$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft File: xDfVjxI6auBXxgjiFrtr_WWER2o.mft (raw, json) Hash identifier: JJVeoP3jbaf/c40fcGJm2uaD4RfCMq7Gv2Z8p9HNk08= Subject key identifier: 7D:FD:44:DE:36:67:ED:48:B9:F6:89:E5:98:7B:00:17:54:27:AE:DF Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft Manifest number: 068F Signing time: Sun 26 Jul 2026 23:19:35 +0000 Manifest this update: Sun 26 Jul 2026 23:19:35 +0000 Manifest next update: Sun 02 Aug 2026 23:19:35 +0000 Files and hashes: 1: xDfVjxI6auBXxgjiFrtr_WWER2o.crl (hash: +XoBJpcz1boqim/WkSGVXSUZAuoDx8qf53dELgXurDY=) 2: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (hash: qAEw4cfCPVqW7FS+d2/zPSE0MsVbQiymPW0bXvjNNYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Validity Not Before: Jul 26 23:19:35 2026 GMT Not After : Aug 2 23:19:35 2026 GMT Subject: CN=6a669607-5e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:36:4a:85:9b:48:aa:45:fd:b6:8f:3f:fd: f7:29:88:48:47:e8:b4:7a:aa:00:4c:50:4d:de:c9: f2:13:e7:13:f4:19:9e:2a:d4:63:43:ed:72:dd:70: 9a:68:5d:87:3f:ab:87:72:89:f1:d7:b9:3d:f4:4e: 58:d1:ff:a8:4a:16:cf:ef:78:b7:a7:fd:ef:ac:c2: 90:c4:d7:70:2a:10:da:cf:af:3d:55:45:08:9b:55: 63:a2:d4:c1:6e:ac:7b:56:3c:a4:e3:8d:1b:30:76: 78:2e:b3:7d:7e:1b:a4:ae:7e:99:b5:37:17:51:7b: 99:82:54:86:20:28:d3:58:db:59:31:00:9f:24:b7: 07:b1:43:7d:46:5f:1e:d3:42:3d:aa:36:3f:7c:9e: a3:a0:6c:d0:bb:7d:74:23:53:d9:83:69:f0:19:60: d2:76:85:8a:13:62:4c:78:7b:09:de:6f:03:12:6e: cb:55:1e:ea:58:79:e8:e4:f8:ee:39:34:b7:14:9e: 9b:56:9a:7d:53:cd:06:51:eb:f9:3e:83:4d:43:f5: 83:07:d0:40:6d:79:6d:fa:9b:33:d9:ba:f8:f8:68: 30:a1:ce:b3:1a:ed:a5:4b:9a:9b:e6:fb:4d:ff:e7: ee:be:90:47:67:05:c8:14:00:82:9b:35:bb:2b:c7: 0b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FD:44:DE:36:67:ED:48:B9:F6:89:E5:98:7B:00:17:54:27:AE:DF X509v3 Authority Key Identifier: keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:63:40:34:48:a2:87:0e:31:f5:de:d3:09:63:b2:e1:af:e8: d5:cc:ab:0e:ed:bc:63:de:68:91:75:4e:9e:86:57:a8:0d:77: 5d:91:29:e3:35:f2:3d:28:b5:19:65:89:45:6b:98:e4:c4:04: cf:1e:94:80:f0:21:da:fe:74:f0:ef:4e:25:d4:3f:99:4f:b1: 92:b2:b2:ac:8c:46:b4:c2:e6:43:b1:6c:95:fc:e9:68:55:d3: c4:85:50:a4:8e:1e:59:a4:38:41:e0:ed:4f:79:fd:f9:3e:d9: 69:26:5f:71:bc:26:9d:b6:b0:e5:dd:4d:5c:a0:2e:96:57:06: b9:51:d9:71:1e:97:4a:34:8a:37:b1:02:09:e4:2c:99:0c:7a: 9e:c1:7b:7a:9b:52:28:a0:25:29:20:85:a9:ce:b1:5b:56:99: e8:87:b1:4e:f3:5d:6f:d1:c2:58:2d:c9:f1:65:1b:0d:7f:66: 4d:56:15:31:d3:a0:cc:1d:69:c7:85:e3:d0:aa:64:9c:c1:66: 76:e3:21:63:3d:a6:d3:56:13:fb:cd:eb:78:40:71:ec:f9:c5: b1:63:a8:11:d3:57:ec:5c:0e:d8:13:42:6b:73:60:19:80:d0: 3f:d3:4e:62:28:84:6d:f9:2e:01:f5:f1:d2:50:bd:ac:b4:bc: 90:8e:20:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk5MDMxMTAvBgNVBAUTKEM0MzdENThGMTIzQTZBRTA1N0M2MDhFMjE2QkI2QkZE NjU4NDQ3NkEwHhcNMjYwNzI2MjMxOTM1WhcNMjYwODAyMjMxOTM1WjAYMRYwFAYD VQQDEw02YTY2OTYwNy01ZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ec2SoWbSKpF/baPP/33KYhIR+i0eqoATFBN3snyE+cT9BmeKtRjQ+1y3XCa aF2HP6uHconx17k99E5Y0f+oShbP73i3p/3vrMKQxNdwKhDaz689VUUIm1VjotTB bqx7Vjyk440bMHZ4LrN9fhukrn6ZtTcXUXuZglSGICjTWNtZMQCfJLcHsUN9Rl8e 00I9qjY/fJ6joGzQu310I1PZg2nwGWDSdoWKE2JMeHsJ3m8DEm7LVR7qWHno5Pju OTS3FJ6bVpp9U80GUev5PoNNQ/WDB9BAbXlt+psz2br4+Ggwoc6zGu2lS5qb5vtN /+fuvpBHZwXIFACCmzW7K8cLLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH39RN42 Z+1IufaJ5Zh7ABdUJ67fMB8GA1UdIwQYMBaAFMQ31Y8SOmrgV8YI4ha7a/1lhEdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTkwMy9FRTZCNzQxOEM4 MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1Qlh4Z2ppRnJ0cl9XV0VS Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEZlZqeEk2YXVCWHhnamlGcnRyX1dXRVIyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTkwMy9FRTZCNzQxOEM4MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1 Qlh4Z2ppRnJ0cl9XV0VSMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXWNANEiihw4x9d7TCWOy4a/o1cyrDu28Y95okXVOnoZXqA13XZEp4zXyPSi1 GWWJRWuY5MQEzx6UgPAh2v508O9OJdQ/mU+xkrKyrIxGtMLmQ7FslfzpaFXTxIVQ pI4eWaQ4QeDtT3n9+T7ZaSZfcbwmnbaw5d1NXKAullcGuVHZcR6XSjSKN7ECCeQs mQx6nsF7eptSKKAlKSCFqc6xW1aZ6IexTvNdb9HCWC3J8WUbDX9mTVYVMdOgzB1p x4Xj0KpknMFmduMhYz2m01YT+83reEBx7PnFsWOoEdNX7FwO2BNCa3NgGYDQP9NO YiiEbfkuAfXx0lC9rLS8kI4geQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:10:26 2026 by rpki-client