$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: dFa7CaB/T222PUALiZYPDebziEYb2kB18C9V194VXDY= Subject key identifier: 5D:7A:B0:DF:08:F6:B4:81:23:79:58:55:74:6D:19:09:9B:CE:F1:63 Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 089F Signing time: Tue 28 Jul 2026 21:00:23 +0000 Manifest this update: Tue 28 Jul 2026 21:00:22 +0000 Manifest next update: Tue 04 Aug 2026 21:00:22 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: lK4q+jhF44jISXAeUo4MCmWk2wi7inuTLMyBq0Fexak=) 2: DFBB127A1FD911F18338B27E3F3D8C67.roa (hash: /SYY7WeR+aA+gbxGrf5qM5FajASTqqxf81wX3CNIlA0=) 3: B08421401D2C11F1AC765BFB153D8C67.roa (hash: TAh33/TweOL0Zp6UZEAPfCKrE9xE2i8YoGrm5wZloBU=) 4: 8FB8171E1D2C11F18BD061F8153D8C67.roa (hash: 0P5+1QsMe2etRxHYksVVwvkONUIo2rGlANvWQyHYTKo=) 5: 137DD3E8E60C11F0A18B1E57676F56BC.roa (hash: uV78r469K9kpBYYycBaJqz/OEoI2cFdGsz5vaAFm0kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Jul 28 21:00:22 2026 GMT Not After : Aug 4 21:00:22 2026 GMT Subject: CN=6a691867-0719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:05:d9:bf:b9:e3:1a:bb:f8:22:97:bf:1d: 70:d1:06:cd:c6:2f:1c:f7:4b:a7:78:9d:4f:39:2f: 68:c3:81:51:e5:42:53:fb:a4:9b:f1:8c:46:5f:e4: b0:ef:c5:31:27:5e:84:f0:32:57:9c:e5:b1:da:66: 3c:fc:50:9a:95:c4:9a:86:55:de:56:ba:bf:36:e8: 96:61:19:bb:64:7a:0e:52:c3:3c:1c:bb:2f:20:8d: 79:f6:23:53:03:9f:bb:ca:b0:be:d6:1b:30:a4:85: 0b:14:3e:c9:af:14:e1:17:21:af:1a:a5:f9:8c:27: ee:be:23:56:94:fb:dd:82:73:f6:20:1f:ba:53:f1: 07:67:0e:30:ed:e0:b5:f8:a5:e4:57:89:e7:fe:d9: cb:ab:5f:8a:a9:2a:f7:d5:e2:9e:d2:e4:4f:7d:47: 82:41:b7:75:7d:b1:a9:fc:bb:7b:af:8b:6a:16:8f: bd:27:a7:f3:37:52:b9:79:15:b1:e4:6f:b5:7b:9e: 6c:ae:d8:a9:fc:ea:ab:91:f5:14:60:13:e3:14:03: 53:f6:a3:e0:86:fc:03:06:9e:bb:f2:d6:40:97:d1: b1:42:b0:ad:f0:13:0b:98:5b:d5:d7:b4:4e:72:f5: 27:19:94:0f:00:2e:da:3f:e8:a9:62:ae:c5:eb:93: ea:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7A:B0:DF:08:F6:B4:81:23:79:58:55:74:6D:19:09:9B:CE:F1:63 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:db:f9:ce:b2:32:2d:23:cd:e5:3b:10:8e:72:64:e4:59:fa: ce:af:76:c2:bc:de:06:98:40:c3:0e:e0:3b:5e:bf:33:33:07: 08:b9:88:f2:cf:21:88:fb:14:3e:8a:17:8f:08:02:2c:e7:32: 6c:7b:42:a1:11:af:de:45:8a:24:05:11:9c:6e:3e:2e:50:51: d3:5e:ba:f9:36:e9:45:e0:0c:4e:4f:69:62:98:13:64:93:06: 1c:cd:0e:1f:35:d5:6a:0a:0c:4a:7d:6a:78:cb:84:ab:4c:74: b8:7e:57:b0:b1:b1:65:22:fe:5b:91:c9:ef:c8:b9:f0:6d:9d: 81:65:bc:8e:19:dc:dd:f0:0d:7b:19:e6:5a:59:3e:1d:43:27: f2:a4:99:05:01:50:59:61:34:28:74:87:a6:9d:94:42:bc:3e: 4e:75:04:ea:c2:10:81:a2:ee:11:82:7a:bb:76:7f:d0:a3:64: ed:1b:9a:fa:89:23:ba:4e:e0:54:81:43:d0:89:fe:37:9f:95: 6d:5f:78:ee:81:94:08:88:76:11:6b:dc:6c:9a:f7:8f:fc:43: b3:ef:7e:1c:d1:6f:a8:1d:55:11:ea:ba:d6:08:cf:f3:64:c5: ff:f1:51:e6:15:18:b8:1a:77:a5:ad:c1:3a:fa:e4:fe:dd:9f: f8:69:ac:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjYwNzI4MjEwMDIyWhcNMjYwODA0MjEwMDIyWjAYMRYwFAYD VQQDEw02YTY5MTg2Ny0wNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmMF2b+54xq7+CKXvx1w0QbNxi8c90uneJ1POS9ow4FR5UJT+6Sb8YxGX+Sw 78UxJ16E8DJXnOWx2mY8/FCalcSahlXeVrq/NuiWYRm7ZHoOUsM8HLsvII159iNT A5+7yrC+1hswpIULFD7JrxThFyGvGqX5jCfuviNWlPvdgnP2IB+6U/EHZw4w7eC1 +KXkV4nn/tnLq1+KqSr31eKe0uRPfUeCQbd1fbGp/Lt7r4tqFo+9J6fzN1K5eRWx 5G+1e55srtip/OqrkfUUYBPjFANT9qPghvwDBp678tZAl9GxQrCt8BMLmFvV17RO cvUnGZQPAC7aP+ipYq7F65Pq+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF16sN8I 9rSBI3lYVXRtGQmbzvFjMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPtv5zrIyLSPN5TsQjnJk5Fn6zq92wrzeBphAww7gO16/MzMHCLmI8s8hiPsU PooXjwgCLOcybHtCoRGv3kWKJAURnG4+LlBR0166+TbpReAMTk9pYpgTZJMGHM0O HzXVagoMSn1qeMuEq0x0uH5XsLGxZSL+W5HJ78i58G2dgWW8jhnc3fANexnmWlk+ HUMn8qSZBQFQWWE0KHSHpp2UQrw+TnUE6sIQgaLuEYJ6u3Z/0KNk7Rua+okjuk7g VIFD0In+N5+VbV947oGUCIh2EWvcbJr3j/xDs+9+HNFvqB1VEeq61gjP82TF//FR 5hUYuBp3pa3BOvrk/t2f+Gmslw== -----END CERTIFICATE-----Generated at Wed Jul 29 02:13:04 2026 by rpki-client