$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: yVNGfe2rBSTuw7xtOY5xg3ri31/l0RYiw4792ta0zWg= Subject key identifier: 60:77:50:07:D2:F5:EA:5C:B9:64:5D:DB:13:68:0D:CC:FA:6A:E1:EB Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0AED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0AE1 Signing time: Wed 22 Jul 2026 19:47:25 +0000 Manifest this update: Wed 22 Jul 2026 19:47:25 +0000 Manifest next update: Wed 29 Jul 2026 19:47:25 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: q9d+KvyE4I0tcDm0sGbKp2G5WaLTVOTcJMtw6vPGs7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2797 (0xaed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Jul 22 19:47:25 2026 GMT Not After : Jul 29 19:47:25 2026 GMT Subject: CN=6a611e4d-6c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:49:51:e7:ec:ae:bf:cb:b9:ca:91:86:39: a8:4e:69:d3:ea:1b:a3:4a:93:a1:6b:4a:3f:17:0c: a8:0d:6a:f1:05:b9:19:8f:63:88:0e:5e:ac:2f:65: e1:f1:fc:20:73:bd:eb:1f:54:56:96:76:4c:ad:67: 63:6e:5d:ad:c8:c3:d9:b5:c6:b5:d0:21:e5:41:1d: 74:46:d7:bb:5a:e7:3f:0e:6a:2a:34:a1:1e:cd:09: bb:24:09:11:ba:9b:22:8f:43:d6:3c:52:fc:14:91: 02:9c:2e:2b:43:68:43:ff:13:b7:1b:87:19:15:03: 95:d0:6f:c9:f5:46:ea:31:f0:65:f9:a4:3a:06:86: 03:ef:b2:f0:5f:78:60:b4:b6:24:cb:b2:3d:17:90: d0:f0:35:8e:2c:4a:16:52:fa:da:ea:9b:b0:ba:01: 21:72:0e:d4:59:4b:6b:d6:09:54:a5:2b:6e:cb:ab: 46:1e:d6:b8:ce:79:22:51:51:36:d4:f3:ac:0e:40: 95:68:5c:42:de:e4:56:32:ba:86:ee:e6:59:60:20: 02:0d:73:89:0c:09:83:4e:6f:af:0a:95:be:69:6e: dd:78:94:49:2e:66:02:1f:c1:07:06:14:d5:5b:ee: 52:6f:b2:b8:ef:96:6e:59:7e:75:e4:5a:f2:7d:cc: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:77:50:07:D2:F5:EA:5C:B9:64:5D:DB:13:68:0D:CC:FA:6A:E1:EB X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b4:4b:88:f4:d4:b5:79:34:0d:c0:5c:ec:4c:78:a1:07:eb: 13:63:34:fc:be:65:85:b4:ea:aa:9c:50:bf:c0:59:32:fb:41: d5:60:ef:3c:7f:9d:52:44:52:ab:fc:9b:7b:14:bf:0b:be:27: 41:e4:cf:93:71:a7:7d:02:98:ca:d8:3c:2f:03:a7:fa:7f:cf: 5e:82:c7:84:9a:49:0a:13:69:19:13:09:42:68:a7:4f:e6:03: c8:eb:90:73:06:11:d3:d1:ff:3c:8c:c5:a8:6c:b8:74:10:c4: 57:dd:cd:5b:78:03:22:c8:d7:27:06:a0:49:d8:f2:83:59:ac: 79:20:46:05:e2:b7:53:a5:0f:d2:bc:f2:ef:76:7f:b8:e2:35: ee:d7:48:36:76:b7:c1:c0:e8:bc:c0:4a:a4:cf:1d:ef:12:4c: 40:a8:ec:00:78:4a:a1:fa:21:91:07:39:0c:52:f6:3b:c6:42: bd:ee:be:f2:90:fb:d5:e8:21:5f:6d:c5:ff:8e:54:aa:5c:cf: 40:06:71:75:14:bd:63:aa:1b:75:c0:6f:46:92:42:22:38:de: 13:67:e5:7b:d6:20:9b:86:4e:ed:90:5d:52:48:07:68:bb:b4: 7e:2a:ed:96:85:87:e2:cb:a2:ad:7d:2c:7e:5f:4e:4d:ff:c2: a0:0e:bb:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjYwNzIyMTk0NzI1WhcNMjYwNzI5MTk0NzI1WjAYMRYwFAYD VQQDEw02YTYxMWU0ZC02YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz9JUefsrr/LucqRhjmoTmnT6hujSpOha0o/FwyoDWrxBbkZj2OIDl6sL2Xh 8fwgc73rH1RWlnZMrWdjbl2tyMPZtca10CHlQR10Rte7Wuc/DmoqNKEezQm7JAkR upsij0PWPFL8FJECnC4rQ2hD/xO3G4cZFQOV0G/J9UbqMfBl+aQ6BoYD77LwX3hg tLYky7I9F5DQ8DWOLEoWUvra6puwugEhcg7UWUtr1glUpStuy6tGHta4znkiUVE2 1POsDkCVaFxC3uRWMrqG7uZZYCACDXOJDAmDTm+vCpW+aW7deJRJLmYCH8EHBhTV W+5Sb7K475ZuWX515FryfczsfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGB3UAfS 9epcuWRd2xNoDcz6auHrMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZrRLiPTUtXk0DcBc7Ex4oQfrE2M0/L5lhbTqqpxQv8BZMvtB1WDvPH+dUkRS q/ybexS/C74nQeTPk3GnfQKYytg8LwOn+n/PXoLHhJpJChNpGRMJQminT+YDyOuQ cwYR09H/PIzFqGy4dBDEV93NW3gDIsjXJwagSdjyg1mseSBGBeK3U6UP0rzy73Z/ uOI17tdINna3wcDovMBKpM8d7xJMQKjsAHhKofohkQc5DFL2O8ZCve6+8pD71egh X23F/45UqlzPQAZxdRS9Y6obdcBvRpJCIjjeE2fle9Ygm4ZO7ZBdUkgHaLu0firt loWH4suirX0sfl9OTf/CoA67Jw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:00:55 2026 by rpki-client