$ rpki-client -vvf rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft File: 4A98xO20ZNoqTvnfvu5imVNRVeo.mft (raw, json) Hash identifier: DnjY6HaT36KXni/RwlXUA/kWz+z+faDdP6bNPuybIoQ= Subject key identifier: E0:8E:29:D6:E6:76:8A:A5:6D:EE:43:D8:54:84:4B:92:84:05:41:94 Authority key identifier: E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA Certificate issuer: /CN=A9165746/serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft Manifest number: 12 Signing time: Sun 05 Jul 2026 09:48:11 +0000 Manifest this update: Sun 05 Jul 2026 09:48:10 +0000 Manifest next update: Sun 12 Jul 2026 09:48:10 +0000 Files and hashes: 1: 4A98xO20ZNoqTvnfvu5imVNRVeo.crl (hash: aF3fPnoOUY0kyzTolovkVq6jCaFrraIjG6WKMZtu44A=) 2: 031954DE5F3611F180101EC97F47A888.roa (hash: 8MG6eGpVkP9CJ/8UlblTP9Xx22hFfv4p4ykAcJ2UqhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165746, serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA Validity Not Before: Jul 5 09:48:10 2026 GMT Not After : Jul 12 09:48:10 2026 GMT Subject: CN=6a4a285b-345a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:f1:a3:f9:46:66:60:23:4b:b5:97:dc:c0: 6f:8d:67:ce:3c:ca:cf:72:db:0d:9d:18:b3:52:9c: 13:97:94:02:6f:7e:06:3e:12:75:32:d7:1b:0e:17: 92:be:ba:fd:7d:20:9f:39:31:97:df:56:29:e4:97: b3:fe:24:7b:c3:a5:26:3e:5f:3e:eb:00:f6:73:f5: 51:3a:05:28:38:44:ad:e2:b4:2a:0f:e4:08:6d:45: 65:e5:84:2f:94:df:18:ba:d2:27:74:0b:7f:91:06: 92:1e:b8:f7:c9:b1:5e:cc:64:ef:45:49:bf:34:c2: 5d:b8:40:1a:37:57:e3:a0:c0:2b:d8:2a:ee:1f:bf: 33:fc:d1:ce:e9:f1:e6:e1:92:be:48:1d:a7:ba:64: 37:01:1e:36:43:f2:42:97:3a:7d:20:1e:bf:4a:cc: 92:37:5d:82:43:08:9f:5a:99:1b:0a:46:6c:ab:70: 7f:bd:f0:56:2d:4d:6a:00:28:ca:cd:a5:45:3a:33: a6:63:f0:ae:fe:d4:8e:5e:0a:5a:91:84:12:75:4e: 4d:43:32:92:31:d0:d3:ac:1b:b1:c4:e5:6b:37:de: 37:3b:df:7c:ef:67:38:b1:fc:b7:2d:50:95:e4:a8: 8b:d3:c4:b1:aa:b4:56:e5:39:81:3a:bd:b5:56:55: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8E:29:D6:E6:76:8A:A5:6D:EE:43:D8:54:84:4B:92:84:05:41:94 X509v3 Authority Key Identifier: keyid:E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:05:37:4f:2d:3e:fc:1a:40:4d:5a:a1:a0:33:ae:d6:94:7a: f9:d8:46:09:68:a6:b4:8c:e3:c6:e6:ef:f7:4a:8e:45:e2:09: 48:89:6e:f9:35:4f:4a:a0:f1:71:a1:1e:dc:ec:86:10:f4:7f: f9:48:78:b0:38:9f:56:b1:90:cc:95:59:12:16:80:7b:4e:40: 7a:78:ef:04:97:bd:d8:ea:4e:93:c0:5f:56:77:32:07:2a:77: 70:bc:c6:92:73:9f:32:7c:e4:12:2c:44:34:b9:02:88:9a:66: 61:c9:f8:b2:9a:12:a0:09:44:af:d9:be:b3:bf:a9:2a:39:61: f4:8e:87:32:9f:c2:1f:7b:86:bd:a9:12:cc:e2:44:9b:91:55: 9a:4b:14:ee:b5:f6:63:43:d8:57:6b:71:4b:3c:2a:4d:c8:ab: 4c:31:0b:c5:5e:16:a0:f3:71:4a:a3:ed:01:b7:46:25:cd:30: ca:28:43:f6:3f:f8:0c:0a:d4:88:05:7a:bb:3d:ff:9c:22:ff: d2:89:df:0e:59:cb:28:1a:2e:54:c6:1f:b3:14:dd:29:c4:fc: 7d:1c:e9:74:30:d4:7a:26:f8:1b:ee:4f:fc:2e:28:f2:35:8a: c1:56:fd:d5:3c:a1:3a:b1:34:f3:e2:e6:55:66:fd:b8:3f:60: 59:98:6d:cd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTc0NjExMC8GA1UEBRMoRTAwRjdDQzRFREI0NjREQTJBNEVGOURGQkVFRTYyOTk1 MzUxNTVFQTAeFw0yNjA3MDUwOTQ4MTBaFw0yNjA3MTIwOTQ4MTBaMBgxFjAUBgNV BAMTDTZhNGEyODViLTM0NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDCfGj+UZmYCNLtZfcwG+NZ848ys9y2w2dGLNSnBOXlAJvfgY+EnUy1xsOF5K+ uv19IJ85MZffVinkl7P+JHvDpSY+Xz7rAPZz9VE6BSg4RK3itCoP5AhtRWXlhC+U 3xi60id0C3+RBpIeuPfJsV7MZO9FSb80wl24QBo3V+OgwCvYKu4fvzP80c7p8ebh kr5IHae6ZDcBHjZD8kKXOn0gHr9KzJI3XYJDCJ9amRsKRmyrcH+98FYtTWoAKMrN pUU6M6Zj8K7+1I5eClqRhBJ1Tk1DMpIx0NOsG7HE5Ws33jc733zvZzix/LctUJXk qIvTxLGqtFblOYE6vbVWVQftAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4I4p1uZ2 iqVt7kPYVIRLkoQFQZQwHwYDVR0jBBgwFoAU4A98xO20ZNoqTvnfvu5imVNRVeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NzQ2LzcyQUMyMDUyNUYz NTExRjFBM0FFMkY3NTdFNDdBODg4LzRBOTh4TzIwWk5vcVR2bmZ2dTVpbVZOUlZl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNEE5OHhPMjBaTm9xVHZuZnZ1NWltVk5SVmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NzQ2LzcyQUMyMDUyNUYzNTExRjFBM0FFMkY3NTdFNDdBODg4LzRBOTh4TzIwWk5v cVR2bmZ2dTVpbVZOUlZlby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVBTdPLT78GkBNWqGgM67WlHr52EYJaKa0jOPG5u/3So5F4glIiW75NU9KoPFx oR7c7IYQ9H/5SHiwOJ9WsZDMlVkSFoB7TkB6eO8El73Y6k6TwF9WdzIHKndwvMaS c58yfOQSLEQ0uQKImmZhyfiymhKgCUSv2b6zv6kqOWH0jocyn8Ife4a9qRLM4kSb kVWaSxTutfZjQ9hXa3FLPCpNyKtMMQvFXhag83FKo+0Bt0YlzTDKKEP2P/gMCtSI BXq7Pf+cIv/Sid8OWcsoGi5Uxh+zFN0pxPx9HOl0MNR6Jvgb7k/8LijyNYrBVv3V PKE6sTTz4uZVZv24P2BZmG3N -----END CERTIFICATE-----Generated at Sun Jul 5 12:32:12 2026 by rpki-client