$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft File: XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft (raw, json) Hash identifier: YxQkRHu8cPDVNF/NZxdV/hEE65pgoz2dXYYPKF1XXls= Subject key identifier: F2:38:B7:C8:02:86:74:56:E3:ED:89:FC:53:EA:E7:83:55:DB:4F:29 Authority key identifier: 5C:C3:30:19:80:8D:C9:66:7A:BE:B7:E7:36:39:C8:C9:DF:1C:C5:94 Certificate issuer: /CN=A9136BEA/serialNumber=5CC33019808DC9667ABEB7E73639C8C9DF1CC594 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft Manifest number: 3E Signing time: Thu 23 Jul 2026 10:33:04 +0000 Manifest this update: Thu 23 Jul 2026 10:33:03 +0000 Manifest next update: Thu 30 Jul 2026 10:33:03 +0000 Files and hashes: 1: XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.crl (hash: FriQcQkyZZw9Rpckw1L1z2uI8iJvxOPzeGZBJ/1YTdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.crl rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BEA, serialNumber=5CC33019808DC9667ABEB7E73639C8C9DF1CC594 Validity Not Before: Jul 23 10:33:03 2026 GMT Not After : Jul 30 10:33:03 2026 GMT Subject: CN=6a61ede0-4e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:d8:dc:e4:b2:f1:e2:ed:c3:d3:bf:aa:a4: 43:12:67:99:db:cf:66:7c:a4:3c:34:9b:66:4f:da: 3a:b7:11:fe:7d:fd:f0:00:6a:9f:d1:d8:3d:ff:04: e4:17:6c:86:1b:c4:ee:4d:08:22:25:39:50:82:f5: 08:1d:86:e2:3c:c6:90:2f:27:b5:49:bf:28:fe:bf: 4f:49:f6:30:f3:36:27:cf:6a:1e:33:c5:dd:7e:b3: a7:60:25:d4:93:59:80:17:53:45:a0:a3:f7:10:21: ee:67:15:52:f0:ba:a2:14:14:aa:16:1a:e5:3a:c8: fc:d9:cd:87:f2:35:f9:7a:2e:a4:c8:29:3e:9f:8c: a5:a2:b6:90:27:7f:dd:b1:e8:ad:0a:84:f0:60:25: 2b:db:16:fb:e1:c0:8d:77:f8:28:6f:e5:ba:bb:08: da:8f:ba:0e:f0:1f:23:49:ef:2b:ff:0f:9e:6d:b4: 01:7c:2f:0a:53:b9:d6:69:86:d9:b2:40:70:7a:39: 34:77:91:24:00:51:fe:e4:67:dd:3a:38:4b:90:76: 1d:e2:cd:c8:84:37:aa:e1:82:f7:1e:53:6d:71:a8: 33:22:be:98:78:0c:65:8b:88:d6:7e:df:78:b3:c6: ad:48:d5:c6:c0:af:92:2b:dc:67:50:9f:78:66:19: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:38:B7:C8:02:86:74:56:E3:ED:89:FC:53:EA:E7:83:55:DB:4F:29 X509v3 Authority Key Identifier: keyid:5C:C3:30:19:80:8D:C9:66:7A:BE:B7:E7:36:39:C8:C9:DF:1C:C5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:c3:95:21:17:cc:50:b1:83:ca:59:28:81:de:e8:90:fc:ff: 64:ee:c8:b4:fa:65:c6:ea:3a:a1:29:53:79:d1:8c:6c:6d:91: 90:fd:ff:c2:7b:f8:16:8f:de:5c:c4:c2:ac:23:e4:98:94:0c: 3b:40:32:9d:9d:88:fd:ea:f1:76:6b:5f:b1:a3:97:90:07:f7: 38:a3:4c:69:48:72:c9:d5:cb:82:34:c3:7e:60:23:ae:dc:ba: a3:98:6e:37:4f:1e:a4:bd:84:96:79:50:b9:d9:dd:e3:39:26: 1c:b8:ad:fd:c2:ac:9f:a2:44:1e:e5:8f:22:61:60:a9:43:26: 3f:5e:6a:08:d5:3b:97:68:0d:36:da:91:7f:e9:87:fa:92:cb: f2:fb:f6:78:3f:a5:1c:ca:dc:68:32:58:de:14:79:d7:e9:08: b2:62:06:a8:a4:39:69:ab:d7:00:4d:3c:bf:bc:33:7e:45:b0: 15:24:21:19:d4:fd:df:4d:7e:9a:b9:49:97:af:04:64:4a:d6: 57:06:53:e1:da:da:b9:78:6d:77:91:da:26:b0:2f:9f:a0:b8: cc:c5:10:b1:c1:88:12:42:81:bf:97:d0:35:a1:c8:80:55:7e: 52:9d:9d:a0:a7:ef:0f:ff:27:b5:95:c0:0d:87:6d:6b:d6:0d: 1e:91:0b:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkJFQTExMC8GA1UEBRMoNUNDMzMwMTk4MDhEQzk2NjdBQkVCN0U3MzYzOUM4QzlE RjFDQzU5NDAeFw0yNjA3MjMxMDMzMDNaFw0yNjA3MzAxMDMzMDNaMBgxFjAUBgNV BAMTDTZhNjFlZGUwLTRlNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS9Njc5LLx4u3D07+qpEMSZ5nbz2Z8pDw0m2ZP2jq3Ef59/fAAap/R2D3/BOQX bIYbxO5NCCIlOVCC9QgdhuI8xpAvJ7VJvyj+v09J9jDzNifPah4zxd1+s6dgJdST WYAXU0Wgo/cQIe5nFVLwuqIUFKoWGuU6yPzZzYfyNfl6LqTIKT6fjKWitpAnf92x 6K0KhPBgJSvbFvvhwI13+Chv5bq7CNqPug7wHyNJ7yv/D55ttAF8LwpTudZphtmy QHB6OTR3kSQAUf7kZ906OEuQdh3izciEN6rhgvceU21xqDMivph4DGWLiNZ+33iz xq1I1cbAr5Ir3GdQn3hmGRSDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8ji3yAKG dFbj7Yn8U+rng1XbTykwHwYDVR0jBBgwFoAUXMMwGYCNyWZ6vrfnNjnIyd8cxZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QkVBL0Y4MzIwQUEwMjgw MDExRjE4RTQ2MzY0QUIyODMzNzczL1hNTXdHWUNOeVdaNnZyZm5Oam5JeWQ4Y3ha US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWE1Nd0dZQ055V1o2dnJmbk5qbkl5ZDhjeFpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QkVBL0Y4MzIwQUEwMjgwMDExRjE4RTQ2MzY0QUIyODMzNzczL1hNTXdHWUNOeVda NnZyZm5Oam5JeWQ4Y3haUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDIw5UhF8xQsYPKWSiB3uiQ/P9k7si0+mXG6jqhKVN50YxsbZGQ/f/Ce/gWj95c xMKsI+SYlAw7QDKdnYj96vF2a1+xo5eQB/c4o0xpSHLJ1cuCNMN+YCOu3LqjmG43 Tx6kvYSWeVC52d3jOSYcuK39wqyfokQe5Y8iYWCpQyY/XmoI1TuXaA022pF/6Yf6 ksvy+/Z4P6UcytxoMljeFHnX6QiyYgaopDlpq9cATTy/vDN+RbAVJCEZ1P3fTX6a uUmXrwRkStZXBlPh2tq5eG13kdomsC+foLjMxRCxwYgSQoG/l9A1ociAVX5SnZ2g p+8P/ye1lcANh21r1g0ekQvg -----END CERTIFICATE-----Generated at Fri Jul 24 17:42:06 2026 by rpki-client