$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft File: XLKYvBpwUBeAXFYfCQoNR5UOar0.mft (raw, json) Hash identifier: EfKb05FQDYTSNQjqTk1rnhVa8pm//KkfttvEjp9L4H0= Subject key identifier: 5D:FB:21:A0:00:8A:96:2B:8D:2F:E6:D2:C6:2C:2C:BE:74:64:8D:12 Authority key identifier: 5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD Certificate issuer: /CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Certificate serial: 25DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft Manifest number: 25DD Signing time: Wed 22 Jul 2026 14:16:42 +0000 Manifest this update: Wed 22 Jul 2026 14:16:42 +0000 Manifest next update: Wed 29 Jul 2026 14:16:42 +0000 Files and hashes: 1: XLKYvBpwUBeAXFYfCQoNR5UOar0.crl (hash: 5BKNKjihSiiSrVEWtqX5N3gJxOhyTDY88OD0Zur0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9693 (0x25dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Validity Not Before: Jul 22 14:16:42 2026 GMT Not After : Jul 29 14:16:42 2026 GMT Subject: CN=6a60d0ca-e451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:77:1c:f9:58:cb:4d:85:90:88:9f:0a:91: 7c:21:bf:f8:63:d5:59:61:4e:33:db:00:04:9f:80: 8e:23:bc:78:05:c1:ac:9d:9e:3d:1a:8b:fb:4e:c8: 11:23:b0:c1:3c:21:5a:e5:5a:fd:06:4f:d9:5a:3e: ab:a4:e1:e8:6e:bc:38:69:61:ed:00:fa:80:e9:04: 11:25:79:d2:1a:2c:f9:36:49:07:55:b1:49:44:5d: 68:0a:5f:60:83:7f:4b:ed:1e:e3:59:c1:ca:06:28: fe:b9:55:d7:f7:ba:3e:18:b1:fc:23:be:b5:27:bd: 21:f6:65:f6:da:18:7f:8e:fa:11:09:63:32:81:ee: 88:0f:39:20:96:eb:80:b6:5e:a5:cf:37:6a:b1:9c: 79:70:47:c5:01:c8:45:cd:c1:3f:5e:a2:a8:e8:3b: 7c:85:c8:96:ba:09:13:8c:18:07:d4:0b:1e:68:51: 78:d2:b8:76:b1:c7:05:72:db:02:33:91:da:4b:d3: fe:b3:db:d3:ec:80:10:3f:87:e3:60:06:14:2c:16: c5:9f:94:4f:8f:9a:19:2c:4e:15:db:97:b1:36:3f: 7e:75:86:e3:24:0a:69:c4:e6:97:9b:3e:40:f8:55: c4:15:c6:7b:81:35:1c:5c:83:f5:6d:7b:8a:d7:32: 1c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FB:21:A0:00:8A:96:2B:8D:2F:E6:D2:C6:2C:2C:BE:74:64:8D:12 X509v3 Authority Key Identifier: keyid:5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c4:19:5c:2f:4f:e3:b4:34:9e:05:aa:3d:67:f3:3d:41:f7: b2:c9:b6:0a:ab:5f:53:e1:8a:a5:9a:90:7f:d9:ff:05:eb:f6: a9:50:85:6d:c3:24:85:dd:b8:8c:8e:97:6e:ad:d3:8d:e1:2b: fb:dd:c0:8f:04:bc:64:3d:1b:9a:3a:25:3b:a8:82:7c:db:43: 9f:7b:47:d5:0d:34:c7:b7:6d:f2:2e:eb:af:7b:6c:75:28:47: a7:38:c9:b3:05:85:63:5e:b4:df:fb:31:9c:b0:f2:e0:76:5d: 0f:04:93:cd:63:9c:d8:f9:c4:43:4c:7b:77:76:75:e4:46:01: 11:2c:b5:b2:31:b9:61:18:1e:08:ef:de:a7:e6:27:5c:a8:cf: 88:fb:23:65:47:f9:e4:da:a0:ab:4e:30:a4:69:a6:a8:0c:b7: af:8b:68:32:78:d2:92:f7:e5:50:fc:78:be:4c:00:38:fc:96: 10:a5:b9:b5:a1:1f:08:af:8f:0b:09:7f:f6:ca:a6:cc:12:73: 04:2b:e6:90:bd:2a:ab:ce:70:be:51:bf:0b:3a:7a:73:31:43: a7:b8:b7:24:f8:5b:5a:61:1b:de:b4:33:f9:06:1e:fb:11:25: 6f:8d:57:ec:3d:0f:59:73:2e:16:73:95:eb:89:9f:a1:64:66: 8a:63:b4:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDVDQjI5OEJDMUE3MDUwMTc4MDVDNTYxRjA5MEEwRDQ3 OTUwRTZBQkQwHhcNMjYwNzIyMTQxNjQyWhcNMjYwNzI5MTQxNjQyWjAYMRYwFAYD VQQDEw02YTYwZDBjYS1lNDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXp3HPlYy02FkIifCpF8Ib/4Y9VZYU4z2wAEn4COI7x4BcGsnZ49Gov7TsgR I7DBPCFa5Vr9Bk/ZWj6rpOHobrw4aWHtAPqA6QQRJXnSGiz5NkkHVbFJRF1oCl9g g39L7R7jWcHKBij+uVXX97o+GLH8I761J70h9mX22hh/jvoRCWMyge6IDzkgluuA tl6lzzdqsZx5cEfFAchFzcE/XqKo6Dt8hciWugkTjBgH1AseaFF40rh2sccFctsC M5HaS9P+s9vT7IAQP4fjYAYULBbFn5RPj5oZLE4V25exNj9+dYbjJAppxOaXmz5A +FXEFcZ7gTUcXIP1bXuK1zIcGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF37IaAA ipYrjS/m0sYsLL50ZI0SMB8GA1UdIwQYMBaAFFyymLwacFAXgFxWHwkKDUeVDmq9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8zRjM0MjAzRTI5 MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VCZUFYRllmQ1FvTlI1VU9h cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hMS1l2QnB3VUJlQVhGWWZDUW9OUjVVT2FyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8zRjM0MjAzRTI5MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VC ZUFYRllmQ1FvTlI1VU9hcjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaMQZXC9P47Q0ngWqPWfzPUH3ssm2CqtfU+GKpZqQf9n/Bev2qVCFbcMkhd24 jI6Xbq3TjeEr+93AjwS8ZD0bmjolO6iCfNtDn3tH1Q00x7dt8i7rr3tsdShHpzjJ swWFY1603/sxnLDy4HZdDwSTzWOc2PnEQ0x7d3Z15EYBESy1sjG5YRgeCO/ep+Yn XKjPiPsjZUf55Nqgq04wpGmmqAy3r4toMnjSkvflUPx4vkwAOPyWEKW5taEfCK+P Cwl/9sqmzBJzBCvmkL0qq85wvlG/Czp6czFDp7i3JPhbWmEb3rQz+QYe+xElb41X 7D0PWXMuFnOV64mfoWRmimO0iA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:39:00 2026 by rpki-client