$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json) Hash identifier: F6JDC0pCT0kAppKI00jMh/gXui8k5T2H5vpw9fahMFw= Subject key identifier: 0E:A3:59:D6:DA:0C:6F:B1:8B:16:B5:B4:68:8F:76:36:0E:7E:E6:05 Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft Manifest number: 0252 Signing time: Mon 27 Jul 2026 03:46:40 +0000 Manifest this update: Mon 27 Jul 2026 03:46:39 +0000 Manifest next update: Mon 03 Aug 2026 03:46:39 +0000 Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: RziJjzcwJWNz5STvVzhDlQAvhfu1e0p2I/vlL4mTQyM=) 2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: R5a6QMcMMM3E0jCOFVWDRS9Q/1dJvX8y7TpUdy+NpOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Validity Not Before: Jul 27 03:46:39 2026 GMT Not After : Aug 3 03:46:39 2026 GMT Subject: CN=6a66d4a0-4c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:08:57:db:34:c3:c9:64:1c:f0:f3:ca:c7:1b: 49:ce:b4:e4:dd:11:e6:88:8e:2a:ff:17:68:fa:ac: 04:b7:07:1e:c9:f8:89:e3:d0:71:d4:d9:94:81:4d: 11:1e:f7:60:3d:4c:88:ee:3b:85:5f:51:27:d6:a7: 91:88:60:d2:11:d8:e8:a4:3b:cf:a8:df:46:52:c1: 49:86:2b:24:ce:4b:ee:89:2d:c5:bf:9a:4c:15:58: 45:b5:20:2c:cc:d3:47:27:01:7e:f8:45:f9:c2:71: e2:10:00:f7:62:78:cc:bb:b0:f3:48:99:80:82:9f: fb:65:da:8c:42:e5:95:bb:3b:f7:6e:ee:b8:84:51: 87:3a:7d:dd:12:4d:18:47:b5:73:ed:e9:88:4b:d5: 0d:b4:df:9a:ee:6a:de:8c:b0:76:44:67:f3:7a:c9: 7b:27:32:ea:d8:5a:53:2e:3f:da:9f:b7:9b:3a:0e: 9c:15:0f:e2:2b:32:ef:e3:bb:27:6c:ec:46:4f:c1: d8:30:de:79:fb:59:c3:9e:a0:e2:4e:da:d5:45:9c: 03:63:e8:4e:77:b2:52:ad:8b:6a:37:52:74:85:35: 53:7b:ec:90:f6:2f:98:2a:cc:98:fc:86:50:e9:09: ae:4a:51:61:91:a1:65:d8:57:62:1b:81:1d:ce:97: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A3:59:D6:DA:0C:6F:B1:8B:16:B5:B4:68:8F:76:36:0E:7E:E6:05 X509v3 Authority Key Identifier: keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:06:fd:d7:ae:cb:e6:c3:87:97:13:0c:9a:29:f2:46:0b:8d: f9:a7:26:ec:2d:8d:e7:a1:ed:af:b5:00:9f:a0:7b:b3:69:81: ad:b8:94:a8:24:85:69:ef:d9:a8:83:24:33:77:d2:a3:ee:27: 9a:56:f3:56:8e:eb:f1:61:4a:12:40:a2:ab:21:a0:8a:da:ae: 61:f4:b2:05:ec:fe:d6:53:20:43:c3:24:e4:0f:e5:ac:9d:8c: 68:f8:5e:bb:47:a2:61:b8:ff:f9:01:89:ae:28:72:91:69:02: e4:bd:81:4d:c0:98:1c:89:d1:3a:f7:70:33:f7:16:47:1f:8c: 95:a0:c1:ab:de:24:af:a6:89:fb:93:b3:52:92:fb:9f:e6:64: cd:1c:57:08:e2:ec:8f:c2:07:ff:b1:93:49:8d:ee:42:dc:69: c7:a0:b2:17:1b:1f:d9:09:1d:21:aa:8b:d2:e7:33:c5:a0:15: e6:52:dc:ed:df:81:32:1a:29:64:dd:8c:d1:34:27:90:53:99: 6d:50:e5:2d:31:de:96:16:10:0e:62:16:a3:22:51:2f:a1:e7: 08:4a:34:d2:c8:0e:5c:82:8f:58:85:d9:d9:8c:4b:8f:08:29: 2c:c3:f9:ff:92:e4:ad:f4:14:3a:01:31:02:2f:a0:a2:0a:70: e1:88:d0:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3 ODkxN0UwRkQwHhcNMjYwNzI3MDM0NjM5WhcNMjYwODAzMDM0NjM5WjAYMRYwFAYD VQQDEw02YTY2ZDRhMC00Yzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQhX2zTDyWQc8PPKxxtJzrTk3RHmiI4q/xdo+qwEtwceyfiJ49Bx1NmUgU0R HvdgPUyI7juFX1En1qeRiGDSEdjopDvPqN9GUsFJhiskzkvuiS3Fv5pMFVhFtSAs zNNHJwF++EX5wnHiEAD3YnjMu7DzSJmAgp/7ZdqMQuWVuzv3bu64hFGHOn3dEk0Y R7Vz7emIS9UNtN+a7mrejLB2RGfzesl7JzLq2FpTLj/an7ebOg6cFQ/iKzLv47sn bOxGT8HYMN55+1nDnqDiTtrVRZwDY+hOd7JSrYtqN1J0hTVTe+yQ9i+YKsyY/IZQ 6QmuSlFhkaFl2FdiG4Edzpe8nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6jWdba DG+xixa1tGiPdjYOfuYFMB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqwb9167L5sOHlxMMminyRguN+acm7C2N56Htr7UAn6B7s2mBrbiUqCSFae/Z qIMkM3fSo+4nmlbzVo7r8WFKEkCiqyGgitquYfSyBez+1lMgQ8Mk5A/lrJ2MaPhe u0eiYbj/+QGJrihykWkC5L2BTcCYHInROvdwM/cWRx+MlaDBq94kr6aJ+5OzUpL7 n+ZkzRxXCOLsj8IH/7GTSY3uQtxpx6CyFxsf2QkdIaqL0uczxaAV5lLc7d+BMhop ZN2M0TQnkFOZbVDlLTHelhYQDmIWoyJRL6HnCEo00sgOXIKPWIXZ2YxLjwgpLMP5 /5LkrfQUOgExAi+gogpw4YjQ3g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:11:58 2026 by rpki-client