$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json) Hash identifier: TCEV3xz2vmLYp5EhrRhhsyEaFOT2gnbNeHuhWDDhz5Y= Subject key identifier: F3:92:8D:0A:8B:3D:79:4F:12:CD:FA:0F:22:E4:88:E5:98:1E:A8:0B Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft Manifest number: 02C2 Signing time: Mon 27 Jul 2026 02:35:08 +0000 Manifest this update: Mon 27 Jul 2026 02:35:07 +0000 Manifest next update: Mon 03 Aug 2026 02:35:07 +0000 Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: i9w/iAK2G+peTCGHkjNfZ4l7bWXYK0jqF0P2BYd601g=) 2: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: mF+0oU+0n20Cgq5ko570coLg0lSVzI4jtUFqm1rkd8w=) 3: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: 18O7Lp0T09zqzj1uz2UvboEJEAG8f//RjAML5YNM31g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Validity Not Before: Jul 27 02:35:07 2026 GMT Not After : Aug 3 02:35:07 2026 GMT Subject: CN=6a66c3dc-6264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:a2:96:01:f3:ce:51:3f:bd:2f:fe:d7:d9: 79:2d:5d:93:f1:c9:44:98:7d:17:1c:8f:e1:9e:ed: c1:fa:c4:eb:4d:33:d8:05:b0:9f:8e:d2:bd:0d:4b: 05:88:f6:0f:b5:37:56:09:29:63:8e:ee:ee:e7:6e: 6f:54:c3:92:39:39:25:78:9b:93:dc:e5:c1:a6:19: 05:e1:77:e3:7a:d4:86:13:60:43:e8:ee:d7:4b:fe: f8:ae:7b:64:ad:c7:f9:80:af:18:3e:f3:de:f0:40: 79:01:75:7d:63:ca:c8:53:48:ee:49:d3:f0:11:9d: 3a:ac:54:06:77:ff:a9:a4:dc:f5:d7:df:7b:b6:c4: 2a:2b:cc:cb:db:46:77:a5:56:82:d1:d0:cc:bd:e0: 47:72:7d:0f:cf:34:be:34:d0:01:b0:6b:29:eb:71: d0:5e:4a:96:1c:e6:6e:e2:97:c7:f4:f7:c4:a2:31: 1b:4b:4c:9a:96:f6:4e:7f:27:7f:a7:6a:af:62:fb: 93:40:73:00:bd:5b:94:8f:a4:70:95:b1:e7:41:9a: 68:cc:a7:02:c3:7a:cc:4b:bc:52:45:2c:9b:13:e5: e7:63:2a:df:0f:06:2f:1f:43:75:1a:60:2f:d3:13: f4:64:62:8b:ff:0f:74:f6:8b:6a:8a:56:0c:ae:70: ad:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:92:8D:0A:8B:3D:79:4F:12:CD:FA:0F:22:E4:88:E5:98:1E:A8:0B X509v3 Authority Key Identifier: keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:94:de:5a:75:fc:24:a3:48:83:29:86:64:2e:f6:ca:99:3e: 5c:b7:7a:ec:48:50:b7:13:a5:11:46:92:d9:ab:15:4d:69:a8: 69:08:1b:02:75:d8:4d:29:bb:80:fb:bb:6b:75:34:d9:d4:5c: bd:32:d7:16:19:e3:81:c0:09:df:53:89:4d:b3:8c:40:7e:1e: 84:17:1e:67:30:9c:c4:64:9b:39:48:2a:12:4a:de:d4:1a:e8: 0a:1f:2d:c0:2c:cf:4d:34:be:34:59:55:59:f4:4f:12:15:e2: 6d:e9:1a:9e:5f:60:27:29:6c:dd:cb:e8:60:7c:b9:4c:ed:63: 1f:42:db:4f:47:76:e7:f6:16:08:e1:d1:16:e7:95:60:1f:27: bf:28:3c:79:8f:e0:e3:47:d4:52:91:0a:e4:e8:87:19:ac:a8: 66:25:e1:93:32:3a:ca:bf:d7:69:d7:51:7e:5b:50:0c:44:a8: 95:65:de:99:45:95:cd:4c:2c:e1:9b:d6:c5:3e:fb:b5:20:d1: b9:de:da:24:1c:c6:6c:90:e9:30:c4:b5:c4:c5:a6:bb:a1:ad: ea:9d:7c:0b:75:10:6c:81:5c:49:65:64:b8:2a:65:66:fa:9d: ac:6c:b4:f6:e1:1f:fe:8e:92:32:59:84:98:02:53:0e:41:7c: eb:2d:a8:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx NTAwQURDNzYwHhcNMjYwNzI3MDIzNTA3WhcNMjYwODAzMDIzNTA3WjAYMRYwFAYD VQQDEw02YTY2YzNkYy02MjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVyilgHzzlE/vS/+19l5LV2T8clEmH0XHI/hnu3B+sTrTTPYBbCfjtK9DUsF iPYPtTdWCSljju7u525vVMOSOTkleJuT3OXBphkF4XfjetSGE2BD6O7XS/74rntk rcf5gK8YPvPe8EB5AXV9Y8rIU0juSdPwEZ06rFQGd/+ppNz11997tsQqK8zL20Z3 pVaC0dDMveBHcn0PzzS+NNABsGsp63HQXkqWHOZu4pfH9PfEojEbS0yalvZOfyd/ p2qvYvuTQHMAvVuUj6RwlbHnQZpozKcCw3rMS7xSRSybE+XnYyrfDwYvH0N1GmAv 0xP0ZGKL/w909otqilYMrnCtPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOSjQqL PXlPEs36DyLkiOWYHqgLMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRB SXhzc1N4TklHLUVWQUszSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOZTeWnX8JKNIgymGZC72ypk+XLd67EhQtxOlEUaS2asVTWmoaQgbAnXYTSm7 gPu7a3U02dRcvTLXFhnjgcAJ31OJTbOMQH4ehBceZzCcxGSbOUgqEkre1BroCh8t wCzPTTS+NFlVWfRPEhXibekanl9gJyls3cvoYHy5TO1jH0LbT0d25/YWCOHRFueV YB8nvyg8eY/g40fUUpEK5OiHGayoZiXhkzI6yr/XaddRfltQDESolWXemUWVzUws 4ZvWxT77tSDRud7aJBzGbJDpMMS1xMWmu6Gt6p18C3UQbIFcSWVkuCplZvqdrGy0 9uEf/o6SMlmEmAJTDkF86y2odg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:55:45 2026 by rpki-client