$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: dIDIpIHPC5vSeYlRplTogV47JBY2FG7RnlAkUpDJ6HM= Subject key identifier: EC:56:EC:4B:95:16:02:DD:B1:98:FA:DF:DC:1D:73:79:EE:91:BD:C8 Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 0171 Signing time: Thu 23 Jul 2026 06:15:07 +0000 Manifest this update: Thu 23 Jul 2026 06:15:06 +0000 Manifest next update: Thu 30 Jul 2026 06:15:06 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: 5vhdsXf3reIxN3/TtWUsl6PccytnUdBMA7Om7wtA+wk=) 2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: ittpt4A7ySbEBupt94ZQJgIOH62PTtCbBsA64tVVFU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Jul 23 06:15:06 2026 GMT Not After : Jul 30 06:15:06 2026 GMT Subject: CN=6a61b16b-e619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:5a:6c:fb:3a:d0:f0:f8:d2:7c:4f:ef:ba: ab:56:5b:4a:6d:eb:fd:3a:ae:78:f6:c7:29:64:3d: ba:5a:cd:50:b7:cd:b9:45:00:44:16:41:79:89:e0: 81:32:a4:a5:81:b3:77:76:18:9a:6e:23:53:67:45: fb:c1:26:ce:eb:23:18:41:83:5f:de:06:aa:9b:cd: c3:7f:68:bc:20:f2:1f:fd:9e:7a:f1:cf:63:19:a7: 39:6a:fd:68:ff:61:14:84:8e:5b:b8:fa:7c:3f:a3: fd:c8:f6:99:d0:88:8e:21:32:5c:40:3e:14:f6:3b: f0:3e:89:2a:35:8a:ee:18:9b:01:48:77:f6:90:dd: 52:b8:3a:12:dc:e6:8b:ce:a9:ed:8e:bb:2c:6d:7c: 1d:99:b2:d0:e7:79:ca:82:26:ab:d3:67:d8:e9:7e: c6:50:96:84:e5:7d:c8:bd:38:5d:36:79:55:81:e4: 4c:60:a7:de:35:4e:b1:33:72:ed:4a:db:b2:ec:ae: 60:8e:c3:4e:d0:3d:c0:d1:00:a0:ca:1b:c7:cb:15: ba:6e:7a:2d:35:0d:f3:d8:40:f5:d1:8e:fa:a8:61: 01:21:23:b6:da:cf:1b:e1:53:ed:2c:f6:c2:30:af: 87:4e:96:43:10:6d:89:bf:f6:51:68:f3:de:d0:cf: ed:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:56:EC:4B:95:16:02:DD:B1:98:FA:DF:DC:1D:73:79:EE:91:BD:C8 X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:59:1c:3f:c7:dc:ee:69:55:c9:16:90:ca:03:30:2f:d2:5c: 6d:3c:96:cb:f9:d3:f0:f6:6c:f0:ca:db:d8:55:c0:0e:86:aa: ab:ad:e9:50:30:4e:8d:2c:d7:d7:dc:e5:10:8b:7a:8f:90:91: 0f:ca:88:05:01:eb:3f:79:01:42:ac:5d:b4:cf:96:a6:7b:21: 95:44:1e:f2:b4:2f:d7:c4:d2:60:20:a2:a4:de:0a:11:74:85: 97:8e:3f:ce:7c:06:93:80:b4:35:72:94:8b:26:0d:33:ea:56: 62:8a:e4:f5:cb:00:60:ba:32:23:2a:0a:27:5a:a5:58:06:06: 68:9e:fd:69:09:5d:1f:f8:c5:24:72:55:16:d7:44:a4:ac:a2: 82:b3:1a:83:30:6d:d7:2f:e8:d7:e1:65:a3:d5:26:4f:d1:dd: 86:cd:60:5d:22:d5:24:42:3a:17:09:e2:c9:2b:b0:d4:4b:c9: 7b:df:8f:27:25:f7:72:07:06:61:1f:5c:27:e6:0a:36:f0:19: c9:c8:f8:e0:b3:a5:5c:a6:0d:af:70:83:b6:9c:91:4f:dd:85: 20:25:f8:99:38:38:db:19:32:26:6b:a9:40:d7:63:1a:a4:1b: 09:95:16:bc:8b:20:7f:c9:84:d0:71:ce:84:02:3f:da:a7:94: 83:dd:be:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjYwNzIzMDYxNTA2WhcNMjYwNzMwMDYxNTA2WjAYMRYwFAYD VQQDEw02YTYxYjE2Yi1lNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDZabPs60PD40nxP77qrVltKbev9Oq549scpZD26Ws1Qt825RQBEFkF5ieCB MqSlgbN3dhiabiNTZ0X7wSbO6yMYQYNf3gaqm83Df2i8IPIf/Z568c9jGac5av1o /2EUhI5buPp8P6P9yPaZ0IiOITJcQD4U9jvwPokqNYruGJsBSHf2kN1SuDoS3OaL zqntjrssbXwdmbLQ53nKgiar02fY6X7GUJaE5X3IvThdNnlVgeRMYKfeNU6xM3Lt Stuy7K5gjsNO0D3A0QCgyhvHyxW6bnotNQ3z2ED10Y76qGEBISO22s8b4VPtLPbC MK+HTpZDEG2Jv/ZRaPPe0M/txwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxW7EuV FgLdsZj639wdc3nukb3IMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt1kcP8fc7mlVyRaQygMwL9JcbTyWy/nT8PZs8Mrb2FXADoaqq63pUDBOjSzX 19zlEIt6j5CRD8qIBQHrP3kBQqxdtM+WpnshlUQe8rQv18TSYCCipN4KEXSFl44/ znwGk4C0NXKUiyYNM+pWYork9csAYLoyIyoKJ1qlWAYGaJ79aQldH/jFJHJVFtdE pKyigrMagzBt1y/o1+Flo9UmT9Hdhs1gXSLVJEI6FwniySuw1EvJe9+PJyX3cgcG YR9cJ+YKNvAZycj44LOlXKYNr3CDtpyRT92FICX4mTg42xkyJmupQNdjGqQbCZUW vIsgf8mE0HHOhAI/2qeUg92+mA== -----END CERTIFICATE-----Generated at Fri Jul 24 16:23:16 2026 by rpki-client