$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: nTsEaOQnxCwxqrwnIpo5sGKe6gLwfSf4y8JI3J9jI6A= Subject key identifier: 8A:F9:ED:AD:E2:BC:44:F4:9D:16:7D:A3:8F:6A:37:FB:07:56:29:9A Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 117F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 115E Signing time: Sun 26 Jul 2026 17:23:37 +0000 Manifest this update: Sun 26 Jul 2026 17:23:37 +0000 Manifest next update: Sun 02 Aug 2026 17:23:37 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: 1Wxh/d+JNohvcV0lQ+shekMktFLqDXGFuyyIiqlMTfQ=) 2: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: dYx5rg+ikh6rVRuWFPmqQgmz1ejCnGZL23u6GCNg5Bw=) 3: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: iceccqvc3kg29socz/RRWvyJpHDglBn90E6v9vB2qCg=) 4: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (hash: ssMQ43fjcNDdMMcxP4Zyw/zUAL+E/8FkY3VJGMomUwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 17:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4479 (0x117f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: Jul 26 17:23:37 2026 GMT Not After : Aug 2 17:23:37 2026 GMT Subject: CN=6a664299-29e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:89:26:4f:56:bf:be:a7:57:c2:90:71:75:80: 43:aa:54:f7:ef:e5:76:5b:2c:a0:cb:eb:ed:33:8b: bb:37:c6:a2:3d:bf:8d:80:b7:fb:7b:b5:ff:77:62: ac:24:b5:fe:c1:26:e0:f8:d8:1b:b6:03:af:3e:c9: f1:2d:0f:25:ca:e8:91:27:b8:39:4f:4a:f6:c5:5d: 75:7e:93:aa:f5:70:9a:a4:6d:07:82:bf:08:ad:9a: 96:31:f1:6e:27:0f:72:72:7c:60:86:29:2f:28:62: 2d:2d:13:e4:df:ca:22:e9:ea:8c:e3:65:fd:18:59: a0:ab:02:6a:e4:10:9c:72:be:a2:9f:48:62:c5:10: 2a:fb:a6:ba:fe:e3:09:7c:7d:c2:70:04:b2:47:bd: 82:d3:fb:03:48:15:6f:c9:5d:05:6f:c2:cf:cb:60: 8e:91:06:98:dc:8c:ea:42:70:ed:b5:a8:e6:08:6b: 9f:f5:e0:56:31:6a:24:9e:9e:4a:61:42:29:b9:d2: db:8c:8b:c9:76:21:d4:ad:8b:87:35:2a:74:15:d7: e1:8e:61:dd:b0:46:39:14:8f:dd:40:b5:aa:86:73: cd:51:de:bb:9a:93:6d:48:a2:80:06:01:f2:15:0a: 11:49:c1:ab:da:cf:6a:da:9c:04:f8:67:a6:40:71: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F9:ED:AD:E2:BC:44:F4:9D:16:7D:A3:8F:6A:37:FB:07:56:29:9A X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e2:6f:68:77:ba:82:fd:d5:bd:8b:3e:56:d0:4e:0a:4a:b8: 38:3b:6c:ce:8a:6d:f0:82:ed:cf:fb:41:96:f8:3e:af:ba:c1: ce:95:78:4a:af:a5:fd:29:9b:cf:a9:e4:28:c1:06:19:5f:f8: 33:e9:4d:aa:f6:c0:d3:7d:74:b7:32:ac:8a:08:ae:bc:f4:81: ea:e1:09:59:96:e6:23:47:6f:98:d3:5a:64:db:26:d9:7e:3c: 16:d0:c2:45:ee:60:a3:90:0b:b7:f2:12:8b:6a:10:c2:c5:da: f0:6a:b4:b7:94:05:f7:db:43:75:c8:0e:22:c0:34:a2:ac:7e: 17:db:5b:0b:c3:ce:fd:58:54:2a:99:47:73:16:34:9a:45:d2: e1:3a:91:f9:5d:09:fe:e9:48:3a:f0:9b:88:51:96:b8:44:28: 3e:1b:8e:a3:d2:bf:8c:5a:67:d8:2d:62:f9:2e:d2:8d:eb:d5: a3:86:76:72:2f:8c:68:b8:73:e9:57:09:3b:f3:ef:98:f5:2f: a4:85:fa:55:c0:16:49:1c:f6:a6:aa:62:b9:cc:86:41:6e:26: 19:ba:e4:fe:b4:17:dd:1b:47:c3:8b:5d:cc:7b:99:a3:dc:b9: 24:cb:5f:33:91:da:06:71:ad:14:9c:d8:fb:bc:52:45:84:1a: 6c:de:9c:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjYwNzI2MTcyMzM3WhcNMjYwODAyMTcyMzM3WjAYMRYwFAYD VQQDEw02YTY2NDI5OS0yOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YkmT1a/vqdXwpBxdYBDqlT37+V2Wyygy+vtM4u7N8aiPb+NgLf7e7X/d2Ks JLX+wSbg+NgbtgOvPsnxLQ8lyuiRJ7g5T0r2xV11fpOq9XCapG0Hgr8IrZqWMfFu Jw9ycnxghikvKGItLRPk38oi6eqM42X9GFmgqwJq5BCccr6in0hixRAq+6a6/uMJ fH3CcASyR72C0/sDSBVvyV0Fb8LPy2COkQaY3IzqQnDttajmCGuf9eBWMWoknp5K YUIpudLbjIvJdiHUrYuHNSp0FdfhjmHdsEY5FI/dQLWqhnPNUd67mpNtSKKABgHy FQoRScGr2s9q2pwE+GemQHEsyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIr57a3i vET0nRZ9o49qN/sHVimaMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAguJvaHe6gv3VvYs+VtBOCkq4ODtszopt8ILtz/tBlvg+r7rBzpV4Sq+l/Smb z6nkKMEGGV/4M+lNqvbA0310tzKsigiuvPSB6uEJWZbmI0dvmNNaZNsm2X48FtDC Re5go5ALt/ISi2oQwsXa8Gq0t5QF99tDdcgOIsA0oqx+F9tbC8PO/VhUKplHcxY0 mkXS4TqR+V0J/ulIOvCbiFGWuEQoPhuOo9K/jFpn2C1i+S7SjevVo4Z2ci+MaLhz 6VcJO/PvmPUvpIX6VcAWSRz2pqpiucyGQW4mGbrk/rQX3RtHw4tdzHuZo9y5JMtf M5HaBnGtFJzY+7xSRYQabN6cVw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:24:18 2026 by rpki-client