$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: f9Ol4csRSebmeN7e0LysH1PqXd3DgyVkdQy/uZpoy00= Subject key identifier: 6D:D6:28:BC:3B:27:5D:6A:0C:19:6C:0A:0E:94:82:09:4F:C7:FE:E4 Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 0619 Signing time: Wed 22 Jul 2026 23:32:06 +0000 Manifest this update: Wed 22 Jul 2026 23:32:06 +0000 Manifest next update: Wed 29 Jul 2026 23:32:06 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: a4p5jUJI2/aKoTonFCtJ49wheD4xnmjZJb55wVuYoGo=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: YDIYwh8IZsocldDrNfzej1ZrNQO57DlnoJZAAXQRlpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Jul 22 23:32:06 2026 GMT Not After : Jul 29 23:32:06 2026 GMT Subject: CN=6a6152f6-8110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:19:8a:2c:c8:dd:eb:ed:f1:47:55:f5:ba: ea:17:c8:b7:00:c7:c1:97:de:ff:94:3e:57:7b:bf: 6b:2c:03:42:82:1b:71:0f:af:88:54:4e:2e:dc:f7: 21:b3:0b:a8:5f:a1:61:f2:9f:02:01:55:1d:d1:7e: a7:d7:96:97:7b:8a:a8:bf:1c:ec:ce:1d:9d:81:e6: 4b:d1:4e:e0:d6:4b:7e:f7:d1:94:62:76:ea:79:02: 4b:7e:ed:d5:d0:24:18:d1:e0:a5:99:25:f5:7d:24: b9:84:71:9c:f8:2c:f1:5e:bf:9e:79:83:3c:05:37: 45:29:40:ab:5b:19:be:fe:67:a1:25:13:3b:b5:7f: 94:3e:2f:84:cf:cb:11:db:60:d7:2a:79:7c:e0:bb: 55:ca:7e:dc:73:b4:87:50:e2:42:11:e0:6e:1b:0c: ff:4f:0d:20:c1:30:5a:68:e7:4f:21:b3:19:fa:6e: 7c:f5:af:fb:89:6a:da:ad:58:6f:96:7a:12:28:1e: 57:25:f9:ad:d1:ea:5b:69:15:ca:ad:7a:46:4f:32: 76:20:fa:ab:98:c4:f4:50:7b:3c:3e:40:38:12:68: d6:59:0e:54:28:5c:b7:da:cd:70:ac:ed:f3:30:b7: 15:be:fc:35:b1:0b:eb:79:99:5e:33:37:ce:9a:39: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:28:BC:3B:27:5D:6A:0C:19:6C:0A:0E:94:82:09:4F:C7:FE:E4 X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:c9:83:d6:cb:f6:93:ed:88:80:62:d0:a7:f5:25:c2:51:76: be:01:fb:98:db:b5:f9:6c:9e:65:18:77:bf:ca:10:e4:70:33: 7b:f6:34:43:94:48:61:b4:e9:1c:a1:0d:4e:2f:94:48:f0:f9: 42:a4:99:e2:4f:26:51:e2:10:19:84:8e:69:00:d5:bb:73:46: f1:6a:f8:54:68:db:5b:b5:6e:40:ed:07:dd:29:94:c5:06:b2: c7:aa:9c:d5:fc:3d:18:c8:19:86:8d:57:e8:58:20:4a:75:86: cd:f7:f8:d1:c5:c1:9f:1f:b5:15:05:ef:c7:b2:b5:97:3e:78: ba:c1:62:8f:75:0d:f8:8e:ac:fa:1b:b1:3c:a0:ea:1f:cf:b1: 7d:a5:1e:49:90:bf:58:3e:08:39:6a:4b:c0:2f:b2:5a:c3:33: 00:8b:54:bd:5c:cb:29:ca:95:af:f0:1a:4f:93:06:e6:a3:9a: 27:60:c7:31:39:d0:2b:5a:01:2c:d5:e5:e8:71:d5:ea:da:83: 06:d5:7c:6f:1b:79:f4:49:0d:6f:13:fa:c0:27:35:d2:28:11: 4f:b6:b1:93:aa:ef:b6:6d:8a:0c:23:b6:29:5e:18:bc:5d:51: 80:2b:57:83:9f:ed:06:53:7c:73:68:a7:d7:27:51:06:c4:6d: ba:dc:58:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjYwNzIyMjMzMjA2WhcNMjYwNzI5MjMzMjA2WjAYMRYwFAYD VQQDEw02YTYxNTJmNi04MTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywYZiizI3evt8UdV9brqF8i3AMfBl97/lD5Xe79rLANCghtxD6+IVE4u3Pch swuoX6Fh8p8CAVUd0X6n15aXe4qovxzszh2dgeZL0U7g1kt+99GUYnbqeQJLfu3V 0CQY0eClmSX1fSS5hHGc+CzxXr+eeYM8BTdFKUCrWxm+/mehJRM7tX+UPi+Ez8sR 22DXKnl84LtVyn7cc7SHUOJCEeBuGwz/Tw0gwTBaaOdPIbMZ+m589a/7iWrarVhv lnoSKB5XJfmt0epbaRXKrXpGTzJ2IPqrmMT0UHs8PkA4EmjWWQ5UKFy32s1wrO3z MLcVvvw1sQvreZleMzfOmjmpcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG3WKLw7 J11qDBlsCg6UgglPx/7kMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp8mD1sv2k+2IgGLQp/UlwlF2vgH7mNu1+WyeZRh3v8oQ5HAze/Y0Q5RIYbTp HKENTi+USPD5QqSZ4k8mUeIQGYSOaQDVu3NG8Wr4VGjbW7VuQO0H3SmUxQayx6qc 1fw9GMgZho1X6FggSnWGzff40cXBnx+1FQXvx7K1lz54usFij3UN+I6s+huxPKDq H8+xfaUeSZC/WD4IOWpLwC+yWsMzAItUvVzLKcqVr/AaT5MG5qOaJ2DHMTnQK1oB LNXl6HHV6tqDBtV8bxt59EkNbxP6wCc10igRT7axk6rvtm2KDCO2KV4YvF1RgCtX g5/tBlN8c2in1ydRBsRtutxY2g== -----END CERTIFICATE-----Generated at Fri Jul 24 11:23:39 2026 by rpki-client