$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft File: xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json) Hash identifier: KXnzDSZwdpMt3P5RLxIoYKfWsRC88KpekuEm+fL525E= Subject key identifier: 3D:7E:47:A7:E3:FA:50:65:58:1B:4C:B9:70:49:FB:87:66:A2:4A:4F Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft Manifest number: 65 Signing time: Thu 23 Jul 2026 10:04:05 +0000 Manifest this update: Thu 23 Jul 2026 10:04:04 +0000 Manifest next update: Thu 30 Jul 2026 10:04:04 +0000 Files and hashes: 1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: FaXC8f/RrWzd1ToKFIGYLP9E3pB4FevyskMBqORUN+k=) 2: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=) 3: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Validity Not Before: Jul 23 10:04:04 2026 GMT Not After : Jul 30 10:04:04 2026 GMT Subject: CN=6a61e715-c9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:db:a2:65:34:ce:2b:3d:de:5b:d4:10:71: 7a:8f:83:07:10:d2:33:fa:26:9a:f8:cd:68:3c:1e: db:64:e5:be:7e:46:3a:f9:27:69:21:41:d1:b2:bf: 9c:32:83:7d:ab:68:e9:15:1e:e4:b8:03:08:f7:5f: 2b:83:0c:0d:37:a3:50:f8:5f:a8:7f:25:cf:08:6a: 6f:68:a0:be:66:8b:a4:57:8a:46:3b:05:2e:fe:d7: 4f:e6:60:9b:98:05:d9:e5:66:b7:c1:06:12:35:13: 98:da:7e:c9:87:06:22:cb:c1:1a:20:79:88:67:e1: fd:c7:bc:86:ee:b2:fa:87:8b:e3:ed:aa:04:54:99: 5c:2a:52:fc:36:32:ee:f9:55:51:72:56:4e:c1:61: 92:4b:78:1a:3e:e4:ca:ca:49:94:24:c6:58:a9:3d: cb:03:eb:5d:6b:23:5e:3b:d6:b4:78:9a:be:61:6d: 9d:bf:d3:9e:22:5b:8c:c9:d8:e6:b5:72:59:7b:4d: 2f:bc:e6:ec:87:fc:4a:d4:c8:35:33:18:a7:97:cd: a4:76:b2:89:c7:9f:1c:57:a5:19:c4:8c:77:a4:37: 09:18:9e:36:3b:b4:a3:69:12:84:09:c5:1f:7a:3f: a2:89:09:8a:5e:00:25:b0:e2:46:3e:93:2b:85:c3: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7E:47:A7:E3:FA:50:65:58:1B:4C:B9:70:49:FB:87:66:A2:4A:4F X509v3 Authority Key Identifier: keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f6:e9:93:61:65:38:58:1c:2e:73:4f:ba:70:c7:43:61:93: 11:70:94:2b:85:1d:2e:97:02:14:e4:55:a4:d1:ea:23:64:c9: 29:2b:73:79:82:bb:5a:fa:36:ae:15:4c:57:9f:4e:54:c4:70: be:9d:a9:6f:50:94:be:49:75:9c:2a:1a:dd:dc:f4:3f:98:66: 48:fc:88:83:2c:e9:41:cd:f1:63:60:12:2e:f6:76:7d:25:0a: 1c:e5:10:51:05:b4:b5:de:e0:35:b9:51:57:33:96:33:78:a0: 0c:28:67:14:17:e5:9c:b1:3e:cf:f2:dc:bd:af:f2:0d:f8:5c: 1a:28:f4:cc:6d:e3:27:3e:40:11:cf:17:72:da:cc:33:3d:37: 6e:9b:cc:02:0a:eb:3d:24:57:36:82:64:e3:1c:a1:e2:65:e8: 65:8c:7d:de:45:ea:1f:42:59:3d:35:b8:e6:1e:99:2d:a2:ba: 7c:ab:56:88:2c:05:cd:1d:18:71:03:f5:b7:b6:aa:73:56:7a: 6f:98:78:85:76:bc:76:8b:8b:1f:40:47:53:86:f6:88:63:0b: 7a:13:16:90:02:9e:b7:e5:c9:ca:83:26:31:c1:0f:85:5c:5d: 34:03:4f:1c:de:c6:47:b5:7a:f8:a1:ab:01:de:66:df:c4:80: 3b:4b:09:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0E1NTExMC8GA1UEBRMoQzVFQjI1NDZCQjczQUNFNjkzRTE5QUIxMDdEODNGMjY2 NjMyQ0VFODAeFw0yNjA3MjMxMDA0MDRaFw0yNjA3MzAxMDA0MDRaMBgxFjAUBgNV BAMTDTZhNjFlNzE1LWM5ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvLtuiZTTOKz3eW9QQcXqPgwcQ0jP6Jpr4zWg8Httk5b5+Rjr5J2khQdGyv5wy g32raOkVHuS4Awj3XyuDDA03o1D4X6h/Jc8Iam9ooL5mi6RXikY7BS7+10/mYJuY BdnlZrfBBhI1E5jafsmHBiLLwRogeYhn4f3HvIbusvqHi+PtqgRUmVwqUvw2Mu75 VVFyVk7BYZJLeBo+5MrKSZQkxlipPcsD611rI1471rR4mr5hbZ2/054iW4zJ2Oa1 cll7TS+85uyH/ErUyDUzGKeXzaR2sonHnxxXpRnEjHekNwkYnjY7tKNpEoQJxR96 P6KJCYpeACWw4kY+kyuFw7+ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPX5Hp+P6 UGVYG0y5cEn7h2aiSk8wHwYDVR0jBBgwFoAUxeslRrtzrOaT4ZqxB9g/JmYyzugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QTU1L0IzMkI1MDI4RjdB NTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6ck9hVDRacXhCOWdfSm1ZeXp1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIveGVzbFJydHpyT2FUNFpxeEI5Z19KbVl5enVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QTU1L0IzMkI1MDI4RjdBNTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6ck9h VDRacXhCOWdfSm1ZeXp1Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAA9umTYWU4WBwuc0+6cMdDYZMRcJQrhR0ulwIU5FWk0eojZMkpK3N5grta+jau FUxXn05UxHC+nalvUJS+SXWcKhrd3PQ/mGZI/IiDLOlBzfFjYBIu9nZ9JQoc5RBR BbS13uA1uVFXM5YzeKAMKGcUF+WcsT7P8ty9r/IN+FwaKPTMbeMnPkARzxdy2swz PTdum8wCCus9JFc2gmTjHKHiZehljH3eReofQlk9NbjmHpktorp8q1aILAXNHRhx A/W3tqpzVnpvmHiFdrx2i4sfQEdThvaIYwt6ExaQAp635cnKgyYxwQ+FXF00A08c 3sZHtXr4oasB3mbfxIA7Swlv -----END CERTIFICATE-----Generated at Thu Jul 23 23:29:12 2026 by rpki-client