$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft File: xPfznmL0ydeMXhL9wVGuTjK8mkI.mft (raw, json) Hash identifier: A2OXUUobmBd9urMPhBp+d1f2UGBTTTG7s9lXNZkeYmk= Subject key identifier: 3B:7E:7C:25:69:4D:15:CE:9C:67:37:C1:67:C6:47:3B:F9:C6:E8:C3 Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft Manifest number: 01A2 Signing time: Thu 23 Jul 2026 05:38:57 +0000 Manifest this update: Thu 23 Jul 2026 05:38:56 +0000 Manifest next update: Thu 30 Jul 2026 05:38:56 +0000 Files and hashes: 1: xPfznmL0ydeMXhL9wVGuTjK8mkI.crl (hash: hJhSOTPtoEXWo/LPRgoPjMcFQlJelNAsdxOMtdhmyxs=) 2: 127604E20F8B11EF87FC5918C4F9AE02.roa (hash: hsqDK4dEteoc0Mxqmy0cSR10HwSRl8nmy2mfYdV9jCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Validity Not Before: Jul 23 05:38:56 2026 GMT Not After : Jul 30 05:38:56 2026 GMT Subject: CN=6a61a8f1-ebef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:f3:ec:80:72:42:c5:ed:7a:ec:79:2a:e0: ff:9a:c6:10:f7:a8:e8:dc:18:96:7e:c3:a5:f0:99: 0d:3c:ad:37:1b:5c:d3:a8:f8:a7:ae:b9:78:83:bb: 64:b1:a3:ad:f1:31:b8:58:5e:54:b6:f9:d5:27:83: f2:72:55:ff:e6:81:7b:8b:52:2b:eb:18:63:da:31: 5c:09:79:71:c8:76:8b:c1:f5:83:05:c0:ea:a5:c1: 45:65:97:76:af:fe:cc:8f:3b:00:11:f4:53:43:bf: a3:58:f9:f7:b9:00:38:63:6b:0b:ad:ef:09:58:89: 1d:9d:e3:0a:f0:00:f5:48:1f:86:d4:33:cb:ac:85: 8d:e1:bb:36:f6:d8:a9:5e:90:a1:a0:93:55:bf:0c: 3f:6b:67:05:c3:1b:22:e0:b4:03:31:79:c8:a2:45: 44:92:62:b1:09:d3:90:fb:1c:7f:50:c1:f1:95:ec: 54:8e:d8:d4:b1:b9:0a:7e:9f:9e:c4:2c:0c:aa:a0: 72:03:c6:72:fd:70:bc:64:e1:68:96:4f:7c:e2:31: 3a:04:27:d1:c2:ee:54:5c:22:b0:9e:78:ca:9c:37: b0:58:7f:55:9a:34:72:30:cb:59:26:4e:98:6d:d6: f6:a2:0c:c9:52:de:8d:94:43:12:03:25:ae:b4:f7: 10:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7E:7C:25:69:4D:15:CE:9C:67:37:C1:67:C6:47:3B:F9:C6:E8:C3 X509v3 Authority Key Identifier: keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:88:71:ae:2e:2b:03:f2:72:56:0e:54:96:2a:d6:32:6b:1b: eb:18:09:94:af:5a:42:50:d2:c2:38:61:80:22:b0:d5:e2:4d: 9f:fc:8e:26:46:f0:f9:b0:6e:f7:81:3d:fe:30:32:4b:c4:01: b1:18:67:01:b2:cb:4b:be:63:39:7f:b0:fd:56:68:fc:7f:8f: 67:2e:fc:31:13:18:df:6b:16:e3:cd:1b:7e:e1:e3:22:dc:a5: 1e:35:56:f3:13:fc:b5:d2:55:0e:22:dd:60:3c:45:b7:39:a3: 8f:04:cf:6a:83:54:33:40:e4:a5:33:a6:6e:55:31:b7:3f:4a: f3:86:d5:61:0c:5f:61:28:01:d0:ea:25:d6:9d:8f:4d:c7:96: b7:24:76:aa:83:c9:e1:d9:16:f0:43:0c:df:85:aa:c0:e5:43: 93:33:25:2e:fd:44:b9:18:6c:c6:a2:34:72:ed:ff:71:d0:49: 23:8e:ed:69:89:49:2c:b5:6a:d1:ab:59:2b:61:25:ed:cd:02: db:a3:79:0c:4e:fb:fd:52:63:62:3f:ce:34:7e:72:9a:b5:91: bd:b8:c7:a9:6d:74:0b:41:5e:02:e9:6d:69:66:e8:50:cb:ea: 94:49:5e:66:ed:50:c4:92:7b:6a:26:ba:e3:95:85:35:cd:8f: 31:0a:e8:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIyOUIxMTAvBgNVBAUTKEM0RjdGMzlFNjJGNEM5RDc4QzVFMTJGREMxNTFBRTRF MzJCQzlBNDIwHhcNMjYwNzIzMDUzODU2WhcNMjYwNzMwMDUzODU2WjAYMRYwFAYD VQQDEw02YTYxYThmMS1lYmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlnz7IByQsXteux5KuD/msYQ96jo3BiWfsOl8JkNPK03G1zTqPinrrl4g7tk saOt8TG4WF5UtvnVJ4PyclX/5oF7i1Ir6xhj2jFcCXlxyHaLwfWDBcDqpcFFZZd2 r/7MjzsAEfRTQ7+jWPn3uQA4Y2sLre8JWIkdneMK8AD1SB+G1DPLrIWN4bs29tip XpChoJNVvww/a2cFwxsi4LQDMXnIokVEkmKxCdOQ+xx/UMHxlexUjtjUsbkKfp+e xCwMqqByA8Zy/XC8ZOFolk984jE6BCfRwu5UXCKwnnjKnDewWH9VmjRyMMtZJk6Y bdb2ogzJUt6NlEMSAyWutPcQVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDt+fCVp TRXOnGc3wWfGRzv5xujDMB8GA1UdIwQYMBaAFMT3855i9MnXjF4S/cFRrk4yvJpC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjI5Qi84QTNFMUQxQTBG ODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlkZU1YaEw5d1ZHdVRqSzht a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZnpubUwweWRlTVhoTDl3Vkd1VGpLOG1rSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjI5Qi84QTNFMUQxQTBGODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlk ZU1YaEw5d1ZHdVRqSzhta0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAIhxri4rA/JyVg5UlirWMmsb6xgJlK9aQlDSwjhhgCKw1eJNn/yOJkbw+bBu 94E9/jAyS8QBsRhnAbLLS75jOX+w/VZo/H+PZy78MRMY32sW480bfuHjItylHjVW 8xP8tdJVDiLdYDxFtzmjjwTPaoNUM0DkpTOmblUxtz9K84bVYQxfYSgB0Ool1p2P TceWtyR2qoPJ4dkW8EMM34WqwOVDkzMlLv1EuRhsxqI0cu3/cdBJI47taYlJLLVq 0atZK2El7c0C26N5DE77/VJjYj/ONH5ymrWRvbjHqW10C0FeAultaWboUMvqlEle Zu1QxJJ7aia645WFNc2PMQro1g== -----END CERTIFICATE-----Generated at Fri Jul 24 10:53:43 2026 by rpki-client