b:22:14:72:0c:77:02:3d:30:a8: f4:f6:c3:0e:c3:a5:bb:ed:a8:ba:71:61:22:de:dd: 02:f0:5a:3e:39:3b:c8:ce:ec:80:a1:9f:3d:d0:73: b5:ec:c4:64:1d:9e:0d:65:1a:2d:f3:9a:9d:e4:e2: c2:72:9c:2f:33:0a:2b:69:20:7c:46:d8:10:21:e8: 5f:5e:ff:5d:c6:71:6a:d8:96:90:ad:b2:00:9a:3e: 0e:f7:8a:2a:f6:5a:99:ce:82:bd:1e:02:47:f2:e3: f8:f3:68:7e:97:63:f1:61:c9:72:03:42:ab:30:be: 01:25:d6:50:74:50:5f:fc:18:f1:05:5c:d9:e5:d8: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B7:82:21:BE:D5:6F:02:BD:93:E9:E3:B7:08:C8:57:35:E8:35:58 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c8:b7:ee:de:60:a7:2b:e8:80:8e:42:0d:c5:9d:f7:91:d6: b6:bc:75:ab:b7:b3:ca:1a:db:7e:7e:7e:9e:8e:f4:7f:50:18: c6:66:20:37:9f:c8:3c:7e:c7:aa:b9:a2:c8:09:5e:09:74:3c: 1a:3d:dc:eb:e8:75:07:91:ec:54:b1:7d:5e:d1:d5:39:85:db: 10:59:9b:f0:9b:77:23:4e:bb:e0:86:02:96:a1:ce:ab:92:43: 28:3e:34:dd:30:7f:01:d1:63:f0:44:f1:63:50:83:ee:f3:01: 2e:5e:fc:e9:97:98:d2:49:93:71:1d:84:de:ab:70:31:f8:ea: 91:e0:e0:97:6f:e8:be:63:f4:40:5f:21:22:f4:89:60:44:05: 17:d3:c2:7e:19:24:f0:32:e9:fc:32:9f:e3:a6:89:1b:bb:2e: e8:3d:56:bc:57:31:4c:54:8d:bf:2c:85:ec:14:92:58:19:ed: 92:f7:7c:31:94:58:d1:c7:d8:f7:15:b0:79:80:29:c1:bb:e5: f2:85:14:5f:ec:23:80:45:2b:c4:19:6c:57:ba:80:a8:fb:3e: a9:fc:90:ba:4e:da:4b:97:3b:a7:9e:2c:4f:5c:10:1f:fb:28: 4a:56:6b:30:22:25:e0:63:4d:e8:97:b3:b5:20:6a:a2:18:80: 07:a2:1f:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjYwNzI2MTcwOTI0WhcNMjYwODAyMTcwOTI0WjAYMRYwFAYD VQQDEw02YTY2M2Y0NS0xMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfqpR43FHF7VfauNTsRa/hZi9O6wyjQ4IQq2hyP+I9F8KRFKhpemyzGVkv1o v6zE1MVDaLWvX1jSwazaLOPGxHFueaS0shqhwsJAVRwS2LQQGdwSDO+uOlTELq6k KIlwUJG3Bnqi3BjDThNeIeVPUxN/lco71N0YWElSHxsiFHIMdwI9MKj09sMOw6W7 7ai6cWEi3t0C8Fo+OTvIzuyAoZ890HO17MRkHZ4NZRot85qd5OLCcpwvMworaSB8 RtgQIehfXv9dxnFq2JaQrbIAmj4O94oq9lqZzoK9HgJH8uP482h+l2PxYclyA0Kr ML4BJdZQdFBf/BjxBVzZ5digUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIe3giG+ 1W8CvZPp47cIyFc16DVYMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xf Z090VzluVURJN0ZrcHcyaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmsi37t5gpyvogI5CDcWd95HWtrx1q7ezyhrbfn5+no70f1AYxmYgN5/IPH7H qrmiyAleCXQ8Gj3c6+h1B5HsVLF9XtHVOYXbEFmb8Jt3I0674IYClqHOq5JDKD40 3TB/AdFj8ETxY1CD7vMBLl786ZeY0kmTcR2E3qtwMfjqkeDgl2/ovmP0QF8hIvSJ YEQFF9PCfhkk8DLp/DKf46aJG7su6D1WvFcxTFSNvyyF7BSSWBntkvd8MZRY0cfY 9xWweYApwbvl8oUUX+wjgEUrxBlsV7qAqPs+qfyQuk7aS5c7p54sT1wQH/soSlZr MCIl4GNN6JeztSBqohiAB6IfDA== -----END CERTIFICATE-----Generated at Mon Jul 27 21:02:28 2026 by rpki-client