$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: 0NG0zVN+Slh73Ax8l8uHwu1xEn2EfYv1NrWNOci7b1c= Subject key identifier: 67:EF:B0:5E:CA:A6:78:8C:7E:8D:FC:2C:CB:D0:07:B0:58:CF:25:B0 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0FFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0FE9 Signing time: Thu 16 Jul 2026 18:18:17 +0000 Manifest this update: Thu 16 Jul 2026 18:18:16 +0000 Manifest next update: Thu 23 Jul 2026 18:18:16 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: /slQJkmKNCtcBdQzqxfJFeUgk+finVcSh/2DnCDvyII=) 2: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: k4cp/STum9L4RJNKMc3zj8Ri5aFzIHY5Vza6zrwXHLY=) 3: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: 2mnTM/HTgdiRw1sKfT4sEhRjUUWStC3e6p+pRA/D//M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 18:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4092 (0xffc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Jul 16 18:18:16 2026 GMT Not After : Jul 23 18:18:16 2026 GMT Subject: CN=6a592069-c541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:0a:be:76:8b:c2:03:75:8e:a3:16:b4:07: 0e:7c:c6:aa:49:4d:96:35:ef:7f:92:84:ca:d5:69: 89:2a:7e:bc:06:90:fb:8e:a0:a3:f2:36:44:54:d3: 3a:a3:09:82:79:0b:93:81:a8:98:98:ee:2f:4b:78: 80:b5:35:52:73:11:5c:33:77:da:79:a6:3b:c6:b8: c9:cd:15:a2:1f:ac:9b:1f:96:cb:9b:d4:e1:41:90: 1c:48:2e:2f:5f:a2:d5:df:76:23:e2:f3:9a:0f:a2: e5:ac:40:b4:c2:c8:be:86:50:15:c9:74:1c:f9:00: 46:c7:87:8a:2e:cb:bf:50:63:9d:63:b0:1f:07:80: 43:f4:09:57:42:68:04:7e:90:24:d3:28:5a:e7:46: 16:aa:29:a2:0e:dc:a0:5b:49:d8:ba:4d:13:8a:81: 4a:fc:c4:92:c3:35:e9:fd:68:f7:4b:92:53:4f:48: c0:ec:10:1a:07:90:a9:c9:31:b3:5c:5a:5b:20:3a: db:02:6d:13:67:76:d7:a1:1f:2c:93:c1:c2:c2:43: f3:d0:03:3c:01:a9:55:1e:ab:a8:64:27:2b:3c:de: 3a:53:26:ae:07:e9:37:c9:b0:d6:cb:b1:f6:dd:57: a4:af:fd:42:41:1f:ed:b0:ff:5d:72:66:3f:63:5c: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EF:B0:5E:CA:A6:78:8C:7E:8D:FC:2C:CB:D0:07:B0:58:CF:25:B0 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:ef:03:46:ba:f5:5c:a4:95:1e:d7:ff:8c:81:f5:6e:46: ea:61:cf:95:e9:30:57:6f:5f:ec:37:89:47:3e:4c:91:e0:bf: 29:b4:06:24:61:da:31:4a:b5:9d:56:86:bc:3a:11:b0:81:aa: 2b:80:75:fe:7a:6d:44:aa:d4:88:ff:38:d9:e1:75:05:bf:0b: 6c:59:50:aa:ac:63:90:d1:19:b3:3f:80:47:19:14:04:76:42: 82:a6:ef:d1:24:fc:6c:0a:28:b3:18:f5:3e:32:f4:15:bd:a5: 38:d2:b9:4a:3f:b8:de:73:94:ce:a3:61:fc:c4:2e:74:22:dc: 95:62:f9:e5:7f:db:89:ba:90:82:a9:5f:dc:39:a0:b1:b2:83: d8:ed:f4:ff:b4:2d:8a:fb:b4:2e:c0:fc:f8:72:e4:70:78:37: 99:7a:f7:2a:76:c0:c4:4e:88:21:e6:e9:94:99:f8:1e:e3:b0: 50:b3:31:be:88:a7:75:61:b8:b4:a4:4b:5f:83:d4:77:e0:63: c3:f9:71:fd:4e:6b:36:00:92:49:d9:00:18:33:23:07:e9:bb: ae:94:a7:64:fe:d5:63:96:f8:17:0a:af:2c:bf:8c:29:23:3d: 05:3b:cf:13:8a:3a:54:18:3a:fe:f0:4b:bd:76:16:3b:1b:a7: 35:09:2d:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjYwNzE2MTgxODE2WhcNMjYwNzIzMTgxODE2WjAYMRYwFAYD VQQDEw02YTU5MjA2OS1jNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi5MKvnaLwgN1jqMWtAcOfMaqSU2WNe9/koTK1WmJKn68BpD7jqCj8jZEVNM6 owmCeQuTgaiYmO4vS3iAtTVScxFcM3faeaY7xrjJzRWiH6ybH5bLm9ThQZAcSC4v X6LV33Yj4vOaD6LlrEC0wsi+hlAVyXQc+QBGx4eKLsu/UGOdY7AfB4BD9AlXQmgE fpAk0yha50YWqimiDtygW0nYuk0TioFK/MSSwzXp/Wj3S5JTT0jA7BAaB5CpyTGz XFpbIDrbAm0TZ3bXoR8sk8HCwkPz0AM8AalVHquoZCcrPN46UyauB+k3ybDWy7H2 3Vekr/1CQR/tsP9dcmY/Y1yHLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfvsF7K pniMfo38LMvQB7BYzyWwMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi1rvA0a69VyklR7X/4yB9W5G6mHPlekwV29f7DeJRz5MkeC/KbQGJGHaMUq1 nVaGvDoRsIGqK4B1/nptRKrUiP842eF1Bb8LbFlQqqxjkNEZsz+ARxkUBHZCgqbv 0ST8bAoosxj1PjL0Fb2lONK5Sj+43nOUzqNh/MQudCLclWL55X/bibqQgqlf3Dmg sbKD2O30/7Qtivu0LsD8+HLkcHg3mXr3KnbAxE6IIebplJn4HuOwULMxvoindWG4 tKRLX4PUd+Bjw/lx/U5rNgCSSdkAGDMjB+m7rpSnZP7VY5b4FwqvLL+MKSM9BTvP E4o6VBg6/vBLvXYWOxunNQktrw== -----END CERTIFICATE-----Generated at Sat Jul 18 08:11:09 2026 by rpki-client