$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft File: XLKYvBpwUBeAXFYfCQoNR5UOar0.mft (raw, json) Hash identifier: bEy54U/jJHQDR04tFvDs6+WWLBDNF3dbACUFijiFWuc= Subject key identifier: 7D:20:6A:B7:07:4B:74:3E:FB:6A:42:A4:FA:CF:30:51:91:AE:13:D8 Authority key identifier: 5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD Certificate issuer: /CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Certificate serial: 25E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft Manifest number: 25E0 Signing time: Tue 28 Jul 2026 14:16:39 +0000 Manifest this update: Tue 28 Jul 2026 14:16:39 +0000 Manifest next update: Tue 04 Aug 2026 14:16:39 +0000 Files and hashes: 1: XLKYvBpwUBeAXFYfCQoNR5UOar0.crl (hash: c0ITQSOtEODAvQWk6Qbu52QI9C+MZRZt0o0Y0q+Cr78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9696 (0x25e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD Validity Not Before: Jul 28 14:16:39 2026 GMT Not After : Aug 4 14:16:39 2026 GMT Subject: CN=6a68b9c7-b79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:49:50:ce:9f:ba:d0:b1:bd:36:8b:b0:8d: 71:f2:30:8e:74:3a:a0:1b:59:8f:6d:33:fd:9c:86: 76:24:f4:35:6e:43:72:b5:db:f0:a3:ea:06:27:d7: 98:f7:83:ad:72:ee:f1:d4:ba:d8:da:b5:dd:bf:52: f8:d2:35:a8:08:a6:c4:28:5b:e7:b4:ad:86:4e:14: bd:23:85:33:bb:b1:50:5e:37:e3:b4:e0:6a:62:8a: b9:0f:48:d0:f4:75:03:4c:d0:0d:3c:96:3b:6e:17: 4d:82:e7:4d:dc:d9:6b:7e:9f:10:77:cc:a7:6b:a4: a5:d3:de:8c:cb:6f:f2:63:9d:58:ce:05:01:49:a1: 4d:f4:62:ec:01:6a:1d:d5:08:dc:9b:5a:47:e7:f1: 0e:51:85:49:8a:63:96:98:35:8c:36:a0:da:14:b5: ab:2b:e1:e2:61:27:37:44:26:84:a7:cc:8e:25:92: 7e:11:c8:b0:27:44:7a:5a:0c:ba:02:5e:eb:14:14: f7:e9:f5:03:56:69:36:4f:c6:52:a1:7d:2e:19:a5: 5b:5c:c2:d6:02:f7:db:91:c6:bc:d5:62:7f:4b:5b: 6c:95:ee:36:6d:a6:f6:6f:60:b2:66:7c:57:22:b6: d4:1d:ba:19:d5:73:67:cd:fd:68:46:64:3d:97:5d: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:20:6A:B7:07:4B:74:3E:FB:6A:42:A4:FA:CF:30:51:91:AE:13:D8 X509v3 Authority Key Identifier: keyid:5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:38:50:e1:1d:6c:e8:d7:1e:1e:8a:ea:b5:0f:f2:54:be:1e: 9d:f5:cb:ee:e5:b2:29:da:79:7c:a1:6a:77:fd:df:9a:55:aa: c3:c5:cf:17:e0:7d:0f:ee:91:1d:9a:6a:2c:6b:69:15:99:33: 84:97:ac:18:8e:54:84:8a:83:3c:68:e1:c8:60:fb:38:71:b9: d9:23:35:9e:77:60:0b:7f:23:3d:16:2c:2d:13:a8:c6:f6:50: 78:6a:4d:0c:48:85:af:43:2b:58:e1:2a:a2:78:11:d5:0c:49: 16:2d:2b:e8:ab:35:c9:37:3a:fc:03:cb:1f:cc:6d:95:7d:fb: 7a:6a:27:f3:04:d5:f0:33:98:7c:57:2f:68:15:a8:eb:53:83: 06:7a:55:ed:0e:f4:56:b1:ea:c7:36:51:45:9a:bb:3b:dd:f5: 7e:73:fd:f0:ad:4d:4e:da:5c:c4:2d:4f:cc:5f:b5:f3:6c:af: 84:15:a8:72:26:c2:44:20:7d:89:72:67:97:e8:d8:fb:91:ff: 6d:bb:80:c7:16:6c:32:03:9f:41:2d:82:d6:4a:93:b2:27:1f: ec:51:e1:9b:73:27:42:0a:e3:75:07:ff:c4:c0:d7:0a:38:95: 7e:9a:ce:9d:58:92:6d:2f:f0:98:56:14:6b:ac:00:42:8b:fa: 57:8c:e1:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDVDQjI5OEJDMUE3MDUwMTc4MDVDNTYxRjA5MEEwRDQ3 OTUwRTZBQkQwHhcNMjYwNzI4MTQxNjM5WhcNMjYwODA0MTQxNjM5WjAYMRYwFAYD VQQDEw02YTY4YjljNy1iNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDVJUM6futCxvTaLsI1x8jCOdDqgG1mPbTP9nIZ2JPQ1bkNytdvwo+oGJ9eY 94Otcu7x1LrY2rXdv1L40jWoCKbEKFvntK2GThS9I4Uzu7FQXjfjtOBqYoq5D0jQ 9HUDTNANPJY7bhdNgudN3Nlrfp8Qd8yna6Sl096My2/yY51YzgUBSaFN9GLsAWod 1Qjcm1pH5/EOUYVJimOWmDWMNqDaFLWrK+HiYSc3RCaEp8yOJZJ+EciwJ0R6Wgy6 Al7rFBT36fUDVmk2T8ZSoX0uGaVbXMLWAvfbkca81WJ/S1tsle42bab2b2CyZnxX IrbUHboZ1XNnzf1oRmQ9l13YqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0garcH S3Q++2pCpPrPMFGRrhPYMB8GA1UdIwQYMBaAFFyymLwacFAXgFxWHwkKDUeVDmq9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8zRjM0MjAzRTI5 MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VCZUFYRllmQ1FvTlI1VU9h cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hMS1l2QnB3VUJlQVhGWWZDUW9OUjVVT2FyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8zRjM0MjAzRTI5MDUxMUU1OTNCRkM2MjZDNEY5QUUwMi9YTEtZdkJwd1VC ZUFYRllmQ1FvTlI1VU9hcjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkThQ4R1s6NceHorqtQ/yVL4enfXL7uWyKdp5fKFqd/3fmlWqw8XPF+B9D+6R HZpqLGtpFZkzhJesGI5UhIqDPGjhyGD7OHG52SM1nndgC38jPRYsLROoxvZQeGpN DEiFr0MrWOEqongR1QxJFi0r6Ks1yTc6/APLH8xtlX37emon8wTV8DOYfFcvaBWo 61ODBnpV7Q70VrHqxzZRRZq7O931fnP98K1NTtpcxC1PzF+182yvhBWocibCRCB9 iXJnl+jY+5H/bbuAxxZsMgOfQS2C1kqTsicf7FHhm3MnQgrjdQf/xMDXCjiVfprO nViSbS/wmFYUa6wAQov6V4zhPg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:09:00 2026 by rpki-client