$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json) Hash identifier: 5/gI/lLCRzj+FL1nJlSiebQ15+M6BBxOZDdZsMZa0EM= Subject key identifier: 0B:1F:FC:4D:96:14:13:A6:99:31:06:33:4F:53:AC:A5:E2:2A:43:0E Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft Manifest number: 0250 Signing time: Thu 23 Jul 2026 03:30:29 +0000 Manifest this update: Thu 23 Jul 2026 03:30:28 +0000 Manifest next update: Thu 30 Jul 2026 03:30:28 +0000 Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: 3OVzKlj5PeLAqRH1TbM1AFvfiaYXSJErnqFNjJajp1g=) 2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: R5a6QMcMMM3E0jCOFVWDRS9Q/1dJvX8y7TpUdy+NpOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Validity Not Before: Jul 23 03:30:28 2026 GMT Not After : Jul 30 03:30:28 2026 GMT Subject: CN=6a618ad4-c183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:18:fe:ad:bf:a2:72:72:95:ab:0d:27:24: 3e:5c:96:32:20:ca:fd:ad:71:04:6d:e6:27:5d:05: d7:b7:3e:77:9e:24:52:d4:65:81:3e:b8:47:b4:f0: 95:ff:85:6b:3f:3c:c4:b7:f2:3e:7c:a6:2d:7a:a5: 6c:14:c1:d2:e0:b4:aa:1d:02:8a:9f:db:13:ae:81: ae:30:9f:0f:9c:a8:f2:a8:d2:f4:e5:69:41:53:24: e1:22:94:a6:56:d7:ce:3d:45:c3:93:1e:c8:ea:19: d2:de:d6:77:d6:a6:a3:28:14:fd:0d:b9:fb:57:ac: 37:65:e7:ab:4c:ec:ca:0e:66:fc:20:17:88:83:11: d9:43:f4:a2:47:48:39:0b:d8:a8:41:22:f6:b8:d7: 89:c0:07:80:6a:89:c4:50:8f:db:d9:36:11:7a:b1: f5:32:29:0a:bc:e9:6d:1d:ef:5d:ef:ce:1b:3c:76: 6e:47:06:d8:cf:da:4d:d1:e8:59:96:83:64:df:ba: de:b8:33:1d:ce:98:4f:6e:c9:14:fe:49:a1:44:08: 03:ee:6a:15:51:1b:38:54:19:e5:18:90:25:1b:d7: 07:61:ce:c4:fa:64:7e:d8:1b:11:00:26:c2:f4:2c: f2:ba:b5:12:0c:6f:69:6e:d6:94:ac:88:6d:f8:d5: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:FC:4D:96:14:13:A6:99:31:06:33:4F:53:AC:A5:E2:2A:43:0E X509v3 Authority Key Identifier: keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:86:09:7d:8b:5b:c9:d8:50:a4:27:26:ef:23:24:45:b1:78: 3d:2a:aa:66:ea:23:91:da:37:75:b6:ba:9d:30:f6:24:85:1d: 2f:e1:22:08:be:49:3f:8a:63:cd:65:2d:be:23:c2:92:b9:9d: b5:03:50:e5:3d:5c:87:bb:30:6d:2f:55:3e:ab:63:a1:ea:99: d4:7c:e6:78:f6:10:0b:5b:0b:c8:f7:81:c8:e3:6d:70:c2:3a: 6b:76:a6:98:db:cb:3c:a7:93:8f:11:d0:e8:de:dc:a1:18:3a: 69:76:5e:40:c2:43:9b:a6:1f:cc:2d:10:16:b1:a1:2e:bf:69: e7:67:4a:fd:55:46:6e:86:a6:f6:b6:2f:f3:d0:ab:35:cc:7e: cd:98:73:6d:de:70:15:66:fc:37:1e:72:32:45:7a:ca:ed:7d: ac:66:a9:dd:2d:49:79:54:80:16:fa:8c:49:d5:40:5a:cb:ac: da:a9:5a:ee:d6:78:47:0e:97:aa:e3:c3:8e:9e:8a:56:57:52: 33:dd:cb:a4:78:a2:a6:d4:3f:d2:87:f1:7c:39:2e:f3:3f:4e: db:71:ef:79:aa:e0:db:3e:7d:be:51:da:f5:c1:c0:fa:3a:d1: b7:3c:d2:1d:c6:72:c6:16:7e:a2:8b:6f:26:7e:63:ef:f1:1a: e1:f8:b4:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3 ODkxN0UwRkQwHhcNMjYwNzIzMDMzMDI4WhcNMjYwNzMwMDMzMDI4WjAYMRYwFAYD VQQDEw02YTYxOGFkNC1jMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0l8Y/q2/onJylasNJyQ+XJYyIMr9rXEEbeYnXQXXtz53niRS1GWBPrhHtPCV /4VrPzzEt/I+fKYteqVsFMHS4LSqHQKKn9sTroGuMJ8PnKjyqNL05WlBUyThIpSm VtfOPUXDkx7I6hnS3tZ31qajKBT9Dbn7V6w3ZeerTOzKDmb8IBeIgxHZQ/SiR0g5 C9ioQSL2uNeJwAeAaonEUI/b2TYRerH1MikKvOltHe9d784bPHZuRwbYz9pN0ehZ loNk37reuDMdzphPbskU/kmhRAgD7moVURs4VBnlGJAlG9cHYc7E+mR+2BsRACbC 9CzyurUSDG9pbtaUrIht+NXnzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsf/E2W FBOmmTEGM09TrKXiKkMOMB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk4YJfYtbydhQpCcm7yMkRbF4PSqqZuojkdo3dba6nTD2JIUdL+EiCL5JP4pj zWUtviPCkrmdtQNQ5T1ch7swbS9VPqtjoeqZ1HzmePYQC1sLyPeByONtcMI6a3am mNvLPKeTjxHQ6N7coRg6aXZeQMJDm6YfzC0QFrGhLr9p52dK/VVGboam9rYv89Cr Ncx+zZhzbd5wFWb8Nx5yMkV6yu19rGap3S1JeVSAFvqMSdVAWsus2qla7tZ4Rw6X quPDjp6KVldSM93LpHiiptQ/0ofxfDku8z9O23Hvearg2z59vlHa9cHA+jrRtzzS HcZyxhZ+ootvJn5j7/Ea4fi0ZA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:24 2026 by rpki-client