$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: 6IiL/j+5vPu84mB80y0AK/XNMWkBp8BUNDFI6+pBEXE= Subject key identifier: D9:6A:2B:DF:F2:AD:42:78:12:66:73:5D:28:4B:15:71:4B:6D:A0:98 Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 0238 Signing time: Thu 23 Jul 2026 04:00:07 +0000 Manifest this update: Thu 23 Jul 2026 04:00:06 +0000 Manifest next update: Thu 30 Jul 2026 04:00:06 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: D/rfwj735Ys6gs63QX5WIu/Hb8W/wrbs3xvLhTHk4jk=) 2: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: L7PzMw/RqglxuX4TAKGHddkS6szpM6BUVLIqh8w+1Fk=) 3: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: 6I5YlsRFDMiAw2+6p+Np4QlkoPsG3b9oYbhxF6uNgBY=) 4: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: /+ba2nQszpmA32xw8Q2bNwCocgAiAxht6R/PF25M/+Q=) 5: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: eCvLkEbyNwc9r0JGvwSvHfQB+uiRQQDtRICORSigmQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Jul 23 04:00:06 2026 GMT Not After : Jul 30 04:00:06 2026 GMT Subject: CN=6a6191c6-6e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:90:ee:d5:83:7c:cf:66:50:ff:65:2d:b3:fc: ad:fe:88:2d:9a:64:e4:26:89:1d:2e:10:97:52:40: 98:67:6e:69:a3:cd:6f:61:8d:64:13:43:9e:bb:1c: 2e:51:61:a2:87:65:58:eb:67:82:6d:4a:1c:31:6b: 5e:ee:28:04:c8:e8:3a:b3:ae:ed:fc:5c:01:9c:d3: 40:5a:c2:a6:a6:43:aa:5d:c2:db:56:97:cc:40:37: bc:bb:a1:c6:60:25:3f:fe:d1:4d:fc:bf:25:ac:3d: 82:f7:e5:03:32:a9:95:90:e3:42:56:ad:c5:4c:62: 60:a4:5e:e7:10:f9:1f:11:7d:4c:53:6b:51:64:b0: cb:44:ca:62:cb:db:38:2d:7e:90:a1:48:6b:df:82: 17:90:8f:9a:30:3e:39:e6:a3:10:56:28:b3:b0:f7: c2:fc:a7:de:96:82:a7:ac:9e:17:73:f0:75:8a:67: f5:d7:db:ba:25:6a:22:c6:6c:0b:bb:27:f3:a4:83: 07:73:ca:a7:6b:84:63:7c:c3:4b:39:45:f6:2a:8c: aa:e7:d1:56:ae:60:e3:a4:02:ed:50:9b:cc:4c:63: 6a:56:0f:a0:45:5e:b9:5d:2e:1f:af:78:e0:ad:cc: 91:f6:a8:6b:b3:83:4c:30:ed:48:81:a3:93:25:5d: 5b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6A:2B:DF:F2:AD:42:78:12:66:73:5D:28:4B:15:71:4B:6D:A0:98 X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:16:2f:9c:25:e3:2d:a9:9a:cc:07:0d:0d:09:e5:c0:60:4b: ae:9e:e6:a0:a7:1e:44:66:c5:a3:5a:ce:7a:99:fe:a7:75:d5: 95:28:e0:2a:bf:37:83:9a:6a:ce:51:57:cf:17:63:a4:8f:4c: f9:f9:3f:f8:b0:12:f1:1f:a7:27:53:62:7c:1d:3f:a7:3e:3e: 98:b2:8a:1c:00:d4:f9:7d:19:5b:5b:f2:7e:db:bc:c5:96:21: 92:71:e3:34:6f:f6:07:2b:6a:03:09:3c:f5:ba:6a:7b:f4:0a: e8:39:b2:57:d0:7f:10:9c:95:ea:a5:48:11:2b:a2:a7:c4:b8: e5:3a:d6:06:21:ad:28:66:db:f8:84:c1:92:bc:9a:26:c5:4a: b8:84:a2:34:d0:20:ca:71:91:d3:bb:b5:5d:17:0a:64:f7:06: 95:59:66:03:57:b2:82:c8:1e:5c:d1:e7:5b:e1:9d:52:aa:d6: 9e:fb:26:d5:b9:c6:ad:1c:bd:7e:20:5b:b1:a6:b5:94:de:89: 5b:77:d3:a3:c0:fb:14:7f:21:80:5c:8d:9d:ce:1d:3d:f5:e8: d7:00:a8:a2:0e:3e:0a:80:75:30:67:0a:29:b2:5d:d2:f8:27: ba:b4:44:2c:9a:df:4a:3d:f7:c1:f8:c5:58:38:2f:62:89:15: 68:88:18:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjYwNzIzMDQwMDA2WhcNMjYwNzMwMDQwMDA2WjAYMRYwFAYD VQQDEw02YTYxOTFjNi02ZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JDu1YN8z2ZQ/2Uts/yt/ogtmmTkJokdLhCXUkCYZ25po81vYY1kE0Oeuxwu UWGih2VY62eCbUocMWte7igEyOg6s67t/FwBnNNAWsKmpkOqXcLbVpfMQDe8u6HG YCU//tFN/L8lrD2C9+UDMqmVkONCVq3FTGJgpF7nEPkfEX1MU2tRZLDLRMpiy9s4 LX6QoUhr34IXkI+aMD455qMQViizsPfC/KfeloKnrJ4Xc/B1imf119u6JWoixmwL uyfzpIMHc8qna4RjfMNLOUX2Koyq59FWrmDjpALtUJvMTGNqVg+gRV65XS4fr3jg rcyR9qhrs4NMMO1IgaOTJV1b6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlqK9/y rUJ4EmZzXShLFXFLbaCYMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcRYvnCXjLamazAcNDQnlwGBLrp7moKceRGbFo1rOepn+p3XVlSjgKr83g5pq zlFXzxdjpI9M+fk/+LAS8R+nJ1NifB0/pz4+mLKKHADU+X0ZW1vyftu8xZYhknHj NG/2BytqAwk89bpqe/QK6DmyV9B/EJyV6qVIESuip8S45TrWBiGtKGbb+ITBkrya JsVKuISiNNAgynGR07u1XRcKZPcGlVlmA1eygsgeXNHnW+GdUqrWnvsm1bnGrRy9 fiBbsaa1lN6JW3fTo8D7FH8hgFyNnc4dPfXo1wCoog4+CoB1MGcKKbJd0vgnurRE LJrfSj33wfjFWDgvYokVaIgYMw== -----END CERTIFICATE-----Generated at Fri Jul 24 07:10:16 2026 by rpki-client