$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: Jtg0/hf8KYmdyqE/Xb/9ltFbSBEzMfVCgVhLE6QuA6E= Subject key identifier: 14:CC:E7:F4:40:20:9B:E4:4E:B2:F6:F3:62:FB:BE:11:53:60:D5:DE Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: BA Signing time: Thu 23 Jul 2026 08:52:26 +0000 Manifest this update: Thu 23 Jul 2026 08:52:25 +0000 Manifest next update: Thu 30 Jul 2026 08:52:25 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: YZrwoq3/v1TuLj8djhxxpv30FF1bO6IPXyEEUR/9rQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Jul 23 08:52:25 2026 GMT Not After : Jul 30 08:52:25 2026 GMT Subject: CN=6a61d64a-532f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:b7:a8:bb:a5:86:d8:71:9c:a0:ca:17:4b: 6b:86:98:b4:0b:60:78:7a:0b:38:ca:27:88:0a:e6: d5:d7:82:67:91:52:25:05:30:a6:c1:5f:f1:0c:18: c0:45:6e:45:c7:83:13:91:74:a9:59:d8:41:e0:3e: b5:fd:de:2f:28:2c:a0:99:f1:74:39:05:36:45:ec: d8:d9:bd:56:02:92:b8:86:71:d0:52:3c:52:9f:71: f6:9c:fb:fe:7d:59:d6:6f:c4:d2:84:38:cb:7d:6b: f9:40:58:1d:03:9b:8f:57:51:1b:a6:5a:23:b7:30: 9e:e6:8f:59:50:32:a7:a6:89:36:cd:4c:35:97:8d: 6e:71:8e:2d:6d:e2:ff:fe:0b:90:7e:22:94:c6:97: 69:ac:c0:f2:dc:d9:3f:8f:f3:a2:58:56:e7:08:a1: 31:3f:9f:6c:1e:a7:6e:a2:d2:cd:16:54:b4:35:86: 49:7f:73:99:ed:b8:5c:5c:73:dc:2d:e3:fb:c8:5b: ad:62:c8:70:28:2f:eb:38:6d:e9:12:7d:18:67:25: 8b:e6:78:19:02:29:9a:e1:11:76:23:8d:87:32:c5: 0d:14:a5:9c:58:e4:af:42:1a:a6:c3:ac:ef:6b:82: c0:45:6b:ee:25:74:9e:96:e9:33:93:c5:13:16:11: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CC:E7:F4:40:20:9B:E4:4E:B2:F6:F3:62:FB:BE:11:53:60:D5:DE X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:25:fb:7d:4d:b1:a9:a0:07:13:a1:9c:74:09:7c:16:e3:ff: 3b:3a:0a:51:21:c1:d7:f2:44:6f:b9:8a:df:d4:69:4c:6c:08: f5:91:4a:48:81:ee:c4:0b:54:9b:af:2a:48:88:d5:d3:a8:0a: a9:79:38:b2:a7:47:ec:6e:61:39:58:84:de:d6:e3:0e:57:5d: 5e:43:58:d0:90:07:dc:4f:37:94:32:bd:3a:10:0f:7d:55:1a: c6:d1:f2:8f:5a:3e:5f:1c:9f:30:c1:51:34:df:5c:82:45:38: f0:c1:62:f9:62:13:c5:5f:57:c1:3b:ee:ea:8e:70:17:3c:11: fa:b7:de:79:f5:37:cb:f7:39:f0:6a:bb:d5:05:77:d3:19:7a: 83:b6:67:8d:85:5e:50:dc:ed:e3:de:b7:1e:c1:08:0f:9c:91: 4b:54:7b:23:2b:e3:8f:f0:d2:72:cd:36:c3:aa:b6:a9:51:09: 65:fa:11:03:87:c5:3a:57:1a:01:14:93:b5:9a:65:b2:a7:d0: 1a:dc:a0:34:00:65:b7:01:88:9d:7f:88:d8:5e:14:f1:e2:25: 25:30:3b:08:d0:81:46:fe:ee:57:bf:75:07:5e:10:0a:22:7e: a4:7d:ed:0a:85:b6:7d:d7:eb:19:78:54:9a:1d:10:63:bb:98: 5a:6c:69:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZEQzAxMTAvBgNVBAUTKDExN0MwRDZEMTlCRkJBNDhCNUZBOUU1MTdEMEU2OTI2 NTVDOThDNDQwHhcNMjYwNzIzMDg1MjI1WhcNMjYwNzMwMDg1MjI1WjAYMRYwFAYD VQQDEw02YTYxZDY0YS01MzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwq3qLulhthxnKDKF0trhpi0C2B4egs4yieICubV14JnkVIlBTCmwV/xDBjA RW5Fx4MTkXSpWdhB4D61/d4vKCygmfF0OQU2RezY2b1WApK4hnHQUjxSn3H2nPv+ fVnWb8TShDjLfWv5QFgdA5uPV1EbplojtzCe5o9ZUDKnpok2zUw1l41ucY4tbeL/ /guQfiKUxpdprMDy3Nk/j/OiWFbnCKExP59sHqduotLNFlS0NYZJf3OZ7bhcXHPc LeP7yFutYshwKC/rOG3pEn0YZyWL5ngZAima4RF2I42HMsUNFKWcWOSvQhqmw6zv a4LARWvuJXSelukzk8UTFhHE4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTM5/RA IJvkTrL282L7vhFTYNXeMB8GA1UdIwQYMBaAFBF8DW0Zv7pItfqeUX0OaSZVyYxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkRDMC8zMzExRjBFRTY5 RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3VraTEtcDVSZlE1cEpsWEpq RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkRDMC8zMzExRjBFRTY5RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3Vr aTEtcDVSZlE1cEpsWEpqRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSX7fU2xqaAHE6GcdAl8FuP/OzoKUSHB1/JEb7mK39RpTGwI9ZFKSIHuxAtU m68qSIjV06gKqXk4sqdH7G5hOViE3tbjDlddXkNY0JAH3E83lDK9OhAPfVUaxtHy j1o+XxyfMMFRNN9cgkU48MFi+WITxV9XwTvu6o5wFzwR+rfeefU3y/c58Gq71QV3 0xl6g7ZnjYVeUNzt4963HsEID5yRS1R7Iyvjj/DScs02w6q2qVEJZfoRA4fFOlca ARSTtZplsqfQGtygNABltwGInX+I2F4U8eIlJTA7CNCBRv7uV791B14QCiJ+pH3t CoW2fdfrGXhUmh0QY7uYWmxphQ== -----END CERTIFICATE-----Generated at Fri Jul 24 01:45:40 2026 by rpki-client