$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json) Hash identifier: 2SkAuHOyeqGoTTEbZK7S01zljCC0xDLRoJSXCc4yRlA= Subject key identifier: A3:95:0D:A6:7F:AD:63:6E:71:24:96:E8:0F:07:76:76:75:9E:8D:4F Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft Manifest number: 01A2 Signing time: Wed 29 Jul 2026 05:25:30 +0000 Manifest this update: Wed 29 Jul 2026 05:25:30 +0000 Manifest next update: Wed 05 Aug 2026 05:25:30 +0000 Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: BMET/jDTrV2nhYEj61KhiJLK3exRNpkidOYXnq6pbBE=) 2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: wvSHxxBQmLwE16AVo39FOmMXKWaWbJvTWAsomwhTSy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 05:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Validity Not Before: Jul 29 05:25:30 2026 GMT Not After : Aug 5 05:25:30 2026 GMT Subject: CN=6a698eca-db70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:b7:66:2d:6c:f8:ed:21:7b:3e:04:76:6b: c4:0a:70:94:7e:70:ec:73:1a:fc:1e:70:b0:14:ed: 65:44:32:64:db:2e:d7:7b:ae:52:36:47:59:dc:13: 3d:e8:04:da:0f:a1:6e:5f:73:59:a4:14:cc:25:19: b3:f3:a7:9d:ae:53:5a:bd:0f:1e:5a:29:39:13:28: 15:16:c8:02:d3:af:30:16:ba:92:1e:a6:01:39:2f: 13:04:3a:47:0a:6f:e9:71:9e:60:07:c1:fe:14:fe: 17:1a:4a:d0:4e:aa:a2:8c:19:53:aa:b6:ea:be:c2: d9:b0:38:c3:b5:70:24:81:8b:8c:93:24:4a:d9:a2: 02:e8:26:6d:f4:73:f4:53:cf:22:06:45:6c:ad:a9: 9f:09:1f:00:45:c5:0e:27:07:f8:d2:1d:0b:e2:1e: 39:bf:8c:aa:82:50:25:d1:9d:4c:e8:6d:94:f5:b1: 93:af:33:1d:0a:11:2d:f6:14:74:d8:03:69:81:88: 42:a8:00:a2:a6:d4:69:87:ef:1f:60:1d:25:f1:d9: 84:9a:d6:a0:97:18:ef:f2:62:72:d9:2c:41:97:24: d7:54:85:fd:ea:04:22:4e:76:82:23:f5:2b:de:13: 70:09:1f:39:c6:59:8e:93:9c:eb:a1:26:e2:1f:a1: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:95:0D:A6:7F:AD:63:6E:71:24:96:E8:0F:07:76:76:75:9E:8D:4F X509v3 Authority Key Identifier: keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0c:29:cb:48:bf:15:63:8a:b1:91:9b:9d:96:fc:fc:51:c1: 34:2c:6c:50:c4:f3:6f:4e:49:67:49:ea:86:9e:bb:e2:87:64: f7:7f:bf:ec:38:71:e6:7d:f8:97:3b:b8:5f:3d:6e:4a:b2:87: 4e:b1:01:59:3c:26:96:87:ae:9f:dc:4b:8e:96:af:e1:b4:b8: 9c:4d:11:78:c8:7b:a1:29:f8:db:cd:3c:d6:85:b2:ad:57:16: 6f:80:0e:69:37:ff:f9:a9:8b:a6:eb:94:1e:8a:fd:b1:f1:ea: a0:95:d7:41:e2:d4:ba:c3:98:7f:c6:8e:59:db:2f:23:94:db: b0:7d:1b:1a:de:6d:93:a7:16:ba:19:98:7d:53:e7:56:31:ca: 11:e0:5c:ee:b5:0e:70:68:e8:4a:08:52:2d:13:91:c3:91:fa: 7e:72:c9:a9:08:fe:cb:cf:c9:4e:5f:24:41:4f:dd:51:af:c0: 81:c3:6b:03:1a:3b:57:07:10:15:d4:6a:f4:f1:e6:b1:d7:c1: bb:81:5a:8f:f2:58:bf:34:74:c8:24:01:58:ba:ed:d4:a9:08: 35:26:05:a3:c4:53:9f:b6:bc:91:8b:97:99:d6:ea:7b:b4:2c: 83:bf:17:02:cb:02:e5:db:69:3d:bd:db:c9:d0:81:d8:e0:bb: bb:48:dc:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCNDcxMTAvBgNVBAUTKDVERjU2NkQ3NjIzNjdDMjhDN0YzRjEyNTYxQjQ3MTZC OENBMUI5NjYwHhcNMjYwNzI5MDUyNTMwWhcNMjYwODA1MDUyNTMwWjAYMRYwFAYD VQQDEw02YTY5OGVjYS1kYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoa3Zi1s+O0hez4EdmvECnCUfnDscxr8HnCwFO1lRDJk2y7Xe65SNkdZ3BM9 6ATaD6FuX3NZpBTMJRmz86edrlNavQ8eWik5EygVFsgC068wFrqSHqYBOS8TBDpH Cm/pcZ5gB8H+FP4XGkrQTqqijBlTqrbqvsLZsDjDtXAkgYuMkyRK2aIC6CZt9HP0 U88iBkVsramfCR8ARcUOJwf40h0L4h45v4yqglAl0Z1M6G2U9bGTrzMdChEt9hR0 2ANpgYhCqACiptRph+8fYB0l8dmEmtaglxjv8mJy2SxBlyTXVIX96gQiTnaCI/Ur 3hNwCR85xlmOk5zroSbiH6FDkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOVDaZ/ rWNucSSW6A8HdnZ1no1PMB8GA1UdIwQYMBaAFF31ZtdiNnwox/PxJWG0cWuMoblm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0I0Ny84NzFCOTI5NDBG QTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZDakg4X0VsWWJSeGE0eWh1 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmVm0xMkkyZkNqSDhfRWxZYlJ4YTR5aHVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0I0Ny84NzFCOTI5NDBGQTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZD akg4X0VsWWJSeGE0eWh1V1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjwwpy0i/FWOKsZGbnZb8/FHBNCxsUMTzb05JZ0nqhp674odk93+/7Dhx5n34 lzu4Xz1uSrKHTrEBWTwmloeun9xLjpav4bS4nE0ReMh7oSn428081oWyrVcWb4AO aTf/+amLpuuUHor9sfHqoJXXQeLUusOYf8aOWdsvI5TbsH0bGt5tk6cWuhmYfVPn VjHKEeBc7rUOcGjoSghSLRORw5H6fnLJqQj+y8/JTl8kQU/dUa/AgcNrAxo7VwcQ FdRq9PHmsdfBu4Faj/JYvzR0yCQBWLrt1KkINSYFo8RTn7a8kYuXmdbqe7Qsg78X AssC5dtpPb3bydCB2OC7u0jc5g== -----END CERTIFICATE-----Generated at Wed Jul 29 11:46:59 2026 by rpki-client