$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json) Hash identifier: OFM1Ylp0GfHcHOJLw5JU788MRYCs22CUqiFL8yRaHXA= Subject key identifier: AF:69:9A:8E:18:86:C7:7B:A8:66:C6:E1:94:ED:22:78:9F:82:0A:E9 Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft Manifest number: 019F Signing time: Thu 23 Jul 2026 05:39:28 +0000 Manifest this update: Thu 23 Jul 2026 05:39:28 +0000 Manifest next update: Thu 30 Jul 2026 05:39:28 +0000 Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: RJH/+oGQ/VEO2zH7Q+U8fCLMbOaT1F//98pB9NnI2y0=) 2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: wvSHxxBQmLwE16AVo39FOmMXKWaWbJvTWAsomwhTSy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Validity Not Before: Jul 23 05:39:28 2026 GMT Not After : Jul 30 05:39:28 2026 GMT Subject: CN=6a61a910-be75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:c2:ff:cf:fa:7a:72:6d:61:ce:30:d2:1a: 7d:b0:cc:b8:9c:61:db:ab:30:36:88:9a:7a:b0:7f: 09:f5:06:aa:4d:59:29:02:38:23:10:c1:f9:d3:3e: c1:f2:0f:3d:c8:62:fa:45:fc:46:df:b5:be:a0:55: 84:cc:9f:c4:80:ac:e0:66:d2:90:65:fc:9d:10:16: eb:1d:bc:0f:d0:5c:d0:53:b4:e7:02:52:82:4b:ce: 34:b5:8b:db:7f:f5:00:e2:26:47:10:41:fe:0a:bf: 37:d6:c1:a8:01:a2:5a:fb:70:6e:ad:9f:9c:45:b9: 6d:ff:9e:98:81:4c:af:29:0d:76:13:80:39:06:c2: 5e:28:7e:30:1f:81:0e:02:5f:3f:94:7d:c9:3a:2e: 46:22:46:fc:61:8b:50:1f:84:ff:fd:ee:71:74:c0: 9d:ef:eb:60:0d:47:cf:c6:d0:ce:0f:e2:3c:c4:bd: b1:7a:fd:c1:6a:22:8c:75:b2:ea:3e:b1:8d:c0:07: 98:7d:c7:49:fa:2c:b7:02:7a:00:40:5e:76:2d:65: 53:ee:4a:80:8c:81:46:3b:4f:18:6c:3d:9a:da:62: b8:c2:c4:71:e6:b1:e8:32:42:63:22:25:e2:80:53: 90:ee:c3:55:8c:83:0f:e0:b0:09:d8:05:c6:05:68: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:69:9A:8E:18:86:C7:7B:A8:66:C6:E1:94:ED:22:78:9F:82:0A:E9 X509v3 Authority Key Identifier: keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:06:5a:4d:c7:19:7f:c9:4a:17:35:c2:49:b6:26:8c:4e:a3: 60:f2:d5:52:29:9a:6a:66:af:e8:eb:46:7c:ae:97:e2:f4:b0: 19:30:75:68:ac:b9:48:86:49:9b:48:e8:79:04:b7:ca:25:da: 93:74:0f:fe:da:41:4a:70:a7:5c:ee:58:f2:7b:6a:fc:e6:1b: 45:ff:05:2f:bb:bb:b6:e0:95:a7:15:1e:7f:7b:54:eb:09:cd: 13:43:ce:2c:d2:14:06:83:cf:e9:84:41:83:33:24:f9:d0:f6: cd:ed:d9:d6:fb:1b:50:53:a9:97:14:2d:55:c3:90:df:7f:1f: d2:9a:8b:5f:6a:bf:8f:bf:14:57:25:47:6a:0e:1f:2d:06:16: 01:81:22:f3:11:d7:bf:4b:af:c1:c3:71:73:6d:25:1e:c5:17: 33:02:4e:e7:32:ae:54:57:ba:a2:03:28:0d:60:6e:9b:5a:5e: 37:b8:3d:b5:50:fa:43:27:cf:94:00:0a:8a:9a:d2:2c:0d:3e: cd:00:61:bd:7e:e4:fb:7b:35:f1:7c:4f:4b:cf:bb:72:0d:ab: 04:02:57:61:a6:26:ba:58:83:0a:53:76:6b:92:61:f5:6a:30: 6e:35:5b:39:18:89:f6:7e:b3:c2:63:e7:a6:1b:ff:2f:85:fd: 22:df:e8:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCNDcxMTAvBgNVBAUTKDVERjU2NkQ3NjIzNjdDMjhDN0YzRjEyNTYxQjQ3MTZC OENBMUI5NjYwHhcNMjYwNzIzMDUzOTI4WhcNMjYwNzMwMDUzOTI4WjAYMRYwFAYD VQQDEw02YTYxYTkxMC1iZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+TC/8/6enJtYc4w0hp9sMy4nGHbqzA2iJp6sH8J9QaqTVkpAjgjEMH50z7B 8g89yGL6RfxG37W+oFWEzJ/EgKzgZtKQZfydEBbrHbwP0FzQU7TnAlKCS840tYvb f/UA4iZHEEH+Cr831sGoAaJa+3BurZ+cRblt/56YgUyvKQ12E4A5BsJeKH4wH4EO Al8/lH3JOi5GIkb8YYtQH4T//e5xdMCd7+tgDUfPxtDOD+I8xL2xev3BaiKMdbLq PrGNwAeYfcdJ+iy3AnoAQF52LWVT7kqAjIFGO08YbD2a2mK4wsRx5rHoMkJjIiXi gFOQ7sNVjIMP4LAJ2AXGBWgo6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9pmo4Y hsd7qGbG4ZTtInifggrpMB8GA1UdIwQYMBaAFF31ZtdiNnwox/PxJWG0cWuMoblm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0I0Ny84NzFCOTI5NDBG QTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZDakg4X0VsWWJSeGE0eWh1 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmVm0xMkkyZkNqSDhfRWxZYlJ4YTR5aHVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0I0Ny84NzFCOTI5NDBGQTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZD akg4X0VsWWJSeGE0eWh1V1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1wZaTccZf8lKFzXCSbYmjE6jYPLVUimaamav6OtGfK6X4vSwGTB1aKy5SIZJ m0joeQS3yiXak3QP/tpBSnCnXO5Y8ntq/OYbRf8FL7u7tuCVpxUef3tU6wnNE0PO LNIUBoPP6YRBgzMk+dD2ze3Z1vsbUFOplxQtVcOQ338f0pqLX2q/j78UVyVHag4f LQYWAYEi8xHXv0uvwcNxc20lHsUXMwJO5zKuVFe6ogMoDWBum1peN7g9tVD6QyfP lAAKiprSLA0+zQBhvX7k+3s18XxPS8+7cg2rBAJXYaYmuliDClN2a5Jh9WowbjVb ORiJ9n6zwmPnphv/L4X9It/oHw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:58:49 2026 by rpki-client