$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft File: XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json) Hash identifier: jO0GrUqSGv8jKJ8bEhPhqbQKTtsF1sn/1+u5I6mn6/E= Subject key identifier: F7:A7:BC:99:40:2C:19:81:46:2E:1C:62:F7:A5:EE:DF:A3:14:DB:62 Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft Manifest number: 0821 Signing time: Sun 26 Jul 2026 21:46:54 +0000 Manifest this update: Sun 26 Jul 2026 21:46:53 +0000 Manifest next update: Sun 02 Aug 2026 21:46:53 +0000 Files and hashes: 1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: gXwwdv3B9fhHnNFuwcJuwfOOp71kIZvXpt/4mxA2G74=) 2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: A+lqHHILRck/15Y7Xtw67As0ESAMbuZbfeWoqwALbWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Validity Not Before: Jul 26 21:46:53 2026 GMT Not After : Aug 2 21:46:53 2026 GMT Subject: CN=6a66804d-3034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:e3:98:da:69:ce:9a:c7:4c:7c:c6:94:bd: 47:8b:24:b6:9f:ee:3a:54:8c:26:04:4f:06:89:9c: 77:52:2d:55:3c:32:82:35:d4:a7:61:c2:49:28:d9: 93:c9:34:f9:96:a7:5a:06:9a:df:e1:ff:49:ed:49: 9b:d8:89:52:bb:6a:3a:9c:80:e7:98:9c:9e:d8:3f: c0:bd:21:2a:81:da:03:3f:e0:55:d2:73:2a:fb:9c: 72:c6:67:22:a9:9e:82:7d:b2:7c:db:9e:f3:0e:33: d1:96:25:cb:4b:6a:e9:ab:ed:15:80:1d:dd:2b:d7: 3b:03:f5:05:fd:c9:47:62:83:84:79:c2:2f:8a:42: 4a:bb:a5:a6:53:bc:2f:75:3c:8c:7d:19:0c:95:80: bd:6e:3e:39:a9:9c:27:71:6b:89:06:82:a1:ed:c6: bb:f2:ef:81:65:ad:b0:08:f1:ab:f4:fa:e3:4c:de: c6:57:3f:de:68:f3:db:55:20:41:de:2b:66:5f:70: 33:40:b9:20:ab:7f:23:e7:3b:4e:4b:ff:89:62:81: ec:d7:94:01:17:c7:ca:49:31:37:88:22:b9:30:eb: 5d:6e:f4:52:25:d5:4d:f0:75:83:f8:d8:53:61:aa: 39:26:7e:ba:b1:8e:90:f8:8b:be:4e:15:15:e4:1c: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A7:BC:99:40:2C:19:81:46:2E:1C:62:F7:A5:EE:DF:A3:14:DB:62 X509v3 Authority Key Identifier: keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:73:64:7b:7c:d5:eb:7b:0e:32:8d:bc:bc:3b:52:d3:6d:a2: 6d:02:f2:da:f5:8c:17:8d:38:93:01:56:a2:1c:d7:ab:94:4b: 27:83:f4:b6:93:dc:65:d3:2b:72:01:f0:f9:8f:6a:20:c0:9d: 7c:d4:ce:04:65:77:41:79:4a:2b:3c:c1:c0:5b:9e:33:ec:df: a0:15:67:f2:30:e9:7e:64:89:23:4a:f4:20:57:5d:b8:eb:1e: be:ee:1d:18:d3:99:08:e5:6d:ef:34:b1:d5:bc:74:2d:8c:2c: 6f:db:29:3a:dd:6d:42:6d:ea:90:e1:2f:9e:29:1a:f2:3f:d9: 86:ef:c8:4c:07:3a:f5:86:26:4e:9e:bd:17:f9:7a:32:00:bf: 80:4f:65:d4:21:d7:03:2f:ba:af:d1:93:2c:41:76:ef:30:f3: 85:1c:61:65:41:49:d0:d3:ef:34:da:40:9c:89:6b:93:8d:87: 07:ff:0f:71:f5:66:1d:69:a7:6e:86:e0:26:c3:4c:48:cb:a1: fe:da:b3:37:09:71:60:0e:57:6c:21:70:c5:53:bd:f9:92:97: 69:97:a7:07:57:2b:71:89:39:88:ec:31:89:e5:50:fa:6a:ef: 0d:69:2c:9b:5f:96:db:d4:6a:84:26:6d:4b:af:0d:b3:c0:c8: a5:4a:fe:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3 QzcyMDVBQTkwHhcNMjYwNzI2MjE0NjUzWhcNMjYwODAyMjE0NjUzWjAYMRYwFAYD VQQDEw02YTY2ODA0ZC0zMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cnjmNppzprHTHzGlL1HiyS2n+46VIwmBE8GiZx3Ui1VPDKCNdSnYcJJKNmT yTT5lqdaBprf4f9J7Umb2IlSu2o6nIDnmJye2D/AvSEqgdoDP+BV0nMq+5xyxmci qZ6CfbJ8257zDjPRliXLS2rpq+0VgB3dK9c7A/UF/clHYoOEecIvikJKu6WmU7wv dTyMfRkMlYC9bj45qZwncWuJBoKh7ca78u+BZa2wCPGr9PrjTN7GVz/eaPPbVSBB 3itmX3AzQLkgq38j5ztOS/+JYoHs15QBF8fKSTE3iCK5MOtdbvRSJdVN8HWD+NhT Yao5Jn66sY6Q+Iu+ThUV5ByHQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPenvJlA LBmBRi4cYvel7t+jFNtiMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5 MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3OC9GMUY0RDNDRTI5MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5 TXBncUxMVGVWUE44Y2dXcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFHNke3zV63sOMo28vDtS022ibQLy2vWMF404kwFWohzXq5RLJ4P0tpPcZdMr cgHw+Y9qIMCdfNTOBGV3QXlKKzzBwFueM+zfoBVn8jDpfmSJI0r0IFdduOsevu4d GNOZCOVt7zSx1bx0LYwsb9spOt1tQm3qkOEvnika8j/Zhu/ITAc69YYmTp69F/l6 MgC/gE9l1CHXAy+6r9GTLEF27zDzhRxhZUFJ0NPvNNpAnIlrk42HB/8PcfVmHWmn bobgJsNMSMuh/tqzNwlxYA5XbCFwxVO9+ZKXaZenB1crcYk5iOwxieVQ+mrvDWks m1+W29RqhCZtS68Ns8DIpUr+xg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:26:02 2026 by rpki-client