$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: X63HYBAr9aO+C4F2eovJSuFaNLLxJyAPYj6mTn6o5JE= Subject key identifier: D9:D7:E9:4D:89:1D:FA:DE:38:16:52:3F:45:FC:8C:10:19:CE:DE:A8 Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0CA0 Signing time: Thu 16 Jul 2026 18:48:22 +0000 Manifest this update: Thu 16 Jul 2026 18:48:22 +0000 Manifest next update: Thu 23 Jul 2026 18:48:22 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: KD0sMF7KdZ82Q3gwULBeCG4QLkUmJauuwxWWZ4WNhqY=) 2: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZcWtfkepcoTH3hYySssNcb8QgN4PKAntgG2yhFuPzqs=) 3: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 4wHwD6cPpHWdIAGlk+QPknVHSXJJAxVoDS9hDjhyH1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 18:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: Jul 16 18:48:22 2026 GMT Not After : Jul 23 18:48:22 2026 GMT Subject: CN=6a592776-2429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:be:4e:f7:33:72:5c:3f:14:15:6f:2e:4e: 2d:ed:1b:e4:1e:d6:ce:01:7c:27:dc:13:c5:54:b4: 07:5f:e9:3a:80:fb:ab:20:b0:d8:29:a0:cc:d4:2c: ca:8e:d9:b7:05:1d:17:00:e8:f3:be:2b:6d:2a:1f: 94:18:6d:b8:e6:ad:67:80:03:85:4f:bd:8d:46:3a: 91:6e:c9:c0:4f:bd:07:19:20:d4:6e:bd:be:a6:34: 0c:13:5f:36:91:49:ed:93:a4:14:3a:8c:fd:bb:2d: ed:7b:2b:e5:59:3a:a3:c1:40:11:bd:2e:9a:5a:2e: 6a:12:2e:15:b8:ea:4a:3c:d9:fb:eb:0d:a9:1a:72: e3:ac:e8:c7:96:f8:1f:0b:52:d4:00:a5:9d:06:53: 3b:01:31:a5:1d:49:47:26:60:cd:4f:58:16:18:62: 21:26:a0:39:8f:d3:f9:2c:75:09:b8:cb:78:7d:00: 8a:28:32:58:f9:82:13:50:ed:3e:41:c4:e0:6c:63: 75:d7:7e:1a:12:56:92:6a:3e:ed:d0:89:19:54:a0: 69:00:e3:41:76:85:cf:b3:02:92:6a:77:36:61:ba: be:ff:e1:6b:27:b5:43:02:cd:ac:f2:1f:2f:f6:23: 05:10:1f:f8:82:7e:8d:d1:e1:3c:df:d1:4c:58:57: 71:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D7:E9:4D:89:1D:FA:DE:38:16:52:3F:45:FC:8C:10:19:CE:DE:A8 X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d2:22:04:ab:00:0c:b8:d3:1c:7f:a1:44:26:2e:31:c2:59: 43:a4:fc:83:6e:c6:00:05:8d:db:18:32:a6:c6:45:95:93:5f: 96:13:87:d7:45:87:19:b1:5a:04:b0:e7:ce:20:9c:5e:b4:17: db:41:01:59:77:ed:9f:b2:12:10:ec:a7:f5:a2:ac:81:70:2d: 2b:01:16:76:22:85:22:71:d8:dc:f3:2c:50:46:71:4e:a1:d2: 7a:d9:44:ed:26:e4:f5:89:5d:ec:a0:91:ca:65:54:19:3d:37: 7a:67:16:83:db:0c:22:0a:88:9d:f2:31:13:33:77:58:e3:64: 0b:52:5b:5c:73:d7:4b:81:5a:c8:af:5e:59:90:1c:87:0d:30: 37:ac:13:ff:08:3a:cc:b7:5f:1d:af:e9:9a:a0:66:c4:28:b4: 19:02:ec:6d:a1:55:1f:be:13:24:99:0c:b7:f0:a3:c0:97:8c: dc:13:ae:5a:ea:12:99:91:f8:06:37:79:7f:58:de:f6:24:09: ce:a6:7a:59:67:00:01:c1:c1:6d:77:eb:8a:d9:94:af:8b:5f: b3:0c:44:4c:d7:6d:22:91:44:4e:ca:ee:d3:91:48:4f:26:1c: f7:88:82:e2:db:bf:98:91:93:88:3a:70:53:36:2a:4b:bc:56: 88:32:b2:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjYwNzE2MTg0ODIyWhcNMjYwNzIzMTg0ODIyWjAYMRYwFAYD VQQDEw02YTU5Mjc3Ni0yNDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9y+Tvczclw/FBVvLk4t7RvkHtbOAXwn3BPFVLQHX+k6gPurILDYKaDM1CzK jtm3BR0XAOjzvittKh+UGG245q1ngAOFT72NRjqRbsnAT70HGSDUbr2+pjQME182 kUntk6QUOoz9uy3teyvlWTqjwUARvS6aWi5qEi4VuOpKPNn76w2pGnLjrOjHlvgf C1LUAKWdBlM7ATGlHUlHJmDNT1gWGGIhJqA5j9P5LHUJuMt4fQCKKDJY+YITUO0+ QcTgbGN1134aElaSaj7t0IkZVKBpAONBdoXPswKSanc2Ybq+/+FrJ7VDAs2s8h8v 9iMFEB/4gn6N0eE839FMWFdxdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnX6U2J HfreOBZSP0X8jBAZzt6oMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJdIiBKsADLjTHH+hRCYuMcJZQ6T8g27GAAWN2xgypsZFlZNflhOH10WHGbFa BLDnziCcXrQX20EBWXftn7ISEOyn9aKsgXAtKwEWdiKFInHY3PMsUEZxTqHSetlE 7Sbk9Yld7KCRymVUGT03emcWg9sMIgqInfIxEzN3WONkC1JbXHPXS4FayK9eWZAc hw0wN6wT/wg6zLdfHa/pmqBmxCi0GQLsbaFVH74TJJkMt/CjwJeM3BOuWuoSmZH4 Bjd5f1je9iQJzqZ6WWcAAcHBbXfritmUr4tfswxETNdtIpFETsru05FITyYc94iC 4tu/mJGTiDpwUzYqS7xWiDKyUw== -----END CERTIFICATE-----Generated at Sat Jul 18 13:35:00 2026 by rpki-client