$ rpki-client -vvf rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft File: cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft (raw, json) Hash identifier: Dihz1/Oo30r0cfhSw2OyxEqCYZgYlWOwqRj3nfEgz2A= Subject key identifier: 10:4A:38:2A:1D:C2:DF:74:24:6F:E5:FC:AB:A8:4E:47:F9:39:42:3E Authority key identifier: 73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B Certificate issuer: /CN=A9112F94/serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft Manifest number: 19 Signing time: Thu 23 Jul 2026 11:08:12 +0000 Manifest this update: Thu 23 Jul 2026 11:08:12 +0000 Manifest next update: Thu 30 Jul 2026 11:08:12 +0000 Files and hashes: 1: cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl (hash: R7GHOhJCFtK2fbXWrwaQEgz5WHdM9I7wCnTuj8GPHMs=) 2: 1603FF2C6AE911F1B5ED47487247A888.roa (hash: 3qfyehPx18iZ+nZ3Fp3nstIPk0IChqfQZsM3HoTDXwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112F94, serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B Validity Not Before: Jul 23 11:08:12 2026 GMT Not After : Jul 30 11:08:12 2026 GMT Subject: CN=6a61f61c-ea46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:06:77:9a:8a:00:15:1f:8d:92:cb:09:fb: 6f:6c:d5:bb:0c:bc:96:64:31:4e:21:b7:80:67:7c: 23:e6:60:b4:47:71:06:6b:46:07:78:c1:e1:a4:a4: 42:68:c5:e1:69:9e:6e:47:7e:4c:77:00:85:59:62: a1:79:40:c3:64:b4:9b:62:15:ff:6b:1a:fc:ad:71: ca:df:d1:19:6e:d4:7b:d8:56:8f:ee:1b:7b:fa:8a: e6:43:da:7a:ef:e0:1d:41:13:66:c2:a9:ba:b3:48: bc:68:4f:ff:81:52:a1:3c:20:e2:57:02:e5:fd:a6: 2d:a6:5b:11:05:e0:26:8f:a9:06:62:15:ba:88:35: fa:db:e0:35:bf:20:d4:6a:46:fb:05:ed:22:f4:ae: 85:36:e7:9f:cf:6c:bf:47:98:ff:81:26:d6:2d:ba: c8:29:f2:d1:b2:d1:6e:12:1a:85:1a:9d:1e:56:1a: c2:df:2a:f4:24:32:94:c0:31:9b:27:4c:00:38:bc: f4:f1:c4:12:bf:2a:b6:ca:e0:92:7e:38:17:25:41: ef:43:fb:e5:27:20:d3:5a:53:84:e4:62:a1:38:90: 04:19:76:44:de:e5:b8:83:7b:72:6c:02:8e:00:28: be:96:2f:60:a2:bd:8d:ae:cd:c1:6b:f5:20:05:23: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4A:38:2A:1D:C2:DF:74:24:6F:E5:FC:AB:A8:4E:47:F9:39:42:3E X509v3 Authority Key Identifier: keyid:73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d8:b5:8a:d8:93:5c:8b:4e:9e:99:51:18:3b:75:fa:b7:20: ee:71:e4:dd:e8:33:10:a8:c1:72:52:7d:af:ca:64:20:be:81: db:3f:60:55:54:4d:cb:e3:e2:2e:6d:be:79:a3:7d:44:1c:9d: c4:f8:f3:ce:23:4a:08:bc:be:04:a5:87:6f:c6:de:ec:9b:44: be:64:54:a6:bc:b1:19:0a:ad:e4:a1:c1:53:37:42:5f:db:aa: ea:c9:f4:2c:bd:cd:4a:db:24:24:c5:26:0a:1b:cd:9a:06:a5: 28:29:2f:d8:df:0b:7a:1c:35:9b:9f:c8:99:20:c1:72:64:6b: b4:ab:8d:b5:ed:75:00:73:91:94:4a:f6:9b:24:93:63:62:c3: 9a:60:a8:70:36:11:e9:0e:23:0c:97:2f:aa:2a:bc:66:95:d7: 5a:3f:90:04:ff:e3:5a:fa:ab:b9:df:8a:bf:1d:55:94:21:cc: 53:a7:1f:55:fd:72:2c:e4:c5:83:34:11:c0:3c:35:5a:1c:35: b8:a9:6c:18:18:40:48:d6:0b:4c:12:62:93:5e:c6:0b:2c:cd: bc:ac:76:93:89:bf:5b:22:1b:83:8f:6d:be:72:9b:7a:d9:36: 72:83:1b:0a:4c:fd:f4:11:ee:33:d8:68:b8:ca:b6:2b:f6:76: 83:83:40:b6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkY5NDExMC8GA1UEBRMoNzMxQTVERDRENjRBNzBCNzFEMzhCMEI1NEJBNDU0NkI2 NjgzQTAxQjAeFw0yNjA3MjMxMTA4MTJaFw0yNjA3MzAxMTA4MTJaMBgxFjAUBgNV BAMTDTZhNjFmNjFjLWVhNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3lgZ3mooAFR+NkssJ+29s1bsMvJZkMU4ht4BnfCPmYLRHcQZrRgd4weGkpEJo xeFpnm5Hfkx3AIVZYqF5QMNktJtiFf9rGvytccrf0Rlu1HvYVo/uG3v6iuZD2nrv 4B1BE2bCqbqzSLxoT/+BUqE8IOJXAuX9pi2mWxEF4CaPqQZiFbqINfrb4DW/INRq RvsF7SL0roU255/PbL9HmP+BJtYtusgp8tGy0W4SGoUanR5WGsLfKvQkMpTAMZsn TAA4vPTxxBK/KrbK4JJ+OBclQe9D++UnINNaU4TkYqE4kAQZdkTe5biDe3JsAo4A KL6WL2CivY2uzcFr9SAFI6HhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEEo4Kh3C 33Qkb+X8q6hOR/k5Qj4wHwYDVR0jBBgwFoAUcxpd1NZKcLcdOLC1S6RUa2aDoBsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRjk0L0VBQUYyOEVBNkFE MTExRjE5NkJBNUUyRTZCNDdBODg4L2N4cGQxTlpLY0xjZE9MQzFTNlJVYTJhRG9C cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY3hwZDFOWktjTGNkT0xDMVM2UlVhMmFEb0JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy Rjk0L0VBQUYyOEVBNkFEMTExRjE5NkJBNUUyRTZCNDdBODg4L2N4cGQxTlpLY0xj ZE9MQzFTNlJVYTJhRG9Ccy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBW2LWK2JNci06emVEYO3X6tyDuceTd6DMQqMFyUn2vymQgvoHbP2BVVE3L4+Iu bb55o31EHJ3E+PPOI0oIvL4EpYdvxt7sm0S+ZFSmvLEZCq3kocFTN0Jf26rqyfQs vc1K2yQkxSYKG82aBqUoKS/Y3wt6HDWbn8iZIMFyZGu0q4217XUAc5GUSvabJJNj YsOaYKhwNhHpDiMMly+qKrxmlddaP5AE/+Na+qu534q/HVWUIcxTpx9V/XIs5MWD NBHAPDVaHDW4qWwYGEBI1gtMEmKTXsYLLM28rHaTib9bIhuDj22+cpt62TZygxsK TP30Ee4z2Gi4yrYr9naDg0C2 -----END CERTIFICATE-----Generated at Thu Jul 23 21:17:18 2026 by rpki-client