$ rpki-client -vvf rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft File: X8FhrArBnYiSpuQmdvsPqdTO2yw.mft (raw, json) Hash identifier: /YykhrLrqdGQgDsKv6jQlLnMDdKoVV4QmH0qYPvz7QQ= Subject key identifier: 40:53:A7:CD:50:AA:CE:39:4E:DD:1C:E6:00:72:3C:D3:2B:65:A1:FB Authority key identifier: 5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C Certificate issuer: /CN=A912A45D/serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft Manifest number: 0F Signing time: Thu 23 Jul 2026 11:16:25 +0000 Manifest this update: Thu 23 Jul 2026 11:16:25 +0000 Manifest next update: Thu 30 Jul 2026 11:16:25 +0000 Files and hashes: 1: X8FhrArBnYiSpuQmdvsPqdTO2yw.crl (hash: uDkJGVY5oGxszJ9pM6xlkvaxmelvC3PBJwSjF5eFq/U=) 2: A55B56FC812311F1A313CCFA74A30FBC.roa (hash: B/6yUAqz3UFMEFVVFzKb3P2jonmiBMOTRqF1EEEr/+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A45D, serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C Validity Not Before: Jul 23 11:16:25 2026 GMT Not After : Jul 30 11:16:25 2026 GMT Subject: CN=6a61f809-44ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:b1:78:bd:f0:09:b7:9b:8e:57:29:98:67: 6c:44:c1:e0:72:6b:c1:e7:c8:aa:10:77:f9:f1:ae: e0:e8:14:40:21:92:86:3f:ed:81:a0:94:40:ce:c1: 28:09:be:e2:1c:58:e2:f6:73:87:2b:f2:74:99:df: 6d:98:c4:14:db:92:0b:12:25:c9:6b:a2:9a:de:86: a5:5b:bc:a0:69:b9:4f:dc:86:2d:92:7c:15:62:0f: de:d6:7c:59:66:96:a6:56:3e:16:dd:13:eb:60:02: 96:19:22:c9:34:e3:91:9a:c5:79:d7:17:6b:ac:79: 7d:10:2c:67:60:b9:65:73:43:8d:4a:1a:d1:87:f9: 56:c1:16:8d:f0:ac:55:9f:03:46:39:1c:ef:e5:dc: 01:cf:db:e2:dd:cc:57:37:f2:ef:db:35:13:7b:c6: 31:99:eb:b4:2d:7a:a9:3d:e8:6f:02:fa:c7:d8:72: 4f:9f:ab:79:be:29:19:c1:cb:8e:23:05:78:f6:af: 97:99:28:b6:46:6b:00:e6:02:9c:42:03:da:1e:d5: c9:32:46:b1:c4:29:94:b2:55:a5:21:6d:7a:60:95: 65:ce:d8:c1:ea:21:2b:42:9b:7b:72:dd:ee:0f:9e: bf:89:b8:4f:b2:93:92:9c:7a:cf:dc:16:6a:fe:c1: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:A7:CD:50:AA:CE:39:4E:DD:1C:E6:00:72:3C:D3:2B:65:A1:FB X509v3 Authority Key Identifier: keyid:5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b2:d9:cc:b9:35:37:3f:0c:f4:6d:d5:eb:04:d8:94:56:f6: 2e:41:54:91:6a:52:a4:23:e6:12:22:af:33:c7:ae:3e:cf:89: 0f:35:82:ae:de:f8:b8:4a:50:e8:b2:4d:d8:28:99:ca:ee:d0: a7:a2:0e:6d:42:48:af:0f:42:49:46:6f:fc:4c:ad:70:b8:65: bf:66:c5:a8:b7:a4:99:19:a7:71:a2:76:87:bd:28:83:4a:b2: f6:f9:da:55:d1:ac:5b:81:52:ed:52:e1:20:4f:da:8f:7e:8f: f9:76:70:55:2f:2f:a4:d6:56:f7:a5:64:1f:3e:cf:3c:7b:ff: 8c:6d:ca:d6:a1:74:21:3e:17:6c:e8:f0:91:29:76:fb:7e:eb: 33:78:0c:06:12:94:e7:63:c2:a2:74:d8:cb:7b:50:e9:ce:32: af:1f:e9:62:02:60:8c:00:61:1a:a1:7b:b5:2c:f8:e0:b8:3c: c7:fe:a9:60:18:f0:7f:1b:e6:50:05:3f:08:fc:e4:47:6c:44: 06:e5:c6:41:34:05:56:34:a7:26:ed:34:a4:37:b8:22:ab:3b: b8:7d:b8:de:a4:8e:fe:93:e2:51:db:bb:26:21:4b:f8:4f:cc: 78:eb:4a:0a:54:f6:fd:7e:87:92:65:55:54:30:7c:83:93:7f: de:2e:11:c6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTQ1RDExMC8GA1UEBRMoNUZDMTYxQUMwQUMxOUQ4ODkyQTZFNDI2NzZGQjBGQTlE NENFREIyQzAeFw0yNjA3MjMxMTE2MjVaFw0yNjA3MzAxMTE2MjVaMBgxFjAUBgNV BAMTDTZhNjFmODA5LTQ0YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMyLF4vfAJt5uOVymYZ2xEweBya8HnyKoQd/nxruDoFEAhkoY/7YGglEDOwSgJ vuIcWOL2c4cr8nSZ322YxBTbkgsSJclroprehqVbvKBpuU/chi2SfBViD97WfFlm lqZWPhbdE+tgApYZIsk045GaxXnXF2useX0QLGdguWVzQ41KGtGH+VbBFo3wrFWf A0Y5HO/l3AHP2+LdzFc38u/bNRN7xjGZ67Qteqk96G8C+sfYck+fq3m+KRnBy44j BXj2r5eZKLZGawDmApxCA9oe1ckyRrHEKZSyVaUhbXpglWXO2MHqIStCm3ty3e4P nr+JuE+yk5Kces/cFmr+wdzlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQFOnzVCq zjlO3RzmAHI80ytlofswHwYDVR0jBBgwFoAUX8FhrArBnYiSpuQmdvsPqdTO2yww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNDVELzc2NTI4QjA2N0I5 QjExRjE5MTI0QzM0MTcxQTMwRkJDL1g4RmhyQXJCbllpU3B1UW1kdnNQcWRUTzJ5 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWDhGaHJBckJuWWlTcHVRbWR2c1BxZFRPMnl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NDVELzc2NTI4QjA2N0I5QjExRjE5MTI0QzM0MTcxQTMwRkJDL1g4RmhyQXJCbllp U3B1UW1kdnNQcWRUTzJ5dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAcstnMuTU3Pwz0bdXrBNiUVvYuQVSRalKkI+YSIq8zx64+z4kPNYKu3vi4SlDo sk3YKJnK7tCnog5tQkivD0JJRm/8TK1wuGW/ZsWot6SZGadxonaHvSiDSrL2+dpV 0axbgVLtUuEgT9qPfo/5dnBVLy+k1lb3pWQfPs88e/+MbcrWoXQhPhds6PCRKXb7 fuszeAwGEpTnY8KidNjLe1DpzjKvH+liAmCMAGEaoXu1LPjguDzH/qlgGPB/G+ZQ BT8I/ORHbEQG5cZBNAVWNKcm7TSkN7giqzu4fbjepI7+k+JR27smIUv4T8x460oK VPb9foeSZVVUMHyDk3/eLhHG -----END CERTIFICATE-----Generated at Thu Jul 23 21:35:37 2026 by rpki-client