$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: hWYYCBuWre+8hgQlSTKc51P61Mp/1gjWSl5aeHgnBLU= Subject key identifier: 19:17:A8:BC:9A:F7:0C:E5:35:26:E0:16:F1:7C:C8:EA:DC:AC:23:73 Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 117D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 115C Signing time: Wed 22 Jul 2026 17:21:00 +0000 Manifest this update: Wed 22 Jul 2026 17:20:59 +0000 Manifest next update: Wed 29 Jul 2026 17:20:59 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: jtE4wZnpBoEPNMvtQAsxNr3p1dtpc96Yu+rolmCJ+0U=) 2: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: iceccqvc3kg29socz/RRWvyJpHDglBn90E6v9vB2qCg=) 3: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: dYx5rg+ikh6rVRuWFPmqQgmz1ejCnGZL23u6GCNg5Bw=) 4: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (hash: ssMQ43fjcNDdMMcxP4Zyw/zUAL+E/8FkY3VJGMomUwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4477 (0x117d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: Jul 22 17:20:59 2026 GMT Not After : Jul 29 17:20:59 2026 GMT Subject: CN=6a60fbfc-391c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1f:ef:bb:b5:fd:ea:7c:ff:67:7b:e8:71:f6: 0b:e5:01:a7:d0:52:13:21:4b:e9:c8:3e:23:82:08: 36:27:b0:18:b6:c1:dc:3b:ab:03:0c:aa:1e:5f:ad: 84:4d:1f:fb:b8:82:2d:d0:b6:e4:9d:ac:2b:dc:71: 37:8d:e7:51:74:56:28:59:61:fb:db:3f:58:d8:12: 6f:2d:ee:e3:25:21:4d:3e:bd:5f:62:a8:b9:cc:be: 34:0d:94:2f:b3:80:42:b4:48:2c:bb:12:e3:ac:78: c6:ed:90:b8:5f:e9:34:d6:5c:6c:e2:8c:1b:a0:c2: 55:dd:84:b2:d3:ea:8a:95:64:ce:5a:59:20:4f:ec: 09:87:13:72:dd:1b:ea:ff:76:b9:f0:19:65:b9:e3: 97:56:bc:cf:22:d6:a6:30:c1:2e:e6:f9:9c:51:a7: 69:77:c9:5b:e1:41:46:cc:e0:0e:d6:b9:e1:69:fe: 9e:4b:57:38:82:34:d2:62:80:84:73:a6:f9:68:89: 8c:b1:22:09:d3:7c:c4:c1:50:2d:50:54:cf:0e:de: f4:e4:99:b9:1e:37:77:52:38:f5:00:64:4e:23:0e: 9c:b6:e6:25:fc:d6:00:80:37:0f:42:88:1f:7f:4d: c2:78:b0:90:18:b6:0c:76:ec:12:1a:0b:62:d0:50: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:A8:BC:9A:F7:0C:E5:35:26:E0:16:F1:7C:C8:EA:DC:AC:23:73 X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:27:1d:ab:88:ff:40:b1:cf:5c:a3:a5:91:0e:95:e1:93:98: df:53:42:83:50:2d:55:99:e1:17:b2:f9:3a:38:d1:c0:7d:84: c9:2a:bb:05:79:13:53:b3:b8:64:0f:9c:6e:dd:8f:a1:94:b0: ff:82:01:06:5f:16:02:0e:54:30:bc:1e:21:19:e8:e2:19:63: e6:7b:76:e4:e7:6f:58:85:11:95:88:fe:fb:5f:3c:b0:ca:02: ac:c9:af:7c:ab:9a:f5:29:b6:cb:ac:70:b4:a9:43:c9:5c:c9: 0e:23:c5:a0:66:6e:36:33:3c:52:ea:7d:94:58:0c:26:a9:ba: 33:f5:97:90:95:3c:7f:e1:c8:6f:9f:2a:db:9f:e3:5f:7a:f6: cb:80:3c:35:67:4a:b9:ee:f9:eb:61:53:74:dc:98:3c:29:f4: 2a:43:e8:f1:a7:5f:f1:f9:3e:70:25:5e:ff:86:a8:0b:70:78: e0:04:8a:9d:a7:c7:42:42:cb:80:2a:a4:97:77:f4:23:50:e0: bd:55:d1:85:5a:d2:38:d5:80:fa:0b:5b:fe:92:20:ee:64:90: bc:42:38:17:7e:12:ec:ae:39:fc:d3:9a:0d:70:06:2d:a1:a8: d3:9c:2e:9e:6c:d1:3c:60:92:1e:d5:15:b8:46:b9:03:6b:5e: ea:5d:dd:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjYwNzIyMTcyMDU5WhcNMjYwNzI5MTcyMDU5WjAYMRYwFAYD VQQDEw02YTYwZmJmYy0zOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1B/vu7X96nz/Z3vocfYL5QGn0FITIUvpyD4jggg2J7AYtsHcO6sDDKoeX62E TR/7uIIt0Lbknawr3HE3jedRdFYoWWH72z9Y2BJvLe7jJSFNPr1fYqi5zL40DZQv s4BCtEgsuxLjrHjG7ZC4X+k01lxs4owboMJV3YSy0+qKlWTOWlkgT+wJhxNy3Rvq /3a58BllueOXVrzPItamMMEu5vmcUadpd8lb4UFGzOAO1rnhaf6eS1c4gjTSYoCE c6b5aImMsSIJ03zEwVAtUFTPDt705Jm5Hjd3Ujj1AGROIw6ctuYl/NYAgDcPQogf f03CeLCQGLYMduwSGgti0FD/2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkXqLya 9wzlNSbgFvF8yOrcrCNzMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOScdq4j/QLHPXKOlkQ6V4ZOY31NCg1AtVZnhF7L5OjjRwH2EySq7BXkTU7O4 ZA+cbt2PoZSw/4IBBl8WAg5UMLweIRno4hlj5nt25OdvWIURlYj++188sMoCrMmv fKua9Sm2y6xwtKlDyVzJDiPFoGZuNjM8Uup9lFgMJqm6M/WXkJU8f+HIb58q25/j X3r2y4A8NWdKue7562FTdNyYPCn0KkPo8adf8fk+cCVe/4aoC3B44ASKnafHQkLL gCqkl3f0I1DgvVXRhVrSONWA+gtb/pIg7mSQvEI4F34S7K45/NOaDXAGLaGo05wu nmzRPGCSHtUVuEa5A2te6l3dnw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:04:38 2026 by rpki-client