$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft File: 0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json) Hash identifier: VZuqWEvS09SEHEyL3Omx2emkz2u6mdUJlL660fK5648= Subject key identifier: 2E:80:FB:E7:63:9B:66:C6:9B:ED:62:65:DD:98:68:FF:90:E7:5D:4B Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft Manifest number: 0564 Signing time: Mon 20 Jul 2026 16:34:42 +0000 Manifest this update: Mon 20 Jul 2026 16:34:42 +0000 Manifest next update: Mon 27 Jul 2026 16:34:42 +0000 Files and hashes: 1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: esGh+0/bB3ZGxGEgZ1ufQ4PJWI2G1zT3DkJ7SS76gE4=) 2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: pPVg90RNjRjphrQIpFi1Dtq7Yfiqt2CKG2uE/Sw0pBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Validity Not Before: Jul 20 16:34:42 2026 GMT Not After : Jul 27 16:34:42 2026 GMT Subject: CN=6a5e4e22-5612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:91:ea:b1:e8:d8:fc:fc:70:67:ab:33:88: b1:ff:ae:f0:cd:c0:4f:d8:aa:d3:ea:4e:f3:38:34: 07:42:14:73:bc:1d:4b:41:f4:92:6a:83:1c:ac:69: 5f:5c:83:d9:e3:f8:43:72:3d:32:3c:45:6d:aa:71: f6:e7:5d:7f:02:80:0f:18:49:2b:bb:15:4f:ab:a9: 4c:1b:2c:f2:4d:ea:e3:6e:74:b9:e9:16:14:ae:b4: f5:ed:6d:96:46:75:8f:4c:e8:92:f5:de:1e:8c:c5: 21:5e:cc:6f:3b:4b:99:f1:e0:72:3c:04:92:88:50: 90:43:3a:1f:31:c6:b0:9e:e9:34:8e:9d:43:9e:69: e5:5a:a7:c4:60:bb:70:32:99:c3:1e:57:3f:49:88: 6c:b5:a5:fb:0a:2a:e8:ea:af:b0:3b:bb:86:df:2d: 84:15:2d:cd:32:ef:f3:c5:cc:32:d3:8b:ad:e4:4a: 9e:70:bb:16:49:44:67:a7:9d:02:db:5c:2b:1c:13: e0:71:f6:10:e8:69:3a:13:81:82:ba:f8:59:94:6b: f3:e5:18:ba:ce:22:0d:53:d9:51:2e:01:99:e8:d9: 91:45:a1:d9:4f:e8:68:3d:c9:7a:2e:bc:fe:cf:c4: ac:5a:25:25:65:f5:76:12:03:11:76:6f:32:5d:39: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:80:FB:E7:63:9B:66:C6:9B:ED:62:65:DD:98:68:FF:90:E7:5D:4B X509v3 Authority Key Identifier: keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:82:31:6b:3d:eb:ad:22:65:55:36:03:32:1a:be:1b:d7:cd: aa:d4:25:e3:d8:7b:65:82:d7:95:f6:1b:93:7a:23:6f:11:56: 8d:2f:00:0e:0e:04:ba:48:21:f1:d4:31:1d:a5:8c:f0:ed:e1: a0:98:85:5f:73:0c:75:70:51:00:c0:7e:95:e2:63:cb:94:c7: 2f:95:38:4e:10:2f:2c:60:7f:aa:13:d1:55:96:4a:87:d7:2e: 04:79:46:9a:56:7a:c0:34:73:64:27:b2:c5:71:82:84:6e:f7: c4:a8:e3:a4:6c:16:a5:27:f8:a4:20:3a:d3:16:1a:77:0a:18: 8e:3b:52:d3:72:b4:bb:51:05:1f:46:c0:20:14:fc:aa:7c:1d: ef:dc:3b:0e:7c:90:ed:4d:ec:aa:e7:0f:d9:9a:30:5e:4c:70: 87:f7:26:63:dc:b5:a7:91:3c:85:08:e8:2a:46:4d:31:14:52: 14:62:21:26:10:87:39:cd:b1:f3:fb:81:ae:26:9e:f3:dc:ab: 79:c3:12:3d:a5:b7:14:4e:3c:1a:22:27:8e:b3:b4:2a:67:2a: e4:de:7b:77:b5:1d:47:6e:41:44:d1:cf:5a:51:61:0a:1d:f7: 71:27:8e:98:9c:fc:53:80:4d:d8:59:c4:6a:b4:d3:71:1c:63: b5:dd:74:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKEQxQTFFRkQyMjQxMzVBRUIwOTgzOUVBOEJEQjhDREM1 OTlDRTY1N0YwHhcNMjYwNzIwMTYzNDQyWhcNMjYwNzI3MTYzNDQyWjAYMRYwFAYD VQQDEw02YTVlNGUyMi01NjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmueR6rHo2Pz8cGerM4ix/67wzcBP2KrT6k7zODQHQhRzvB1LQfSSaoMcrGlf XIPZ4/hDcj0yPEVtqnH2511/AoAPGEkruxVPq6lMGyzyTerjbnS56RYUrrT17W2W RnWPTOiS9d4ejMUhXsxvO0uZ8eByPASSiFCQQzofMcawnuk0jp1DnmnlWqfEYLtw MpnDHlc/SYhstaX7Ciro6q+wO7uG3y2EFS3NMu/zxcwy04ut5EqecLsWSURnp50C 21wrHBPgcfYQ6Gk6E4GCuvhZlGvz5Ri6ziINU9lRLgGZ6NmRRaHZT+hoPcl6Lrz+ z8SsWiUlZfV2EgMRdm8yXTmiHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6A++dj m2bGm+1iZd2YaP+Q511LMB8GA1UdIwQYMBaAFNGh79IkE1rrCYOeqL24zcWZzmV/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy83QTMwMkQwMDQy QjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1c0pnNTZvdmJqTnhabk9a WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBhSHYwaVFUV3VzSmc1Nm92YmpOeFpuT1pYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy83QTMwMkQwMDQyQjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1 c0pnNTZvdmJqTnhabk9aWDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApYIxaz3rrSJlVTYDMhq+G9fNqtQl49h7ZYLXlfYbk3ojbxFWjS8ADg4Eukgh 8dQxHaWM8O3hoJiFX3MMdXBRAMB+leJjy5THL5U4ThAvLGB/qhPRVZZKh9cuBHlG mlZ6wDRzZCeyxXGChG73xKjjpGwWpSf4pCA60xYadwoYjjtS03K0u1EFH0bAIBT8 qnwd79w7DnyQ7U3squcP2ZowXkxwh/cmY9y1p5E8hQjoKkZNMRRSFGIhJhCHOc2x 8/uBriae89yrecMSPaW3FE48GiInjrO0Kmcq5N57d7UdR25BRNHPWlFhCh33cSeO mJz8U4BN2FnEarTTcRxjtd10gg== -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:54 2026 by rpki-client