$ rpki-client -vvf rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft File: xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft (raw, json) Hash identifier: WskGh0bmkqbadXrv3woXvXqxaSTEFac8V+YAQI/fjJ4= Subject key identifier: AB:E1:D2:C6:B1:25:D7:6D:AC:96:5E:CF:4F:AA:72:10:74:99:E9:29 Authority key identifier: C5:40:84:D3:04:24:84:DC:97:94:9D:ED:C9:56:C2:82:D9:EB:82:59 Certificate issuer: /CN=A911E621/serialNumber=C54084D3042484DC97949DEDC956C282D9EB8259 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft Manifest number: 11 Signing time: Mon 27 Jul 2026 11:27:55 +0000 Manifest this update: Mon 27 Jul 2026 11:27:55 +0000 Manifest next update: Mon 03 Aug 2026 11:27:55 +0000 Files and hashes: 1: xUCE0wQkhNyXlJ3tyVbCgtnrglk.crl (hash: rfjdRG0aJXrcpfZfWKFE3oBe5iGIfz7F2PMXQTAjmfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.crl rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E621, serialNumber=C54084D3042484DC97949DEDC956C282D9EB8259 Validity Not Before: Jul 27 11:27:55 2026 GMT Not After : Aug 3 11:27:55 2026 GMT Subject: CN=6a6740bb-52b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:7e:ee:b9:00:ae:7c:be:d7:90:e7:04:7c: df:ea:8e:6e:37:7c:0b:52:45:3b:4f:36:a7:c5:25: ce:b8:fa:fd:0d:b2:99:19:65:9d:f5:b7:d4:58:58: f8:5c:ef:2f:7b:67:77:4e:49:f4:5f:ef:29:be:f2: f7:da:1f:3a:d3:13:b0:82:25:b4:08:08:15:6a:01: c6:6f:5a:61:24:61:21:15:b0:0c:c6:4a:a9:e6:33: cd:bb:17:5a:9e:de:0e:87:31:e9:22:d9:cf:a8:40: de:0a:2f:3d:f9:ef:f0:aa:0c:df:2f:e4:50:8c:08: 67:35:95:e0:4e:50:49:7c:21:ba:3c:c3:d8:d3:a4: bf:30:a3:77:a1:61:03:fc:5c:87:ea:1b:74:e5:c1: 0e:23:17:73:12:01:6a:60:ab:c6:d8:ed:bf:88:74: bf:5e:d4:ba:f9:0b:78:d5:e3:89:d7:18:8e:92:11: ac:ba:b4:56:42:38:b4:fe:16:96:61:3e:4e:5e:8d: f3:21:70:e9:9b:7b:36:14:1e:68:62:1f:ce:bf:0c: 16:a4:86:3f:69:2a:9a:d3:d9:d4:92:38:91:b2:31: 80:a6:f4:09:3d:80:84:c3:e9:c9:6a:ec:e7:0b:94: 4b:3f:e8:d3:ce:a8:df:59:75:0d:1d:a7:9d:e7:74: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E1:D2:C6:B1:25:D7:6D:AC:96:5E:CF:4F:AA:72:10:74:99:E9:29 X509v3 Authority Key Identifier: keyid:C5:40:84:D3:04:24:84:DC:97:94:9D:ED:C9:56:C2:82:D9:EB:82:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xUCE0wQkhNyXlJ3tyVbCgtnrglk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E621/5D6AF50A70ED11F1A6F57C9E5DA30FBC/xUCE0wQkhNyXlJ3tyVbCgtnrglk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:5d:aa:38:d1:f5:8f:bc:5f:46:a4:33:f0:c9:b1:fb:f1:d9: 32:e4:66:c0:e5:4e:7c:7a:03:7b:f3:3f:7b:69:99:20:22:4e: 99:bf:b6:30:44:24:e4:96:69:13:d3:cd:78:40:fa:f6:6f:a1: 58:15:bc:77:34:5b:a6:dd:38:56:1a:f6:39:21:24:5b:2e:ea: 2b:24:ff:9f:63:f9:65:10:83:6a:c3:1c:93:33:9f:4a:b8:28: 80:ab:c9:29:60:59:f0:f9:85:39:4e:55:41:4f:f0:06:c2:81: c5:6a:bc:22:d5:67:c2:56:d0:19:d6:8b:b6:ee:9e:8c:07:84: e3:ac:42:28:e9:b2:af:82:89:66:5c:ce:b0:fe:f2:82:8b:11: 76:f8:8d:b0:ef:91:fb:0a:96:b8:57:19:bb:12:d6:dc:0b:b5: b3:70:79:07:a2:50:2f:e4:c0:81:81:fe:af:83:cf:50:fc:12: 01:1a:42:50:45:49:e0:a0:7b:1c:34:00:77:66:62:66:21:bc: e7:10:aa:cb:d1:e3:85:fa:5a:cd:53:7a:ca:25:e4:2b:da:84: 87:a7:96:4f:cc:8c:cc:08:3a:cc:79:45:a6:53:62:22:85:ca: 76:c7:20:61:63:84:e6:0a:4e:15:ae:9b:a2:41:eb:98:e7:82: 63:70:10:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTYyMTExMC8GA1UEBRMoQzU0MDg0RDMwNDI0ODREQzk3OTQ5REVEQzk1NkMyODJE OUVCODI1OTAeFw0yNjA3MjcxMTI3NTVaFw0yNjA4MDMxMTI3NTVaMBgxFjAUBgNV BAMTDTZhNjc0MGJiLTUyYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1SH7uuQCufL7XkOcEfN/qjm43fAtSRTtPNqfFJc64+v0NspkZZZ31t9RYWPhc 7y97Z3dOSfRf7ym+8vfaHzrTE7CCJbQICBVqAcZvWmEkYSEVsAzGSqnmM827F1qe 3g6HMeki2c+oQN4KLz357/CqDN8v5FCMCGc1leBOUEl8Ibo8w9jTpL8wo3ehYQP8 XIfqG3TlwQ4jF3MSAWpgq8bY7b+IdL9e1Lr5C3jV44nXGI6SEay6tFZCOLT+FpZh Pk5ejfMhcOmbezYUHmhiH86/DBakhj9pKprT2dSSOJGyMYCm9Ak9gITD6clq7OcL lEs/6NPOqN9ZdQ0dp53ndDe9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUq+HSxrEl 122sll7PT6pyEHSZ6SkwHwYDVR0jBBgwFoAUxUCE0wQkhNyXlJ3tyVbCgtnrglkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFNjIxLzVENkFGNTBBNzBF RDExRjFBNkY1N0M5RTVEQTMwRkJDL3hVQ0Uwd1FraE55WGxKM3R5VmJDZ3Rucmds ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveFVDRTB3UWtoTnlYbEozdHlWYkNndG5yZ2xrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF NjIxLzVENkFGNTBBNzBFRDExRjFBNkY1N0M5RTVEQTMwRkJDL3hVQ0Uwd1FraE55 WGxKM3R5VmJDZ3Rucmdsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4Xao40fWPvF9GpDPwybH78dky5GbA5U58egN78z97aZkgIk6Zv7YwRCTklmkT 0814QPr2b6FYFbx3NFum3ThWGvY5ISRbLuorJP+fY/llEINqwxyTM59KuCiAq8kp YFnw+YU5TlVBT/AGwoHFarwi1WfCVtAZ1ou27p6MB4TjrEIo6bKvgolmXM6w/vKC ixF2+I2w75H7Cpa4Vxm7EtbcC7WzcHkHolAv5MCBgf6vg89Q/BIBGkJQRUngoHsc NAB3ZmJmIbznEKrL0eOF+lrNU3rKJeQr2oSHp5ZPzIzMCDrMeUWmU2Iihcp2xyBh Y4TmCk4VrpuiQeuY54JjcBCa -----END CERTIFICATE-----Generated at Tue Jul 28 16:41:30 2026 by rpki-client