$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json) Hash identifier: SISUzfOPp9Y3qP/p0WM1P0ssMG+akSwaaMgUoCOK5ss= Subject key identifier: EC:77:8F:D8:C4:A2:E3:FA:4D:8E:31:1B:D5:04:E1:90:CC:D7:B7:25 Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft Manifest number: 08BF Signing time: Wed 22 Jul 2026 20:57:58 +0000 Manifest this update: Wed 22 Jul 2026 20:57:57 +0000 Manifest next update: Wed 29 Jul 2026 20:57:57 +0000 Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: subulWEh92USDAYEKWtDr9rSc79+ooYp9f/TvZpeKGM=) 2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Validity Not Before: Jul 22 20:57:57 2026 GMT Not After : Jul 29 20:57:57 2026 GMT Subject: CN=6a612ed6-aab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:71:a1:3e:01:5a:fd:f8:44:20:03:9c:74: be:35:bb:f0:cd:44:7d:db:f0:11:d2:3a:d7:f9:0f: 65:60:e4:99:85:3e:eb:e6:aa:53:9c:c0:5c:d2:70: 8c:b3:8a:9f:53:68:6e:92:45:a5:17:5f:6f:ed:2f: 57:a5:06:d6:12:66:9f:f5:a2:b7:eb:cf:df:70:ec: 1a:db:6c:45:44:ba:78:13:19:63:dd:22:61:dc:1c: 7e:d0:c4:7a:dd:40:56:13:a9:2e:99:0c:83:db:e0: f3:49:c8:41:df:47:90:a9:44:fb:3e:3b:0f:5b:6c: b2:52:3b:ec:78:c7:4f:81:08:b3:cd:9b:13:7a:bf: 4b:98:ad:34:30:27:f1:99:0c:06:60:b5:22:68:df: a2:ca:76:5e:66:9a:45:71:06:b4:9b:61:ef:fe:52: ac:b5:21:5e:82:d5:e1:b7:8b:2e:8c:99:6c:f1:da: 8f:fd:10:da:9d:74:d1:b1:3c:f6:e9:e2:82:86:64: c4:0b:5e:9d:a5:25:4d:e4:59:f6:ff:03:bd:50:3b: 65:67:eb:0a:cc:d6:4b:fd:e6:26:ab:19:e9:55:e7: 1c:9a:1a:89:75:af:df:25:e6:4d:a4:60:df:d3:24: c9:a6:d0:2c:f7:c5:de:a1:03:62:33:5e:56:39:92: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:77:8F:D8:C4:A2:E3:FA:4D:8E:31:1B:D5:04:E1:90:CC:D7:B7:25 X509v3 Authority Key Identifier: keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:53:6d:6b:d9:b3:d4:52:29:48:bd:d7:f2:5a:f9:1e:27:0a: 89:a0:57:32:c8:dc:aa:fc:e6:ff:2b:e1:52:b9:38:0c:5c:47: 2a:05:92:46:f7:a5:91:33:46:7f:37:3b:de:a1:8f:cf:7d:0e: d6:83:83:d8:62:33:20:cf:f6:2e:b0:69:bd:eb:02:25:8d:b7: b8:b7:61:5f:f7:41:98:7f:5d:ab:92:ed:e5:44:be:35:3f:d0: a1:fc:0c:3b:8c:9a:80:64:d4:0e:67:2a:8e:e6:99:14:e1:a5: e3:de:ee:7f:f3:7c:3b:36:a5:e9:56:8c:7b:a1:df:2e:60:b5: f2:70:bf:4a:d5:fa:9c:c5:4d:ac:11:dc:cd:0a:75:df:b7:16: 47:59:dc:53:6b:8b:63:6e:27:9d:51:4b:c4:79:b2:0d:a7:15: c2:34:c5:30:bb:0d:31:b3:72:98:07:56:a6:5c:3d:b8:76:bc: 6b:ba:24:1e:14:62:90:d6:54:53:d2:51:00:41:cc:49:e4:62: 4c:70:e9:72:bb:2d:4c:35:fe:dd:49:23:35:76:c6:b4:0d:bd: 2f:70:f6:27:af:ac:df:ac:c8:28:50:5d:36:02:37:66:80:1a: 90:18:85:14:b2:46:11:72:19:60:4e:14:d4:d0:3b:cf:6f:cc: f5:59:88:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1 MTM0RkY5NTAwHhcNMjYwNzIyMjA1NzU3WhcNMjYwNzI5MjA1NzU3WjAYMRYwFAYD VQQDEw02YTYxMmVkNi1hYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdBxoT4BWv34RCADnHS+NbvwzUR92/AR0jrX+Q9lYOSZhT7r5qpTnMBc0nCM s4qfU2hukkWlF19v7S9XpQbWEmaf9aK368/fcOwa22xFRLp4Exlj3SJh3Bx+0MR6 3UBWE6kumQyD2+DzSchB30eQqUT7PjsPW2yyUjvseMdPgQizzZsTer9LmK00MCfx mQwGYLUiaN+iynZeZppFcQa0m2Hv/lKstSFegtXht4sujJls8dqP/RDanXTRsTz2 6eKChmTEC16dpSVN5Fn2/wO9UDtlZ+sKzNZL/eYmqxnpVeccmhqJda/fJeZNpGDf 0yTJptAs98XeoQNiM15WOZJj1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOx3j9jE ouP6TY4xG9UE4ZDM17clMB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt YXRleGtqUkJ2MjlSTlAtVkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm1Nta9mz1FIpSL3X8lr5HicKiaBXMsjcqvzm/yvhUrk4DFxHKgWSRvelkTNG fzc73qGPz30O1oOD2GIzIM/2LrBpvesCJY23uLdhX/dBmH9dq5Lt5US+NT/QofwM O4yagGTUDmcqjuaZFOGl497uf/N8Ozal6VaMe6HfLmC18nC/StX6nMVNrBHczQp1 37cWR1ncU2uLY24nnVFLxHmyDacVwjTFMLsNMbNymAdWplw9uHa8a7okHhRikNZU U9JRAEHMSeRiTHDpcrstTDX+3UkjNXbGtA29L3D2J6+s36zIKFBdNgI3ZoAakBiF FLJGEXIZYE4U1NA7z2/M9VmIaQ== -----END CERTIFICATE-----Generated at Fri Jul 24 02:47:45 2026 by rpki-client