$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json) Hash identifier: q5evH+5fUnag9bFsHnLdIxYudrPSk9PRJFXV+IJptNQ= Subject key identifier: F1:A3:D1:A1:FE:0A:FC:00:C7:FF:BB:8C:73:DD:4E:15:6B:3B:EE:6B Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft Manifest number: 0220 Signing time: Thu 23 Jul 2026 04:02:50 +0000 Manifest this update: Thu 23 Jul 2026 04:02:50 +0000 Manifest next update: Thu 30 Jul 2026 04:02:50 +0000 Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: uc7GZNo5mphRvyyT/2DcLx+0490ET91MELy0bOrlBLI=) 2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: mj1933/3n6toouA33PYerjmiVEAl8MHe43vblZwNmME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Validity Not Before: Jul 23 04:02:50 2026 GMT Not After : Jul 30 04:02:50 2026 GMT Subject: CN=6a61926a-c1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:f2:30:75:b3:57:58:2a:3c:86:7c:64:84: 71:3e:e9:45:57:fe:69:32:f8:aa:93:be:45:91:00: 33:f5:54:e2:95:98:30:8e:25:30:df:28:f2:5c:27: 3b:e1:73:49:35:73:e0:fe:fb:03:13:3b:1a:ea:68: 14:fa:23:ca:df:59:62:9d:ea:8b:4b:9b:cf:cc:8e: ba:28:aa:30:03:ec:b4:6a:af:de:dd:b9:9b:df:79: c4:49:d9:2b:c8:a8:d3:3d:33:d7:17:24:f4:b5:50: be:21:99:a9:28:9f:87:d5:51:d6:8b:9c:95:22:92: b1:01:86:4f:8f:5a:9d:d8:c0:c7:6a:94:98:4e:80: 52:e4:7d:b2:73:1f:bd:b0:5e:1e:02:dd:96:1b:2a: ec:ab:1b:94:97:bb:c2:11:06:aa:af:84:11:cd:3b: 76:16:0d:fb:d5:07:61:42:fa:d1:8f:4e:2d:92:fe: cb:e9:ff:9a:55:7f:c3:3b:23:9e:5a:b1:7c:4a:51: 08:b0:ad:97:bf:35:05:65:31:ed:37:57:92:bc:77: 66:f3:67:0f:17:3a:4b:9e:25:42:8e:10:35:54:07: 51:ba:74:9e:76:80:cb:09:64:b6:aa:4b:16:f5:0a: 70:53:cb:63:18:43:95:1b:b6:0d:6e:4a:1f:c5:f3: 7f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A3:D1:A1:FE:0A:FC:00:C7:FF:BB:8C:73:DD:4E:15:6B:3B:EE:6B X509v3 Authority Key Identifier: keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5c:e5:38:78:e2:58:d0:e0:fc:c7:55:04:62:b2:23:75:09: e2:06:da:4a:cb:c8:6b:cc:14:d3:fb:30:ca:25:e0:56:01:8b: c8:90:25:0c:80:0f:b7:3e:89:2a:42:05:52:1a:b2:60:6a:e7: 75:bc:43:71:35:47:ef:57:3e:48:5f:45:56:04:e4:1a:29:63: 94:b6:a7:bf:7a:62:26:ef:40:0a:04:af:fd:b0:6f:15:1a:86: b4:0c:c8:58:25:71:b4:31:68:b6:f7:67:b7:0e:48:9b:a5:86: 16:62:a3:5f:d0:21:df:00:ac:cf:a5:d5:98:e6:7c:06:67:4c: d8:58:66:d8:b7:28:a9:50:32:2c:1c:45:47:ea:4f:a8:1e:a7: 67:27:c9:1f:54:61:36:64:02:50:17:dd:d9:68:64:71:8c:d4: 83:0c:89:6c:30:01:00:b1:54:0a:51:be:de:c8:ca:75:25:e3: a4:97:ab:a1:cf:33:96:b1:7e:6a:3f:7c:e4:e1:05:fd:e7:63: 33:71:77:83:bc:9e:d4:13:7f:cd:55:1f:f3:51:04:2e:33:ac: 34:95:63:0e:ca:5b:24:39:39:eb:7f:f6:93:ab:90:41:61:30: 3c:69:f7:e0:0d:66:41:02:fd:fa:1c:b6:a7:3a:a5:8f:f0:6b: 51:f9:3b:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMEExMTAvBgNVBAUTKDY4NDVBMzU3MDc1N0U2QkYyQzA0ODVBQzIxNzg5QkZG NTAwNTFFOUEwHhcNMjYwNzIzMDQwMjUwWhcNMjYwNzMwMDQwMjUwWjAYMRYwFAYD VQQDEw02YTYxOTI2YS1jMWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfDyMHWzV1gqPIZ8ZIRxPulFV/5pMviqk75FkQAz9VTilZgwjiUw3yjyXCc7 4XNJNXPg/vsDEzsa6mgU+iPK31lineqLS5vPzI66KKowA+y0aq/e3bmb33nESdkr yKjTPTPXFyT0tVC+IZmpKJ+H1VHWi5yVIpKxAYZPj1qd2MDHapSYToBS5H2ycx+9 sF4eAt2WGyrsqxuUl7vCEQaqr4QRzTt2Fg371QdhQvrRj04tkv7L6f+aVX/DOyOe WrF8SlEIsK2XvzUFZTHtN1eSvHdm82cPFzpLniVCjhA1VAdRunSedoDLCWS2qksW 9QpwU8tjGEOVG7YNbkofxfN/ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGj0aH+ CvwAx/+7jHPdThVrO+5rMB8GA1UdIwQYMBaAFGhFo1cHV+a/LASFrCF4m/9QBR6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAwQS9DQ0EzRUE5MjQ3 M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVyOHNCSVdzSVhpYl8xQUZI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAwQS9DQ0EzRUE5MjQ3M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVy OHNCSVdzSVhpYl8xQUZIcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHlzlOHjiWNDg/MdVBGKyI3UJ4gbaSsvIa8wU0/swyiXgVgGLyJAlDIAPtz6J KkIFUhqyYGrndbxDcTVH71c+SF9FVgTkGiljlLanv3piJu9ACgSv/bBvFRqGtAzI WCVxtDFotvdntw5Im6WGFmKjX9Ah3wCsz6XVmOZ8BmdM2Fhm2LcoqVAyLBxFR+pP qB6nZyfJH1RhNmQCUBfd2WhkcYzUgwyJbDABALFUClG+3sjKdSXjpJeroc8zlrF+ aj985OEF/edjM3F3g7ye1BN/zVUf81EELjOsNJVjDspbJDk563/2k6uQQWEwPGn3 4A1mQQL9+hy2pzqlj/BrUfk7ug== -----END CERTIFICATE-----Generated at Fri Jul 24 02:39:02 2026 by rpki-client