$ rpki-client -vvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft File: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft (raw, json) Hash identifier: cCIHf6EmpYLBefQmYJzkKy6Z9ra/cbWmJh7/+TPPcgU= Subject key identifier: 58:32:E6:CB:01:70:83:3F:E8:65:49:09:C7:07:3E:FA:D1:FE:6E:39 Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Certificate serial: 0EA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft Manifest number: 0E80 Signing time: Wed 22 Jul 2026 17:56:55 +0000 Manifest this update: Wed 22 Jul 2026 17:56:54 +0000 Manifest next update: Wed 29 Jul 2026 17:56:54 +0000 Files and hashes: 1: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl (hash: OS4IVf/B4ta64M08n1cBBldGPHAsvEhZFBTgjVe1tUw=) 2: F70C0B5E4A8C11F18179024696EE528E.roa (hash: BcPA+kBAWewJTEaX67GywprKBkDhJopRXac8MDudoCg=) 3: CD22D13C6DEC11F19E45C9465DA30FBC.roa (hash: ZShJ4AD7l89NGkQj9YglmhWVaniaXpNAe1m+z6iRJIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3746 (0xea2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F521, serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Validity Not Before: Jul 22 17:56:54 2026 GMT Not After : Jul 29 17:56:54 2026 GMT Subject: CN=6a610467-3448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:e9:9a:12:52:ec:cf:65:93:14:3d:49:15: c3:94:16:8b:43:95:97:6c:ce:4e:9f:67:49:f1:b3: b8:34:b2:61:ac:40:1a:83:82:9c:74:e8:7f:16:6a: 25:b0:d0:8c:bb:5d:fd:a2:c5:9d:51:b9:ca:7a:ba: a6:53:d5:e3:05:7a:97:9c:68:8b:50:16:cc:89:be: 0c:02:38:d9:9d:aa:e3:d2:a5:c6:d6:e7:cd:82:79: 43:6a:c7:10:77:f9:86:bd:11:bc:4d:d8:f5:88:4a: 88:91:8e:46:22:a4:5e:d6:a2:7e:90:e4:16:5e:d8: 75:1c:09:4a:4d:42:7f:2d:03:49:c9:07:c5:ef:52: f0:e7:70:27:86:21:fc:4d:32:14:cc:5b:4b:c5:77: 1c:dc:d5:54:9f:6f:d4:f8:54:18:8d:59:6c:5a:38: 13:c9:17:7f:48:11:f7:96:4d:42:b3:20:c1:89:1d: bb:00:ab:5d:4d:7d:b5:2a:51:47:fe:07:0b:a4:62: 2a:d9:60:bb:ca:87:f5:24:39:eb:7b:c5:b1:ff:59: 17:be:59:d8:bf:8b:d7:fe:44:ba:0c:21:97:b8:ac: 6e:95:37:9a:5e:7c:f9:3e:ed:52:39:f7:ad:3d:cd: c0:e6:bf:42:40:12:3c:ea:d7:99:a8:80:d0:63:a9: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:32:E6:CB:01:70:83:3F:E8:65:49:09:C7:07:3E:FA:D1:FE:6E:39 X509v3 Authority Key Identifier: keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:4e:cf:8b:4e:9e:57:6a:7c:06:15:b3:60:11:6a:2b:65:b4: 72:50:76:e9:90:cf:70:33:33:02:e6:f4:1c:f6:3b:fc:2e:ba: 37:c8:91:e2:5a:0f:e7:0c:69:e9:ad:d8:b4:53:7b:b2:09:35: 15:52:a0:3c:91:3b:bb:4a:3f:da:d0:4d:be:6b:7b:1a:2e:9c: 01:83:b1:fe:02:2f:31:48:30:6c:8e:ef:ec:1c:28:1a:32:08: dd:89:da:22:28:95:cb:3b:ac:76:2f:8b:13:7b:68:be:51:a3: 73:7d:6d:32:a1:3b:cb:04:c9:44:59:f1:a8:63:e9:fa:64:1d: ac:ab:3e:76:e1:03:fa:7b:8b:bb:48:ca:77:c5:0e:6f:00:ad: 3f:76:02:45:c4:cf:9a:dd:10:63:ad:9b:cb:13:0d:28:8b:46: 97:bc:1d:55:f1:7b:52:a6:f7:e8:cd:f4:b6:a9:56:e5:3e:44: 1f:85:ec:d5:d0:4d:55:23:8b:e4:ad:58:43:ff:cd:87:e0:b5: 4e:69:13:df:16:60:69:b3:a2:13:39:65:55:5e:de:1e:54:82: 50:a5:6f:cc:88:67:53:aa:4f:c3:2e:56:23:d7:63:5b:b8:bf: a5:44:17:dc:8a:d4:2f:e1:ae:7d:d6:c1:f2:cc:21:46:6c:8a: 74:92:e3:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1MjExMTAvBgNVBAUTKDI5NzY4NzY3NTNENjU1NjJBN0NBODVFM0U5RThERjc1 MDc5N0M5NDgwHhcNMjYwNzIyMTc1NjU0WhcNMjYwNzI5MTc1NjU0WjAYMRYwFAYD VQQDEw02YTYxMDQ2Ny0zNDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApw3pmhJS7M9lkxQ9SRXDlBaLQ5WXbM5On2dJ8bO4NLJhrEAag4KcdOh/Fmol sNCMu139osWdUbnKerqmU9XjBXqXnGiLUBbMib4MAjjZnarj0qXG1ufNgnlDascQ d/mGvRG8Tdj1iEqIkY5GIqRe1qJ+kOQWXth1HAlKTUJ/LQNJyQfF71Lw53AnhiH8 TTIUzFtLxXcc3NVUn2/U+FQYjVlsWjgTyRd/SBH3lk1CsyDBiR27AKtdTX21KlFH /gcLpGIq2WC7yof1JDnre8Wx/1kXvlnYv4vX/kS6DCGXuKxulTeaXnz5Pu1SOfet Pc3A5r9CQBI86teZqIDQY6nc3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgy5ssB cIM/6GVJCccHPvrR/m45MB8GA1UdIwQYMBaAFCl2h2dT1lVip8qF4+no33UHl8lI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjUyMS8yMTY1ODgyMEM2 N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZXS255b1hqNmVqZmRRZVh5 VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYYUhaMVBXVldLbnlvWGo2ZWpmZFFlWHlVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjUyMS8yMTY1ODgyMEM2N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZX S255b1hqNmVqZmRRZVh5VWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsU7Pi06eV2p8BhWzYBFqK2W0clB26ZDPcDMzAub0HPY7/C66N8iR4loP5wxp 6a3YtFN7sgk1FVKgPJE7u0o/2tBNvmt7Gi6cAYOx/gIvMUgwbI7v7BwoGjII3Yna IiiVyzusdi+LE3tovlGjc31tMqE7ywTJRFnxqGPp+mQdrKs+duED+nuLu0jKd8UO bwCtP3YCRcTPmt0QY62byxMNKItGl7wdVfF7Uqb36M30tqlW5T5EH4Xs1dBNVSOL 5K1YQ//Nh+C1TmkT3xZgabOiEzllVV7eHlSCUKVvzIhnU6pPwy5WI9djW7i/pUQX 3IrUL+GufdbB8swhRmyKdJLjMA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:22:43 2026 by rpki-client