$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: u0vsHdfJfTFRo/SR4VXkH1i6zNZPVuoGUxCAfVsq75g= Subject key identifier: 5B:CE:25:8C:41:D1:50:94:A7:E7:5F:56:36:4D:F6:F0:5D:0A:BD:7A Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7E6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 490B Signing time: Wed 22 Jul 2026 17:01:58 +0000 Manifest this update: Wed 22 Jul 2026 17:01:57 +0000 Manifest next update: Wed 29 Jul 2026 17:01:57 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: tzesijoj9IDylkNzAhDVSXz1Id+rNDHnr654qprfOr0=) 2: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: lG8i+f47XPMSDaBCmERX0JHOMdgM5oAy1rXkRgeNonA=) 3: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: Eb6UizvbKiSswSpr6ZBFwyh776VEliLHzpERT3ICSBc=) 4: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: huYEy1OShMTnG6Dv6GIF3b8s4DVf7PGptyUFZSE3GKg=) 5: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: xl2kGNtF5y2G5owSCgIil5S6mDXwvwxCSh7vN6+5yO0=) 6: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: q55DPuVw7xXsN2vhIQXjs1ntUwBZ/QUMetD5PESujBQ=) 7: 2DE2AC2669E311F18E29D967A047A888.roa (hash: FXkhpuzHLKYK1MxgK0HuTpu2VmPbFJh1f+OCxLZjwRY=) 8: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: 7dKmy2mjbAxCYpKx0eIzsPAsDYtYgWcb4xJo9UcXggE=) 9: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: zWNp9ZaOgBHA/svnObyrHOTGUNlUERNOeU1v6+YaWVk=) 10: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: VkVnfC34JR/811jGxsrew1RM+A9tRAb0W7MV3qismys=) 11: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: Yx4RUg6/Ps1F9WLGKmkBr2vKf8cXWNrcddyAVaGBT3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32367 (0x7e6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Jul 22 17:01:57 2026 GMT Not After : Jul 29 17:01:57 2026 GMT Subject: CN=6a60f786-cc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:cd:9e:07:05:27:b7:45:74:d7:3e:4e:bf: bd:29:fa:73:ef:5f:95:6a:d8:b1:e3:c9:a2:32:23: 84:8e:3b:da:25:a3:62:49:74:42:b4:b8:2c:30:23: 30:56:d8:d3:fd:20:35:a5:d3:58:2c:73:18:1c:e9: ad:97:7b:f1:20:0e:25:e9:ba:5e:a0:b3:6e:af:2f: 93:ab:bb:98:0f:8c:bf:77:50:c9:ef:52:e0:a7:a6: e8:e7:ec:19:75:eb:7e:a2:37:a8:16:32:46:fa:1d: 82:12:55:cf:93:80:82:a6:89:9a:6c:bb:db:a6:0c: b2:a8:c6:3b:93:dd:68:cc:ea:9a:bd:fc:0d:53:d2: 6b:7f:39:f3:76:e3:2d:56:40:ff:bc:67:de:33:b5: bc:ab:90:11:9b:4c:c7:bd:e9:c2:91:f9:e1:fe:e8: c9:f3:d1:24:6c:a3:e7:78:3a:df:15:3c:5c:90:de: 19:5d:a4:49:59:7b:ea:dc:b0:6a:4a:2c:aa:f7:26: 30:7d:11:8e:db:af:44:bd:0e:44:ac:f3:b3:ea:68: ac:c6:f2:2d:97:e4:67:72:ba:6c:6c:c4:c0:8f:15: dd:fb:aa:1c:13:89:15:0a:8d:5c:65:12:bb:98:d2: e3:39:e8:07:df:5b:59:00:48:5c:c8:e9:7a:44:81: d5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CE:25:8C:41:D1:50:94:A7:E7:5F:56:36:4D:F6:F0:5D:0A:BD:7A X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6d:73:25:5c:27:c6:79:78:94:85:80:77:0b:a5:88:1e:6f: 4b:96:fe:80:95:5b:9f:cf:c7:7b:84:8c:57:ca:b6:81:f2:77: c1:56:4a:2c:90:ce:36:17:54:0a:b0:e6:ee:d7:77:09:48:58: c7:e6:1d:36:a9:ff:69:00:7f:8e:b8:b5:9b:2f:3a:c1:41:97: 45:2f:df:40:3b:d9:77:b2:a7:02:58:2c:9e:e2:17:b9:8e:ed: 59:c1:00:29:41:dc:d3:d7:14:4c:c7:db:3f:47:4b:5a:a0:52: e3:77:6a:59:fb:6c:95:1d:4d:51:dd:96:c2:af:a4:2b:4e:4e: bc:44:69:5f:8d:41:a6:fe:d6:43:87:db:12:cf:8b:5a:4b:f6: 5f:16:ec:f8:95:a4:3a:6e:7a:46:ce:2e:49:16:1d:39:eb:42: 9b:f1:b4:5c:52:a8:d3:72:c1:71:e1:ee:0e:1c:38:7e:70:67: 4c:1b:f2:81:a2:91:87:d6:c8:2f:2f:53:0c:93:9b:08:36:3c: 52:89:ab:50:5d:70:f9:a8:93:7c:a5:26:36:28:4b:0f:e5:be: 2a:0b:09:1b:79:a0:4d:fe:49:d9:3a:36:c1:df:b5:de:35:10: b0:ce:10:ad:bb:3a:1c:06:db:91:79:13:90:06:44:5f:4e:52: dc:4e:d9:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICfm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjYwNzIyMTcwMTU3WhcNMjYwNzI5MTcwMTU3WjAYMRYwFAYD VQQDEw02YTYwZjc4Ni1jYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3avNngcFJ7dFdNc+Tr+9Kfpz71+Vatix48miMiOEjjvaJaNiSXRCtLgsMCMw VtjT/SA1pdNYLHMYHOmtl3vxIA4l6bpeoLNury+Tq7uYD4y/d1DJ71Lgp6bo5+wZ det+ojeoFjJG+h2CElXPk4CCpomabLvbpgyyqMY7k91ozOqavfwNU9JrfznzduMt VkD/vGfeM7W8q5ARm0zHvenCkfnh/ujJ89EkbKPneDrfFTxckN4ZXaRJWXvq3LBq Siyq9yYwfRGO269EvQ5ErPOz6misxvItl+RncrpsbMTAjxXd+6ocE4kVCo1cZRK7 mNLjOegH31tZAEhcyOl6RIHV0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvOJYxB 0VCUp+dfVjZN9vBdCr16MB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC21zJVwnxnl4lIWAdwuliB5vS5b+gJVbn8/He4SMV8q2gfJ3wVZKLJDONhdU CrDm7td3CUhYx+YdNqn/aQB/jri1my86wUGXRS/fQDvZd7KnAlgsnuIXuY7tWcEA KUHc09cUTMfbP0dLWqBS43dqWftslR1NUd2Wwq+kK05OvERpX41Bpv7WQ4fbEs+L Wkv2Xxbs+JWkOm56Rs4uSRYdOetCm/G0XFKo03LBceHuDhw4fnBnTBvygaKRh9bI Ly9TDJObCDY8UomrUF1w+aiTfKUmNihLD+W+KgsJG3mgTf5J2To2wd+13jUQsM4Q rbs6HAbbkXkTkAZEX05S3E7Zgg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:29:42 2026 by rpki-client