$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: x90XCmenpxhOd5z20JW1883TpczRbeA3xXO9fGAdLcY= Subject key identifier: 0E:37:78:A9:61:96:C0:27:A6:08:DA:AE:16:6A:B5:20:38:E9:E4:CE Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 03FA Signing time: Mon 27 Jul 2026 01:37:41 +0000 Manifest this update: Mon 27 Jul 2026 01:37:41 +0000 Manifest next update: Mon 03 Aug 2026 01:37:41 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: 5a+LB6J5YPLEEb792zh1xRZzmWzRJ2Dt2c7fdEDSq24=) 2: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: QGbx8CSxXT06CMRUJ1ouPQcYHjiqO6SpoLCDZKwH54U=) 3: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: YdIuZnOTK36n3Pq7b+Qw78bVTO5I+l19LXWmVXpvgx4=) 4: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: AEK+TyXvmdcda0eSq2N+XQNwy+UGSHbztsixwIwOJL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Jul 27 01:37:41 2026 GMT Not After : Aug 3 01:37:41 2026 GMT Subject: CN=6a66b665-aece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:74:15:b5:e4:f9:2b:27:9b:6b:e8:8a:3a: cc:81:5f:21:95:90:4b:be:3c:fa:31:b1:c2:40:62: 33:d0:7d:8f:a3:6e:6c:20:bf:b9:f2:e5:e0:b2:df: ea:96:4d:74:fd:76:b0:57:bf:57:b8:56:06:f2:fd: 92:7a:35:07:1a:a2:b5:d5:73:17:c1:ff:95:1d:f9: 23:a7:92:ad:fa:f0:ac:ac:4b:d9:7a:d9:9a:bf:4a: 4e:50:fe:99:4d:92:fc:bc:1c:bb:20:c4:6e:69:97: f6:70:68:82:bb:e7:bc:fb:b4:32:5d:91:b3:ce:c1: 70:72:2a:4d:c3:a1:20:87:15:83:a0:55:45:14:ee: ca:fc:42:39:d9:de:96:22:5a:43:bc:d7:fe:1d:e1: 9e:00:1e:30:37:f0:75:7e:a6:d1:44:b8:e1:01:11: 84:99:45:f8:d4:f4:1c:46:31:fb:09:f3:8c:e1:29: 42:57:f6:83:fa:03:df:48:60:15:82:41:b2:af:d1: 00:f3:c5:5c:75:01:30:fa:76:e8:7e:27:f8:a7:63: 5e:bf:6f:f4:46:5f:f5:6b:c4:83:d8:c0:ed:ee:92: 3b:2d:4a:d5:9b:48:4c:30:78:dd:58:d4:a0:30:80: 22:42:9c:11:80:7b:e7:86:bd:2d:89:aa:c1:7f:cb: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:78:A9:61:96:C0:27:A6:08:DA:AE:16:6A:B5:20:38:E9:E4:CE X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:01:ce:ad:d0:b9:db:94:07:78:30:8d:06:b0:8c:75:30:5d: 67:18:7b:82:15:83:c3:78:4e:81:61:ca:34:96:a0:cc:0e:87: 34:b2:28:ff:ba:da:0b:35:3d:69:92:4d:d8:08:d7:56:d1:07: 6b:b7:2c:7c:f1:6c:0f:83:b2:38:37:df:b7:6c:86:26:f8:3a: 1a:1a:33:c2:dd:6b:db:11:df:52:b7:28:e1:9e:cb:6c:3c:17: a2:25:29:21:f4:6d:b8:b1:09:83:84:96:36:cf:ed:f0:97:87: 32:db:e9:96:0c:28:b9:5d:a7:33:25:a0:39:a7:83:ca:7b:09: 53:57:42:c2:ea:19:0c:cc:cc:53:a5:24:b4:34:73:4d:50:28: 2c:14:dc:6a:95:32:37:63:c2:58:e4:4d:b2:3b:3a:12:43:15: ed:82:00:27:4b:77:06:36:50:a3:47:3e:1d:33:93:d0:c9:69: a7:c7:5a:53:5a:b3:1f:2d:5f:b0:03:11:7e:fb:bd:7f:4f:49: 67:2d:09:4c:39:34:6a:9b:ab:b8:88:e3:d9:42:91:5b:c5:18: ce:3b:b7:8a:42:14:1e:62:0c:f1:48:d6:72:d1:7c:b4:33:3b: 88:ee:00:de:3e:19:d5:3f:09:4d:51:53:c7:83:0e:16:a9:e7: 27:ff:f7:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYwNzI3MDEzNzQxWhcNMjYwODAzMDEzNzQxWjAYMRYwFAYD VQQDEw02YTY2YjY2NS1hZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfR0FbXk+Ssnm2voijrMgV8hlZBLvjz6MbHCQGIz0H2Po25sIL+58uXgst/q lk10/XawV79XuFYG8v2SejUHGqK11XMXwf+VHfkjp5Kt+vCsrEvZetmav0pOUP6Z TZL8vBy7IMRuaZf2cGiCu+e8+7QyXZGzzsFwcipNw6EghxWDoFVFFO7K/EI52d6W IlpDvNf+HeGeAB4wN/B1fqbRRLjhARGEmUX41PQcRjH7CfOM4SlCV/aD+gPfSGAV gkGyr9EA88VcdQEw+nbofif4p2Nev2/0Rl/1a8SD2MDt7pI7LUrVm0hMMHjdWNSg MIAiQpwRgHvnhr0tiarBf8uMzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA43eKlh lsAnpgjarhZqtSA46eTOMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeAHOrdC525QHeDCNBrCMdTBdZxh7ghWDw3hOgWHKNJagzA6HNLIo/7raCzU9 aZJN2AjXVtEHa7csfPFsD4OyODfft2yGJvg6Ghozwt1r2xHfUrco4Z7LbDwXoiUp IfRtuLEJg4SWNs/t8JeHMtvplgwouV2nMyWgOaeDynsJU1dCwuoZDMzMU6UktDRz TVAoLBTcapUyN2PCWORNsjs6EkMV7YIAJ0t3BjZQo0c+HTOT0Mlpp8daU1qzHy1f sAMRfvu9f09JZy0JTDk0apuruIjj2UKRW8UYzju3ikIUHmIM8UjWctF8tDM7iO4A 3j4Z1T8JTVFTx4MOFqnnJ//3fA== -----END CERTIFICATE-----Generated at Mon Jul 27 22:53:39 2026 by rpki-client