$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: 4k8CnjvwYjGNS7icAIUaUQNNYHtPkCbuUXJgnJQkXRo= Subject key identifier: 8C:D4:EB:DA:F2:D1:B2:29:77:58:E6:54:4F:EE:8F:A7:56:13:D5:B5 Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0DD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0DC5 Signing time: Fri 24 Jul 2026 18:10:05 +0000 Manifest this update: Fri 24 Jul 2026 18:10:04 +0000 Manifest next update: Fri 31 Jul 2026 18:10:04 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: byhqBBd/nlEiMQBY9eaLtIBeKWioQA7Yonu5eHPgJfQ=) 2: 438F11F056C311F181F3CD32B6833773.roa (hash: ipV2FPo48aaHQLjChLTatHTjs91KM+IvS8Hg8Z/VJsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 18:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3544 (0xdd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Jul 24 18:10:04 2026 GMT Not After : Jul 31 18:10:04 2026 GMT Subject: CN=6a63aa7d-29bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:37:75:4e:b6:c2:71:fc:bc:77:dc:68:00: 3b:b8:70:29:0c:a8:f3:08:46:db:86:22:ac:b6:3d: be:ab:61:41:60:f1:93:52:91:c6:e5:f2:63:d2:08: 6e:7a:39:da:ee:18:bf:ee:2d:2b:c7:d0:c6:e0:fa: 11:23:37:73:f6:7f:ff:9b:04:c6:ca:1e:ff:12:b6: bd:74:54:49:8c:f5:20:c2:d9:47:b6:05:5b:ea:3f: 6d:fa:62:d9:a4:34:c3:05:94:57:db:e9:94:2b:b1: da:86:93:e7:23:49:10:f0:fd:a0:dc:bf:de:a5:de: 94:ef:81:1c:cb:d3:8e:4e:d3:f0:4f:44:92:fb:71: 16:9c:39:cb:20:ab:f7:f8:a3:35:79:c3:10:3d:ad: c0:8f:5e:43:20:cb:32:1a:a2:b2:bf:cb:f6:6d:97: 1d:16:9a:61:7b:04:67:57:ff:3a:5e:1b:a5:4d:10: 5f:8f:ef:e8:fe:06:7a:7f:62:96:59:03:76:57:7c: 7b:b4:d0:92:7b:c6:90:11:20:c3:88:44:6a:3f:28: 5a:56:34:d2:f0:a7:f0:e1:84:d9:fd:d1:30:bb:54: 65:4f:a0:1a:fc:2b:46:ac:4a:10:31:ca:8a:62:5f: d9:aa:8d:95:f8:56:04:d4:bc:71:c5:4f:2f:8b:4d: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D4:EB:DA:F2:D1:B2:29:77:58:E6:54:4F:EE:8F:A7:56:13:D5:B5 X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0c:ce:b4:ca:6d:c4:e5:06:e1:b3:67:0a:7e:13:0a:b4:5d: 28:33:a9:de:ae:5f:e1:78:d9:63:4f:0c:ac:55:b6:2c:1c:db: ab:b7:23:7c:99:13:6a:37:65:5c:8f:65:7b:c3:9e:a6:74:21: 75:c1:02:ce:f8:b3:17:31:99:d1:37:92:15:57:fa:46:8d:c6: 9d:be:99:cd:83:f1:6e:e3:75:61:21:14:42:f0:f1:72:db:04: a7:71:ff:82:47:8e:37:bf:dc:4e:1b:96:24:0c:a8:9d:1f:c5: 12:4d:cc:ea:bf:96:e5:c8:b9:43:49:40:78:b0:3d:ac:46:2e: 09:26:da:37:8b:d8:6c:21:7c:b4:86:54:5d:19:ed:c4:e1:7c: e4:85:4a:3e:3f:68:81:fb:36:bd:b9:49:ae:f5:02:01:03:ac: f2:84:a4:15:95:68:b5:57:71:a7:88:a0:12:19:ba:59:e5:41: 1b:20:cb:df:46:a2:71:d2:0a:f3:e9:41:79:cf:ba:d5:bb:7b: ce:7c:39:aa:f6:fd:8e:b1:98:f7:b5:08:8a:41:ba:d0:93:d9: b6:e1:49:c0:f4:2b:76:a5:03:19:01:68:6d:8d:f4:96:c7:c1: 52:73:ad:b0:76:18:97:b2:f9:be:c1:9b:5c:15:c3:ec:53:8f: d3:66:0b:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjYwNzI0MTgxMDA0WhcNMjYwNzMxMTgxMDA0WjAYMRYwFAYD VQQDEw02YTYzYWE3ZC0yOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwA3dU62wnH8vHfcaAA7uHApDKjzCEbbhiKstj2+q2FBYPGTUpHG5fJj0ghu ejna7hi/7i0rx9DG4PoRIzdz9n//mwTGyh7/Era9dFRJjPUgwtlHtgVb6j9t+mLZ pDTDBZRX2+mUK7HahpPnI0kQ8P2g3L/epd6U74Ecy9OOTtPwT0SS+3EWnDnLIKv3 +KM1ecMQPa3Aj15DIMsyGqKyv8v2bZcdFpphewRnV/86XhulTRBfj+/o/gZ6f2KW WQN2V3x7tNCSe8aQESDDiERqPyhaVjTS8Kfw4YTZ/dEwu1RlT6Aa/CtGrEoQMcqK Yl/Zqo2V+FYE1LxxxU8vi03QdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzU69ry 0bIpd1jmVE/uj6dWE9W1MB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfQzOtMptxOUG4bNnCn4TCrRdKDOp3q5f4XjZY08MrFW2LBzbq7cjfJkTajdl XI9le8OepnQhdcECzvizFzGZ0TeSFVf6Ro3Gnb6ZzYPxbuN1YSEUQvDxctsEp3H/ gkeON7/cThuWJAyonR/FEk3M6r+W5ci5Q0lAeLA9rEYuCSbaN4vYbCF8tIZUXRnt xOF85IVKPj9ogfs2vblJrvUCAQOs8oSkFZVotVdxp4igEhm6WeVBGyDL30aicdIK 8+lBec+61bt7znw5qvb9jrGY97UIikG60JPZtuFJwPQrdqUDGQFobY30lsfBUnOt sHYYl7L5vsGbXBXD7FOP02YLSg== -----END CERTIFICATE-----Generated at Fri Jul 24 21:30:49 2026 by rpki-client