$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft File: cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json) Hash identifier: WgAMs4eYvxKLD0zz22VfAKNLd6Z4zYhOWmYJuum9av4= Subject key identifier: 56:FD:72:89:84:C7:B7:94:04:B2:B4:1C:D6:E1:11:B4:41:EA:BE:9D Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft Manifest number: 070A Signing time: Wed 22 Jul 2026 22:43:39 +0000 Manifest this update: Wed 22 Jul 2026 22:43:39 +0000 Manifest next update: Wed 29 Jul 2026 22:43:39 +0000 Files and hashes: 1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: 2t+8czlm3qJQWKUA920/GasP5rakeM0XxEndXevqCDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Validity Not Before: Jul 22 22:43:39 2026 GMT Not After : Jul 29 22:43:39 2026 GMT Subject: CN=6a61479b-c704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:be:8d:40:f0:cb:dc:bd:76:c4:59:05:ad: 8e:04:d9:25:f6:77:7a:c0:2e:f0:46:b9:ef:8a:ba: fb:39:f8:9c:de:c4:97:96:38:5a:20:67:7c:54:52: 49:2f:9a:93:88:dd:bf:7b:81:f0:28:d0:4d:34:6e: 28:06:c4:c7:9c:0a:50:80:33:8c:42:09:ae:b3:84: a2:b2:4e:fc:b8:95:ae:c6:51:50:08:00:75:b7:e0: df:90:5e:9d:a2:e2:f4:04:18:66:a1:93:1b:a6:ed: cd:18:04:0c:36:b9:a0:ce:e2:e9:6a:fa:9a:2d:da: c5:b8:14:df:59:25:27:61:3e:91:61:30:83:e3:bd: 9e:52:c0:f0:41:7a:7c:80:2c:76:33:d5:fa:46:46: df:f1:46:07:52:f7:a8:64:63:d5:2e:98:76:f1:dc: 3d:b6:aa:ec:8c:a0:30:83:c2:d5:05:da:d8:c0:1f: bd:a7:d3:cf:f1:d5:da:2b:30:48:b2:33:e6:fb:97: 10:fb:83:4d:84:45:74:45:d2:df:a2:0d:1c:17:79: e6:bc:71:98:b0:80:22:96:85:5c:dd:90:62:76:5e: db:2e:1b:34:c2:22:0e:37:3d:22:2c:35:66:c5:f5: 29:a8:09:6d:65:74:fd:7d:04:66:9e:dc:01:49:fd: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FD:72:89:84:C7:B7:94:04:B2:B4:1C:D6:E1:11:B4:41:EA:BE:9D X509v3 Authority Key Identifier: keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4a:0e:fe:85:6a:31:3a:19:f0:ef:4b:26:5a:3c:e6:da:55: 3e:4a:5a:2c:63:72:c1:29:e1:19:ca:da:ef:9e:19:4b:88:cb: 05:b4:01:96:7f:5f:ad:d8:f3:ba:ed:32:87:1d:e1:5f:29:7a: e9:23:95:e0:f2:4f:e8:8e:21:cb:fa:cd:26:8d:40:2a:1a:72: 6a:5b:78:55:4a:c5:84:0c:be:f4:fc:8c:e3:c9:6f:34:1c:4c: e5:23:82:9a:3d:49:47:fc:39:d4:87:bb:bf:48:c8:7c:f9:e9: e3:95:13:c6:f5:42:7d:44:0a:fb:bc:eb:73:79:b1:fc:8a:93: d4:58:7d:3c:c0:e5:d1:90:d5:c5:ab:a1:7b:03:ef:52:e3:50: 5a:35:03:f1:e6:fd:f3:af:97:2d:d4:f1:de:6e:0b:09:32:50: c5:d9:3f:4d:7d:c6:d3:a4:2d:8b:5f:86:4d:ad:9c:95:8a:d6: 78:39:26:53:91:9c:9b:54:44:09:cc:d2:0c:03:89:48:bd:7b: 91:cd:a1:5f:2a:65:b0:0f:4f:7b:da:2e:58:db:3f:e5:ea:62: 45:8e:cc:86:9e:d3:99:2e:a1:33:77:c8:12:5e:01:96:c8:4f: 4c:34:f3:1e:88:2a:9a:0f:96:47:4d:30:9c:34:3c:26:a2:29: 99:ac:f1:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDcwMzVEQjQzMTlBREUyQ0ZDRUEyMjgzQUYwRjE2QjYy MDkwMjZEQUEwHhcNMjYwNzIyMjI0MzM5WhcNMjYwNzI5MjI0MzM5WjAYMRYwFAYD VQQDEw02YTYxNDc5Yi1jNzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUe+jUDwy9y9dsRZBa2OBNkl9nd6wC7wRrnvirr7Ofic3sSXljhaIGd8VFJJ L5qTiN2/e4HwKNBNNG4oBsTHnApQgDOMQgmus4Sisk78uJWuxlFQCAB1t+DfkF6d ouL0BBhmoZMbpu3NGAQMNrmgzuLpavqaLdrFuBTfWSUnYT6RYTCD472eUsDwQXp8 gCx2M9X6Rkbf8UYHUveoZGPVLph28dw9tqrsjKAwg8LVBdrYwB+9p9PP8dXaKzBI sjPm+5cQ+4NNhEV0RdLfog0cF3nmvHGYsIAiloVc3ZBidl7bLhs0wiIONz0iLDVm xfUpqAltZXT9fQRmntwBSf2iOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFb9comE x7eUBLK0HNbhEbRB6r6dMB8GA1UdIwQYMBaAFHA120MZreLPzqIoOvDxa2IJAm2q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9CNEM3OUFGODkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRzX09vaWc2OFBGcllna0Ni YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEWGJReG10NHNfT29pZzY4UEZyWWdrQ2Jhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9CNEM3OUFGODkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRz X09vaWc2OFBGcllna0NiYW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANkoO/oVqMToZ8O9LJlo85tpVPkpaLGNywSnhGcra754ZS4jLBbQBln9frdjz uu0yhx3hXyl66SOV4PJP6I4hy/rNJo1AKhpyalt4VUrFhAy+9PyM48lvNBxM5SOC mj1JR/w51Ie7v0jIfPnp45UTxvVCfUQK+7zrc3mx/IqT1Fh9PMDl0ZDVxauhewPv UuNQWjUD8eb986+XLdTx3m4LCTJQxdk/TX3G06Qti1+GTa2clYrWeDkmU5Gcm1RE CczSDAOJSL17kc2hXyplsA9Pe9ouWNs/5epiRY7Mhp7TmS6hM3fIEl4BlshPTDTz Hogqmg+WR00wnDQ8JqIpmazxsQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:05:49 2026 by rpki-client