$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: ZZimeymfwYxN9nhLEMBkECpTpqRUUrZEQTy0/zHH2u4= Subject key identifier: 62:9E:FD:2E:83:D5:F1:E5:3B:3C:A7:7E:5E:8A:A1:C4:10:D7:B0:D8 Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 0306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 02D3 Signing time: Thu 23 Jul 2026 02:37:12 +0000 Manifest this update: Thu 23 Jul 2026 02:37:12 +0000 Manifest next update: Thu 30 Jul 2026 02:37:12 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: 4l6ZuUnCw8pLZS03A0xo86jaEaRag9Ivw1M25NPhdiI=) 2: 7CA6F1307B7911F1827C4FFF64A30FBC.roa (hash: Q/IbLuLrjkYyAYXtIEMfhIjPpsOfmqc2j5tzdp+RoIA=) 3: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: DxSoqS3b+Y/gdSbATN2rSyfLU8qRKds7oUL0VnUHIkU=) 4: 946E7D7C660E11F192F6B2999847A888.roa (hash: +3wEw870VSZtPhAMU+vcPogoS7lkMSwbr1UbQf/a7nE=) 5: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: DoI1H5cBVDVpM0o3Z6TBBwhDvf1Ij5PjDVqCV737dgA=) 6: 6121C23230AC11F08C150767C4F9AE02.roa (hash: yFAyH86XSQnek6ohQ/lpmbhrJ7zT+NkCgAJN/G3hbEI=) 7: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: EqT4x+M1dS0lAoKnprnpqiEWavrDyHejbJDUqIhSKBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 774 (0x306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Validity Not Before: Jul 23 02:37:12 2026 GMT Not After : Jul 30 02:37:12 2026 GMT Subject: CN=6a617e58-14a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:4e:bf:c8:aa:78:1a:d9:8e:49:86:59:5c: 5a:17:be:1f:0a:36:7a:2e:53:75:8f:45:3c:f1:5f: 82:98:3e:2a:c6:5c:c2:a7:e9:bc:15:c2:1f:df:48: ce:af:fe:83:99:e1:36:44:75:6f:00:5e:80:98:ee: 83:84:00:1a:16:30:a2:da:a7:2b:94:d3:4b:e5:2d: 6c:7b:37:aa:d2:83:6a:ba:21:87:70:71:ab:6c:eb: 2c:f3:63:1a:1e:2d:d9:0d:fb:3b:f2:ff:44:77:e7: fc:7b:69:08:ed:83:9f:dc:17:88:64:be:1e:69:e2: 6d:4f:dd:54:0d:0e:ff:eb:c4:e4:4b:b6:5c:77:41: 5d:7a:a2:0a:67:90:b4:98:3c:db:23:71:a0:83:ac: 00:6a:94:0e:1a:8c:5a:36:27:9d:5d:46:6c:94:6c: d1:5d:be:85:45:8b:9c:d8:4e:4a:37:c9:26:94:33: 8a:55:f6:b5:92:dd:f3:7d:6d:b8:d5:58:13:fa:dd: bc:20:da:ed:84:dc:8c:2c:83:48:04:05:0b:a2:c9: 77:a1:b0:18:6b:23:cf:15:dd:43:b9:d7:e6:cd:b4: 28:12:4c:9d:c8:12:d4:b7:57:c2:9e:7d:e2:aa:b0: 50:e8:fa:c4:6e:48:c1:8e:7f:ee:95:ec:4a:33:37: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9E:FD:2E:83:D5:F1:E5:3B:3C:A7:7E:5E:8A:A1:C4:10:D7:B0:D8 X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f5:5c:fd:e5:57:a1:8a:1d:e2:99:66:ee:b1:3a:b5:00:04: 5f:0a:52:a4:79:32:fc:59:cf:a0:d5:62:c1:78:d4:30:d3:2d: 33:65:3a:77:b3:fd:f6:56:3d:9f:4a:d0:50:b9:ba:d3:8a:4d: de:83:ce:ce:c5:d2:bb:87:18:54:31:14:62:93:4c:93:cd:12: fa:80:ef:dd:01:5d:62:aa:f3:e5:89:f4:82:51:b4:f8:13:b3: 1d:11:57:7a:22:37:7f:0d:13:3b:2c:fa:9f:16:83:ae:fc:b2: 7d:a8:85:4c:3f:04:09:28:5f:dd:0d:04:99:6c:36:b6:58:76: 8c:93:bf:04:75:74:ba:b7:9f:f6:9f:e0:83:7a:21:68:4a:95: 14:8a:15:f6:fc:a5:1b:bb:ac:47:e9:37:bf:02:93:ae:11:10: 8b:2d:42:28:66:c1:8f:2a:82:f0:34:45:e7:1a:4e:18:88:ad: f8:84:2c:95:b8:ff:28:d9:09:d6:20:da:6c:00:47:74:0b:14: 36:20:d7:cc:97:72:d5:b5:ad:05:af:dc:e8:5d:bc:99:46:5c: a3:17:05:ea:79:0f:41:7f:6b:d8:de:84:d4:e4:32:b0:f1:9b: 30:fd:f0:bd:e7:9e:14:ad:4d:95:a9:9d:61:7e:ba:dc:80:1e: 1a:5e:28:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjYwNzIzMDIzNzEyWhcNMjYwNzMwMDIzNzEyWjAYMRYwFAYD VQQDEw02YTYxN2U1OC0xNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoxOv8iqeBrZjkmGWVxaF74fCjZ6LlN1j0U88V+CmD4qxlzCp+m8FcIf30jO r/6DmeE2RHVvAF6AmO6DhAAaFjCi2qcrlNNL5S1sezeq0oNquiGHcHGrbOss82Ma Hi3ZDfs78v9Ed+f8e2kI7YOf3BeIZL4eaeJtT91UDQ7/68TkS7Zcd0FdeqIKZ5C0 mDzbI3Ggg6wAapQOGoxaNiedXUZslGzRXb6FRYuc2E5KN8kmlDOKVfa1kt3zfW24 1VgT+t28INrthNyMLINIBAULosl3obAYayPPFd1DudfmzbQoEkydyBLUt1fCnn3i qrBQ6PrEbkjBjn/ulexKMzd3uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKe/S6D 1fHlOzynfl6KocQQ17DYMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWfVc/eVXoYod4plm7rE6tQAEXwpSpHky/FnPoNViwXjUMNMtM2U6d7P99lY9 n0rQULm604pN3oPOzsXSu4cYVDEUYpNMk80S+oDv3QFdYqrz5Yn0glG0+BOzHRFX eiI3fw0TOyz6nxaDrvyyfaiFTD8ECShf3Q0EmWw2tlh2jJO/BHV0uref9p/gg3oh aEqVFIoV9vylG7usR+k3vwKTrhEQiy1CKGbBjyqC8DRF5xpOGIit+IQslbj/KNkJ 1iDabABHdAsUNiDXzJdy1bWtBa/c6F28mUZcoxcF6nkPQX9r2N6E1OQysPGbMP3w veeeFK1NlamdYX663IAeGl4ozA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:06:48 2026 by rpki-client