$ rpki-client -vvf rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft File: lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft (raw, json) Hash identifier: q1+s1vII9EqEbAjOlnFzc3GKVLGIYymmyXM9hkgVMsA= Subject key identifier: C0:87:3F:EC:42:98:E7:DF:93:48:82:7E:9F:C3:56:F7:CB:DB:7C:9A Authority key identifier: 94:01:75:72:1E:70:B6:20:8C:5C:A0:29:38:B3:0E:04:51:B9:9C:44 Certificate issuer: /CN=A9185308/serialNumber=940175721E70B6208C5CA02938B30E0451B99C44 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft Manifest number: 1E Signing time: Fri 17 Jul 2026 10:15:40 +0000 Manifest this update: Fri 17 Jul 2026 10:15:40 +0000 Manifest next update: Fri 24 Jul 2026 10:15:40 +0000 Files and hashes: 1: lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl (hash: e3r704c9v/9aRLuNATxZ9WWGq6tcRd50jahOuDKtdBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185308, serialNumber=940175721E70B6208C5CA02938B30E0451B99C44 Validity Not Before: Jul 17 10:15:40 2026 GMT Not After : Jul 24 10:15:40 2026 GMT Subject: CN=6a5a00cc-628f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:05:4c:70:43:0e:db:68:26:c7:de:14:3b:26: ba:45:18:b8:75:0b:55:8a:e0:60:b3:8c:9c:27:36: 72:47:38:6f:5b:10:6c:bc:85:00:0a:22:4e:6d:ec: a0:21:f4:3c:49:d9:e1:76:a1:84:91:54:c4:de:44: 5d:4b:25:2e:ed:c5:ed:e9:79:92:16:ca:46:b4:d5: 4f:51:fc:0f:58:48:08:c1:16:8c:5a:0a:5a:4b:f6: 5a:48:07:b8:2b:fa:da:43:0c:ec:fb:1e:c1:0f:95: 42:f4:aa:2d:0f:67:4c:91:08:bd:21:46:f4:20:37: c7:b8:88:7c:3c:03:78:37:95:a9:d6:fb:49:5a:48: 2b:a8:d9:65:35:23:dc:d2:d0:aa:2b:96:fe:50:80: 6d:16:3d:59:53:51:40:c4:72:89:7f:88:d0:7b:fd: 4f:94:0c:10:1d:cb:0c:17:77:26:5d:b1:1d:78:2d: d0:9d:53:89:91:1b:db:6e:1f:c3:54:e3:3a:e4:57: 98:e3:22:9f:e8:ed:00:1f:f7:e2:f3:ae:e6:17:25: f2:cb:ec:00:24:31:d6:c3:2a:a2:18:38:99:98:16: e5:eb:16:00:99:99:77:2e:98:ea:27:bc:82:e9:fd: 20:59:3f:de:d5:a4:ae:dc:d2:fc:72:2f:85:58:f2: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:87:3F:EC:42:98:E7:DF:93:48:82:7E:9F:C3:56:F7:CB:DB:7C:9A X509v3 Authority Key Identifier: keyid:94:01:75:72:1E:70:B6:20:8C:5C:A0:29:38:B3:0E:04:51:B9:9C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lAF1ch5wtiCMXKApOLMOBFG5nEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185308/EBCDD274557A11F188F83279CB833773/lAF1ch5wtiCMXKApOLMOBFG5nEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:4c:33:da:d9:cf:fb:e3:f8:96:c8:bf:14:c0:b7:57:c7:e8: ec:52:6d:0b:d6:95:9b:63:14:65:8b:79:71:f0:7f:69:65:34: 6d:9a:a3:16:cb:84:90:32:a4:0a:9e:4d:b9:a8:7c:c1:99:d7: f8:6b:2d:e3:72:b4:ff:bf:bd:a3:a2:7a:64:93:28:2f:c6:86: 2c:cf:26:82:87:d3:7a:18:65:80:c3:eb:a1:a6:85:1b:69:2d: 72:2f:37:47:cf:26:9b:3a:1b:fd:71:66:f8:fa:69:ea:a0:b8: cd:f3:b6:15:28:ca:af:a7:da:6e:93:50:5d:5f:2b:08:42:5f: f3:22:04:91:d2:02:c6:52:7a:a4:79:1f:92:3a:75:ce:1d:ba: 92:46:e3:be:df:de:e8:f5:e5:ab:d0:f6:96:ce:e0:55:5c:58: 17:f7:28:7f:f8:2a:b5:e2:18:b9:e8:36:69:ba:28:ef:6c:96: 6a:3d:f4:bb:05:aa:c0:a0:b8:e0:a2:bb:f2:a0:5b:4c:c2:3f: 06:bc:58:45:ee:35:22:1b:7b:ee:17:93:5a:55:ad:0d:8b:86: eb:5c:2b:c4:4e:87:dc:17:08:77:26:53:05:47:29:59:1b:77: d5:8e:1a:f8:31:32:0f:48:02:12:21:7b:e4:82:a0:b7:c8:f9: 5d:76:42:37 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTMwODExMC8GA1UEBRMoOTQwMTc1NzIxRTcwQjYyMDhDNUNBMDI5MzhCMzBFMDQ1 MUI5OUM0NDAeFw0yNjA3MTcxMDE1NDBaFw0yNjA3MjQxMDE1NDBaMBgxFjAUBgNV BAMTDTZhNWEwMGNjLTYyOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVBUxwQw7baCbH3hQ7JrpFGLh1C1WK4GCzjJwnNnJHOG9bEGy8hQAKIk5t7KAh 9DxJ2eF2oYSRVMTeRF1LJS7txe3peZIWyka01U9R/A9YSAjBFoxaClpL9lpIB7gr +tpDDOz7HsEPlUL0qi0PZ0yRCL0hRvQgN8e4iHw8A3g3lanW+0laSCuo2WU1I9zS 0Korlv5QgG0WPVlTUUDEcol/iNB7/U+UDBAdywwXdyZdsR14LdCdU4mRG9tuH8NU 4zrkV5jjIp/o7QAf9+LzruYXJfLL7AAkMdbDKqIYOJmYFuXrFgCZmXcumOonvILp /SBZP97VpK7c0vxyL4VY8tJJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwIc/7EKY 59+TSIJ+n8NW98vbfJowHwYDVR0jBBgwFoAUlAF1ch5wtiCMXKApOLMOBFG5nEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MzA4L0VCQ0REMjc0NTU3 QTExRjE4OEY4MzI3OUNCODMzNzczL2xBRjFjaDV3dGlDTVhLQXBPTE1PQkZHNW5F US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbEFGMWNoNXd0aUNNWEtBcE9MTU9CRkc1bkVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MzA4L0VCQ0REMjc0NTU3QTExRjE4OEY4MzI3OUNCODMzNzczL2xBRjFjaDV3dGlD TVhLQXBPTE1PQkZHNW5FUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBGTDPa2c/74/iWyL8UwLdXx+jsUm0L1pWbYxRli3lx8H9pZTRtmqMWy4SQMqQK nk25qHzBmdf4ay3jcrT/v72jonpkkygvxoYszyaCh9N6GGWAw+uhpoUbaS1yLzdH zyabOhv9cWb4+mnqoLjN87YVKMqvp9puk1BdXysIQl/zIgSR0gLGUnqkeR+SOnXO HbqSRuO+397o9eWr0PaWzuBVXFgX9yh/+Cq14hi56DZpuijvbJZqPfS7BarAoLjg orvyoFtMwj8GvFhF7jUiG3vuF5NaVa0Ni4brXCvETofcFwh3JlMFRylZG3fVjhr4 MTIPSAISIXvkgqC3yPlddkI3 -----END CERTIFICATE-----Generated at Sat Jul 18 05:24:24 2026 by rpki-client