$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json) Hash identifier: z9vczp3TtoyGTKNLDHPIL6ARHUhCpMHHoEbOQRZdm3o= Subject key identifier: 4F:C3:54:99:B1:AD:0D:BD:BB:19:5E:02:C2:93:BA:20:53:D6:68:24 Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft Manifest number: 02C0 Signing time: Thu 23 Jul 2026 02:22:16 +0000 Manifest this update: Thu 23 Jul 2026 02:22:15 +0000 Manifest next update: Thu 30 Jul 2026 02:22:15 +0000 Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: fTJdkf5+6/Fnqc4xwbY/ibUSLjZQHs4lqT3saNwSOsQ=) 2: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: 18O7Lp0T09zqzj1uz2UvboEJEAG8f//RjAML5YNM31g=) 3: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: mF+0oU+0n20Cgq5ko570coLg0lSVzI4jtUFqm1rkd8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Validity Not Before: Jul 23 02:22:15 2026 GMT Not After : Jul 30 02:22:15 2026 GMT Subject: CN=6a617ad7-3f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b7:50:8c:2e:78:13:87:6c:8c:05:c5:77:b3: 00:67:13:22:5c:53:c9:d9:ec:66:fb:39:3d:8c:5f: dd:d1:c1:55:5b:55:53:ae:e7:77:b6:73:12:0c:29: aa:6d:13:1e:cb:bd:f0:fe:b8:95:ce:e1:94:1e:27: 3e:b7:29:a3:1d:98:bd:6f:18:fd:a9:70:d1:c4:b7: e2:cb:3d:28:d7:d2:87:1b:08:68:1e:4f:11:f8:4f: 05:c8:72:68:56:b6:3c:67:7a:0d:33:9d:d7:9a:c6: 20:9d:e6:31:47:2d:a8:6e:11:9a:b5:d7:78:e5:6f: 69:ce:a1:38:31:9b:f0:40:36:34:6a:6f:64:ac:53: 60:4a:6f:cb:6e:2a:7c:5f:de:82:76:7b:ae:2a:bf: 47:fa:5b:2d:51:14:0d:9e:2b:28:b1:e9:82:cc:26: 2e:06:0b:11:b9:41:80:c7:d8:48:ac:5e:e5:51:fe: 4b:ee:2b:11:b1:c6:a9:2a:2f:38:0b:b1:00:a6:b0: 22:d6:21:1e:3c:77:9e:05:6b:58:3e:7f:82:c2:65: 3f:1d:59:48:66:36:8a:43:c3:f2:c3:18:0c:cf:cc: 5b:0a:53:f3:10:22:e9:bc:6e:2d:37:90:a2:c6:1f: c3:bf:89:3b:98:a3:2b:e6:30:16:24:3a:52:08:69: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C3:54:99:B1:AD:0D:BD:BB:19:5E:02:C2:93:BA:20:53:D6:68:24 X509v3 Authority Key Identifier: keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2e:9f:a7:ff:59:f3:e8:db:c4:52:c5:86:3e:38:eb:23:f2: e1:ec:f9:fd:76:51:e5:14:b3:cc:20:6d:1e:14:d6:5b:40:fc: cd:e7:59:01:b5:b6:24:b5:7b:bc:c3:52:72:02:08:7f:b7:f1: fd:22:31:95:27:0e:0b:2f:0b:8c:49:36:54:c2:9a:b6:44:b8: 67:03:c8:12:f9:62:20:0f:be:14:60:6b:d3:45:34:8f:ed:18: e7:c7:2f:5c:03:d7:47:93:44:f8:42:32:48:32:89:6a:f6:a9: af:28:1a:3e:0a:58:9a:9f:93:2f:09:bf:a2:15:1e:07:8b:94: b8:ca:37:16:45:0b:d0:e1:bc:aa:68:18:ad:1f:71:da:8c:43: 49:68:1c:c0:c4:06:1d:09:0b:a7:d3:02:d0:65:03:c2:62:d7: 38:4f:0a:fb:48:33:d5:f6:37:2a:36:f1:42:fb:53:da:9e:f1: bf:0d:4b:60:61:46:42:9f:75:b0:24:1b:c2:cc:49:d6:11:11: e3:20:e6:ea:09:3a:3b:00:d1:41:42:8e:d6:9d:10:35:49:88: 6c:71:d3:19:5c:ab:c7:d0:64:b5:c4:8e:d8:64:1a:a6:b7:b9: 52:8f:07:cc:ba:c6:e7:76:49:d9:87:28:80:06:f8:fd:d9:96: fe:1d:01:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx NTAwQURDNzYwHhcNMjYwNzIzMDIyMjE1WhcNMjYwNzMwMDIyMjE1WjAYMRYwFAYD VQQDEw02YTYxN2FkNy0zZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77dQjC54E4dsjAXFd7MAZxMiXFPJ2exm+zk9jF/d0cFVW1VTrud3tnMSDCmq bRMey73w/riVzuGUHic+tymjHZi9bxj9qXDRxLfiyz0o19KHGwhoHk8R+E8FyHJo VrY8Z3oNM53XmsYgneYxRy2obhGatdd45W9pzqE4MZvwQDY0am9krFNgSm/Lbip8 X96CdnuuKr9H+lstURQNnisosemCzCYuBgsRuUGAx9hIrF7lUf5L7isRscapKi84 C7EAprAi1iEePHeeBWtYPn+CwmU/HVlIZjaKQ8PywxgMz8xbClPzECLpvG4tN5Ci xh/Dv4k7mKMr5jAWJDpSCGmXTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/DVJmx rQ29uxleAsKTuiBT1mgkMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRB SXhzc1N4TklHLUVWQUszSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALS6fp/9Z8+jbxFLFhj446yPy4ez5/XZR5RSzzCBtHhTWW0D8zedZAbW2JLV7 vMNScgIIf7fx/SIxlScOCy8LjEk2VMKatkS4ZwPIEvliIA++FGBr00U0j+0Y58cv XAPXR5NE+EIySDKJavaprygaPgpYmp+TLwm/ohUeB4uUuMo3FkUL0OG8qmgYrR9x 2oxDSWgcwMQGHQkLp9MC0GUDwmLXOE8K+0gz1fY3KjbxQvtT2p7xvw1LYGFGQp91 sCQbwsxJ1hER4yDm6gk6OwDRQUKO1p0QNUmIbHHTGVyrx9BktcSO2GQapre5Uo8H zLrG53ZJ2YcogAb4/dmW/h0BYg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:59:26 2026 by rpki-client