$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: jgQWMIG4HMjOrx3u2h/+KsB54vxJkGJIMsY1NPubmoI= Subject key identifier: 86:B6:4A:B2:F9:8F:51:49:00:E4:70:CE:E1:F7:CB:CA:B2:C2:BD:7C Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0F12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0EDE Signing time: Wed 22 Jul 2026 17:50:31 +0000 Manifest this update: Wed 22 Jul 2026 17:50:30 +0000 Manifest next update: Wed 29 Jul 2026 17:50:30 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: ZqBEbpxe8RMDKmbv80yunOAijh/bve6PnMdrQ42sj3w=) 2: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: IJy6vq3u18sfK/PaqQ4HkbGHvtQ0+WpPPGjw18M6VWY=) 3: 670DF186232111EB9896B783C4F9AE02.roa (hash: JDnnr+gXElLZfFNqxroiEtHe91q0ZicgMHi1XY427Ss=) 4: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E+4UeHlGnBHL9IRmWm+TexcyHwom9b/OOAx0STjQIo0=) 5: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: xo+tt5lov3udnd3XAOiK90QcwkAcxMUW1iuUC+4M+z8=) 6: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: jPTrigcWq4coxSH4UL7oP5hGP5jZz/yTxLEnnmOBFlo=) 7: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: bKvSPuftAoTubmq1z1G2lBaSXWyaRfT8vN+YYMv11yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3858 (0xf12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Jul 22 17:50:30 2026 GMT Not After : Jul 29 17:50:30 2026 GMT Subject: CN=6a6102e7-f66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:b3:95:46:75:68:d9:53:15:b6:d5:36:13: 43:9d:ee:0e:ef:a8:01:e5:e3:e8:d3:99:aa:79:b9: bf:3a:73:73:14:35:fd:87:ac:4c:08:50:9a:63:6d: 1b:de:66:dd:13:e4:0e:41:fa:21:a4:00:87:10:c7: 43:01:0a:a3:5e:60:88:32:2a:31:97:4f:fe:c7:52: bf:0b:4f:4c:1c:cc:4e:2a:64:61:32:65:1b:68:48: e6:2b:4b:aa:12:a6:d8:52:a1:f8:18:61:40:c6:68: 65:c3:02:e6:f0:94:56:00:f9:f3:ca:20:b3:b8:9a: b6:b2:ca:2b:c8:56:18:0f:e2:7f:bd:91:49:f4:f8: 45:14:9a:ab:82:36:57:60:1b:18:54:db:e6:4b:82: 68:3d:f0:25:6d:a7:c2:3f:be:f5:49:8d:6a:8a:27: 71:17:21:9c:f3:f7:6b:5a:b4:49:44:74:3a:ff:98: 64:8a:9c:2d:e3:f6:84:fc:a1:bf:f8:9b:a2:33:e9: ae:f1:67:8d:19:f7:cb:94:7f:7e:3d:7d:0f:7b:e5: ef:78:f8:2c:30:04:e2:34:c6:ef:c4:f0:87:68:ca: 97:7c:cf:75:f7:52:d6:a4:e9:9b:ca:15:03:55:fb: 3a:54:e9:6d:29:30:97:ba:6e:f1:ed:49:b3:24:d3: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B6:4A:B2:F9:8F:51:49:00:E4:70:CE:E1:F7:CB:CA:B2:C2:BD:7C X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:85:d8:65:31:1e:66:51:29:75:60:bf:94:ad:a4:9f:94:3c: ec:1d:2c:45:69:00:d1:ba:ac:3d:c5:97:0f:98:23:65:6c:4d: e6:b1:04:5e:28:4c:6e:35:cd:94:9f:9d:5e:c2:6b:12:e9:04: 8e:ed:aa:70:1d:b9:bb:05:83:8f:da:29:0e:56:08:22:a7:d5: ca:f3:0b:26:34:ca:f0:5b:7b:0a:d2:e6:87:37:79:c8:93:30: a2:2f:5a:bf:16:24:f0:ac:f5:9d:e0:77:77:c4:77:c8:ab:2c: 26:8e:f1:15:08:e1:72:6e:5f:d7:89:c2:ec:4c:84:5e:76:41: 42:99:8e:b6:44:33:89:a5:c2:bc:0e:e9:6c:76:1a:79:bc:c7: 6e:b9:91:a6:a2:53:ab:29:13:45:e1:23:27:7a:5c:b1:98:59: a7:3a:a3:bb:08:90:6d:8a:5a:e5:f5:3b:cd:48:57:35:d8:fd: 6b:04:b4:8e:85:01:40:9b:7e:60:27:63:b9:17:73:37:05:30: 8b:7a:b8:d9:25:a0:e3:fa:f1:61:44:40:0d:29:cc:65:7d:09: 54:6a:ae:be:11:e6:c2:2b:8a:38:1c:5b:a7:08:65:80:4c:4e: 0b:28:36:65:64:f7:64:3b:c5:b9:31:08:f2:3e:94:c9:94:b9: 22:36:54:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwNzIyMTc1MDMwWhcNMjYwNzI5MTc1MDMwWjAYMRYwFAYD VQQDEw02YTYxMDJlNy1mNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD+zlUZ1aNlTFbbVNhNDne4O76gB5ePo05mqebm/OnNzFDX9h6xMCFCaY20b 3mbdE+QOQfohpACHEMdDAQqjXmCIMioxl0/+x1K/C09MHMxOKmRhMmUbaEjmK0uq EqbYUqH4GGFAxmhlwwLm8JRWAPnzyiCzuJq2ssoryFYYD+J/vZFJ9PhFFJqrgjZX YBsYVNvmS4JoPfAlbafCP771SY1qiidxFyGc8/drWrRJRHQ6/5hkipwt4/aE/KG/ +JuiM+mu8WeNGffLlH9+PX0Pe+XvePgsMATiNMbvxPCHaMqXfM9191LWpOmbyhUD Vfs6VOltKTCXum7x7UmzJNN28wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIa2SrL5 j1FJAORwzuH3y8qywr18MB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARYXYZTEeZlEpdWC/lK2kn5Q87B0sRWkA0bqsPcWXD5gjZWxN5rEEXihMbjXN lJ+dXsJrEukEju2qcB25uwWDj9opDlYIIqfVyvMLJjTK8Ft7CtLmhzd5yJMwoi9a vxYk8Kz1neB3d8R3yKssJo7xFQjhcm5f14nC7EyEXnZBQpmOtkQziaXCvA7pbHYa ebzHbrmRpqJTqykTReEjJ3pcsZhZpzqjuwiQbYpa5fU7zUhXNdj9awS0joUBQJt+ YCdjuRdzNwUwi3q42SWg4/rxYURADSnMZX0JVGquvhHmwiuKOBxbpwhlgExOCyg2 ZWT3ZDvFuTEI8j6UyZS5IjZUbA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:03:35 2026 by rpki-client