$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft File: XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json) Hash identifier: KLy8aNrmQ2y115xXia5AixYX+pxXGh6hJQJ5SLmLCWs= Subject key identifier: DA:80:F8:88:E1:D1:8D:98:C9:50:AC:F9:41:C5:B1:23:DC:65:16:33 Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 Certificate issuer: /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Certificate serial: 0A62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft Manifest number: 0A47 Signing time: Wed 22 Jul 2026 20:07:59 +0000 Manifest this update: Wed 22 Jul 2026 20:07:58 +0000 Manifest next update: Wed 29 Jul 2026 20:07:58 +0000 Files and hashes: 1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: 51nZqh0iQ+97+sdihplKwItyte9NMZJr3on4mdv0eBk=) 2: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: V4TtDHDwWfSTPDtmdJxLiYpQrBPMzCI9Mup9QQhSTOc=) 3: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: phoNlFrzl7WYjyRvdppnlSL/FBRV8iS5x5iyLwB+dTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Validity Not Before: Jul 22 20:07:58 2026 GMT Not After : Jul 29 20:07:58 2026 GMT Subject: CN=6a61231f-9dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:a2:ea:01:bb:36:09:fe:6e:41:cf:12:21: 6b:05:34:90:dc:27:24:16:ac:09:b0:ad:cc:b2:f2: eb:3c:4c:61:29:c2:d5:41:cf:93:6d:f1:d6:8e:4f: ed:13:8c:b1:cf:c8:f7:fb:3a:dc:3f:86:5b:e5:a4: 82:fc:5d:6e:58:28:2b:9f:e6:f7:b3:e5:f0:0c:d7: 3c:b6:ef:ce:9a:59:bb:d2:ae:66:6e:74:e2:40:15: c9:fa:97:65:0e:2a:24:5e:2a:86:83:3c:c4:03:6d: 0a:71:7d:d7:7b:ae:8c:4f:2e:96:94:0f:09:41:b4: 06:c7:3c:df:87:96:c8:f6:be:6b:85:84:f3:7d:31: 14:f7:bc:06:4f:bd:28:fd:30:e8:e5:62:48:af:03: c8:a8:f0:70:bb:84:47:bf:06:c9:cf:ce:e3:fc:ad: 1c:64:27:7b:49:f0:ee:bf:cc:c9:3b:a6:64:48:90: c7:e3:50:95:72:c4:c9:fc:ca:54:75:10:70:3d:3f: 17:be:a9:da:3c:d7:d8:80:6b:e6:03:92:47:76:bc: 48:a8:3b:2b:c5:4c:7a:9d:15:07:21:c9:2f:7e:6f: 24:e9:3f:5d:00:61:56:59:87:9f:10:3d:a8:f7:70: 2e:7c:6f:ec:c2:cd:62:c9:7a:e0:6e:4c:d8:09:56: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:80:F8:88:E1:D1:8D:98:C9:50:AC:F9:41:C5:B1:23:DC:65:16:33 X509v3 Authority Key Identifier: keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:c7:80:97:f3:6a:23:2b:3d:0d:c8:e2:84:f9:81:9c:85:f7: ff:46:d4:b1:cf:33:cf:b6:d0:1d:d7:a0:38:ac:8d:ed:2e:8b: 7d:99:57:b0:01:0d:6c:91:ad:5c:03:6b:73:06:f0:5c:b3:54: fd:c8:f3:68:a9:65:d7:93:50:2c:af:4a:a1:d0:da:7b:77:bc: ed:7e:dc:c7:55:b1:ce:11:4e:ab:94:19:e4:08:86:99:32:b9: b5:b7:69:64:22:d4:20:9b:8d:a5:7d:d5:eb:26:4b:b1:f2:79: 45:2d:35:e8:59:a2:f4:ce:4a:7d:63:04:37:ad:be:85:ca:47: a8:c0:1c:d8:6e:8e:a1:bc:1b:94:f0:b1:74:f7:b9:84:49:8e: 82:e5:16:32:6b:78:7b:ed:1e:8d:1d:cb:b0:b2:7c:c5:f3:ef: 9e:02:f8:15:6d:12:50:4b:75:1e:85:ec:1c:eb:10:75:aa:d3: a6:fe:29:67:19:97:3f:a4:14:7f:e2:6e:89:4a:a1:ac:02:6f: 08:dc:8b:7e:c8:43:17:2c:3a:b3:88:3d:3f:b8:28:e3:75:61: 6c:6b:ee:11:54:fd:f9:e4:0d:d8:08:cb:61:d3:45:f4:83:2e: 78:f9:8f:4a:ef:f6:a9:41:e2:d0:d6:fe:65:ad:2d:4a:af:34: 6d:80:6b:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4QTkxMTAvBgNVBAUTKDVDMEFCNDI1RjJCNDIzNUUxQzgxNTY4M0JENkM4RThC N0I4MEI3MjcwHhcNMjYwNzIyMjAwNzU4WhcNMjYwNzI5MjAwNzU4WjAYMRYwFAYD VQQDEw02YTYxMjMxZi05ZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhii6gG7Ngn+bkHPEiFrBTSQ3CckFqwJsK3MsvLrPExhKcLVQc+TbfHWjk/t E4yxz8j3+zrcP4Zb5aSC/F1uWCgrn+b3s+XwDNc8tu/Omlm70q5mbnTiQBXJ+pdl DiokXiqGgzzEA20KcX3Xe66MTy6WlA8JQbQGxzzfh5bI9r5rhYTzfTEU97wGT70o /TDo5WJIrwPIqPBwu4RHvwbJz87j/K0cZCd7SfDuv8zJO6ZkSJDH41CVcsTJ/MpU dRBwPT8XvqnaPNfYgGvmA5JHdrxIqDsrxUx6nRUHIckvfm8k6T9dAGFWWYefED2o 93AufG/sws1iyXrgbkzYCVYPLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqA+Ijh 0Y2YyVCs+UHFsSPcZRYzMB8GA1UdIwQYMBaAFFwKtCXytCNeHIFWg71sjot7gLcn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhBOS8yQUEwNDMzMDk0 RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkxNGNnVmFEdld5T2kzdUF0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBcTBKZkswSTE0Y2dWYUR2V3lPaTN1QXR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhBOS8yQUEwNDMzMDk0RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkx NGNnVmFEdld5T2kzdUF0eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvceAl/NqIys9DcjihPmBnIX3/0bUsc8zz7bQHdegOKyN7S6LfZlXsAENbJGt XANrcwbwXLNU/cjzaKll15NQLK9KodDae3e87X7cx1WxzhFOq5QZ5AiGmTK5tbdp ZCLUIJuNpX3V6yZLsfJ5RS016Fmi9M5KfWMEN62+hcpHqMAc2G6OobwblPCxdPe5 hEmOguUWMmt4e+0ejR3LsLJ8xfPvngL4FW0SUEt1HoXsHOsQdarTpv4pZxmXP6QU f+JuiUqhrAJvCNyLfshDFyw6s4g9P7go43VhbGvuEVT9+eQN2AjLYdNF9IMuePmP Su/2qUHi0Nb+Za0tSq80bYBrJg== -----END CERTIFICATE-----Generated at Fri Jul 24 13:26:56 2026 by rpki-client