$ rpki-client -vvf rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft File: xfPmCWA9MLk6tGt4klx63Q8s8hI.mft (raw, json) Hash identifier: ArEvYt0mB6r821swxtvoJi4GLNZg6LZ91Fg+jU5I5vA= Subject key identifier: 38:36:71:BE:6F:32:FC:A2:FA:E3:8C:A2:16:11:5D:99:A2:DF:86:44 Authority key identifier: C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12 Certificate issuer: /CN=A917A689/serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft Manifest number: 0A Signing time: Thu 23 Jul 2026 14:19:04 +0000 Manifest this update: Thu 23 Jul 2026 14:19:03 +0000 Manifest next update: Thu 30 Jul 2026 14:19:03 +0000 Files and hashes: 1: xfPmCWA9MLk6tGt4klx63Q8s8hI.crl (hash: luJXj8ebqdwuWzkDjJearH+Ozf+oB/bhDFTD+bGZLK4=) 2: 714DAFEE86A111F194892C0771A30FBC.roa (hash: aD75nQc2fXXMCcS+5IKPeL3EjlizMDALNcXw/5SkpOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A689, serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212 Validity Not Before: Jul 23 14:19:03 2026 GMT Not After : Jul 30 14:19:03 2026 GMT Subject: CN=6a6222d7-8fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:df:01:65:39:35:4b:2c:a6:cc:f8:63:eb: fd:7b:9d:6e:13:b1:ad:88:57:02:5b:e0:fe:c4:53: e4:19:77:fa:92:01:e7:44:ec:aa:2b:c6:94:b3:da: 02:c9:58:82:42:d5:cf:ae:e7:38:69:93:7a:85:bc: 30:d2:43:77:e7:48:9e:a3:d2:df:3b:d7:af:67:02: 90:06:f7:7e:ec:5f:ab:99:a2:78:bd:8e:f7:56:45: 00:7a:eb:7e:37:7f:ac:22:4a:97:a0:5e:4f:ed:fc: 8e:c7:1d:1b:88:81:2b:33:bb:60:83:80:ca:1d:ff: e6:97:af:32:17:95:bf:00:7d:70:5e:fa:4d:02:44: fe:62:28:ba:5a:6e:b7:bb:de:a1:66:10:0e:96:50: ed:67:b1:ba:b3:98:66:90:be:e1:8c:d1:db:ea:cd: ed:5c:ce:c8:27:24:8b:36:e7:0a:c3:f2:41:4e:de: 63:c9:07:8a:48:e9:a8:fc:12:48:68:ad:40:25:df: 64:70:2a:aa:9e:af:6b:d9:0e:ad:3d:8c:96:78:b0: e0:ae:5f:76:73:e4:bd:37:27:99:93:79:1d:85:94: c5:ea:27:40:1f:65:53:b4:69:3a:c0:c9:69:f3:b1: b5:16:44:58:4a:77:88:57:8f:d2:f8:ee:82:88:4d: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:36:71:BE:6F:32:FC:A2:FA:E3:8C:A2:16:11:5D:99:A2:DF:86:44 X509v3 Authority Key Identifier: keyid:C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:08:8f:7c:df:ca:c5:d1:9e:68:b0:df:1e:11:b0:de:64:92: 26:5f:c4:5c:fe:57:cc:98:92:b8:22:db:cb:6b:96:73:5d:8f: 40:6e:1e:68:1a:c9:a1:3e:01:34:1e:aa:d4:ab:e3:ae:b0:4f: 80:06:f1:5d:12:1d:15:64:9a:46:5a:cd:5f:2b:3b:f6:1a:9a: 9e:b9:91:2c:08:41:70:e2:c5:b8:96:bc:d7:c2:7e:1d:a0:b5: 52:ec:43:a9:2b:5b:4d:dd:2b:60:3a:5c:c4:de:da:9d:03:41: 67:d2:50:32:26:f6:65:d8:c3:1c:c4:a6:7c:d1:96:86:a0:9a: 8c:5c:83:76:5a:15:32:00:2d:60:ee:b6:e4:35:ed:d0:f4:51: e1:27:ca:c1:d9:91:9d:b8:88:24:0a:ee:81:8c:85:36:d6:f1: f7:a4:59:8d:38:a8:aa:7b:bd:da:9b:66:ea:94:a6:43:98:e3: 3c:de:2e:79:f1:64:85:e2:8e:b3:51:fc:41:a2:01:b5:00:c2: 0a:68:fa:0f:20:47:fe:05:c1:5e:21:a0:c4:05:b5:36:ab:c8: e7:8f:ed:1f:5c:a6:bd:6f:79:f3:af:0d:d3:72:88:3e:1e:1c: e1:d1:5d:fa:d4:6b:5c:62:1c:b0:c9:8f:f9:70:ed:13:ae:17: 91:ac:ba:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTY4OTExMC8GA1UEBRMoQzVGM0U2MDk2MDNEMzBCOTNBQjQ2Qjc4OTI1QzdBREQw RjJDRjIxMjAeFw0yNjA3MjMxNDE5MDNaFw0yNjA3MzAxNDE5MDNaMBgxFjAUBgNV BAMTDTZhNjIyMmQ3LThmYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTyd8BZTk1SyymzPhj6/17nW4Tsa2IVwJb4P7EU+QZd/qSAedE7KorxpSz2gLJ WIJC1c+u5zhpk3qFvDDSQ3fnSJ6j0t87169nApAG937sX6uZoni9jvdWRQB66343 f6wiSpegXk/t/I7HHRuIgSszu2CDgMod/+aXrzIXlb8AfXBe+k0CRP5iKLpabre7 3qFmEA6WUO1nsbqzmGaQvuGM0dvqze1czsgnJIs25wrD8kFO3mPJB4pI6aj8Ekho rUAl32RwKqqer2vZDq09jJZ4sOCuX3Zz5L03J5mTeR2FlMXqJ0AfZVO0aTrAyWnz sbUWRFhKd4hXj9L47oKITSrzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUODZxvm8y /KL644yiFhFdmaLfhkQwHwYDVR0jBBgwFoAUxfPmCWA9MLk6tGt4klx63Q8s8hIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjg5LzhFOEM3NTU2N0E5 NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxrNnRHdDRrbHg2M1E4czho SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGZQbUNXQTlNTGs2dEd0NGtseDYzUThzOGhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB Njg5LzhFOEM3NTU2N0E5NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxr NnRHdDRrbHg2M1E4czhoSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyCI9838rF0Z5osN8eEbDeZJImX8Rc/lfMmJK4ItvLa5ZzXY9Abh5oGsmhPgE0 HqrUq+OusE+ABvFdEh0VZJpGWs1fKzv2GpqeuZEsCEFw4sW4lrzXwn4doLVS7EOp K1tN3StgOlzE3tqdA0Fn0lAyJvZl2MMcxKZ80ZaGoJqMXIN2WhUyAC1g7rbkNe3Q 9FHhJ8rB2ZGduIgkCu6BjIU21vH3pFmNOKiqe73am2bqlKZDmOM83i558WSF4o6z UfxBogG1AMIKaPoPIEf+BcFeIaDEBbU2q8jnj+0fXKa9b3nzrw3Tcog+Hhzh0V36 1GtcYhywyY/5cO0TrheRrLoU -----END CERTIFICATE-----Generated at Thu Jul 23 21:35:42 2026 by rpki-client