$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: YDpFyhR8zxd/Rtas+R8c6Hed4ZzPxLQXUMKqL4D9AXg= Subject key identifier: D8:90:27:42:A7:3B:C3:57:9B:AA:A3:18:69:8C:25:3C:91:E3:40:20 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 0849 Signing time: Wed 22 Jul 2026 21:39:09 +0000 Manifest this update: Wed 22 Jul 2026 21:39:09 +0000 Manifest next update: Wed 29 Jul 2026 21:39:09 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: c9wqL1wEGIy/F7AxVg0M3Zu7VGnZXv4REXJMlTvEv4U=) 2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 4V6lPO7ag/YW0Vp0T9oZKnRuFp3L/Sg6PmpvkYR7JtQ=) 3: ynE2cJx2tPBEuKgzdbsTmyeowJk.asa (hash: EweJrrImGX04lNcYsxwFSit8cSrY9BsT06vhpboqpTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jul 22 21:39:09 2026 GMT Not After : Jul 29 21:39:09 2026 GMT Subject: CN=6a61387d-5942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:5a:d0:56:47:cf:f2:59:db:03:26:ec:cb: bd:f0:c5:e7:80:80:ab:18:02:e3:57:7a:9c:d1:17: 6c:87:9a:eb:4d:29:42:33:00:94:66:23:96:a8:12: 26:2c:ea:fc:89:32:08:53:43:d1:a1:58:f0:16:a6: cd:5e:b7:e5:c8:98:34:d1:47:82:91:74:0b:2b:5e: 86:90:cb:55:ad:0b:70:5c:44:f1:e7:38:78:66:8f: fe:0b:92:45:7d:98:4c:4d:37:1e:08:b9:a8:b5:4d: dd:92:6f:b4:3c:86:6e:e4:06:e0:94:2a:ec:88:ea: f9:86:11:2b:a3:6f:de:8e:73:b4:04:f4:31:05:99: 95:ce:a5:31:cb:1a:9f:96:19:e3:4f:eb:86:23:1c: 0a:6d:8e:f0:8a:e2:aa:bd:08:2e:d8:b8:e7:c3:06: 67:88:8b:c6:0f:f9:52:db:a7:b9:dd:59:0f:b2:f9: 63:40:4a:04:9e:23:d5:92:f3:82:23:51:a3:85:35: 05:98:35:3c:b9:c5:30:84:05:c8:6e:44:3a:93:28: c7:4a:c6:13:2d:b7:2a:73:81:42:85:38:f2:63:cc: f8:1e:ae:79:ba:57:ff:95:85:76:c7:4e:f1:c8:59: 25:02:8e:ac:00:c4:8a:e4:c7:14:5e:96:04:00:8a: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:90:27:42:A7:3B:C3:57:9B:AA:A3:18:69:8C:25:3C:91:E3:40:20 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:56:cd:06:1d:a9:f1:47:6f:b7:da:52:b1:a6:f1:29:fb:d6: 27:37:57:76:be:39:9d:71:53:23:46:66:27:23:16:4e:6c:ff: 38:c6:e4:2b:2d:34:b4:f1:19:42:da:22:aa:b9:fb:d4:ed:5f: b1:d9:4b:df:40:54:e1:53:a4:1c:f1:57:79:34:15:84:d1:9b: 17:8a:f4:eb:91:34:bf:25:dc:de:c2:11:90:73:51:c7:64:d3: 4c:f2:9d:c3:0d:13:2f:65:2b:b8:80:5d:9e:33:bf:d5:99:2d: aa:5e:ca:51:d1:3d:d1:85:a5:1b:9f:f5:86:2d:b9:4a:63:bb: 04:e6:79:10:e2:8f:74:53:97:46:ac:5b:e7:a5:fb:95:fe:51: 10:bf:ce:62:19:09:ae:91:1e:ef:64:ec:01:61:0b:da:cb:8e: 70:96:a2:fd:72:35:da:6f:a4:2b:e3:ea:78:b8:aa:b8:d2:15: ed:5c:a4:0b:42:e4:49:e2:bf:6c:46:d7:fb:82:13:6a:e2:4b: da:a2:7a:1a:53:21:38:7b:a5:3a:b4:f3:9d:3e:55:3a:1d:4b: 08:84:b2:1c:40:a2:f2:41:cf:6a:6b:e1:d0:60:b4:f0:9e:3b: 59:6a:0d:c2:f8:e7:c7:36:f5:e7:a6:f9:38:5b:db:30:b5:96: 4f:07:a0:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjYwNzIyMjEzOTA5WhcNMjYwNzI5MjEzOTA5WjAYMRYwFAYD VQQDEw02YTYxMzg3ZC01OTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/9a0FZHz/JZ2wMm7Mu98MXngICrGALjV3qc0Rdsh5rrTSlCMwCUZiOWqBIm LOr8iTIIU0PRoVjwFqbNXrflyJg00UeCkXQLK16GkMtVrQtwXETx5zh4Zo/+C5JF fZhMTTceCLmotU3dkm+0PIZu5AbglCrsiOr5hhEro2/ejnO0BPQxBZmVzqUxyxqf lhnjT+uGIxwKbY7wiuKqvQgu2LjnwwZniIvGD/lS26e53VkPsvljQEoEniPVkvOC I1GjhTUFmDU8ucUwhAXIbkQ6kyjHSsYTLbcqc4FChTjyY8z4Hq55ulf/lYV2x07x yFklAo6sAMSK5McUXpYEAIrr7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNiQJ0Kn O8NXm6qjGGmMJTyR40AgMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAClbNBh2p8Udvt9pSsabxKfvWJzdXdr45nXFTI0ZmJyMWTmz/OMbkKy00tPEZ Qtoiqrn71O1fsdlL30BU4VOkHPFXeTQVhNGbF4r065E0vyXc3sIRkHNRx2TTTPKd ww0TL2UruIBdnjO/1Zktql7KUdE90YWlG5/1hi25SmO7BOZ5EOKPdFOXRqxb56X7 lf5REL/OYhkJrpEe72TsAWEL2suOcJai/XI12m+kK+PqeLiquNIV7VykC0LkSeK/ bEbX+4ITauJL2qJ6GlMhOHulOrTznT5VOh1LCISyHECi8kHPamvh0GC08J47WWoN wvjnxzb156b5OFvbMLWWTweglA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:07:59 2026 by rpki-client