$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft File: mvY3DDqaguLsqIJzqLjnngKCVPk.mft (raw, json) Hash identifier: FjPrMOK3ESzMgTVoUhuqQDEiaehIPRJAYdTm2SNV6qk= Subject key identifier: A7:75:86:A2:B8:E8:78:24:AE:FA:49:13:CE:6A:86:AA:87:F2:29:32 Authority key identifier: 9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9 Certificate issuer: /CN=A9165C34/serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft Manifest number: 25 Signing time: Tue 21 Jul 2026 10:45:04 +0000 Manifest this update: Tue 21 Jul 2026 10:45:04 +0000 Manifest next update: Tue 28 Jul 2026 10:45:04 +0000 Files and hashes: 1: mvY3DDqaguLsqIJzqLjnngKCVPk.crl (hash: bu+BHynlYODRpSAZFgfOPCyR1ywQlNsm7YJQ8RoDeuk=) 2: 0642A9644FB211F18BDA0000A1833773.roa (hash: ba3MiHCQ/9RzbEMhAGdSRjmEpdohirZy6IJ6tNd/uKM=) 3: HOBn4xDPKZiL8Isjj99ROKIwrsQ.asa (hash: zAFqND4LetLfBzzSmwzchzjXRNY+jMjvxeB5FZiT9ek=) 4: D8D132C452E111F18BE0BBBEAE833773.roa (hash: SOC3GpUKSzAAkyJ5IYbCisAxPDi0msNuelaQ5PwEXrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9 Validity Not Before: Jul 21 10:45:04 2026 GMT Not After : Jul 28 10:45:04 2026 GMT Subject: CN=6a5f4db0-3fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:80:34:42:08:96:47:1a:d6:d1:a8:ef:70: 48:2a:8d:20:f3:58:d7:61:07:71:9e:49:39:a6:e3: 4c:d2:65:8e:e6:b2:96:48:68:17:f5:c7:3c:f8:b3: 6e:17:d2:e9:26:04:92:72:b7:49:c3:9b:57:91:95: 31:55:16:7a:02:3e:8a:c0:80:bc:d3:bc:ff:00:e0: 5a:c8:1f:7a:dc:b5:fa:a4:7f:c4:d4:0e:59:d6:4e: 7c:1a:76:93:1f:16:03:4f:53:b0:07:d1:4c:f8:4b: 7f:64:23:b3:cf:51:25:51:28:06:b8:20:7f:63:fa: b0:c9:3e:ff:93:65:80:eb:e0:c5:22:b7:a0:8b:f7: db:1f:6e:68:4a:b5:0d:6f:c9:27:80:68:70:d9:28: d5:b7:33:de:5d:b4:6e:10:dc:1a:8f:1d:d1:99:3f: 5f:23:4e:4d:28:75:4e:3a:ea:e6:94:aa:f6:06:3a: 09:2f:28:5b:25:55:30:b3:01:0e:22:20:e3:76:92: 68:d6:cc:b1:64:3e:76:20:c2:fd:ae:78:dd:10:6a: c3:e9:7f:9c:03:f5:e3:eb:1e:73:b4:65:63:55:82: 0d:a4:12:ce:b4:9d:c5:43:dd:8f:16:51:83:49:0c: 5e:ce:29:9b:58:37:e5:3d:a1:52:04:88:c0:bf:40: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:75:86:A2:B8:E8:78:24:AE:FA:49:13:CE:6A:86:AA:87:F2:29:32 X509v3 Authority Key Identifier: keyid:9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:38:50:c1:cd:6a:10:1f:10:fe:3e:be:c8:ef:8a:e6:ff:f2: 08:20:47:d7:ca:93:58:c5:34:9c:f5:7e:65:82:6c:e0:11:6b: 5b:65:5e:02:94:55:38:39:18:2b:fb:72:f8:28:17:1f:7f:d0: c7:00:76:68:77:0d:d8:12:5f:65:b9:fa:d6:a4:a5:13:9d:56: 71:87:0e:49:61:65:95:24:b4:b3:60:ba:02:c6:6a:18:19:4f: aa:47:27:d4:91:07:3c:53:c5:08:af:81:77:ea:af:5e:d8:a2: db:b2:97:f1:7d:25:f3:30:d2:9c:e1:5e:9d:60:62:7b:47:c9: 7b:28:7b:d4:75:dc:e7:9a:d8:1d:33:89:12:63:e2:5d:c7:c8: f1:94:c6:17:42:77:c7:ee:24:ee:3a:7d:ae:71:ba:12:b8:aa: f2:86:e2:7a:a2:22:81:96:c4:fe:04:87:6c:b2:03:9b:7d:25: ed:f7:36:70:6a:ab:a3:43:d0:28:d1:44:b3:b2:65:40:90:7d: 91:ad:a6:47:25:9b:f8:7a:bd:aa:6d:43:ee:9c:35:44:b4:5f: 57:72:b4:5e:84:bd:e8:a1:63:dc:0d:18:30:c7:e1:8e:33:00: 7f:f5:21:65:1f:35:af:a7:dd:e2:cc:26:86:55:98:66:b1:b3: c2:e1:b1:15 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOUFGNjM3MEMzQTlBODJFMkVDQTg4MjczQThCOEU3OUUw MjgyNTRGOTAeFw0yNjA3MjExMDQ1MDRaFw0yNjA3MjgxMDQ1MDRaMBgxFjAUBgNV BAMTDTZhNWY0ZGIwLTNmYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwTYA0QgiWRxrW0ajvcEgqjSDzWNdhB3GeSTmm40zSZY7mspZIaBf1xzz4s24X 0ukmBJJyt0nDm1eRlTFVFnoCPorAgLzTvP8A4FrIH3rctfqkf8TUDlnWTnwadpMf FgNPU7AH0Uz4S39kI7PPUSVRKAa4IH9j+rDJPv+TZYDr4MUit6CL99sfbmhKtQ1v ySeAaHDZKNW3M95dtG4Q3BqPHdGZP18jTk0odU466uaUqvYGOgkvKFslVTCzAQ4i ION2kmjWzLFkPnYgwv2ueN0QasPpf5wD9ePrHnO0ZWNVgg2kEs60ncVD3Y8WUYNJ DF7OKZtYN+U9oVIEiMC/QEfvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUp3WGorjo eCSu+kkTzmqGqofyKTIwHwYDVR0jBBgwFoAUmvY3DDqaguLsqIJzqLjnngKCVPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzJCMDE3MjVFNEZB QzExRjE5MTY0MzI5NzlFODMzNzczL212WTNERHFhZ3VMc3FJSnpxTGpubmdLQ1ZQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXZZM0REcWFndUxzcUlKenFMam5uZ0tDVlBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzJCMDE3MjVFNEZBQzExRjE5MTY0MzI5NzlFODMzNzczL212WTNERHFhZ3VM c3FJSnpxTGpubmdLQ1ZQay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCsOFDBzWoQHxD+Pr7I74rm//IIIEfXypNYxTSc9X5lgmzgEWtbZV4ClFU4ORgr +3L4KBcff9DHAHZodw3YEl9lufrWpKUTnVZxhw5JYWWVJLSzYLoCxmoYGU+qRyfU kQc8U8UIr4F36q9e2KLbspfxfSXzMNKc4V6dYGJ7R8l7KHvUddznmtgdM4kSY+Jd x8jxlMYXQnfH7iTuOn2ucboSuKryhuJ6oiKBlsT+BIdssgObfSXt9zZwaqujQ9Ao 0USzsmVAkH2RraZHJZv4er2qbUPunDVEtF9XcrRehL3ooWPcDRgwx+GOMwB/9SFl HzWvp93izCaGVZhmsbPC4bEV -----END CERTIFICATE-----Generated at Tue Jul 21 22:18:41 2026 by rpki-client