$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft File: 2hAmH-_a0BGsriMnCqa_jEHeQpI.mft (raw, json) Hash identifier: 1UBLzP659pRb+Wx5L09HCTTK2T284flSrCROaFMjoE4= Subject key identifier: C0:BD:2F:F7:18:7E:63:58:D3:01:7C:24:73:CD:CB:D4:BA:E9:BD:40 Authority key identifier: DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 Certificate issuer: /CN=A9166D4A/serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft Manifest number: 1A Signing time: Fri 17 Jul 2026 10:18:46 +0000 Manifest this update: Fri 17 Jul 2026 10:18:46 +0000 Manifest next update: Fri 24 Jul 2026 10:18:46 +0000 Files and hashes: 1: 2hAmH-_a0BGsriMnCqa_jEHeQpI.crl (hash: NzEp9zSmltA0B9bGnPQe66tivgLcqfm66UDwlfFP7G8=) 2: 4B17E2545C0811F1B8292F4090833773.roa (hash: ZHRlNcAYAA1IcJM0xFQys5A4K8yg67YwwMJ4ch/a0ZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D4A, serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Validity Not Before: Jul 17 10:18:46 2026 GMT Not After : Jul 24 10:18:46 2026 GMT Subject: CN=6a5a0186-31f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:b3:e1:a1:10:d8:b8:e4:0c:d3:e4:15:69: b7:32:3a:a3:39:6a:16:c3:45:c7:85:89:1a:cf:34: a0:ec:06:13:b5:0f:8c:7f:8c:0b:3e:6e:e7:36:e0: b5:19:ff:93:c4:8a:08:38:8c:77:bf:a8:95:7b:d6: 67:0a:b7:db:9c:68:6e:90:fc:54:cc:c8:39:53:c9: 22:fb:64:d5:63:36:b3:55:7b:97:5f:ce:ec:50:b1: 5d:70:55:bf:57:3a:45:bb:cc:28:d9:1f:bc:39:c8: 96:7b:bf:c4:9c:45:57:2e:aa:25:4f:ed:be:c6:68: 92:23:3e:07:60:59:b7:41:9d:57:ba:53:d0:20:dd: d9:ae:f7:d8:0b:1b:7d:ee:20:85:f0:9f:b4:4b:c0: 63:1c:63:fe:fc:ff:19:e1:f6:d9:e3:ce:d7:c0:59: 0e:77:58:d5:4d:6f:2a:5a:45:9b:bf:fb:b2:d1:8c: 77:8d:54:56:af:1a:fc:67:0e:66:f0:38:af:8e:2c: c2:0d:46:75:00:23:92:6f:47:b2:34:29:04:cb:ea: 9a:6d:6c:c5:b2:3c:1f:d6:0c:f3:fa:e7:c2:78:cb: 1a:5e:50:60:38:1c:aa:99:4e:1f:7d:ec:91:99:b4: 3c:d7:b4:1c:88:f1:fd:62:70:5c:ee:2a:33:b8:d7: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BD:2F:F7:18:7E:63:58:D3:01:7C:24:73:CD:CB:D4:BA:E9:BD:40 X509v3 Authority Key Identifier: keyid:DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:bf:73:02:70:b8:49:98:ec:46:e1:eb:01:05:9b:de:ae:b1: c4:4f:6d:32:3b:f9:1a:24:09:a3:1c:65:03:b5:c3:fe:3e:86: f2:c2:22:45:c4:c0:57:67:60:dd:30:af:cc:e6:89:05:5e:73: b5:b4:86:f4:ba:9a:46:58:cb:c8:bb:df:ae:13:a3:55:99:61: 1a:18:8f:ec:94:34:fe:48:d5:46:44:9b:ab:86:59:69:5f:a5: ca:26:e9:fe:28:01:82:d0:19:49:9e:5e:5f:0d:74:99:6a:89: 35:71:75:d9:ad:ac:91:9b:14:b1:98:dd:79:c0:be:a9:05:4a: e6:0a:9f:b0:dd:f9:8a:1a:ed:50:b9:1f:2a:b5:18:3b:d1:94: da:94:e2:90:ff:83:02:4b:cf:b7:31:82:be:a2:e3:19:e8:bd: f4:f1:99:bc:6b:8e:d5:af:92:cf:d1:c8:a3:43:c5:d3:c5:c7: 00:20:30:b9:c6:83:b9:8e:49:cb:44:f2:2b:1e:44:2b:dc:7d: 8c:5c:7c:95:90:82:10:6f:71:1c:e9:10:8e:06:e7:1b:58:0f: c5:65:82:75:01:38:b2:b6:3e:a0:77:f7:fd:c2:f8:b3:09:d5: 2f:7a:8a:ce:9d:53:92:c8:a3:ae:dc:e4:69:05:ee:b0:cb:2b: 68:f1:d9:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQ0QTExMC8GA1UEBRMoREExMDI2MUZFRkRBRDAxMUFDQUUyMzI3MEFBNkJGOEM0 MURFNDI5MjAeFw0yNjA3MTcxMDE4NDZaFw0yNjA3MjQxMDE4NDZaMBgxFjAUBgNV BAMTDTZhNWEwMTg2LTMxZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwp7PhoRDYuOQM0+QVabcyOqM5ahbDRceFiRrPNKDsBhO1D4x/jAs+buc24LUZ /5PEigg4jHe/qJV71mcKt9ucaG6Q/FTMyDlTySL7ZNVjNrNVe5dfzuxQsV1wVb9X OkW7zCjZH7w5yJZ7v8ScRVcuqiVP7b7GaJIjPgdgWbdBnVe6U9Ag3dmu99gLG33u IIXwn7RLwGMcY/78/xnh9tnjztfAWQ53WNVNbypaRZu/+7LRjHeNVFavGvxnDmbw OK+OLMINRnUAI5JvR7I0KQTL6pptbMWyPB/WDPP658J4yxpeUGA4HKqZTh997JGZ tDzXtByI8f1icFzuKjO41ySFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwL0v9xh+ Y1jTAXwkc83L1LrpvUAwHwYDVR0jBBgwFoAU2hAmH+/a0BGsriMnCqa/jEHeQpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDRBL0FEMTczN0EyNUI4 MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJHc3JpTW5DcWFfakVIZVFw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmhBbUgtX2EwQkdzcmlNbkNxYV9qRUhlUXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDRBL0FEMTczN0EyNUI4MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJH c3JpTW5DcWFfakVIZVFwSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCrv3MCcLhJmOxG4esBBZverrHET20yO/kaJAmjHGUDtcP+PobywiJFxMBXZ2Dd MK/M5okFXnO1tIb0uppGWMvIu9+uE6NVmWEaGI/slDT+SNVGRJurhllpX6XKJun+ KAGC0BlJnl5fDXSZaok1cXXZrayRmxSxmN15wL6pBUrmCp+w3fmKGu1QuR8qtRg7 0ZTalOKQ/4MCS8+3MYK+ouMZ6L308Zm8a47Vr5LP0cijQ8XTxccAIDC5xoO5jknL RPIrHkQr3H2MXHyVkIIQb3Ec6RCOBucbWA/FZYJ1ATiytj6gd/f9wvizCdUveorO nVOSyKOu3ORpBe6wyyto8dmP -----END CERTIFICATE-----Generated at Sat Jul 18 09:27:43 2026 by rpki-client