$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: Mx8No1F9lgppvwfkxWQl788xD1tC7Kd3yZ43NEN96Sw= Subject key identifier: E0:35:C0:92:3A:A3:91:FF:BB:03:29:4F:01:89:2B:72:F1:FE:6C:4B Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 3580 Signing time: Wed 22 Jul 2026 14:18:43 +0000 Manifest this update: Wed 22 Jul 2026 14:18:42 +0000 Manifest next update: Wed 29 Jul 2026 14:18:42 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: w8OVP8LUQBlg91U1chZTLk4/97zMkIazXCFcjS4FkKc=) 2: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: x1jt7itPjnC6MQbNejsBQgbeqBxLH2bZYuNPNtNXfYM=) 3: 1F40296A65AA11F1A2780DB67847A888.roa (hash: xCeE3NkSHLJX8hWD3lcocXTFRBLR4NjlfyWa7eSQ5Q0=) 4: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: kemAcHttVJ/67VTbPvla1uxc5lCQKg8ypYYWxu51V6g=) 5: B683232C65AA11F1B5A6BBF27847A888.roa (hash: ui+fKkNRAL+b96meDYqRb3fMZ9lGNQU6S4pF6IMCEJk=) 6: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: uTwgdWpEtjV1ALHAM8OqP3F4AfwGv1rbWW6ZiHZWVyg=) 7: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: x81djxirc4TZ7LBWsfaYDwm6dEqBh0TJcdGGB4pBfl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13740 (0x35ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Jul 22 14:18:42 2026 GMT Not After : Jul 29 14:18:42 2026 GMT Subject: CN=6a60d142-1e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:f0:ce:ce:db:59:dc:22:b1:23:08:83:18: ab:d4:f6:85:f1:9e:87:12:16:c8:b9:ea:f0:05:1e: 58:82:3f:53:8e:fe:9e:4a:f2:a4:72:a2:37:4f:16: 8f:5e:1b:ce:54:c1:e5:fb:17:8c:bf:86:01:d4:c5: 3e:b5:eb:b6:6b:d9:64:ec:f3:6c:43:d2:27:a0:7c: 83:c1:3a:54:90:c2:e6:a3:97:78:26:f0:48:0b:33: c5:e4:b8:a7:5f:e1:c6:bb:91:03:6c:4e:93:42:fc: 43:3d:3a:f7:34:70:50:42:21:e6:17:1c:c5:2f:24: 4c:6f:4c:70:9c:a2:f6:0d:b4:ce:c4:43:84:8f:d6: 94:86:a5:b7:85:5f:69:32:06:8c:24:09:8a:01:08: ca:ab:6b:39:f1:d1:63:ce:96:d6:ed:55:36:f2:9f: 02:20:c1:26:bc:ba:0b:7d:21:e0:ef:77:2c:50:9c: ee:19:43:d4:ce:66:d3:8a:de:7c:a6:86:31:02:b2: fc:58:c1:d4:9e:d0:b2:c0:e7:c0:61:30:f7:fd:35: d4:ce:66:c7:a6:cf:50:9d:a0:d3:49:df:63:0b:22: 7a:f0:0a:3e:ca:41:d6:34:ad:ec:b0:dd:05:37:8f: 0e:39:a5:e3:ed:a9:38:bd:f3:ac:f1:db:a1:bf:57: 4a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:35:C0:92:3A:A3:91:FF:BB:03:29:4F:01:89:2B:72:F1:FE:6C:4B X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:09:75:f8:81:d7:4e:d1:c3:90:09:db:39:7b:ef:d0:b6:51: 84:b3:ed:47:af:07:ac:4b:ba:9f:ba:4f:1c:c3:cb:74:56:e6: 0d:37:32:d6:a6:47:c8:7f:a1:e9:d1:8e:50:1e:db:c9:ce:69: dd:a9:29:b2:5d:df:7d:19:61:fe:2e:9e:c2:a2:d5:e2:61:8c: 9f:3a:ab:fa:3c:55:15:93:ec:e1:de:d6:a9:29:0b:c0:c2:64: 3a:38:9f:21:2e:04:b6:11:3e:b3:96:c1:43:b9:78:5d:87:10: e2:ea:5f:6e:6e:52:10:11:a1:0e:f4:7f:6d:f8:13:18:e1:69: 80:45:d5:66:a6:f3:e5:e5:a2:73:ef:3d:f5:82:a6:97:50:8b: 32:34:8f:7a:64:67:14:ae:81:f4:b2:df:3c:54:9d:6e:57:97: 32:22:a3:ef:14:f2:59:5d:9d:3b:79:55:04:cf:01:b3:6c:c5: 34:f9:6b:0a:a6:76:1d:71:0e:ca:f2:60:3f:21:99:a4:a8:45: 3b:68:83:4b:1c:37:2f:91:ad:8e:0d:0a:73:22:17:69:ac:3f: 36:ae:6f:d2:26:c6:ce:30:04:24:cc:98:95:b3:3f:6e:e2:ab: e1:9e:bc:6b:1c:89:78:f3:48:22:bc:ca:58:2f:46:5a:98:c0: bf:7d:d3:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYwNzIyMTQxODQyWhcNMjYwNzI5MTQxODQyWjAYMRYwFAYD VQQDEw02YTYwZDE0Mi0xZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pHwzs7bWdwisSMIgxir1PaF8Z6HEhbIuerwBR5Ygj9Tjv6eSvKkcqI3TxaP XhvOVMHl+xeMv4YB1MU+teu2a9lk7PNsQ9InoHyDwTpUkMLmo5d4JvBICzPF5Lin X+HGu5EDbE6TQvxDPTr3NHBQQiHmFxzFLyRMb0xwnKL2DbTOxEOEj9aUhqW3hV9p MgaMJAmKAQjKq2s58dFjzpbW7VU28p8CIMEmvLoLfSHg73csUJzuGUPUzmbTit58 poYxArL8WMHUntCywOfAYTD3/TXUzmbHps9QnaDTSd9jCyJ68Ao+ykHWNK3ssN0F N48OOaXj7ak4vfOs8duhv1dKOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOA1wJI6 o5H/uwMpTwGJK3Lx/mxLMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuwl1+IHXTtHDkAnbOXvv0LZRhLPtR68HrEu6n7pPHMPLdFbmDTcy1qZHyH+h 6dGOUB7byc5p3akpsl3ffRlh/i6ewqLV4mGMnzqr+jxVFZPs4d7WqSkLwMJkOjif IS4EthE+s5bBQ7l4XYcQ4upfbm5SEBGhDvR/bfgTGOFpgEXVZqbz5eWic+899YKm l1CLMjSPemRnFK6B9LLfPFSdbleXMiKj7xTyWV2dO3lVBM8Bs2zFNPlrCqZ2HXEO yvJgPyGZpKhFO2iDSxw3L5Gtjg0KcyIXaaw/Nq5v0ibGzjAEJMyYlbM/buKr4Z68 axyJePNIIrzKWC9GWpjAv33Taw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:41:50 2026 by rpki-client