$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft File: XZRtT0edN7zhcAywut1RosPfYg8.mft (raw, json) Hash identifier: w14Sg5KsuNZvWTgoQCDvnscwWEOHy8edoC3mhjMKCcg= Subject key identifier: 14:3E:09:F4:81:49:3A:F5:E3:C0:E7:64:65:B0:C9:83:9A:BD:A8:EF Authority key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F Certificate issuer: /CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft Manifest number: 014B Signing time: Thu 23 Jul 2026 06:51:52 +0000 Manifest this update: Thu 23 Jul 2026 06:51:52 +0000 Manifest next update: Thu 30 Jul 2026 06:51:52 +0000 Files and hashes: 1: XZRtT0edN7zhcAywut1RosPfYg8.crl (hash: qo6BObKnFPpmPE3Z6zm0TPzeRtRFoow15AUwSIlzUdI=) 2: CB24F37C033711F0B76A8520C4F9AE02.roa (hash: XEgsmSONdO5QmyZ+W6pwM4gqDm2Ruw04W/Sgse84F1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152787, serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Validity Not Before: Jul 23 06:51:52 2026 GMT Not After : Jul 30 06:51:52 2026 GMT Subject: CN=6a61ba08-72c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:a7:70:10:5b:86:dc:38:86:4f:c3:7c:3a: 16:e3:b3:72:2f:2e:01:5f:c8:c4:b9:e5:58:51:ad: 09:85:5f:29:c0:64:5e:f9:ae:84:16:77:d6:d9:02: 56:4e:0d:23:39:ba:9d:0a:61:33:ac:0f:d0:3a:94: fb:fa:d9:61:0a:72:43:77:e5:d6:f3:45:20:a0:a9: d2:3d:78:e0:58:d4:67:90:26:4e:97:9e:ef:1e:4c: 8f:d9:f2:46:c3:3b:4d:1b:56:71:57:fb:d5:8d:c2: 94:6f:2a:19:bd:3c:90:8d:b8:ab:3e:fc:9d:99:6c: 46:10:d7:1f:9f:ff:03:3d:d7:93:0f:2f:89:8c:da: 2c:ed:b8:80:0c:f1:3c:9e:0e:b8:63:63:aa:d6:94: c6:b0:54:56:cb:85:ba:9d:03:a9:f4:e0:1e:17:c1: d9:04:b0:b5:cb:a1:1e:6c:14:00:e4:36:5d:d9:37: dc:5f:ac:fc:b4:b7:e5:7d:9a:16:fe:66:de:75:94: 74:06:d4:5c:1a:e3:73:1d:4f:99:08:c7:c8:19:87: 6a:cd:22:8c:2d:ec:22:81:d0:b3:a2:f2:f2:9b:cd: 5c:d0:43:89:b1:62:bc:68:d1:e9:99:08:70:bd:60: 79:10:d0:3f:5f:b4:2f:66:32:9c:e1:9b:2d:94:0d: e5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3E:09:F4:81:49:3A:F5:E3:C0:E7:64:65:B0:C9:83:9A:BD:A8:EF X509v3 Authority Key Identifier: keyid:5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ff:e5:f0:06:81:cc:e5:87:a0:7a:4b:73:5e:c4:23:fc:91: 45:c2:d8:c9:83:85:40:35:9c:e7:db:9b:f4:e8:ad:8b:f1:e0: 94:be:f2:8a:6e:d1:f4:8b:9d:41:a3:6f:da:97:d8:73:43:7e: a1:c4:e1:b5:6d:81:f5:0c:c7:fe:ad:e2:a5:92:d6:c5:89:7e: 8e:61:0e:cf:ac:89:43:cc:b7:50:e9:42:72:b2:76:8e:cb:11: d5:2b:cc:0a:50:77:2f:d6:f9:6f:8b:7e:2f:e7:59:e7:8c:a0: 1b:69:d8:6f:35:cf:fd:d9:16:75:7c:18:12:78:7d:3f:4a:c2: f6:06:19:94:c1:61:39:ee:cd:67:d7:a6:1a:33:a4:55:b6:2d: 8a:81:d7:69:01:80:14:e5:71:07:57:1d:72:24:9e:6c:52:ba: e2:9e:e5:25:5d:01:d9:0f:12:61:7a:de:6b:08:a2:c0:54:da: e5:0e:a5:61:dc:d2:49:fa:de:4a:fc:14:ba:0d:90:25:06:55: eb:da:51:94:78:c1:2e:1f:eb:98:18:b2:33:8b:c2:0a:30:a9: 40:c4:d8:32:c7:39:c6:f5:9b:19:9c:04:ed:a3:9f:ae:8d:94: cb:8e:ec:4f:07:e8:f5:fe:d9:e3:94:e6:ec:fa:63:c3:48:bd: 22:2d:ea:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3ODcxMTAvBgNVBAUTKDVEOTQ2RDRGNDc5RDM3QkNFMTcwMENCMEJBREQ1MUEy QzNERjYyMEYwHhcNMjYwNzIzMDY1MTUyWhcNMjYwNzMwMDY1MTUyWjAYMRYwFAYD VQQDEw02YTYxYmEwOC03MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfyncBBbhtw4hk/DfDoW47NyLy4BX8jEueVYUa0JhV8pwGRe+a6EFnfW2QJW Tg0jObqdCmEzrA/QOpT7+tlhCnJDd+XW80UgoKnSPXjgWNRnkCZOl57vHkyP2fJG wztNG1ZxV/vVjcKUbyoZvTyQjbirPvydmWxGENcfn/8DPdeTDy+JjNos7biADPE8 ng64Y2Oq1pTGsFRWy4W6nQOp9OAeF8HZBLC1y6EebBQA5DZd2TfcX6z8tLflfZoW /mbedZR0BtRcGuNzHU+ZCMfIGYdqzSKMLewigdCzovLym81c0EOJsWK8aNHpmQhw vWB5ENA/X7QvZjKc4ZstlA3lMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQ+CfSB STr148DnZGWwyYOavajvMB8GA1UdIwQYMBaAFF2UbU9HnTe84XAMsLrdUaLD32IP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mjc4Ny8yMjg2NTYyQThG NzkxMUVGOTJBQzc4MUVDNEY5QUUwMi9YWlJ0VDBlZE43emhjQXl3dXQxUm9zUGZZ ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1haUnRUMGVkTjd6aGNBeXd1dDFSb3NQZllnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mjc4Ny8yMjg2NTYyQThGNzkxMUVGOTJBQzc4MUVDNEY5QUUwMi9YWlJ0VDBlZE43 emhjQXl3dXQxUm9zUGZZZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEv/l8AaBzOWHoHpLc17EI/yRRcLYyYOFQDWc59ub9Oiti/HglL7yim7R9Iud QaNv2pfYc0N+ocThtW2B9QzH/q3ipZLWxYl+jmEOz6yJQ8y3UOlCcrJ2jssR1SvM ClB3L9b5b4t+L+dZ54ygG2nYbzXP/dkWdXwYEnh9P0rC9gYZlMFhOe7NZ9emGjOk VbYtioHXaQGAFOVxB1cdciSebFK64p7lJV0B2Q8SYXreawiiwFTa5Q6lYdzSSfre SvwUug2QJQZV69pRlHjBLh/rmBiyM4vCCjCpQMTYMsc5xvWbGZwE7aOfro2Uy47s Twfo9f7Z45Tm7Ppjw0i9Ii3q1g== -----END CERTIFICATE-----Generated at Fri Jul 24 13:28:47 2026 by rpki-client