$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: HZ2XmjafOYIigxFcgyYf6ZWLYvwW2WQ1Dg1qRQY8yPM= Subject key identifier: E8:A0:03:A9:24:CE:90:89:8D:C7:96:FF:07:4D:76:D7:A2:C8:A3:96 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 0876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 0864 Signing time: Wed 22 Jul 2026 21:24:05 +0000 Manifest this update: Wed 22 Jul 2026 21:24:05 +0000 Manifest next update: Wed 29 Jul 2026 21:24:05 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: 8WezX1E1ay0TyRF0hzYjKAuyYDMNoAIegn7mCM8SNpU=) 2: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 4KpiEW9W9pRgd3+FQVTWJZ0pxE+Z+z9l6OeSvbZgOVU=) 3: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: YSshHnrBitWJflcXZv9vZjmuWryahdL3ueeQ/8L7cts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Jul 22 21:24:05 2026 GMT Not After : Jul 29 21:24:05 2026 GMT Subject: CN=6a6134f5-0501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:cd:ef:e5:07:9b:cf:90:1e:1b:63:7a:84: f5:bb:16:c4:63:d4:03:b1:d0:85:9b:37:71:a2:72: d9:c1:62:26:41:92:9e:64:c7:78:73:65:e1:56:59: 90:d5:9f:4f:62:e7:6c:ce:16:78:a4:95:39:68:78: df:27:e2:3d:3a:be:72:a5:5a:d3:de:7d:2d:83:fa: f9:6e:f1:56:dc:4e:88:51:47:ab:88:95:4b:dc:2b: 03:c0:94:21:1d:03:82:88:1e:25:cb:9e:0f:d8:3e: 69:8d:bb:ad:73:31:11:f9:ac:ab:dc:2f:79:7f:e8: a9:ff:07:5e:1e:a5:cf:e5:be:fd:c9:4f:e9:79:7b: 5c:20:c7:8a:a4:cd:b6:2a:b8:5a:0c:94:41:60:9f: 57:ad:36:77:86:d1:9d:ed:c4:0a:1f:68:07:f7:af: 8a:35:59:38:d7:03:ff:c2:0f:b3:b8:2a:4e:59:b5: 37:68:bb:cb:88:b4:b2:25:e6:52:8e:c1:1b:fd:c1: d7:9e:74:af:16:32:56:62:29:ae:59:30:17:c9:9f: 96:68:f7:a2:a3:a9:61:c1:00:ac:52:7e:f2:82:0a: 27:8a:ed:9c:b5:a9:ac:12:b4:1a:8b:a7:56:a8:5d: cb:c7:60:d3:34:86:27:36:fa:f8:5e:e8:f0:36:4b: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A0:03:A9:24:CE:90:89:8D:C7:96:FF:07:4D:76:D7:A2:C8:A3:96 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:3a:28:de:dd:5f:2e:63:23:98:8d:45:0d:73:89:cc:c6:11: b6:2f:b2:2c:a3:d2:6e:ad:80:e3:cc:c5:00:8c:c3:99:94:a2: 47:26:51:56:c3:f3:8c:7b:91:82:92:54:4d:a2:20:bd:8c:01: a8:e7:99:0e:3f:60:bb:33:6d:98:2a:e3:30:e5:6d:43:c1:2b: 9b:ad:02:b3:c5:db:59:ee:74:cf:5b:ee:de:30:4d:44:a3:8e: 3d:c0:77:fc:7d:f7:71:ad:94:96:f9:7e:57:33:76:e6:ac:37: 43:1b:7e:35:a0:e1:f4:96:59:95:4d:03:37:43:d5:56:d9:e0: 0e:1e:b7:9b:b7:ad:3a:ac:63:e2:8a:93:cb:1c:9d:0d:f1:b7: 45:4d:94:86:1a:15:c4:52:9f:82:ba:b5:03:8c:ab:28:f2:b6: fe:d9:e0:60:bc:c7:eb:70:8b:d9:74:a0:d3:8e:54:39:cd:c3: 4b:91:29:17:d5:8c:25:9e:0e:0d:aa:64:64:48:fd:f2:c4:52: 9e:8e:a7:bb:c8:01:c4:b4:df:9f:a4:e4:b6:f2:cd:b4:c1:f0: 63:c7:1a:fc:92:8e:dc:26:1d:ca:9b:84:00:20:f9:e1:4b:22: f1:cd:6e:3a:91:c9:a0:60:7c:90:b4:e4:4f:1d:18:0f:78:18: a5:df:11:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjYwNzIyMjEyNDA1WhcNMjYwNzI5MjEyNDA1WjAYMRYwFAYD VQQDEw02YTYxMzRmNS0wNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12DN7+UHm8+QHhtjeoT1uxbEY9QDsdCFmzdxonLZwWImQZKeZMd4c2XhVlmQ 1Z9PYudszhZ4pJU5aHjfJ+I9Or5ypVrT3n0tg/r5bvFW3E6IUUeriJVL3CsDwJQh HQOCiB4ly54P2D5pjbutczER+ayr3C95f+ip/wdeHqXP5b79yU/peXtcIMeKpM22 KrhaDJRBYJ9XrTZ3htGd7cQKH2gH96+KNVk41wP/wg+zuCpOWbU3aLvLiLSyJeZS jsEb/cHXnnSvFjJWYimuWTAXyZ+WaPeio6lhwQCsUn7yggoniu2ctamsErQai6dW qF3Lx2DTNIYnNvr4XujwNksnUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOigA6kk zpCJjceW/wdNdteiyKOWMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVjoo3t1fLmMjmI1FDXOJzMYRti+yLKPSbq2A48zFAIzDmZSiRyZRVsPzjHuR gpJUTaIgvYwBqOeZDj9guzNtmCrjMOVtQ8Erm60Cs8XbWe50z1vu3jBNRKOOPcB3 /H33ca2Ulvl+VzN25qw3Qxt+NaDh9JZZlU0DN0PVVtngDh63m7etOqxj4oqTyxyd DfG3RU2UhhoVxFKfgrq1A4yrKPK2/tngYLzH63CL2XSg045UOc3DS5EpF9WMJZ4O DapkZEj98sRSno6nu8gBxLTfn6TktvLNtMHwY8ca/JKO3CYdypuEACD54Usi8c1u OpHJoGB8kLTkTx0YD3gYpd8RCA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:39 2026 by rpki-client