$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: MdulMv5k0ZBg//quXOeKWJBOymnNqrdXDOrU0E38OAg= Subject key identifier: FC:A5:C8:B1:9A:32:E4:AC:08:78:8D:A2:AD:C4:C7:B9:18:30:3A:38 Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1CB0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1CA9 Signing time: Wed 22 Jul 2026 16:15:02 +0000 Manifest this update: Wed 22 Jul 2026 16:15:02 +0000 Manifest next update: Wed 29 Jul 2026 16:15:02 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: cW+jcoYshvUfdRad2UlnZEQw9QiHqRllcIJWmDi2Mvc=) 2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: NzPA3vTx/A3a5wnPCMTUeeGHZAhzPwo4b+b76jAubug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7344 (0x1cb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Jul 22 16:15:02 2026 GMT Not After : Jul 29 16:15:02 2026 GMT Subject: CN=6a60ec86-a420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:a9:df:bd:47:a1:a7:2c:06:09:81:44:cf: 7f:39:6b:2f:e2:1e:f7:ec:7c:32:78:bd:d7:fc:a3: f2:52:f7:c2:a3:6a:8e:a5:c6:f3:d0:0b:65:42:e2: e3:42:c0:b7:b2:2f:0c:e4:14:06:4c:73:c3:91:31: 97:a1:1f:49:9b:e6:5d:63:ce:4f:97:e2:5b:0d:40: 2e:4b:63:01:3c:83:19:3a:b5:c3:66:01:50:81:d4: 29:90:70:57:02:48:1e:83:61:12:a5:78:a8:fc:bc: a8:b1:5b:55:fe:3f:3c:c6:23:e9:f7:a5:00:8c:33: 39:a0:32:9b:b3:e6:6e:eb:52:bb:5d:f3:12:d4:f9: 81:10:6f:1c:8e:d9:ae:71:be:f5:54:a7:97:d2:9a: 95:bd:6b:38:ed:e9:d5:0c:2c:2c:fa:49:14:f8:f2: a8:64:5a:cb:e3:fa:02:9d:98:66:07:8c:b6:17:18: e0:fb:2f:18:a2:07:f1:2a:46:00:14:cd:53:a1:ab: c2:01:69:01:98:ab:b0:64:87:d1:64:e7:7a:0a:52: 27:26:e6:ba:24:61:77:90:7a:4b:89:56:27:c2:7a: 64:ef:02:82:44:0e:a7:e6:42:ad:7c:b6:12:41:ab: b6:99:f6:d8:74:77:e2:81:9c:7f:91:a1:b9:45:9f: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A5:C8:B1:9A:32:E4:AC:08:78:8D:A2:AD:C4:C7:B9:18:30:3A:38 X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d8:48:61:bc:88:ec:70:dc:db:87:8a:58:44:a0:87:9a:80: f1:8a:e6:b2:2f:4e:cc:6d:67:4f:c5:f2:c8:42:a0:44:09:97: c8:ed:da:e1:e6:a3:22:18:02:ae:ab:2b:ba:4c:f8:94:32:5d: 45:96:d5:c0:4d:80:27:22:8f:d4:3e:08:61:ae:61:93:4c:19: 73:20:c0:fd:79:1f:6e:5f:e1:a3:fd:e2:6d:18:b9:06:a8:bb: ad:96:ae:7a:c8:00:65:88:6f:e4:cb:1d:34:e5:cd:dd:73:91: 2f:3b:3d:c6:76:cb:30:41:43:5f:f8:61:f2:58:94:62:17:e8: 0d:30:18:20:31:98:8f:6d:8d:a2:cd:6f:79:70:b7:1a:d1:3d: 05:24:a5:5a:db:96:67:41:ea:d8:22:c7:f7:54:d4:46:0d:2c: b4:0c:08:11:26:33:8e:ba:04:e2:f0:27:a3:0a:87:dd:a4:27: a1:f5:d4:0e:78:9f:b7:35:a3:f3:7a:b0:d1:8a:ea:4c:cf:70: 81:85:ba:aa:2b:c6:b2:67:94:93:a7:e3:97:5a:dd:f1:e9:87: d7:44:65:77:df:11:16:14:89:71:80:62:20:f4:b2:05:42:79: 06:08:64:0c:38:82:50:f5:ad:f9:4d:bc:5e:50:21:f8:68:36: c7:8f:eb:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjYwNzIyMTYxNTAyWhcNMjYwNzI5MTYxNTAyWjAYMRYwFAYD VQQDEw02YTYwZWM4Ni1hNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yap371HoacsBgmBRM9/OWsv4h737HwyeL3X/KPyUvfCo2qOpcbz0AtlQuLj QsC3si8M5BQGTHPDkTGXoR9Jm+ZdY85Pl+JbDUAuS2MBPIMZOrXDZgFQgdQpkHBX Akgeg2ESpXio/LyosVtV/j88xiPp96UAjDM5oDKbs+Zu61K7XfMS1PmBEG8cjtmu cb71VKeX0pqVvWs47enVDCws+kkU+PKoZFrL4/oCnZhmB4y2Fxjg+y8YogfxKkYA FM1ToavCAWkBmKuwZIfRZOd6ClInJua6JGF3kHpLiVYnwnpk7wKCRA6n5kKtfLYS Qau2mfbYdHfigZx/kaG5RZ/0EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPylyLGa MuSsCHiNoq3Ex7kYMDo4MB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgthIYbyI7HDc24eKWESgh5qA8Yrmsi9OzG1nT8XyyEKgRAmXyO3a4eajIhgC rqsrukz4lDJdRZbVwE2AJyKP1D4IYa5hk0wZcyDA/Xkfbl/ho/3ibRi5Bqi7rZau esgAZYhv5MsdNOXN3XORLzs9xnbLMEFDX/hh8liUYhfoDTAYIDGYj22Nos1veXC3 GtE9BSSlWtuWZ0Hq2CLH91TURg0stAwIESYzjroE4vAnowqH3aQnofXUDniftzWj 83qw0YrqTM9wgYW6qivGsmeUk6fjl1rd8emH10Rld98RFhSJcYBiIPSyBUJ5Bghk DDiCUPWt+U28XlAh+Gg2x4/r3g== -----END CERTIFICATE-----Generated at Thu Jul 23 23:01:51 2026 by rpki-client