$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: r1NoNKujVwIri9e/bqTYXnnBNwCDWdKq/aupKWG7vAk= Subject key identifier: 8F:44:6A:CD:6F:E9:02:6D:1A:1A:0D:F3:37:1A:5D:F3:38:46:0B:F7 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 08C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 08B7 Signing time: Mon 20 Jul 2026 21:02:37 +0000 Manifest this update: Mon 20 Jul 2026 21:02:36 +0000 Manifest next update: Mon 27 Jul 2026 21:02:36 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: jOVLJDV+cvO8zD0INou5qPv3krO6N0hsVkh/p5bivTs=) 2: FC73A04E22D611F184630225C8833773.roa (hash: lirFwSfFP2XyhuyherlCKtjHYjqBn+tnL1KG1MSa/FQ=) 3: F43185921DF211F18E2EA673173D8C67.roa (hash: 7NFN5oMtgNPaVhWbz0nsBbRwBO/bYjYwDJggWSxO5PE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Jul 20 21:02:36 2026 GMT Not After : Jul 27 21:02:36 2026 GMT Subject: CN=6a5e8cec-1628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:9a:be:02:a0:17:21:51:3d:1a:c2:9f:4b: ef:32:2a:6e:98:4c:2a:ab:b4:bb:a0:7b:ea:e7:74: d0:e3:d6:a1:a9:f8:eb:92:26:95:17:b5:ac:1f:d4: 66:c5:f1:02:4c:2c:bb:d2:9d:81:f6:f4:d0:ed:f5: ca:be:12:60:93:66:ee:90:6a:81:c9:f8:90:7e:c0: 66:b8:62:7c:8d:ef:67:cc:c9:4b:18:48:8a:ec:79: 0a:c0:31:f4:8e:22:2a:5a:11:a4:01:8f:86:f1:9d: 48:52:3c:51:64:3f:94:12:69:dc:1f:36:15:f8:ef: c1:de:d5:ca:e6:3f:27:f7:ba:b1:e0:81:59:11:05: d5:ad:30:75:83:39:01:e3:b1:fe:72:a2:24:93:c1: 6a:ea:b7:e8:22:a1:e6:b0:58:a8:7f:a4:0f:cb:30: 3d:d9:98:ea:b7:9c:b7:37:a4:bc:8b:f8:4b:30:d7: d1:92:86:70:7e:24:20:d6:46:ef:05:9d:4a:79:77: d7:27:cd:a8:2e:b9:f9:c6:e8:66:87:0c:17:2a:53: c3:93:c9:99:27:b7:94:8b:a4:0c:8e:f5:0c:d7:1c: 89:be:9f:e3:57:b2:88:b2:fb:ef:d1:11:17:dd:c2: 0d:cd:97:50:44:90:30:90:82:d0:8d:d9:63:9f:38: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:44:6A:CD:6F:E9:02:6D:1A:1A:0D:F3:37:1A:5D:F3:38:46:0B:F7 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:f2:4c:b4:86:36:fe:05:11:ae:b9:ee:d0:23:ff:df:98:5b: f6:4d:55:1d:2a:80:be:f6:c6:e5:c6:c5:80:a2:e7:56:e2:7f: c5:b9:c1:20:9a:72:83:b3:a2:06:42:56:56:ca:05:8a:65:90: 17:0c:44:55:5a:fc:db:23:a0:16:a4:e5:1d:24:d3:d7:29:78: a9:4e:9a:60:4f:66:b1:e8:2d:a4:4d:e2:b2:de:73:3d:4e:80: 12:45:f1:06:06:37:a5:e0:04:e8:28:f1:52:73:31:41:aa:f9: f5:c5:c4:64:9d:5f:3c:6c:e1:ae:0f:53:09:9f:5e:0c:2f:66: 32:ed:a4:3b:30:d5:b3:ce:2d:4f:5d:aa:17:d1:20:e9:f5:82: 6a:24:93:1a:cb:5c:78:ae:37:17:29:56:ce:4f:14:69:12:ed: 94:5a:8b:d0:27:77:50:1b:61:a5:de:33:1a:6c:ec:d2:cb:b1: fb:e3:b5:be:cc:16:d4:7f:58:16:e3:a2:65:fd:2f:33:2a:2b: 7e:c1:ae:c8:25:87:4c:da:82:8e:1c:a7:ef:b3:5c:bc:61:32: ef:60:d8:bb:c7:88:66:28:84:77:e8:54:56:9a:49:12:e7:5f: 9d:6d:0a:9b:84:dd:20:d8:fc:0a:93:b5:5c:26:46:00:17:d1: bc:a7:78:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjYwNzIwMjEwMjM2WhcNMjYwNzI3MjEwMjM2WjAYMRYwFAYD VQQDEw02YTVlOGNlYy0xNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9mavgKgFyFRPRrCn0vvMipumEwqq7S7oHvq53TQ49ahqfjrkiaVF7WsH9Rm xfECTCy70p2B9vTQ7fXKvhJgk2bukGqByfiQfsBmuGJ8je9nzMlLGEiK7HkKwDH0 jiIqWhGkAY+G8Z1IUjxRZD+UEmncHzYV+O/B3tXK5j8n97qx4IFZEQXVrTB1gzkB 47H+cqIkk8Fq6rfoIqHmsFiof6QPyzA92Zjqt5y3N6S8i/hLMNfRkoZwfiQg1kbv BZ1KeXfXJ82oLrn5xuhmhwwXKlPDk8mZJ7eUi6QMjvUM1xyJvp/jV7KIsvvv0REX 3cINzZdQRJAwkILQjdljnzh8EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI9Eas1v 6QJtGhoN8zcaXfM4Rgv3MB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy/JMtIY2/gURrrnu0CP/35hb9k1VHSqAvvbG5cbFgKLnVuJ/xbnBIJpyg7Oi BkJWVsoFimWQFwxEVVr82yOgFqTlHSTT1yl4qU6aYE9msegtpE3ist5zPU6AEkXx BgY3peAE6CjxUnMxQar59cXEZJ1fPGzhrg9TCZ9eDC9mMu2kOzDVs84tT12qF9Eg 6fWCaiSTGstceK43FylWzk8UaRLtlFqL0Cd3UBthpd4zGmzs0sux++O1vswW1H9Y FuOiZf0vMyorfsGuyCWHTNqCjhyn77NcvGEy72DYu8eIZiiEd+hUVppJEudfnW0K m4TdINj8CpO1XCZGABfRvKd45w== -----END CERTIFICATE-----Generated at Tue Jul 21 23:28:31 2026 by rpki-client