$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: Y94WJnIJjGbge8jruK/PSzrXHDq65J14x6amuOhAGiY= Subject key identifier: 41:40:D6:84:73:67:15:80:8A:57:77:90:51:FF:66:A7:92:1D:49:FF Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: 01DF Signing time: Tue 21 Jul 2026 05:30:42 +0000 Manifest this update: Tue 21 Jul 2026 05:30:42 +0000 Manifest next update: Tue 28 Jul 2026 05:30:42 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: 5Vsalj7XJBn79/ysDFeaTayDLBCVr9CqOJu7TL9enCA=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: 9ihywTWH8D0AsKW3lVgSJVrGmFJI4l3WNEZsqdCL8R8=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: 7i/+pU2Et59KGbh7B5+qqFDZaAktF1/YoczW2JWdHFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 05:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Jul 21 05:30:42 2026 GMT Not After : Jul 28 05:30:42 2026 GMT Subject: CN=6a5f0402-2813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:df:9e:23:7b:42:40:79:d9:e5:64:6a:6a: f2:aa:11:c3:0b:3f:88:51:44:01:97:e6:ab:e1:bf: 0d:0f:50:d3:ef:45:c4:0f:06:1e:11:45:7e:06:6e: 07:a1:55:61:e7:54:12:3b:6f:9f:b3:bb:7b:68:45: 1a:cf:fc:a5:f0:2f:ae:1c:ee:1c:64:9c:e3:02:b0: bd:46:4a:7f:cc:1c:f9:29:71:79:2e:66:bc:20:5d: e9:c9:27:a5:82:e3:c4:98:11:90:28:10:2b:62:d7: 9f:0a:d8:28:d1:aa:4e:8d:aa:80:9c:27:c4:b0:9a: 7c:60:26:df:08:a9:f4:6d:de:22:98:73:05:f3:83: de:64:6f:84:17:14:c8:dc:f6:d9:9d:c8:f7:cb:5b: 7d:9f:fc:30:66:46:1f:d1:15:46:e3:e0:05:d6:12: 6e:0d:15:68:fa:5a:5a:18:17:ff:08:a8:d4:b4:d1: 06:cc:c8:49:e4:47:21:9b:61:19:e2:ff:87:53:9f: e4:2d:e1:b4:c2:cb:38:b6:a6:91:81:50:dc:01:cf: 4c:12:d3:a4:e8:35:0b:42:ae:2c:70:0c:32:65:a8: cd:2c:8f:c9:c5:43:e4:1e:a6:06:26:49:3d:09:0b: 03:64:97:e4:0d:02:e0:f4:50:4b:48:82:96:ef:72: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:40:D6:84:73:67:15:80:8A:57:77:90:51:FF:66:A7:92:1D:49:FF X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b8:8d:c4:e2:85:1c:66:7e:4b:ea:4c:8b:d0:77:0d:c8:a1: aa:80:62:50:5b:3b:9c:9f:e0:df:e6:80:f5:60:53:e4:7b:df: 0b:38:ee:38:af:16:09:4e:7a:d9:d8:68:6e:08:24:99:bd:99: 28:82:11:b8:0f:88:53:ce:cf:a7:81:d3:a3:05:4e:a3:63:d0: a3:2c:75:4c:48:65:92:ae:70:54:20:9e:84:d9:44:84:b8:76: 36:d7:a7:e9:e1:6a:9c:2d:fa:b6:2b:c6:b5:3b:02:15:06:90: 77:2d:be:f1:77:ea:a6:8c:63:89:5f:78:e2:aa:4f:f8:ab:ec: 05:39:2c:52:bb:4e:e8:11:5d:fe:28:76:b8:8d:0a:80:e7:cc: 00:87:45:10:83:bf:fd:d7:98:02:4c:5e:15:9d:52:a4:2f:d0: 84:a6:f0:e0:a2:4c:6b:ae:14:99:3b:93:6b:cc:b3:f2:fa:16: 82:3f:71:ac:21:4a:2f:12:f1:6f:95:9b:ae:3e:ba:48:35:3d: fe:d4:8f:86:70:29:d1:6a:ab:73:83:3a:54:a4:5e:fc:92:53: 7a:ed:98:cb:08:41:e5:12:2c:4e:bf:53:f2:88:a2:12:b5:f4: 0f:d7:79:ae:1f:f9:a8:68:92:52:26:88:c1:26:48:fe:31:5a: 90:a4:4e:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjYwNzIxMDUzMDQyWhcNMjYwNzI4MDUzMDQyWjAYMRYwFAYD VQQDEw02YTVmMDQwMi0yODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhvfniN7QkB52eVkamryqhHDCz+IUUQBl+ar4b8ND1DT70XEDwYeEUV+Bm4H oVVh51QSO2+fs7t7aEUaz/yl8C+uHO4cZJzjArC9Rkp/zBz5KXF5Lma8IF3pySel guPEmBGQKBArYtefCtgo0apOjaqAnCfEsJp8YCbfCKn0bd4imHMF84PeZG+EFxTI 3PbZncj3y1t9n/wwZkYf0RVG4+AF1hJuDRVo+lpaGBf/CKjUtNEGzMhJ5Echm2EZ 4v+HU5/kLeG0wss4tqaRgVDcAc9MEtOk6DULQq4scAwyZajNLI/JxUPkHqYGJkk9 CQsDZJfkDQLg9FBLSIKW73IWzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFA1oRz ZxWAild3kFH/ZqeSHUn/MB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVriNxOKFHGZ+S+pMi9B3DcihqoBiUFs7nJ/g3+aA9WBT5HvfCzjuOK8WCU56 2dhobggkmb2ZKIIRuA+IU87Pp4HTowVOo2PQoyx1TEhlkq5wVCCehNlEhLh2Nten 6eFqnC36tivGtTsCFQaQdy2+8XfqpoxjiV944qpP+KvsBTksUrtO6BFd/ih2uI0K gOfMAIdFEIO//deYAkxeFZ1SpC/QhKbw4KJMa64UmTuTa8yz8voWgj9xrCFKLxLx b5Wbrj66SDU9/tSPhnAp0Wqrc4M6VKRe/JJTeu2YywhB5RIsTr9T8oiiErX0D9d5 rh/5qGiSUiaIwSZI/jFakKROHw== -----END CERTIFICATE-----Generated at Tue Jul 21 17:26:44 2026 by rpki-client