$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json) Hash identifier: yrtwUAEL9bJUk7dPpHs+qFg46dvyDe7wl7QXk/vTDSk= Subject key identifier: BC:B0:B4:C8:7C:03:1A:BE:6B:91:63:5D:19:50:CD:19:85:B2:3D:6E Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft Manifest number: 01CF Signing time: Thu 23 Jul 2026 05:06:41 +0000 Manifest this update: Thu 23 Jul 2026 05:06:41 +0000 Manifest next update: Thu 30 Jul 2026 05:06:41 +0000 Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: 6t/Q3B4B3aZ8NPoxkvjnzpk4awD0l8RlbLHAR7g0Ap4=) 2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: xllDJ7wsryQrkSvX97smRm5LJiMbi7ECfICbiD0R3+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Validity Not Before: Jul 23 05:06:41 2026 GMT Not After : Jul 30 05:06:41 2026 GMT Subject: CN=6a61a161-c55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:20:02:e2:c6:71:45:22:fd:10:c4:71:1d:06: 56:ab:5b:56:7f:5b:4d:e4:eb:96:3d:00:2e:f0:2e: b8:40:8e:30:e0:7d:e0:b8:3b:1e:45:0d:14:05:36: 03:e6:40:87:e8:a4:3a:f2:ab:c2:cc:2b:f2:db:ef: 32:60:e2:f7:d7:c3:3b:4d:6f:d6:a8:83:a3:89:01: 8e:8d:c2:ce:b7:3a:3a:40:5c:07:d9:d7:0c:ce:a9: de:54:51:81:a6:fd:ce:5a:7b:f5:7b:57:5a:3d:a3: 4c:fe:bb:26:ad:9e:b0:bf:0d:23:8e:f4:41:91:ab: 33:6b:ff:de:f8:ff:e8:39:52:9d:f2:2f:9b:2a:73: 05:6c:b5:2e:cb:af:2f:a4:88:80:6e:69:60:4a:f7: 86:af:bb:c3:83:d6:41:be:52:59:fd:69:85:d3:2a: ab:2e:02:1c:25:60:2d:4c:f2:2d:61:6c:55:f0:03: 64:4e:90:1c:19:e7:6c:9b:fa:bc:41:41:6e:f7:79: bf:a1:a1:fe:2f:1f:62:69:f1:47:e0:a8:a1:2d:3e: e3:37:8f:12:5f:6e:83:46:39:ba:35:ba:ea:8e:2d: 2a:85:0f:f4:b7:a0:59:72:62:28:f8:67:19:dc:36: 09:20:9c:f6:06:1f:48:1d:2d:71:7c:5b:f8:56:1c: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B0:B4:C8:7C:03:1A:BE:6B:91:63:5D:19:50:CD:19:85:B2:3D:6E X509v3 Authority Key Identifier: keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b9:2b:c4:a0:fc:5a:00:26:4a:49:1e:0a:59:19:8f:d6:a7: 58:bd:f1:95:d8:b1:29:e0:d3:6d:74:e7:89:a5:95:da:dc:47: 78:5f:c7:80:71:e3:db:0f:be:99:05:8b:41:a4:63:b1:e1:9a: c2:db:3a:6f:59:e1:78:f6:ed:53:db:3c:9d:10:da:6f:e3:36: 5b:01:4d:33:d7:98:13:52:44:17:49:a9:2e:f3:bd:6a:25:ef: 32:92:7f:0c:cb:11:52:85:a3:ab:5e:b2:6a:2c:a7:e6:8b:37: b3:91:65:00:d1:30:30:cf:8d:6b:ad:a3:32:08:9e:a7:ef:8e: 04:52:e3:41:e8:76:27:cf:8a:5b:10:8c:b0:29:39:be:be:5a: da:4e:93:2d:ca:7e:5f:f0:d8:74:52:bf:1a:0b:25:d9:31:b2: 64:fb:87:0c:00:a3:b5:1d:14:c7:7d:6c:cc:e8:07:d3:a7:fa: d6:96:14:3e:12:63:4f:91:e7:e3:be:9a:e2:9c:54:be:45:41: ad:2b:ee:17:41:6f:67:7e:95:d0:2b:a2:99:3a:1f:19:a9:b9: ed:79:69:75:80:39:e5:83:6c:3f:dd:4a:bc:0d:a7:57:bf:b5: b0:a2:33:e7:63:36:fe:10:c8:b2:19:62:bf:7b:25:a3:86:04: 3e:bf:18:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3MTExMTAvBgNVBAUTKEI1N0IyMDdGMEUxQzFCQTg3M0EwNzkzNTgyQzdBODEz NDA5ODY3NEMwHhcNMjYwNzIzMDUwNjQxWhcNMjYwNzMwMDUwNjQxWjAYMRYwFAYD VQQDEw02YTYxYTE2MS1jNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkCAC4sZxRSL9EMRxHQZWq1tWf1tN5OuWPQAu8C64QI4w4H3guDseRQ0UBTYD 5kCH6KQ68qvCzCvy2+8yYOL318M7TW/WqIOjiQGOjcLOtzo6QFwH2dcMzqneVFGB pv3OWnv1e1daPaNM/rsmrZ6wvw0jjvRBkasza//e+P/oOVKd8i+bKnMFbLUuy68v pIiAbmlgSveGr7vDg9ZBvlJZ/WmF0yqrLgIcJWAtTPItYWxV8ANkTpAcGedsm/q8 QUFu93m/oaH+Lx9iafFH4KihLT7jN48SX26DRjm6Nbrqji0qhQ/0t6BZcmIo+GcZ 3DYJIJz2Bh9IHS1xfFv4Vhw9BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLywtMh8 Axq+a5FjXRlQzRmFsj1uMB8GA1UdIwQYMBaAFLV7IH8OHBuoc6B5NYLHqBNAmGdM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS85RkREMkRBMEM5 OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2aHpvSGsxZ3Nlb0UwQ1la MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RYc2dmdzRjRzZoem9IazFnc2VvRTBDWVowdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTcxMS85RkREMkRBMEM5OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2 aHpvSGsxZ3Nlb0UwQ1laMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsrkrxKD8WgAmSkkeClkZj9anWL3xldixKeDTbXTniaWV2txHeF/HgHHj2w++ mQWLQaRjseGawts6b1nhePbtU9s8nRDab+M2WwFNM9eYE1JEF0mpLvO9aiXvMpJ/ DMsRUoWjq16yaiyn5os3s5FlANEwMM+Na62jMgiep++OBFLjQeh2J8+KWxCMsCk5 vr5a2k6TLcp+X/DYdFK/Ggsl2TGyZPuHDACjtR0Ux31szOgH06f61pYUPhJjT5Hn 476a4pxUvkVBrSvuF0FvZ36V0CuimTofGam57XlpdYA55YNsP91KvA2nV7+1sKIz 52M2/hDIshliv3slo4YEPr8Y2w== -----END CERTIFICATE-----Generated at Fri Jul 24 16:19:48 2026 by rpki-client