$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: L/KLXvL9U+X3RBmWczrL6Y5yCkrrYbnEWIaNknysRPM= Subject key identifier: 4F:4A:0D:0D:D4:9D:FA:F2:29:E7:11:CB:6A:FD:16:F7:A9:FC:D6:65 Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 046C Signing time: Wed 29 Jul 2026 00:57:24 +0000 Manifest this update: Wed 29 Jul 2026 00:57:23 +0000 Manifest next update: Wed 05 Aug 2026 00:57:23 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: //ysATuz+Hz/NJlcDTY979k7OgMNITiqhP5AsFd3+hw=) 2: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: htWOUsGCluqo+bDLkY52m9kGHamjAwjskMqRyVdOAVI=) 3: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: W4goqtPYzyLcCdBI7xc2Qn8MqCV+FsXgvw4MFdwTxhk=) 4: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: Xwopv44IWtrA47h99nFS1HcICRmL98rRNkBLnVkufOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Jul 29 00:57:23 2026 GMT Not After : Aug 5 00:57:23 2026 GMT Subject: CN=6a694ff4-5f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:55:1a:13:5f:62:fd:b7:6f:47:c7:67:05: a1:3b:ca:f3:d2:19:08:92:5c:f0:4a:a9:7e:11:04: 10:b7:47:b0:d8:48:0f:ef:cc:89:51:aa:6b:fc:59: fc:4d:b3:7d:34:78:b8:51:d0:63:e7:f1:bf:8b:ae: 83:04:58:24:8c:96:41:74:87:99:ab:9a:4c:2f:b5: 11:af:f9:6d:f5:ea:93:05:23:57:1f:b6:64:5c:7f: 61:93:8b:7f:0e:99:f7:45:1e:55:8d:42:a2:86:24: 8e:4b:e4:e2:e0:cf:03:a8:0d:f1:bc:ec:bc:1b:92: b0:3e:f1:20:30:85:a2:00:2e:9e:ff:28:29:20:3b: 1c:47:6a:55:46:47:e6:a5:23:56:b0:03:3c:1b:25: d5:0f:3c:41:e6:d0:5f:5b:dc:47:8b:17:34:a2:c9: 9b:a8:7b:1b:5f:66:d5:f5:46:45:fa:30:29:97:2d: 1e:d7:09:89:bd:98:2a:6e:8e:1d:60:51:6c:53:bd: 38:7a:65:fd:1f:46:a3:d3:d4:f2:8a:7b:85:d3:62: 99:97:08:5d:32:4f:89:13:76:66:cf:2d:26:83:bf: 10:d3:c6:e0:5c:7c:46:79:d3:3f:92:e2:6a:ce:70: 73:f3:42:a3:74:f8:4d:6e:e9:ea:a9:bd:b9:40:a9: 34:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4A:0D:0D:D4:9D:FA:F2:29:E7:11:CB:6A:FD:16:F7:A9:FC:D6:65 X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b3:2c:2d:c0:82:53:8e:18:ec:14:c4:ed:6b:19:4a:33:f7: 37:26:58:e3:90:84:d9:72:c1:8c:bf:b9:13:ea:30:57:b2:1d: 4d:a5:9f:41:b7:52:78:a0:66:6d:6b:7c:58:cd:3f:cf:c8:0b: 8a:bc:6b:aa:90:91:b8:b1:1f:55:8f:f9:c0:4c:80:a0:4a:8e: 4c:45:a1:9f:ac:6d:cc:23:6b:fa:e2:be:f3:22:bf:ac:c2:a6: c5:c8:74:c6:5c:22:df:5d:67:5f:66:91:8b:5a:af:ec:4d:44: 88:52:70:a5:b7:9a:ab:cd:ec:18:a5:b3:e7:8e:a0:fd:f5:6b: 79:94:46:4e:ee:e3:9d:7d:db:be:ad:9b:65:23:24:f4:2c:61: 7e:c4:a1:0e:32:5b:18:36:63:ee:cb:4a:bc:90:e6:23:cf:ec: 77:ed:ed:a7:9d:ef:c2:bc:ca:4e:a8:c4:6b:52:70:fc:6c:90: a5:c6:20:ce:26:3f:6f:6b:e9:bf:6b:11:cb:8e:ef:7d:92:9f: 38:48:6b:cb:89:db:55:b2:f3:05:c8:7e:86:92:83:2b:b9:68: 21:12:de:8e:23:1e:ba:14:a8:41:aa:43:18:d5:27:57:bf:6b: c5:e6:1b:01:7c:ea:a0:52:dc:91:1d:2e:2f:f0:af:f3:cb:f9: 3d:a4:77:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjYwNzI5MDA1NzIzWhcNMjYwODA1MDA1NzIzWjAYMRYwFAYD VQQDEw02YTY5NGZmNC01ZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GZVGhNfYv23b0fHZwWhO8rz0hkIklzwSql+EQQQt0ew2EgP78yJUapr/Fn8 TbN9NHi4UdBj5/G/i66DBFgkjJZBdIeZq5pML7URr/lt9eqTBSNXH7ZkXH9hk4t/ Dpn3RR5VjUKihiSOS+Ti4M8DqA3xvOy8G5KwPvEgMIWiAC6e/ygpIDscR2pVRkfm pSNWsAM8GyXVDzxB5tBfW9xHixc0osmbqHsbX2bV9UZF+jAply0e1wmJvZgqbo4d YFFsU704emX9H0aj09TyinuF02KZlwhdMk+JE3Zmzy0mg78Q08bgXHxGedM/kuJq znBz80KjdPhNbunqqb25QKk07QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9KDQ3U nfryKecRy2r9Fvep/NZlMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANrMsLcCCU44Y7BTE7WsZSjP3NyZY45CE2XLBjL+5E+owV7IdTaWfQbdSeKBm bWt8WM0/z8gLirxrqpCRuLEfVY/5wEyAoEqOTEWhn6xtzCNr+uK+8yK/rMKmxch0 xlwi311nX2aRi1qv7E1EiFJwpbeaq83sGKWz546g/fVreZRGTu7jnX3bvq2bZSMk 9CxhfsShDjJbGDZj7stKvJDmI8/sd+3tp53vwrzKTqjEa1Jw/GyQpcYgziY/b2vp v2sRy47vfZKfOEhry4nbVbLzBch+hpKDK7loIRLejiMeuhSoQapDGNUnV79rxeYb AXzqoFLckR0uL/Cv88v5PaR3cA== -----END CERTIFICATE-----Generated at Wed Jul 29 06:50:23 2026 by rpki-client