$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft File: XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft (raw, json) Hash identifier: 0nzz3oySSPR//4Lzt9iQ71HRPWirk0mt3fF3fLCQQt0= Subject key identifier: 69:65:70:70:A2:AF:5B:E0:C4:51:07:38:D5:BE:1C:7B:6D:EF:DF:09 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft Manifest number: 0A65 Signing time: Wed 22 Jul 2026 20:04:48 +0000 Manifest this update: Wed 22 Jul 2026 20:04:48 +0000 Manifest next update: Wed 29 Jul 2026 20:04:48 +0000 Files and hashes: 1: XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl (hash: 8QiUT7eUdV39ZVJndVFxv0SxlNxMpiBMWambRzoBt18=) 2: BED54F1A9B1611EA939F5A3FC4F9AE02.roa (hash: onxrfn2R6ig2K9q93zM3JJGyF8TFo8y2BhAaG52JL84=) 3: 52F955A89B1511EA9BEFA53BC4F9AE02.roa (hash: mNeRqaSY4bVJ7ErHkgjVt3OEqspS9nVqduSxSH22Fmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9, serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jul 22 20:04:48 2026 GMT Not After : Jul 29 20:04:48 2026 GMT Subject: CN=6a612260-be58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:07:ea:df:c7:a9:07:d8:84:93:dd:a7:d3: 0c:1f:4c:89:6c:87:0e:6f:00:69:52:03:bd:e5:b9: 02:5c:eb:60:e8:b6:94:b7:08:d5:7d:f1:ad:ad:ee: 74:ce:72:48:67:0b:f7:54:3d:97:3d:aa:f2:71:b4: f4:96:c1:87:19:78:66:d1:52:e7:d3:96:93:58:a6: 34:d6:49:0f:f6:ed:76:ba:85:dc:44:32:22:ed:bb: f2:3b:2f:e9:4a:5b:87:20:d0:6d:11:f7:f3:22:b8: 2d:c3:d6:78:64:af:3c:90:42:75:14:66:76:3b:89: 40:73:d7:b1:ee:73:5e:3f:3a:94:5c:2b:11:b7:76: 10:03:3c:1f:1a:69:42:ee:dd:ad:de:4e:60:5b:3d: 4d:8d:fb:dc:1e:bf:62:cf:c3:61:ec:b0:d3:97:20: 4f:d9:aa:22:a9:e5:0b:9a:28:a3:2e:c9:60:14:4e: 27:ba:3b:23:c6:85:d9:3b:1b:9b:df:13:5b:11:89: c1:0c:00:d3:6c:92:7f:c1:16:53:ca:1d:cd:14:20: a8:f7:af:c9:26:20:d7:52:ff:41:e2:8a:2f:0a:83: b4:96:91:0c:90:19:a0:63:bc:29:b9:c0:c7:a9:40: 05:58:82:7d:5b:a9:c6:8f:76:df:67:db:76:a2:8c: b6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:65:70:70:A2:AF:5B:E0:C4:51:07:38:D5:BE:1C:7B:6D:EF:DF:09 X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ef:d3:e7:d2:14:be:23:0b:98:34:75:1d:60:86:fe:7e:71: e1:e0:73:ea:80:ce:f8:09:6b:df:8e:c8:6f:e5:9b:3e:ee:23: 19:19:a9:a9:34:b0:c3:0d:66:f6:be:07:52:e2:56:a8:50:d6: 65:41:7b:0f:ad:d2:d8:4c:74:0f:0f:22:b7:87:10:32:3e:64: 8a:dd:42:92:e9:56:4d:f0:50:66:61:94:44:db:ea:ae:4e:93: a1:9b:ce:ff:03:1b:ca:d6:05:f2:2d:da:e2:7b:1f:4e:10:c1: cd:cf:19:48:1e:b9:d9:a4:64:6c:ad:87:7b:f4:69:bb:b8:17: 81:5f:b6:f8:31:14:2a:c6:22:8d:d3:5a:f5:3c:7b:fe:93:65: 9a:c5:df:27:58:3b:d8:b8:01:80:ad:bf:79:34:70:b5:fe:7e: 40:0b:25:98:03:73:86:de:ed:90:f3:b2:fa:ce:9e:0a:7f:24: f3:52:f5:56:11:dd:eb:a8:f5:70:a6:68:d2:db:ba:b8:b9:f7: f4:11:c9:56:9f:74:9e:b7:e2:52:80:17:70:d9:00:a7:86:ca: 50:4d:c8:38:9d:39:da:01:9d:52:41:bf:c2:37:dc:13:a0:dc: 34:c4:ce:d4:dc:40:11:4d:59:4c:f8:7b:eb:f0:a1:4a:78:25: e2:0c:04:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjYwNzIyMjAwNDQ4WhcNMjYwNzI5MjAwNDQ4WjAYMRYwFAYD VQQDEw02YTYxMjI2MC1iZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXYH6t/HqQfYhJPdp9MMH0yJbIcObwBpUgO95bkCXOtg6LaUtwjVffGtre50 znJIZwv3VD2XParycbT0lsGHGXhm0VLn05aTWKY01kkP9u12uoXcRDIi7bvyOy/p SluHINBtEffzIrgtw9Z4ZK88kEJ1FGZ2O4lAc9ex7nNePzqUXCsRt3YQAzwfGmlC 7t2t3k5gWz1NjfvcHr9iz8Nh7LDTlyBP2aoiqeULmiijLslgFE4nujsjxoXZOxub 3xNbEYnBDADTbJJ/wRZTyh3NFCCo96/JJiDXUv9B4oovCoO0lpEMkBmgY7wpucDH qUAFWIJ9W6nGj3bfZ9t2ooy2gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGllcHCi r1vgxFEHONW+HHtt798JMB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBCOS85Q0JGM0Q5MDhGQTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hf M0pKMU5WekxxNHlCQVluMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtO/T59IUviMLmDR1HWCG/n5x4eBz6oDO+Alr347Ib+WbPu4jGRmpqTSwww1m 9r4HUuJWqFDWZUF7D63S2Ex0Dw8it4cQMj5kit1CkulWTfBQZmGURNvqrk6ToZvO /wMbytYF8i3a4nsfThDBzc8ZSB652aRkbK2He/Rpu7gXgV+2+DEUKsYijdNa9Tx7 /pNlmsXfJ1g72LgBgK2/eTRwtf5+QAslmANzht7tkPOy+s6eCn8k81L1VhHd66j1 cKZo0tu6uLn39BHJVp90nrfiUoAXcNkAp4bKUE3IOJ052gGdUkG/wjfcE6DcNMTO 1NxAEU1ZTPh76/ChSngl4gwEPA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:07:55 2026 by rpki-client