$ rpki-client -vvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft File: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft (raw, json) Hash identifier: W5jEfwxftYklHFK/WBMMX61oNXbzq4t2WL45llwxtqk= Subject key identifier: 3C:D2:8B:2E:FC:A2:43:89:9F:C8:E8:5D:31:A1:33:6F:DB:BC:FB:AF Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Certificate serial: 0EA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft Manifest number: 0E82 Signing time: Sun 26 Jul 2026 17:59:52 +0000 Manifest this update: Sun 26 Jul 2026 17:59:51 +0000 Manifest next update: Sun 02 Aug 2026 17:59:51 +0000 Files and hashes: 1: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl (hash: N90gurc6T8AAI5zFoJFWC8GvxFogG+Ax3FVZ+9jomcs=) 2: CD22D13C6DEC11F19E45C9465DA30FBC.roa (hash: ZShJ4AD7l89NGkQj9YglmhWVaniaXpNAe1m+z6iRJIw=) 3: F70C0B5E4A8C11F18179024696EE528E.roa (hash: BcPA+kBAWewJTEaX67GywprKBkDhJopRXac8MDudoCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 17:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3748 (0xea4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F521, serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Validity Not Before: Jul 26 17:59:51 2026 GMT Not After : Aug 2 17:59:51 2026 GMT Subject: CN=6a664b18-c211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:1b:70:49:f6:45:4e:88:93:e5:f2:58:1a: 43:b2:5c:d4:f9:d9:d8:ef:82:b9:ed:5e:2c:4d:a5: 0b:f1:e9:3d:e3:70:42:58:03:6c:01:fc:04:bf:27: d0:b6:b1:55:77:88:f8:04:6b:7e:67:48:db:dc:68: 97:21:37:26:c2:03:04:5f:12:67:58:96:b5:20:ad: fb:a6:f9:48:9b:8d:a3:c8:20:b9:12:28:c1:70:d4: 83:7d:9e:31:26:f3:c0:fa:f6:90:25:ea:7d:04:06: 07:de:43:2c:eb:70:ae:74:bf:82:4c:00:05:97:a9: 0d:43:99:2d:9c:07:22:55:ac:79:69:60:e4:89:bc: a8:27:bb:5a:01:e6:21:49:56:d5:9a:ab:fa:f2:c8: 6a:d9:87:3e:7e:e0:3b:9a:a4:4a:2f:91:b2:4a:4c: 05:c3:fb:44:24:6c:49:e5:1a:48:28:c5:0e:b5:3b: d1:8c:de:88:0b:c7:4e:0b:50:87:05:e6:ef:5a:c2: 8a:cf:e7:ff:67:88:03:83:c3:f0:e4:00:7f:ba:2c: 39:f2:b6:09:db:70:cf:35:ac:45:8b:32:a1:e0:89: d5:8e:b2:3c:c9:99:ef:41:16:ba:93:ab:1a:f2:e0: c9:6f:19:28:8e:f2:24:7e:d3:e6:b3:48:22:13:3d: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D2:8B:2E:FC:A2:43:89:9F:C8:E8:5D:31:A1:33:6F:DB:BC:FB:AF X509v3 Authority Key Identifier: keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c9:71:dd:a8:2d:d2:d4:db:f2:8a:66:80:cb:eb:52:7b:b3: b9:98:cc:72:e7:6e:ca:2b:1a:9d:56:4e:f9:ec:d8:89:c6:1b: 4f:b1:27:c1:10:eb:0a:cc:5e:00:01:06:dd:29:8b:3c:4f:f9: 4c:f1:43:95:09:2b:f3:8a:62:6a:5e:cc:ab:0a:ce:57:f0:9f: ba:9a:7f:72:0e:9c:cb:01:b5:07:c5:86:83:56:07:64:7e:7a: 70:64:ee:dd:c8:8d:bd:1b:10:f9:02:ae:43:88:01:76:8e:37: 4d:ae:0b:be:23:26:1e:4c:7e:ee:8c:bb:e5:e9:5a:61:a7:e6: a6:ce:1c:c4:98:28:7e:5f:37:fe:f0:18:62:4f:57:32:4e:c2: bc:ca:21:a0:00:f1:19:a9:43:27:63:b5:6e:81:77:a8:ec:fc: d1:be:33:18:b9:e4:9a:9b:29:7e:88:8b:b0:08:d7:54:3d:35: 6f:73:10:5a:f9:53:7a:ce:0a:32:23:fb:cd:e5:04:d1:6e:a1: cc:09:82:68:a0:b3:07:a3:71:55:77:55:2d:bb:e6:d2:bb:fb: c0:34:7e:6a:aa:78:5e:af:22:d6:13:e3:e6:b9:ac:bd:64:7b: 21:6e:92:60:d5:14:ed:ad:07:20:3d:c3:a2:b7:4c:8e:c6:ff: 07:b2:ef:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1MjExMTAvBgNVBAUTKDI5NzY4NzY3NTNENjU1NjJBN0NBODVFM0U5RThERjc1 MDc5N0M5NDgwHhcNMjYwNzI2MTc1OTUxWhcNMjYwODAyMTc1OTUxWjAYMRYwFAYD VQQDEw02YTY2NGIxOC1jMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoN4bcEn2RU6Ik+XyWBpDslzU+dnY74K57V4sTaUL8ek943BCWANsAfwEvyfQ trFVd4j4BGt+Z0jb3GiXITcmwgMEXxJnWJa1IK37pvlIm42jyCC5EijBcNSDfZ4x JvPA+vaQJep9BAYH3kMs63CudL+CTAAFl6kNQ5ktnAciVax5aWDkibyoJ7taAeYh SVbVmqv68shq2Yc+fuA7mqRKL5GySkwFw/tEJGxJ5RpIKMUOtTvRjN6IC8dOC1CH BebvWsKKz+f/Z4gDg8Pw5AB/uiw58rYJ23DPNaxFizKh4InVjrI8yZnvQRa6k6sa 8uDJbxkojvIkftPms0giEz1KCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzSiy78 okOJn8joXTGhM2/bvPuvMB8GA1UdIwQYMBaAFCl2h2dT1lVip8qF4+no33UHl8lI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjUyMS8yMTY1ODgyMEM2 N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZXS255b1hqNmVqZmRRZVh5 VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYYUhaMVBXVldLbnlvWGo2ZWpmZFFlWHlVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjUyMS8yMTY1ODgyMEM2N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZX S255b1hqNmVqZmRRZVh5VWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX8lx3agt0tTb8opmgMvrUnuzuZjMcuduyisanVZO+ezYicYbT7EnwRDrCsxe AAEG3SmLPE/5TPFDlQkr84pial7MqwrOV/Cfupp/cg6cywG1B8WGg1YHZH56cGTu 3ciNvRsQ+QKuQ4gBdo43Ta4LviMmHkx+7oy75elaYafmps4cxJgofl83/vAYYk9X Mk7CvMohoADxGalDJ2O1boF3qOz80b4zGLnkmpspfoiLsAjXVD01b3MQWvlTes4K MiP7zeUE0W6hzAmCaKCzB6NxVXdVLbvm0rv7wDR+aqp4Xq8i1hPj5rmsvWR7IW6S YNUU7a0HID3DordMjsb/B7LvcQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:36:28 2026 by rpki-client