$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: VmPWiuQWONYUcqyaPySdpvzRcEW+qUK7/mfITwqHAJ4= Subject key identifier: E8:F7:B8:0E:87:BF:6D:87:D7:22:5E:42:A0:0D:7A:9D:2F:76:A7:94 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0DBA Signing time: Wed 22 Jul 2026 18:10:03 +0000 Manifest this update: Wed 22 Jul 2026 18:10:02 +0000 Manifest next update: Wed 29 Jul 2026 18:10:02 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: N7Wnlc7Xl69ROqEWfOhXYEfTOIM8nwYcRNEwDN+mM8c=) 2: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: DcSbAXQAEFzo+aMwVJQyGPJY+2j/avyksp+4rQcX5Ms=) 3: 6EA46446646511EFA9435879C4F9AE02.roa (hash: Rm8WBz8x56PvMmTC5b3xeemfV4sCOqTUTfsfsAfIyMw=) 4: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A=) 5: 762C16422E9811F1A14B442FB4833773.roa (hash: 6dVRqPwjNiBJWT/1IpcKvHD9YdgtV5RR7uiRlRvanfU=) 6: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE=) 7: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3575 (0xdf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Jul 22 18:10:02 2026 GMT Not After : Jul 29 18:10:02 2026 GMT Subject: CN=6a61077b-c23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:12:eb:e7:f4:12:e0:1a:d4:f7:b8:38:2d: f9:b5:1f:7a:10:c9:ca:cb:79:55:4e:1c:63:9d:ad: 73:ac:85:31:ee:0d:f1:b2:b1:24:c2:30:0d:6c:42: b9:b5:7a:d2:ec:04:6c:b2:64:ab:4f:53:05:0d:36: 81:ff:4d:bd:c3:28:d6:98:74:7f:47:ab:6c:5b:80: 42:c9:9f:5c:7c:ea:6a:f1:22:93:5c:10:0e:07:e6: dc:e8:23:74:74:43:62:1b:ed:66:16:c8:e8:b4:c3: ce:cf:e9:2d:20:c0:1a:3d:69:5d:fd:f4:cb:18:1e: c0:e1:1e:44:34:92:a0:41:db:de:9e:b9:0f:b5:f7: ca:28:7e:33:fd:f1:fc:e8:85:01:87:30:14:a9:7a: 5b:ed:ab:9c:09:85:11:92:48:8e:f7:df:d7:0e:ec: 5b:79:e4:99:b9:d8:50:a4:cc:dd:b8:08:c3:ab:87: 2b:09:64:f2:1f:b4:09:e2:03:50:f9:88:79:5b:a4: bf:c1:50:09:ff:f8:00:2a:11:62:62:d1:6f:e9:55: a4:70:d4:05:60:60:ef:00:c0:93:79:36:64:42:86: db:4f:06:0e:9c:8a:0d:b3:f7:94:82:ed:fb:c6:e5: 71:60:c2:06:24:ea:2f:67:3f:98:7f:fc:f0:82:86: 6b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F7:B8:0E:87:BF:6D:87:D7:22:5E:42:A0:0D:7A:9D:2F:76:A7:94 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7d:54:4b:b6:24:53:72:09:ab:93:73:ed:e6:48:ce:f1:95: 84:61:59:01:27:28:b9:37:cb:fa:21:50:78:12:f3:9a:f4:00: 9c:dd:f3:88:2f:5f:a7:b7:ad:2d:ec:c6:88:8c:76:59:97:e5: 03:01:d9:41:76:16:19:c4:1e:74:d3:f0:e8:2b:dd:48:3d:32: 3a:30:66:fd:89:d2:bb:06:5c:50:90:62:a8:7d:4a:98:4e:81: 46:9a:9e:4d:a3:ec:9b:15:9c:03:be:38:df:d5:86:d8:40:ef: dd:7b:b2:ce:9c:04:da:10:37:9a:a3:ed:82:f1:f3:0b:00:cf: b3:79:d4:ef:75:b0:55:27:9a:88:f8:27:c8:e5:f9:2c:e6:54: 10:83:2f:4d:0c:52:a7:fa:5b:91:44:6b:0c:da:be:03:f2:dc: bc:91:d9:77:3a:a1:92:18:ff:2a:5c:a4:9e:0c:c1:5a:f0:70: 85:4a:3a:f1:5b:d2:ce:8a:66:1f:99:c8:0f:64:b7:73:e1:2c: 65:50:ae:fe:3e:40:b1:b4:32:b6:8e:06:1e:cc:42:b2:f7:7d: 1c:4d:e2:3f:ea:17:8b:7c:43:45:1f:dc:33:4a:bd:98:e1:e2: fe:0b:d6:3f:62:8f:97:ee:f1:72:90:3f:db:9c:6f:12:fe:23: 38:fd:8c:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwNzIyMTgxMDAyWhcNMjYwNzI5MTgxMDAyWjAYMRYwFAYD VQQDEw02YTYxMDc3Yi1jMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD0S6+f0EuAa1Pe4OC35tR96EMnKy3lVThxjna1zrIUx7g3xsrEkwjANbEK5 tXrS7ARssmSrT1MFDTaB/029wyjWmHR/R6tsW4BCyZ9cfOpq8SKTXBAOB+bc6CN0 dENiG+1mFsjotMPOz+ktIMAaPWld/fTLGB7A4R5ENJKgQdvenrkPtffKKH4z/fH8 6IUBhzAUqXpb7aucCYURkkiO99/XDuxbeeSZudhQpMzduAjDq4crCWTyH7QJ4gNQ +Yh5W6S/wVAJ//gAKhFiYtFv6VWkcNQFYGDvAMCTeTZkQobbTwYOnIoNs/eUgu37 xuVxYMIGJOovZz+Yf/zwgoZrkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOj3uA6H v22H1yJeQqANep0vdqeUMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjX1US7YkU3IJq5Nz7eZIzvGVhGFZAScouTfL+iFQeBLzmvQAnN3ziC9fp7et LezGiIx2WZflAwHZQXYWGcQedNPw6CvdSD0yOjBm/YnSuwZcUJBiqH1KmE6BRpqe TaPsmxWcA74439WG2EDv3XuyzpwE2hA3mqPtgvHzCwDPs3nU73WwVSeaiPgnyOX5 LOZUEIMvTQxSp/pbkURrDNq+A/LcvJHZdzqhkhj/KlykngzBWvBwhUo68VvSzopm H5nID2S3c+EsZVCu/j5AsbQyto4GHsxCsvd9HE3iP+oXi3xDRR/cM0q9mOHi/gvW P2KPl+7xcpA/25xvEv4jOP2MRA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:18:51 2026 by rpki-client