$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft File: ax_z7YHR7aC43YxdpE5A-css0q8.mft (raw, json) Hash identifier: G42CkZywHrL3cBaCeQfiuJd2NpWdn8NSEmPkbq+WANs= Subject key identifier: 38:F5:37:21:92:00:88:28:01:F4:61:05:F4:39:9D:E4:55:6C:CC:62 Authority key identifier: 6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF Certificate issuer: /CN=A9175C96/serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft Manifest number: 08 Signing time: Sun 05 Jul 2026 09:56:25 +0000 Manifest this update: Sun 05 Jul 2026 09:56:25 +0000 Manifest next update: Sun 12 Jul 2026 09:56:25 +0000 Files and hashes: 1: ax_z7YHR7aC43YxdpE5A-css0q8.crl (hash: P8FZbZbIJaYCTTRIbx9XIl1iAqfCNfKLKbi//vg/X6Q=) 2: F9F4A9C6710511F1AB87369C65A30FBC.roa (hash: vF7yzq71bKd9/EBHrcKUsFw6zWZiI9lEWL6wZYfxLto=) 3: CC84D0BA710511F1A8E0DB7B65A30FBC.roa (hash: W/k3tTym2pPqddOTOs65rSq65DSs2mHOJ53vJkYkUlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 09:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175C96, serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF Validity Not Before: Jul 5 09:56:25 2026 GMT Not After : Jul 12 09:56:25 2026 GMT Subject: CN=6a4a2a49-88bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:92:ca:92:fc:6c:d6:d8:4f:14:dd:4c:bf: 34:5e:c3:06:92:de:ba:7b:5a:4e:6c:0f:10:23:8a: 69:66:76:8c:c4:87:d6:f5:50:80:89:82:47:4d:62: 0a:da:97:cd:3b:8b:a0:fc:92:72:e8:96:7b:c9:d1: 77:c9:0c:31:09:6f:d6:45:a6:b8:f7:ea:75:38:6d: 60:7e:ba:d2:b7:e3:93:7f:bd:dc:f8:18:a3:9b:71: b9:52:4f:d1:ba:69:75:34:aa:39:54:37:22:b4:0f: 83:4c:3c:8e:7a:45:76:0c:8a:6a:df:11:65:0d:f5: 94:5d:a0:31:d9:3c:c7:12:e8:99:6c:9b:ea:7c:09: c4:f2:38:c3:24:f8:72:d1:77:41:c9:7c:23:02:e7: d9:f0:e6:af:e4:d5:d8:79:ae:9e:66:25:ec:5b:f6: af:5c:82:75:96:70:3f:2a:ab:2b:f2:b0:07:4f:c0: 14:0f:7e:e8:46:6b:e7:35:2e:4d:4f:32:a9:55:f6: ba:81:30:af:7f:af:3d:30:bb:ca:bd:49:60:28:d2: bf:9c:58:02:79:b7:08:f4:2a:18:91:8f:e2:9f:48: e6:cd:c5:f7:f4:b1:86:11:4e:4c:8f:43:61:79:63: aa:73:3a:36:47:b3:40:6b:71:0d:d0:74:bb:be:a6: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F5:37:21:92:00:88:28:01:F4:61:05:F4:39:9D:E4:55:6C:CC:62 X509v3 Authority Key Identifier: keyid:6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8d:91:7f:ed:ff:19:aa:72:56:b5:8e:2b:3a:88:e3:db:62: 49:c5:95:51:0d:7f:ed:5a:a5:3a:dc:f5:17:28:61:4d:93:43: b9:76:0d:8b:1f:45:bb:b4:62:d5:cf:27:0f:64:8e:1e:d5:bf: 9a:06:56:b5:b5:3f:00:c5:74:d3:07:1d:7c:3d:43:8c:ae:09: f3:3f:7a:c4:21:7f:ba:55:9a:d7:83:28:a6:c9:78:6e:53:f5: 66:9c:b0:78:e8:c8:a6:f5:5a:d9:76:3f:2c:50:f8:5a:a9:82: 6d:5d:5f:67:d6:59:d4:62:35:d2:f6:13:e3:e9:af:fd:67:70: d2:b0:89:5f:4b:b4:0c:12:fd:84:8b:99:97:71:a5:bc:6c:ac: 02:61:6c:71:11:bc:05:dd:5f:e9:71:e7:a1:c5:cb:aa:64:53: b7:cd:95:25:da:aa:9f:12:da:86:77:d1:9b:6e:36:cf:9b:27: 2e:4c:64:5b:17:b8:36:f9:4d:10:ca:68:9c:85:a6:b3:66:76: 22:8b:69:42:01:f9:ba:07:5f:1e:51:dc:53:f5:f3:b1:06:41: 55:a5:36:a2:5c:bf:0b:9e:36:00:33:10:c0:7c:19:f7:e3:df: 22:a4:8f:6f:d6:60:94:24:da:9a:ff:b0:a2:74:bb:51:a2:ad: cb:a6:48:c0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUM5NjExMC8GA1UEBRMoNkIxRkYzRUQ4MUQxRURBMEI4REQ4QzVEQTQ0RTQwRjlD QjJDRDJBRjAeFw0yNjA3MDUwOTU2MjVaFw0yNjA3MTIwOTU2MjVaMBgxFjAUBgNV BAMTDTZhNGEyYTQ5LTg4YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRNJLKkvxs1thPFN1MvzRewwaS3rp7Wk5sDxAjimlmdozEh9b1UICJgkdNYgra l807i6D8knLolnvJ0XfJDDEJb9ZFprj36nU4bWB+utK345N/vdz4GKObcblST9G6 aXU0qjlUNyK0D4NMPI56RXYMimrfEWUN9ZRdoDHZPMcS6Jlsm+p8CcTyOMMk+HLR d0HJfCMC59nw5q/k1dh5rp5mJexb9q9cgnWWcD8qqyvysAdPwBQPfuhGa+c1Lk1P MqlV9rqBMK9/rz0wu8q9SWAo0r+cWAJ5twj0KhiRj+KfSObNxff0sYYRTkyPQ2F5 Y6pzOjZHs0BrcQ3QdLu+psgDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOPU3IZIA iCgB9GEF9Dmd5FVszGIwHwYDVR0jBBgwFoAUax/z7YHR7aC43YxdpE5A+css0q8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1Qzk2LzcxQTcyRTJDNzEw NTExRjE4OEMwMDYxRTY1QTMwRkJDL2F4X3o3WUhSN2FDNDNZeGRwRTVBLWNzczBx OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXhfejdZSFI3YUM0M1l4ZHBFNUEtY3NzMHE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 Qzk2LzcxQTcyRTJDNzEwNTExRjE4OEMwMDYxRTY1QTMwRkJDL2F4X3o3WUhSN2FD NDNZeGRwRTVBLWNzczBxOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCejZF/7f8ZqnJWtY4rOojj22JJxZVRDX/tWqU63PUXKGFNk0O5dg2LH0W7tGLV zycPZI4e1b+aBla1tT8AxXTTBx18PUOMrgnzP3rEIX+6VZrXgyimyXhuU/VmnLB4 6Mim9VrZdj8sUPhaqYJtXV9n1lnUYjXS9hPj6a/9Z3DSsIlfS7QMEv2Ei5mXcaW8 bKwCYWxxEbwF3V/pceehxcuqZFO3zZUl2qqfEtqGd9GbbjbPmycuTGRbF7g2+U0Q ymichaazZnYii2lCAfm6B18eUdxT9fOxBkFVpTaiXL8LnjYAMxDAfBn3498ipI9v 1mCUJNqa/7CidLtRoq3LpkjA -----END CERTIFICATE-----Generated at Sun Jul 5 12:32:04 2026 by rpki-client