$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: EH9urxIcPPaGUEBfFnRDv+aiAyI05tmOznOMwFt67Bs= Subject key identifier: 87:D5:D8:23:B6:DF:07:55:0C:5D:57:1E:B4:F1:A1:E6:1E:80:72:E4 Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0C8C Signing time: Sat 04 Jul 2026 19:06:24 +0000 Manifest this update: Sat 04 Jul 2026 19:06:23 +0000 Manifest next update: Sat 11 Jul 2026 19:06:23 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: G0EY/bupVH1/MuwojJeZ631Ai9910jsoSNf5TeUruUQ=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: d07BUh1ehjR2H6atZT4gZxx1nTwyrrMun9HGnJk0rnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 19:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Jul 4 19:06:23 2026 GMT Not After : Jul 11 19:06:23 2026 GMT Subject: CN=6a4959b0-ccfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:b7:ee:52:7d:26:ef:30:bb:64:e6:84:7e: 0c:cd:03:1e:3d:a0:2c:5d:32:30:85:12:7d:a5:32: ac:4c:4d:32:b2:fb:4e:e7:f4:af:3f:7f:fb:81:10: 70:9f:bf:6d:f9:3c:f7:e0:88:8b:4f:b4:01:bc:26: 63:a9:fe:60:21:e8:85:52:33:f7:ec:d8:47:18:d9: 36:bf:aa:07:08:e9:2d:cf:f6:2a:6a:ad:1d:b9:33: 02:3b:7b:0b:4b:2e:c5:ee:55:47:3a:b4:c9:eb:fd: 38:3a:dd:5d:13:96:6d:79:88:82:36:62:55:03:92: 69:3b:46:69:ab:5b:ab:1d:22:d2:19:80:37:5b:43: 5b:15:48:5c:aa:d9:63:5a:b9:47:9c:e9:bd:29:45: aa:9b:91:6a:12:b8:24:ad:39:32:4d:b0:72:b3:be: 5f:5a:f3:bc:8b:c9:6f:30:5f:c0:df:40:b8:07:65: 71:05:4b:d0:68:4b:76:30:d2:44:30:20:46:cb:3e: 83:61:40:7c:62:bb:eb:a2:d4:97:4c:ba:e9:93:90: ae:10:c4:0c:6b:6a:62:b8:b2:90:95:c0:10:6d:3c: 3b:fe:28:1b:29:18:aa:31:4d:2b:8f:83:76:87:e6: 13:54:d3:be:cf:8d:f3:f1:c6:a1:02:81:3a:8b:49: 8d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D5:D8:23:B6:DF:07:55:0C:5D:57:1E:B4:F1:A1:E6:1E:80:72:E4 X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e4:d2:f0:80:d8:9a:ee:4d:47:4f:ed:5f:18:83:ef:ec:48: 02:33:39:55:f3:05:80:d5:a8:28:60:a1:d4:f1:b7:9b:e2:9d: 21:c5:b7:19:3d:32:b1:d4:6f:84:97:7a:40:a9:31:a7:1c:4d: 00:b9:ae:a3:67:18:29:0b:b4:4f:c9:8d:09:78:9d:c3:d1:d5: 11:a8:27:62:4a:e6:23:80:f6:bc:31:27:8b:47:d4:b6:ce:7f: e7:6b:ea:c1:13:3e:13:64:e8:0f:77:2c:31:55:40:74:c1:0e: 0e:d0:62:17:18:74:90:d3:a2:c7:ae:3c:be:0f:51:2b:6b:5d: d0:1d:ea:05:ec:ee:b1:cc:e7:ad:db:c6:44:bd:ee:41:d3:b5: aa:a2:d3:ea:61:48:31:e2:49:98:73:52:91:98:8e:5f:1d:64: 36:fe:3b:6f:fe:de:62:2a:30:c7:d5:6e:39:ed:b2:ac:7d:7b: eb:91:b9:0d:c8:83:3c:f7:d0:04:03:d5:c2:13:d4:f9:a3:3e: fd:db:69:90:1b:da:85:b5:6f:25:b9:2f:63:a7:d6:5e:d9:c1: 8b:25:3b:67:f7:f1:67:25:09:e4:7e:20:31:50:10:ca:d5:0e: e5:9c:22:1b:4e:67:53:f6:8a:3e:90:e9:8f:c6:81:c4:79:0c: d6:69:3c:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDg0NEJENkQxQTk3MkNGRDJCNjBCODRERTBDQjYzRTVE NTRBRkE4Q0YwHhcNMjYwNzA0MTkwNjIzWhcNMjYwNzExMTkwNjIzWjAYMRYwFAYD VQQDEw02YTQ5NTliMC1jY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3u37lJ9Ju8wu2TmhH4MzQMePaAsXTIwhRJ9pTKsTE0ysvtO5/SvP3/7gRBw n79t+Tz34IiLT7QBvCZjqf5gIeiFUjP37NhHGNk2v6oHCOktz/Yqaq0duTMCO3sL Sy7F7lVHOrTJ6/04Ot1dE5ZteYiCNmJVA5JpO0Zpq1urHSLSGYA3W0NbFUhcqtlj WrlHnOm9KUWqm5FqErgkrTkyTbBys75fWvO8i8lvMF/A30C4B2VxBUvQaEt2MNJE MCBGyz6DYUB8YrvrotSXTLrpk5CuEMQMa2piuLKQlcAQbTw7/igbKRiqMU0rj4N2 h+YTVNO+z43z8cahAoE6i0mNCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfV2CO2 3wdVDF1XHrTxoeYegHLkMB8GA1UdIwQYMBaAFIRL1tGpcs/StguE3gy2Pl1Ur6jP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9oRXZXMGFseXo5SzJDNFRlRExZLVhWU3Zx TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9oRXZXMGFseXo5 SzJDNFRlRExZLVhWU3ZxTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP+TS8IDYmu5NR0/tXxiD7+xIAjM5VfMFgNWoKGCh1PG3m+KdIcW3GT0ysdRv hJd6QKkxpxxNALmuo2cYKQu0T8mNCXidw9HVEagnYkrmI4D2vDEni0fUts5/52vq wRM+E2ToD3csMVVAdMEODtBiFxh0kNOix648vg9RK2td0B3qBezuscznrdvGRL3u QdO1qqLT6mFIMeJJmHNSkZiOXx1kNv47b/7eYiowx9VuOe2yrH1765G5DciDPPfQ BAPVwhPU+aM+/dtpkBvahbVvJbkvY6fWXtnBiyU7Z/fxZyUJ5H4gMVAQytUO5Zwi G05nU/aKPpDpj8aBxHkM1mk8hQ== -----END CERTIFICATE-----Generated at Sun Jul 5 08:46:46 2026 by rpki-client