$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: FoEhP1IdF4EgoNExWJRJaEMxsXnMzuqszHRKzDRznXc= Subject key identifier: 7A:8B:28:BF:3B:6A:E4:B4:53:AD:C9:9E:7E:3F:21:B1:8B:C0:1F:41 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 0465 Signing time: Thu 23 Jul 2026 01:02:31 +0000 Manifest this update: Thu 23 Jul 2026 01:02:31 +0000 Manifest next update: Thu 30 Jul 2026 01:02:31 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: LiUQXcpg9kDKdP/WQkZkb0Xowgxi2GfLA9ti+lWj9nk=) 2: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: US3zQpwIIKbs6wAdZrpkun85NZn/CcgVmY5RXTFLp6U=) 3: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: C2xe2xSt+zG2ZuMpvD0jHOEIkW1+AE92r/FDO/VZFwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Jul 23 01:02:31 2026 GMT Not After : Jul 30 01:02:31 2026 GMT Subject: CN=6a616827-74f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:04:11:e4:f9:63:3e:d8:bd:28:ec:1c:9b: f5:ce:8e:a6:1e:32:4f:7d:db:20:ca:47:e9:57:cb: 7c:d9:67:61:66:f9:3e:f6:59:ed:f4:fd:e1:43:fa: 61:07:33:86:dc:4f:e9:26:b0:87:d8:5e:20:8e:5f: b0:22:71:c2:ab:64:01:a1:a8:c2:78:09:f2:83:d8: 5e:fc:f6:4a:a4:86:25:2a:97:ad:06:dc:d5:54:a7: ad:fa:b0:c0:5a:78:5a:9d:45:e8:45:f8:f7:96:22: e4:32:0c:8b:04:b1:49:96:c7:f9:18:67:72:19:d8: 88:a0:01:13:21:57:6e:1b:f9:96:8a:e8:7f:2a:7c: 3e:e6:8b:d4:21:6c:7f:9e:8a:79:d3:9d:27:a8:4b: 31:49:81:27:77:c4:88:6f:66:de:3b:7e:af:42:04: 25:bc:75:60:50:9c:ab:85:d4:c9:61:ce:aa:26:b3: 7f:ad:c4:f1:e6:37:73:f4:96:bb:18:59:0f:90:1b: 4e:f1:df:e1:0d:a7:d0:d1:9c:1f:93:ef:c6:a9:6f: ea:09:5c:ff:3d:18:cb:95:3f:5e:57:ed:f5:f2:d7: 6d:5e:5b:ba:fe:f8:e6:4a:eb:60:c4:01:16:3b:78: 8f:e8:6e:3b:60:b7:92:1b:41:2c:2f:3e:e9:29:7d: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8B:28:BF:3B:6A:E4:B4:53:AD:C9:9E:7E:3F:21:B1:8B:C0:1F:41 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:96:20:23:18:7e:81:db:3e:47:48:4d:2b:6b:98:a3:82:70: d0:6c:8b:11:7a:8b:40:14:6d:28:87:8b:b9:b8:24:d9:69:b9: a8:e5:00:8f:a5:35:3d:5d:c7:1a:b1:c6:eb:8e:36:a3:28:6f: 56:2f:18:eb:18:d5:a8:8e:1f:62:71:a3:e0:c4:14:89:99:a3: 47:8a:1c:76:8a:6e:78:4d:82:df:fe:d7:23:8f:27:0c:65:4f: 29:45:d5:35:45:d2:e5:3a:f7:aa:f1:ba:ea:95:8b:6c:9b:47: e5:7a:19:19:49:f9:6c:71:cc:66:b8:da:c1:e4:6a:9f:d3:92: 7b:75:1a:0e:63:17:f7:53:e9:77:c3:2f:4c:15:8e:6f:96:f9: 79:ba:7d:50:ae:db:e9:0b:fe:40:56:6d:0f:b7:73:94:3b:88: d7:78:ef:68:1f:fc:7e:d4:b2:1e:12:e5:da:2b:03:f3:62:78: 16:d9:d4:df:49:fc:a3:db:4e:20:10:45:10:dc:ac:c9:e8:07: 46:be:6e:5b:09:c8:77:fd:23:1a:25:34:a8:0f:fb:3e:61:54: 10:fe:51:82:70:98:a4:09:8f:2e:e0:c5:ba:f5:70:67:b5:1c: 29:c9:34:38:35:af:38:c1:f4:f0:bd:77:54:c9:a1:0e:34:f2: 92:bb:0b:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjYwNzIzMDEwMjMxWhcNMjYwNzMwMDEwMjMxWjAYMRYwFAYD VQQDEw02YTYxNjgyNy03NGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUwEEeT5Yz7YvSjsHJv1zo6mHjJPfdsgykfpV8t82WdhZvk+9lnt9P3hQ/ph BzOG3E/pJrCH2F4gjl+wInHCq2QBoajCeAnyg9he/PZKpIYlKpetBtzVVKet+rDA WnhanUXoRfj3liLkMgyLBLFJlsf5GGdyGdiIoAETIVduG/mWiuh/Knw+5ovUIWx/ nop5050nqEsxSYEnd8SIb2beO36vQgQlvHVgUJyrhdTJYc6qJrN/rcTx5jdz9Ja7 GFkPkBtO8d/hDafQ0Zwfk+/GqW/qCVz/PRjLlT9eV+318tdtXlu6/vjmSutgxAEW O3iP6G47YLeSG0EsLz7pKX39nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqLKL87 auS0U63Jnn4/IbGLwB9BMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsZYgIxh+gds+R0hNK2uYo4Jw0GyLEXqLQBRtKIeLubgk2Wm5qOUAj6U1PV3H GrHG6442oyhvVi8Y6xjVqI4fYnGj4MQUiZmjR4ocdopueE2C3/7XI48nDGVPKUXV NUXS5Tr3qvG66pWLbJtH5XoZGUn5bHHMZrjaweRqn9OSe3UaDmMX91Ppd8MvTBWO b5b5ebp9UK7b6Qv+QFZtD7dzlDuI13jvaB/8ftSyHhLl2isD82J4FtnU30n8o9tO IBBFENysyegHRr5uWwnId/0jGiU0qA/7PmFUEP5RgnCYpAmPLuDFuvVwZ7UcKck0 ODWvOMH08L13VMmhDjTykrsL3A== -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:16 2026 by rpki-client