$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: ok7/uJ0DUSojosaAOALQ2xcDlWawVnd0iawGcV4oxyM= Subject key identifier: 98:98:00:88:E5:FF:5A:7D:11:8E:21:BA:D9:17:26:3F:F7:73:CB:FA Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0F15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0EE1 Signing time: Tue 28 Jul 2026 17:46:59 +0000 Manifest this update: Tue 28 Jul 2026 17:46:59 +0000 Manifest next update: Tue 04 Aug 2026 17:46:59 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: r+9t0H9Sz/HKz7d2jJbUu9CyAVSeYpSX/jJ3ZhTOBMI=) 2: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: xo+tt5lov3udnd3XAOiK90QcwkAcxMUW1iuUC+4M+z8=) 3: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E+4UeHlGnBHL9IRmWm+TexcyHwom9b/OOAx0STjQIo0=) 4: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: IJy6vq3u18sfK/PaqQ4HkbGHvtQ0+WpPPGjw18M6VWY=) 5: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: bKvSPuftAoTubmq1z1G2lBaSXWyaRfT8vN+YYMv11yI=) 6: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: jPTrigcWq4coxSH4UL7oP5hGP5jZz/yTxLEnnmOBFlo=) 7: 670DF186232111EB9896B783C4F9AE02.roa (hash: JDnnr+gXElLZfFNqxroiEtHe91q0ZicgMHi1XY427Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3861 (0xf15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Jul 28 17:46:59 2026 GMT Not After : Aug 4 17:46:59 2026 GMT Subject: CN=6a68eb13-e08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:bb:37:d9:f7:aa:ec:f5:24:db:93:fc:4d: 30:cc:71:61:3d:69:59:c5:ce:0a:5d:dc:e6:a5:4d: ec:d3:6b:27:c0:d8:89:f7:91:70:fa:fe:81:a8:12: 6a:b5:cd:9d:6a:2f:42:ed:b2:79:8a:ce:a3:d2:b5: da:d4:ec:0f:22:c5:ae:34:ec:8f:ae:2f:56:3f:39: 94:e9:d2:1b:3a:0f:cb:aa:57:2c:f7:7c:b9:e6:7d: ae:54:22:f4:32:cd:51:48:c7:0c:c9:2c:ac:47:a5: e7:51:50:1e:d0:77:91:cb:26:c8:b6:94:0b:68:34: 0c:1d:5a:26:0d:82:6f:80:15:07:a4:92:b4:78:09: ff:60:b5:52:73:27:c5:7a:8e:56:e0:a8:c4:af:63: f8:6b:12:62:59:ee:36:f4:f9:81:4f:99:b3:81:b2: 8a:45:27:70:bb:40:9b:07:07:65:e8:7d:8a:9f:43: 54:aa:38:ff:a6:a1:ea:ff:a9:68:ed:11:7e:7e:0b: d2:b9:47:8d:bf:64:53:4a:85:6f:2c:8d:2d:5a:54: f9:a3:21:c5:a6:65:4b:fb:76:d1:c4:30:4b:c1:b6: 17:76:6f:eb:e2:44:26:57:75:81:e1:27:81:7a:7d: 7b:7b:15:8b:56:de:59:39:ff:3f:69:1e:e8:71:ef: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:98:00:88:E5:FF:5A:7D:11:8E:21:BA:D9:17:26:3F:F7:73:CB:FA X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:84:43:7a:bf:4d:c4:bb:e9:24:36:71:f0:79:ca:b3:f0:d7: 2c:b5:f2:10:51:c0:70:17:64:b6:79:ba:d9:8f:bf:b5:be:29: 02:74:fd:83:f4:a6:f6:d0:56:f2:c9:6e:bd:3e:c3:6a:3c:7a: fd:40:c5:4a:5e:84:7f:82:b3:37:dc:14:07:f0:9d:c7:8d:3a: b8:e7:65:e4:67:8a:89:40:10:f7:e4:5e:d2:4e:1e:fa:01:4d: ab:4b:20:9f:ae:58:c7:d4:d4:73:c0:e7:74:74:58:3a:72:9a: 9c:45:33:f7:ac:5f:f9:52:42:ee:9d:fa:76:b9:02:22:aa:f1: 3f:c1:51:7b:f3:61:d4:3c:0e:b7:94:58:25:63:a2:e2:1f:ce: d0:80:f2:75:66:07:79:6e:c7:26:e1:71:92:97:49:e2:11:14: a0:ac:21:c0:ae:63:4c:fe:54:cf:73:16:6d:19:02:a0:3f:7d: 1e:8f:a6:d0:b9:55:97:cb:b9:fd:32:c6:8e:82:15:d2:d1:5c: c3:ae:25:b0:fe:b7:2d:83:1a:c6:4d:2c:9b:92:73:59:51:41: 5b:73:cc:6d:e0:43:c6:8e:ef:a7:15:1e:2e:9c:4f:cc:12:1f: 02:18:0a:96:ce:9a:db:f3:85:2a:7e:59:0d:22:67:b1:43:0a: f5:0c:e5:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwNzI4MTc0NjU5WhcNMjYwODA0MTc0NjU5WjAYMRYwFAYD VQQDEw02YTY4ZWIxMy1lMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQe7N9n3quz1JNuT/E0wzHFhPWlZxc4KXdzmpU3s02snwNiJ95Fw+v6BqBJq tc2dai9C7bJ5is6j0rXa1OwPIsWuNOyPri9WPzmU6dIbOg/Lqlcs93y55n2uVCL0 Ms1RSMcMySysR6XnUVAe0HeRyybItpQLaDQMHVomDYJvgBUHpJK0eAn/YLVScyfF eo5W4KjEr2P4axJiWe429PmBT5mzgbKKRSdwu0CbBwdl6H2Kn0NUqjj/pqHq/6lo 7RF+fgvSuUeNv2RTSoVvLI0tWlT5oyHFpmVL+3bRxDBLwbYXdm/r4kQmV3WB4SeB en17exWLVt5ZOf8/aR7oce+HnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiYAIjl /1p9EY4hutkXJj/3c8v6MB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa4RDer9NxLvpJDZx8HnKs/DXLLXyEFHAcBdktnm62Y+/tb4pAnT9g/Sm9tBW 8sluvT7Dajx6/UDFSl6Ef4KzN9wUB/Cdx406uOdl5GeKiUAQ9+Re0k4e+gFNq0sg n65Yx9TUc8DndHRYOnKanEUz96xf+VJC7p36drkCIqrxP8FRe/Nh1DwOt5RYJWOi 4h/O0IDydWYHeW7HJuFxkpdJ4hEUoKwhwK5jTP5Uz3MWbRkCoD99Ho+m0LlVl8u5 /TLGjoIV0tFcw64lsP63LYMaxk0sm5JzWVFBW3PMbeBDxo7vpxUeLpxPzBIfAhgK ls6a2/OFKn5ZDSJnsUMK9QzlyQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:00 2026 by rpki-client