$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json) Hash identifier: qB/VHgpEaDFDAs3LH9GPQlI6UV3vGbMz2pZ0twfx0fI= Subject key identifier: A1:6C:CC:37:37:51:99:17:23:2C:20:72:6F:8B:EC:EF:5A:DC:F1:16 Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft Manifest number: 0222 Signing time: Mon 27 Jul 2026 04:19:03 +0000 Manifest this update: Mon 27 Jul 2026 04:19:02 +0000 Manifest next update: Mon 03 Aug 2026 04:19:02 +0000 Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: GaCehbOwHitU7rKpOc546HFTt2nWaJ3xJa7QRomQPfk=) 2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: mj1933/3n6toouA33PYerjmiVEAl8MHe43vblZwNmME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Validity Not Before: Jul 27 04:19:02 2026 GMT Not After : Aug 3 04:19:02 2026 GMT Subject: CN=6a66dc37-c9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:b3:06:d6:79:c9:0b:71:03:ae:f4:04:04: 59:cc:75:0e:1a:67:06:c9:af:0f:09:6f:56:76:3d: 31:88:1a:33:5c:66:a4:08:26:54:42:7f:a8:93:47: d6:b0:1e:69:30:c6:64:bb:75:68:56:85:04:11:03: 0a:5e:1b:2f:92:aa:ad:86:d9:fe:13:39:86:13:56: 20:6f:19:e7:60:af:d5:c1:07:80:00:fc:86:d6:22: 56:20:49:79:b2:42:61:8f:35:e7:de:53:36:fe:99: 3c:9d:5d:91:ee:f0:5e:6a:9b:a3:48:63:3f:b3:3c: 36:22:cb:08:79:fb:19:55:fd:9b:1e:6f:2f:00:cc: b3:f4:e0:da:a4:97:6e:4a:b1:2b:ad:d9:60:c2:a2: 99:a1:b0:bc:ac:3b:45:6a:8b:5b:f8:e0:87:d1:8a: cb:3e:05:6f:23:cd:93:61:af:12:40:f4:9a:a3:94: c3:71:51:49:91:4e:18:a3:43:e3:3a:2b:00:1e:fc: 60:4a:d3:e4:a2:fc:92:97:6a:e1:d4:d1:a2:f7:72: d7:21:e2:90:7c:70:59:ee:cf:82:da:ad:37:3e:e2: 96:91:9c:03:63:7f:5b:0e:20:d7:82:7a:63:df:1b: 9a:a4:4b:85:56:17:c2:63:5b:e5:91:fe:1e:0b:3a: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6C:CC:37:37:51:99:17:23:2C:20:72:6F:8B:EC:EF:5A:DC:F1:16 X509v3 Authority Key Identifier: keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e7:92:88:34:6b:ff:0a:ce:dd:92:a8:14:4c:f3:fa:c0:3f: 69:ea:7d:8b:dd:7c:35:96:16:8d:86:4e:78:00:7a:00:3d:85: 99:b1:f3:e4:95:2d:71:b7:d9:bf:8f:2f:4e:cc:31:6d:d2:30: 0b:4d:4f:43:45:fb:a1:bd:92:bd:95:9a:e8:92:05:e1:b9:fa: 1e:1f:82:d1:95:91:95:2e:87:c0:fd:0f:a8:0e:63:0c:93:a4: 36:32:fd:30:83:ef:13:09:54:23:94:15:5c:1b:59:fd:ba:0b: 25:18:81:1f:82:dc:b7:37:33:e5:c5:04:68:d1:c0:f1:f6:47: 71:a2:c7:53:d8:d4:8a:76:e4:29:a3:b7:69:02:6a:66:4a:a0: ea:de:11:69:2a:11:46:b4:20:d3:df:05:10:20:00:8b:69:71: 06:54:b8:3e:aa:40:95:05:f9:a0:4c:17:c8:d3:f5:5a:27:88: 66:ee:63:62:4e:c1:cd:83:1c:f3:47:01:90:94:1e:55:e8:1a: 46:0d:c6:8b:cc:6f:a4:b6:d4:94:52:ef:95:bf:49:b6:56:ca: 25:25:d6:ac:54:93:7c:6e:c1:19:6f:14:25:00:3b:74:f0:ac: 16:e7:a3:ca:d2:63:5b:22:b4:06:44:cf:00:17:9a:0b:6d:9d: 22:b7:cd:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMEExMTAvBgNVBAUTKDY4NDVBMzU3MDc1N0U2QkYyQzA0ODVBQzIxNzg5QkZG NTAwNTFFOUEwHhcNMjYwNzI3MDQxOTAyWhcNMjYwODAzMDQxOTAyWjAYMRYwFAYD VQQDEw02YTY2ZGMzNy1jOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZGzBtZ5yQtxA670BARZzHUOGmcGya8PCW9Wdj0xiBozXGakCCZUQn+ok0fW sB5pMMZku3VoVoUEEQMKXhsvkqqthtn+EzmGE1YgbxnnYK/VwQeAAPyG1iJWIEl5 skJhjzXn3lM2/pk8nV2R7vBeapujSGM/szw2IssIefsZVf2bHm8vAMyz9ODapJdu SrErrdlgwqKZobC8rDtFaotb+OCH0YrLPgVvI82TYa8SQPSao5TDcVFJkU4Yo0Pj OisAHvxgStPkovySl2rh1NGi93LXIeKQfHBZ7s+C2q03PuKWkZwDY39bDiDXgnpj 3xuapEuFVhfCY1vlkf4eCzqf5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFszDc3 UZkXIywgcm+L7O9a3PEWMB8GA1UdIwQYMBaAFGhFo1cHV+a/LASFrCF4m/9QBR6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAwQS9DQ0EzRUE5MjQ3 M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVyOHNCSVdzSVhpYl8xQUZI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAwQS9DQ0EzRUE5MjQ3M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVy OHNCSVdzSVhpYl8xQUZIcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk+eSiDRr/wrO3ZKoFEzz+sA/aep9i918NZYWjYZOeAB6AD2FmbHz5JUtcbfZ v48vTswxbdIwC01PQ0X7ob2SvZWa6JIF4bn6Hh+C0ZWRlS6HwP0PqA5jDJOkNjL9 MIPvEwlUI5QVXBtZ/boLJRiBH4Lctzcz5cUEaNHA8fZHcaLHU9jUinbkKaO3aQJq Zkqg6t4RaSoRRrQg098FECAAi2lxBlS4PqpAlQX5oEwXyNP1WieIZu5jYk7BzYMc 80cBkJQeVegaRg3Gi8xvpLbUlFLvlb9JtlbKJSXWrFSTfG7BGW8UJQA7dPCsFuej ytJjWyK0BkTPABeaC22dIrfNrg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:15 2026 by rpki-client