$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: 4AbbXtpz2B9Qr5kAGy+Mq3I8jDHYTo3dzk7tGeCSatc= Subject key identifier: 49:29:48:D3:63:7B:FB:12:98:71:70:F1:6A:B8:70:3D:E9:EB:DE:6F Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 0469 Signing time: Thu 23 Jul 2026 01:05:59 +0000 Manifest this update: Thu 23 Jul 2026 01:05:59 +0000 Manifest next update: Thu 30 Jul 2026 01:05:59 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: rFykLJtQ9fVLnrOqBucMsdPgBzCZHcCQ2AMnWahtUU0=) 2: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: Xwopv44IWtrA47h99nFS1HcICRmL98rRNkBLnVkufOs=) 3: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: W4goqtPYzyLcCdBI7xc2Qn8MqCV+FsXgvw4MFdwTxhk=) 4: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: htWOUsGCluqo+bDLkY52m9kGHamjAwjskMqRyVdOAVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Jul 23 01:05:59 2026 GMT Not After : Jul 30 01:05:59 2026 GMT Subject: CN=6a6168f7-a248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:68:e9:89:30:6c:d4:3e:f2:1e:97:bb:bb: e2:4e:30:0a:c2:a4:1f:d0:e9:3b:18:c8:42:9c:ad: b7:ed:54:8a:d6:85:74:a7:67:0c:71:7d:45:b8:a7: 94:ac:5c:56:de:2d:7d:4b:49:7f:80:a8:b9:4a:f6: 90:7a:0d:51:48:f5:da:3d:20:38:41:18:b2:73:71: e3:e9:ca:00:35:02:54:0c:86:cc:e2:62:36:5b:00: 2c:a7:b6:9c:7d:63:e7:28:99:4a:cd:f3:44:82:ec: fd:14:9d:ee:64:b2:c1:a1:b2:9f:4d:ed:49:c3:7b: 2b:8c:fb:54:31:d8:45:9d:c3:6b:60:65:b8:4a:84: aa:12:32:63:01:cc:58:7b:24:bc:f4:d5:ed:ab:7d: 8f:ca:57:f2:7d:be:d5:87:8d:76:92:34:66:fb:c4: 9d:c1:b5:f3:00:41:de:73:5d:5f:53:f6:93:f4:76: 52:9c:87:13:bb:9b:b7:28:00:ef:0e:1a:3e:b6:b7: ca:57:a1:da:58:e3:87:a9:cd:f2:4d:af:e7:e4:22: 67:ff:13:fc:1b:50:7b:f5:5a:73:7e:56:71:7a:e9: a3:36:92:d9:2d:4d:e0:21:5b:a2:07:ce:95:2e:e9: d1:f2:c7:f6:de:1b:36:32:d4:12:3f:5e:7a:8f:8e: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:29:48:D3:63:7B:FB:12:98:71:70:F1:6A:B8:70:3D:E9:EB:DE:6F X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:78:ff:1b:82:d0:b1:ed:e9:41:e8:f4:67:c3:08:3d:fc:88: 19:9a:36:60:74:23:61:94:38:3c:2d:31:bb:7c:71:74:3a:aa: 67:2d:9d:92:a3:f0:2a:fc:ff:66:42:78:ba:f8:db:f2:d7:2a: 7e:04:69:88:28:89:56:5d:81:f8:40:54:71:34:06:44:f0:01: d2:fb:1f:75:c1:b0:f3:54:2a:11:33:98:08:ef:fc:42:82:71: c4:ce:08:0d:3c:e2:4e:a1:0a:f7:ae:17:82:5a:aa:b2:e6:71: 70:63:fb:fa:90:21:65:f2:08:a6:10:af:24:7e:d8:05:25:99: b9:99:3b:a3:a4:a0:51:a9:92:02:c0:5d:ab:f9:40:14:fc:a6: e0:a9:03:3b:91:1f:57:c4:07:17:1d:5a:10:00:84:90:0f:bc: d6:ac:ef:c7:b2:b6:c6:47:b1:10:a2:a4:91:f0:50:b0:31:8c: ce:9d:58:90:92:98:01:10:7c:c6:86:c5:30:9c:1e:0c:cf:29: da:82:e1:3c:13:16:a1:71:a0:5b:47:ed:30:b0:d3:06:fb:c0: 33:2e:64:6d:da:be:03:61:24:16:75:0a:f2:46:d5:45:c9:49: bb:ae:81:40:77:38:1e:d6:1d:42:e3:7e:f3:fd:59:d7:e8:65: 78:20:39:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjYwNzIzMDEwNTU5WhcNMjYwNzMwMDEwNTU5WjAYMRYwFAYD VQQDEw02YTYxNjhmNy1hMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5Vo6YkwbNQ+8h6Xu7viTjAKwqQf0Ok7GMhCnK237VSK1oV0p2cMcX1FuKeU rFxW3i19S0l/gKi5SvaQeg1RSPXaPSA4QRiyc3Hj6coANQJUDIbM4mI2WwAsp7ac fWPnKJlKzfNEguz9FJ3uZLLBobKfTe1Jw3srjPtUMdhFncNrYGW4SoSqEjJjAcxY eyS89NXtq32Pylfyfb7Vh412kjRm+8SdwbXzAEHec11fU/aT9HZSnIcTu5u3KADv Dho+trfKV6HaWOOHqc3yTa/n5CJn/xP8G1B79VpzflZxeumjNpLZLU3gIVuiB86V LunR8sf23hs2MtQSP156j45GCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkpSNNj e/sSmHFw8Wq4cD3p695vMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMnj/G4LQse3pQej0Z8MIPfyIGZo2YHQjYZQ4PC0xu3xxdDqqZy2dkqPwKvz/ ZkJ4uvjb8tcqfgRpiCiJVl2B+EBUcTQGRPAB0vsfdcGw81QqETOYCO/8QoJxxM4I DTziTqEK964XglqqsuZxcGP7+pAhZfIIphCvJH7YBSWZuZk7o6SgUamSAsBdq/lA FPym4KkDO5EfV8QHFx1aEACEkA+81qzvx7K2xkexEKKkkfBQsDGMzp1YkJKYARB8 xobFMJweDM8p2oLhPBMWoXGgW0ftMLDTBvvAMy5kbdq+A2EkFnUK8kbVRclJu66B QHc4HtYdQuN+8/1Z1+hleCA5cA== -----END CERTIFICATE-----Generated at Fri Jul 24 20:12:17 2026 by rpki-client