$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft File: dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json) Hash identifier: KNLd+jaGqw7vxPaMjvTzDyL6SWGM6EQ/LZsFMrfOBDI= Subject key identifier: 3F:E6:17:07:A6:76:F6:51:A8:53:0D:8C:27:F3:3A:8C:86:E2:FD:C0 Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft Manifest number: 0385 Signing time: Tue 21 Jul 2026 01:50:57 +0000 Manifest this update: Tue 21 Jul 2026 01:50:56 +0000 Manifest next update: Tue 28 Jul 2026 01:50:56 +0000 Files and hashes: 1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: x4IIfwhg+l911NZSMnJV/Th8RmbsD5XR3Ada/QS8Q3k=) 2: 7F78A06E6BBD11F18D81D59C7947A888.roa (hash: eg0ecmCsbK5JnVphz+icPr5TGD+NYgXexf2SF0w1KKU=) 3: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: PAqkmFF7NdZLc+WBtc68ZNEhsmCDHgoBRZN4pVqjKP8=) 4: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: HpPZhZVSwGrzf4zGYjjyQ7ueOCim2ZvtK0gkwPhEOmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 01:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Jul 21 01:50:56 2026 GMT Not After : Jul 28 01:50:56 2026 GMT Subject: CN=6a5ed081-62b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:4a:37:98:65:17:55:ae:9f:83:0c:fe:ee: f9:78:03:24:6b:47:33:8c:9e:7a:53:3d:eb:79:c8: 7b:89:bb:17:dc:fc:b9:b1:0a:ad:b6:db:d9:0f:5a: 3f:b8:36:e8:8d:b0:ea:e5:db:a3:36:5b:73:e1:e2: e4:d5:c3:b1:4e:e9:9b:cf:6f:4e:07:c0:8d:0d:f4: 4b:c7:2d:ab:2f:5e:f0:d8:d9:7f:f5:e5:85:74:f2: 38:93:d9:f7:dd:d5:b1:7f:ed:14:52:e7:e7:e8:31: 41:7f:28:f3:49:fc:00:39:23:80:20:57:14:06:f0: 5f:7d:3f:4a:ab:66:91:b0:87:a0:20:d5:73:5e:dd: 78:8c:33:dc:4f:de:08:a8:41:88:21:19:d0:9f:9c: 22:83:c8:63:e0:8a:eb:ca:4a:b3:d4:36:e5:4e:6f: 73:fd:54:e6:7f:2e:10:81:7b:8b:31:eb:6f:0a:72: 98:0f:dc:73:dc:98:a3:78:89:57:df:a1:f9:71:8c: 74:70:48:1c:5b:c6:55:12:fd:c2:98:94:23:03:b8: e6:15:a1:f4:f5:6c:57:35:5a:0a:aa:fc:29:06:26: 15:8d:7d:72:1f:2a:a5:c4:86:85:cd:a5:f3:ca:4b: 66:8c:0a:6e:c1:ee:05:9c:18:53:b8:8e:e5:96:d9: df:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E6:17:07:A6:76:F6:51:A8:53:0D:8C:27:F3:3A:8C:86:E2:FD:C0 X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8a:d4:71:44:d6:dc:eb:74:8b:7e:1a:c8:6b:6a:a8:a0:f4: 7a:3f:a6:34:fc:ed:52:7c:c7:26:80:23:e0:24:b2:91:74:1a: ff:b6:dc:61:db:79:41:61:65:e1:53:08:fe:b7:ec:c1:16:af: 12:20:15:78:0e:49:c0:57:0b:63:94:a0:01:f3:82:c6:7a:7a: b9:c9:81:b8:98:e6:d2:ca:f0:55:43:fb:09:2d:5c:cd:ab:24: a8:83:c7:80:0c:36:10:00:8c:e8:b5:58:57:9c:dd:51:01:ec: 76:6f:6a:5e:dd:0c:a3:39:ab:e4:b7:8c:67:e6:1b:9f:8f:ac: 40:1a:df:70:93:d4:82:0e:7c:7f:00:f5:60:1d:7d:07:e7:d1: 4d:1f:37:7a:e4:54:8f:61:8b:de:0c:6c:df:19:d0:9f:b2:0f: 1e:73:79:2f:56:84:6c:e4:26:23:c5:77:e2:1e:90:de:ac:25: 5a:25:68:56:78:b4:17:ec:58:a8:25:ab:e2:60:df:dc:37:37: 00:5c:dd:de:b9:c8:80:e8:0e:13:09:3d:73:45:e7:29:7c:23: a1:54:56:22:a0:c6:8a:16:47:9f:16:73:92:6a:29:2f:06:c2: 10:d1:be:eb:97:f9:87:7f:13:73:e4:8f:48:f4:15:19:00:b4: 00:44:6a:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjYwNzIxMDE1MDU2WhcNMjYwNzI4MDE1MDU2WjAYMRYwFAYD VQQDEw02YTVlZDA4MS02MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8JKN5hlF1Wun4MM/u75eAMka0czjJ56Uz3rech7ibsX3Py5sQqtttvZD1o/ uDbojbDq5dujNltz4eLk1cOxTumbz29OB8CNDfRLxy2rL17w2Nl/9eWFdPI4k9n3 3dWxf+0UUufn6DFBfyjzSfwAOSOAIFcUBvBffT9Kq2aRsIegINVzXt14jDPcT94I qEGIIRnQn5wig8hj4Irrykqz1DblTm9z/VTmfy4QgXuLMetvCnKYD9xz3JijeIlX 36H5cYx0cEgcW8ZVEv3CmJQjA7jmFaH09WxXNVoKqvwpBiYVjX1yHyqlxIaFzaXz yktmjApuwe4FnBhTuI7lltnfaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/mFwem dvZRqFMNjCfzOoyG4v3AMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzk5OC8zMENDMDg0QTA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJr by1LMGVjZWtESmtDT0RhNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALorUcUTW3Ot0i34ayGtqqKD0ej+mNPztUnzHJoAj4CSykXQa/7bcYdt5QWFl 4VMI/rfswRavEiAVeA5JwFcLY5SgAfOCxnp6ucmBuJjm0srwVUP7CS1czaskqIPH gAw2EACM6LVYV5zdUQHsdm9qXt0Mozmr5LeMZ+Ybn4+sQBrfcJPUgg58fwD1YB19 B+fRTR83euRUj2GL3gxs3xnQn7IPHnN5L1aEbOQmI8V34h6Q3qwlWiVoVni0F+xY qCWr4mDf3Dc3AFzd3rnIgOgOEwk9c0XnKXwjoVRWIqDGihZHnxZzkmopLwbCENG+ 65f5h38Tc+SPSPQVGQC0AERqzg== -----END CERTIFICATE-----Generated at Tue Jul 21 17:26:43 2026 by rpki-client