$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json) Hash identifier: MzLgtt7Bil5jC5mcY4WnOg2gJPhaQsbNVy2M6jJHMPs= Subject key identifier: A0:DD:D4:0C:76:27:A8:6B:06:A8:3E:E9:68:55:55:28:93:0E:A2:CC Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft Manifest number: 01D2 Signing time: Wed 29 Jul 2026 04:54:05 +0000 Manifest this update: Wed 29 Jul 2026 04:54:04 +0000 Manifest next update: Wed 05 Aug 2026 04:54:04 +0000 Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: v7KIrm1q/s0bYy7GGiWqhr/berxWF4BxGz3225xwKMo=) 2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: xllDJ7wsryQrkSvX97smRm5LJiMbi7ECfICbiD0R3+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 04:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Validity Not Before: Jul 29 04:54:04 2026 GMT Not After : Aug 5 04:54:04 2026 GMT Subject: CN=6a69876d-bac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:59:69:02:a6:32:4c:d0:88:94:ba:7a:c5: 45:bf:ad:5f:3d:25:f6:ff:e4:88:63:71:a1:2f:6a: e4:95:cf:45:66:09:6a:92:d6:f2:b3:4d:4d:eb:eb: b9:27:57:33:95:e4:d7:a8:21:29:e4:63:9e:e5:9c: 57:c4:1c:4d:76:62:c9:49:12:99:58:c7:48:03:f5: e8:7a:9b:75:11:3c:86:6b:5c:ee:e4:ce:55:4b:7c: 73:14:59:1c:2b:09:04:6b:44:15:27:09:6a:a4:08: 39:22:2f:f9:d9:03:34:7f:26:cf:2e:8f:c9:f8:08: 3e:a3:86:de:3e:fb:a5:11:ff:9d:3f:ea:62:ab:81: 4b:46:44:42:e2:81:c5:95:7a:ef:f6:fe:f3:0f:c0: e4:c4:9d:76:f4:bb:43:4a:e1:5f:63:b0:df:b3:07: 49:81:48:39:af:e4:74:3c:28:e9:0f:55:f1:8d:38: 9d:1a:0b:e6:51:f1:01:c7:9b:5d:b6:16:b1:96:51: 39:d8:52:64:fc:ae:88:89:b6:7f:11:a2:ba:04:67: b6:58:8b:d5:5c:61:a5:44:1e:e3:5b:7d:31:0e:0d: 50:40:95:bc:8d:fa:b8:24:43:e3:9b:59:2a:10:61: 73:9f:3a:b3:dd:94:eb:a3:a3:27:60:9c:28:42:9e: a3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DD:D4:0C:76:27:A8:6B:06:A8:3E:E9:68:55:55:28:93:0E:A2:CC X509v3 Authority Key Identifier: keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:18:0a:33:f0:bf:64:8b:27:f1:ef:d2:c8:b2:e5:63:66:30: 28:3a:4f:6c:68:89:ee:29:6f:f4:a4:fa:59:b2:4c:5b:dd:6a: a1:76:b0:9f:ed:bb:ac:04:9d:d8:36:85:c8:3f:ad:0b:03:20: 29:b3:2e:d6:1c:5d:90:f4:06:05:71:86:f1:03:cc:ff:29:62: 5c:a4:0f:06:fc:5a:7e:84:27:01:b1:ff:03:0e:ce:2e:bb:4e: 8f:b5:5c:f5:be:11:83:cd:2c:23:22:e6:8f:b0:44:e6:8a:89: 78:dd:13:8c:f3:a0:63:e9:f9:c2:6d:ac:7c:ff:22:3b:84:27: 5c:a5:ef:cb:95:14:6d:3b:6a:c3:da:e6:56:55:9f:c8:71:6e: cb:d2:71:86:46:10:db:89:ac:c3:88:c3:d9:6f:b4:94:66:8d: ae:e0:8e:9c:54:2b:39:82:58:7f:fc:ae:19:09:c4:0c:12:ba: df:80:8d:c3:cf:70:3e:5f:7f:21:7e:43:21:45:1a:37:9e:51: 5d:8e:c7:a0:4a:5b:3f:23:be:cb:e2:8c:ae:e6:5c:d2:82:2a: f7:02:e9:ab:4b:b9:e3:73:22:a7:93:12:ad:10:0b:5c:ee:b1: 38:29:58:ed:de:4b:82:41:f4:a7:c8:ca:ea:60:a6:51:92:c6: 5f:ed:99:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3MTExMTAvBgNVBAUTKEI1N0IyMDdGMEUxQzFCQTg3M0EwNzkzNTgyQzdBODEz NDA5ODY3NEMwHhcNMjYwNzI5MDQ1NDA0WhcNMjYwODA1MDQ1NDA0WjAYMRYwFAYD VQQDEw02YTY5ODc2ZC1iYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7dZaQKmMkzQiJS6esVFv61fPSX2/+SIY3GhL2rklc9FZglqktbys01N6+u5 J1czleTXqCEp5GOe5ZxXxBxNdmLJSRKZWMdIA/Xoept1ETyGa1zu5M5VS3xzFFkc KwkEa0QVJwlqpAg5Ii/52QM0fybPLo/J+Ag+o4bePvulEf+dP+piq4FLRkRC4oHF lXrv9v7zD8DkxJ129LtDSuFfY7DfswdJgUg5r+R0PCjpD1XxjTidGgvmUfEBx5td thaxllE52FJk/K6IibZ/EaK6BGe2WIvVXGGlRB7jW30xDg1QQJW8jfq4JEPjm1kq EGFznzqz3ZTro6MnYJwoQp6jWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDd1Ax2 J6hrBqg+6WhVVSiTDqLMMB8GA1UdIwQYMBaAFLV7IH8OHBuoc6B5NYLHqBNAmGdM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS85RkREMkRBMEM5 OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2aHpvSGsxZ3Nlb0UwQ1la MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RYc2dmdzRjRzZoem9IazFnc2VvRTBDWVowdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTcxMS85RkREMkRBMEM5OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2 aHpvSGsxZ3Nlb0UwQ1laMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfBgKM/C/ZIsn8e/SyLLlY2YwKDpPbGiJ7ilv9KT6WbJMW91qoXawn+27rASd 2DaFyD+tCwMgKbMu1hxdkPQGBXGG8QPM/yliXKQPBvxafoQnAbH/Aw7OLrtOj7Vc 9b4Rg80sIyLmj7BE5oqJeN0TjPOgY+n5wm2sfP8iO4QnXKXvy5UUbTtqw9rmVlWf yHFuy9JxhkYQ24msw4jD2W+0lGaNruCOnFQrOYJYf/yuGQnEDBK634CNw89wPl9/ IX5DIUUaN55RXY7HoEpbPyO+y+KMruZc0oIq9wLpq0u543Mip5MSrRALXO6xOClY 7d5LgkH0p8jK6mCmUZLGX+2ZpA== -----END CERTIFICATE-----Generated at Wed Jul 29 14:19:02 2026 by rpki-client