$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: uprJIiR848z+TA7umf4Geozdwf4Pb7DhyBpqOUG/NKE= Subject key identifier: C3:B1:6B:73:66:AF:BD:1A:37:25:FC:66:C8:F8:8F:86:3A:C6:DA:B5 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 2437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 2417 Signing time: Fri 24 Jul 2026 15:54:42 +0000 Manifest this update: Fri 24 Jul 2026 15:54:41 +0000 Manifest next update: Fri 31 Jul 2026 15:54:41 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: MSxET7fBsuqJCyUHhNnqXR2LVolwqquNeyZbOkprpt0=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: aqWngdjtRLqUSkhygiAXUU1YJGxW+DXL13gbX9vTVWo=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: X4uS0rI/nqhGkS7n3+3yxAC8v3e2kcE3Z3BQmxfknoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9271 (0x2437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Jul 24 15:54:41 2026 GMT Not After : Jul 31 15:54:41 2026 GMT Subject: CN=6a638ac2-7d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:c8:de:0f:9c:2e:c2:01:ad:6e:a4:92:5b: 00:be:33:df:23:a7:0a:d8:f3:13:61:76:67:03:34: 36:b3:4b:48:f1:3b:ef:17:2b:1a:a5:bf:2f:86:a0: 3a:fb:e2:11:6a:87:77:a0:32:63:e7:34:11:b1:ce: 53:fe:e4:b5:39:c4:53:f1:35:60:d0:52:05:ab:59: 08:ce:25:93:fb:6e:3f:d4:43:56:ef:0d:0a:11:f2: 1e:7c:1b:64:8b:22:a4:ba:4a:4f:84:07:9e:b0:d1: 28:fd:35:5b:15:0f:93:9b:1b:57:ae:fc:4e:84:4a: f6:d9:af:3b:82:06:c4:85:63:3b:36:e6:f8:46:2b: 24:da:6c:74:df:f1:37:e6:3e:cd:17:8d:61:ab:63: 7f:da:ad:84:a1:be:bf:29:56:f6:ce:b1:dd:8e:d1: b0:d3:1c:cc:97:6b:05:17:12:03:b2:54:8a:63:73: 80:00:50:f7:80:09:c7:4b:31:6d:46:21:f8:0c:d2: 99:95:18:27:da:0e:14:7b:be:08:d1:b7:a7:b8:64: 09:ce:fd:5d:43:b4:56:24:7a:e7:b4:2b:65:c4:76: c2:f6:9a:0e:59:a7:15:06:86:e8:e9:74:ee:95:ac: 24:5f:9d:08:a5:a9:ee:26:07:64:07:b4:25:4e:57: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B1:6B:73:66:AF:BD:1A:37:25:FC:66:C8:F8:8F:86:3A:C6:DA:B5 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a3:b9:5d:31:d3:19:cd:70:7c:63:c7:d8:4f:0b:51:61:53: c5:3c:1c:97:1e:29:67:8a:5e:a8:ba:c8:08:d3:0c:0b:e8:ed: 5f:96:c3:e1:1c:41:91:75:59:78:80:c0:b4:0e:89:a6:0d:39: a2:86:d2:7c:f5:fb:c9:5a:63:0d:f9:34:9d:52:df:b8:2d:54: 0d:8c:c9:a7:92:a7:2f:c1:c0:be:fc:fb:6c:2f:98:cc:1e:5b: 84:50:92:d2:81:c8:da:53:67:d3:66:53:2d:ed:3c:3c:56:b0: c3:6b:48:1a:54:ad:c3:27:d1:dd:99:43:89:ec:af:3f:4b:6d: c7:2e:42:35:63:c8:b2:05:c4:3e:27:93:60:ae:b0:d4:d9:00: 5f:39:e0:56:55:62:ae:4a:02:71:1a:78:e7:16:9f:2a:42:d9: de:04:6c:27:f0:12:d3:fd:7c:e6:ef:6d:ca:a6:6b:50:ae:1b: dc:70:a4:bb:13:a0:60:62:c7:01:dd:00:83:21:c5:55:db:36: 17:0a:5e:68:ab:87:73:0b:e0:26:5e:51:4c:2f:68:bb:3c:e4: f5:93:a4:e3:ff:60:bf:95:40:e3:b9:49:04:52:0e:cf:68:13: 11:1c:2f:fa:e5:13:76:d6:c7:9e:aa:31:ba:12:bd:68:4e:15: 61:a6:c6:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjYwNzI0MTU1NDQxWhcNMjYwNzMxMTU1NDQxWjAYMRYwFAYD VQQDEw02YTYzOGFjMi03ZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZ/I3g+cLsIBrW6kklsAvjPfI6cK2PMTYXZnAzQ2s0tI8TvvFysapb8vhqA6 ++IRaod3oDJj5zQRsc5T/uS1OcRT8TVg0FIFq1kIziWT+24/1ENW7w0KEfIefBtk iyKkukpPhAeesNEo/TVbFQ+TmxtXrvxOhEr22a87ggbEhWM7Nub4Risk2mx03/E3 5j7NF41hq2N/2q2Eob6/KVb2zrHdjtGw0xzMl2sFFxIDslSKY3OAAFD3gAnHSzFt RiH4DNKZlRgn2g4Ue74I0benuGQJzv1dQ7RWJHrntCtlxHbC9poOWacVBobo6XTu lawkX50IpanuJgdkB7QlTld+mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOxa3Nm r70aNyX8Zsj4j4Y6xtq1MB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArqO5XTHTGc1wfGPH2E8LUWFTxTwclx4pZ4peqLrICNMMC+jtX5bD4RxBkXVZ eIDAtA6Jpg05oobSfPX7yVpjDfk0nVLfuC1UDYzJp5KnL8HAvvz7bC+YzB5bhFCS 0oHI2lNn02ZTLe08PFaww2tIGlStwyfR3ZlDieyvP0ttxy5CNWPIsgXEPieTYK6w 1NkAXzngVlVirkoCcRp45xafKkLZ3gRsJ/AS0/185u9tyqZrUK4b3HCkuxOgYGLH Ad0AgyHFVds2FwpeaKuHcwvgJl5RTC9ouzzk9ZOk4/9gv5VA47lJBFIOz2gTERwv +uUTdtbHnqoxuhK9aE4VYabGZg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:07:41 2026 by rpki-client