$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft File: b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json) Hash identifier: gqkIZpg8LdenoD0ICnAlPNy/CVGS0CDOR+XvkhL1v8s= Subject key identifier: 70:CB:CA:FE:91:22:09:C1:3C:18:6F:A1:8B:BA:0B:37:2F:87:E4:10 Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 Certificate issuer: /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft Manifest number: C2 Signing time: Mon 27 Jul 2026 09:03:27 +0000 Manifest this update: Mon 27 Jul 2026 09:03:26 +0000 Manifest next update: Mon 03 Aug 2026 09:03:26 +0000 Files and hashes: 1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: ed097On8CpbptddRlYzzHsSD+SHeM0bmB48mBT+3kOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3 Validity Not Before: Jul 27 09:03:26 2026 GMT Not After : Aug 3 09:03:26 2026 GMT Subject: CN=6a671edf-5339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:6d:39:79:9a:e1:61:37:ca:75:82:8c:21: 2a:ef:b8:04:86:10:4e:4b:65:de:db:7e:f4:28:fe: fe:1d:d9:63:c5:2a:e5:32:c9:d4:45:17:1c:4c:de: 11:ce:15:6d:fa:30:31:a3:71:40:c9:68:bb:c9:19: ce:55:e4:54:3e:48:e5:8f:4e:e0:d8:3a:79:50:53: 04:e4:8b:14:ca:13:81:bd:45:10:e7:cd:15:28:e8: 05:1a:48:f7:a9:00:f8:e0:e8:bd:b4:1d:49:75:98: 93:4c:22:83:08:aa:00:fb:b0:2d:81:a7:f8:fd:fa: e6:73:a4:27:84:fe:93:e1:e8:8f:9a:8d:a3:9e:a7: 1b:b7:f2:39:0c:ca:cc:28:e6:bd:65:24:e1:c0:4a: 3e:dd:04:c2:34:64:30:9d:b8:83:94:1e:fa:14:5e: e1:75:c1:14:7b:a3:70:df:f2:c3:03:9e:5d:f6:bb: c2:97:58:4d:8d:b8:9b:76:40:4f:13:dc:e8:f3:5f: 9e:21:f5:62:5d:95:5e:59:f9:be:2e:5a:67:5a:8c: c6:c0:f4:6d:bd:65:10:96:a0:2f:2d:5e:25:65:5d: 8a:fd:fb:67:50:ff:8a:68:ef:16:cb:6e:03:34:34: 5a:1b:bf:8d:cb:2f:c8:9b:49:99:03:42:39:fc:f1: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:CA:FE:91:22:09:C1:3C:18:6F:A1:8B:BA:0B:37:2F:87:E4:10 X509v3 Authority Key Identifier: keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:68:7e:36:43:76:e1:ef:4d:26:7a:a5:fd:02:e4:8b:fc:64: e7:d9:7d:e5:96:8d:37:3b:5c:90:cd:35:a1:14:99:3b:c3:d7: 91:19:05:1d:35:3d:c7:6b:2d:2e:06:17:55:4d:ee:7d:c1:6b: 00:7c:32:dd:25:6e:7d:be:a2:e7:5e:6b:3e:58:a4:7d:a6:95: 54:30:ae:04:e7:aa:c0:42:33:16:fa:f9:b2:b9:ce:33:97:20: c6:32:e1:ff:84:d7:5c:07:af:5a:04:4b:ad:52:33:2d:03:0d: a2:44:41:bb:7f:d7:bc:d4:6f:b1:ee:07:3e:3a:df:8e:d3:40: 20:a9:e8:93:36:c5:4b:cb:1b:d1:73:3f:70:e7:aa:8c:c1:16: 9f:a1:91:16:9e:e6:7a:03:1e:a6:a8:65:0b:9a:8d:23:36:b3: ab:2a:f4:75:10:62:7d:0f:03:9d:f7:cc:cd:01:12:e1:44:06: 0d:fd:21:18:ca:6c:da:03:26:9d:a5:fa:6b:00:ca:10:34:cd: 55:e7:4d:8a:af:6c:19:25:2c:59:a0:75:d6:d0:81:98:c8:be: 39:58:3b:b0:83:fc:41:3c:a8:c4:58:47:72:cb:84:53:dd:a8: 49:16:97:08:c2:e2:3d:40:63:34:88:1a:ca:a6:f0:f2:76:1c: 63:40:56:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkzMDkxMTAvBgNVBAUTKDZGNDVEQjVEMjhCQkI5QTY1M0Y4MkQxQ0Y3ODI3QTU5 ODM3NjQ1RjMwHhcNMjYwNzI3MDkwMzI2WhcNMjYwODAzMDkwMzI2WjAYMRYwFAYD VQQDEw02YTY3MWVkZi01MzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9ttOXma4WE3ynWCjCEq77gEhhBOS2Xe2370KP7+HdljxSrlMsnURRccTN4R zhVt+jAxo3FAyWi7yRnOVeRUPkjlj07g2Dp5UFME5IsUyhOBvUUQ580VKOgFGkj3 qQD44Oi9tB1JdZiTTCKDCKoA+7Atgaf4/frmc6QnhP6T4eiPmo2jnqcbt/I5DMrM KOa9ZSThwEo+3QTCNGQwnbiDlB76FF7hdcEUe6Nw3/LDA55d9rvCl1hNjbibdkBP E9zo81+eIfViXZVeWfm+LlpnWozGwPRtvWUQlqAvLV4lZV2K/ftnUP+KaO8Wy24D NDRaG7+Nyy/Im0mZA0I5/PGSdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDLyv6R IgnBPBhvoYu6Czcvh+QQMB8GA1UdIwQYMBaAFG9F210ou7mmU/gtHPeCelmDdkXz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTMwOS9BMjdCOEJGQzYx M0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9iMFhiWFNpN3VhWlQtQzBjOTRKNldZTjJS Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IwWGJYU2k3dWFaVC1DMGM5NEo2V1lOMlJmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTMwOS9BMjdCOEJGQzYxM0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9iMFhiWFNpN3Vh WlQtQzBjOTRKNldZTjJSZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABmh+NkN24e9NJnql/QLki/xk59l95ZaNNztckM01oRSZO8PXkRkFHTU9x2st LgYXVU3ufcFrAHwy3SVufb6i515rPlikfaaVVDCuBOeqwEIzFvr5srnOM5cgxjLh /4TXXAevWgRLrVIzLQMNokRBu3/XvNRvse4HPjrfjtNAIKnokzbFS8sb0XM/cOeq jMEWn6GRFp7megMepqhlC5qNIzazqyr0dRBifQ8DnffMzQES4UQGDf0hGMps2gMm naX6awDKEDTNVedNiq9sGSUsWaB11tCBmMi+OVg7sIP8QTyoxFhHcsuEU92oSRaX CMLiPUBjNIgayqbw8nYcY0BWwg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:52:54 2026 by rpki-client