$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: yXXIcLZ8ydKeUDR6P4M5UZ4ps48yGLmUZzKmLOyV1wU= Subject key identifier: BB:18:39:E7:1D:72:D3:94:76:A6:AE:4C:96:70:CD:7C:EB:E5:9C:71 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 084B Signing time: Sun 26 Jul 2026 21:45:20 +0000 Manifest this update: Sun 26 Jul 2026 21:45:20 +0000 Manifest next update: Sun 02 Aug 2026 21:45:20 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: Am0Fmh2fd+8F2ah0Sc4mQToIVXdQ1wugsqGVmC8Snvg=) 2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 4V6lPO7ag/YW0Vp0T9oZKnRuFp3L/Sg6PmpvkYR7JtQ=) 3: ynE2cJx2tPBEuKgzdbsTmyeowJk.asa (hash: EweJrrImGX04lNcYsxwFSit8cSrY9BsT06vhpboqpTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jul 26 21:45:20 2026 GMT Not After : Aug 2 21:45:20 2026 GMT Subject: CN=6a667ff0-e9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:82:25:31:87:5d:9c:2b:de:a5:64:80:0a: 68:97:c9:3c:1c:2a:f2:b3:b8:98:07:59:2a:22:0f: 03:9b:59:8b:46:58:fa:19:29:1e:fc:68:84:a3:da: f0:07:9d:c7:8d:7c:9f:ea:61:e8:9f:cb:ff:e9:4c: 7f:4e:0e:13:f0:7e:9e:00:b1:aa:6d:15:91:80:ee: 45:8b:bf:75:e2:ba:d4:af:b8:ca:ce:04:d9:a1:ee: 55:b3:dd:90:08:c4:a3:f7:f9:01:db:7c:2a:9b:30: 8e:8e:b7:f2:03:e7:03:7c:88:b0:61:0a:cd:5a:cb: 71:ff:e4:5a:91:98:b5:61:74:ad:57:a9:5e:be:e7: 2c:68:5b:b7:47:ae:56:de:b2:a1:f3:d9:26:fb:24: 01:1f:88:11:07:9c:9b:3a:bf:fb:16:f5:a0:28:4b: bb:e5:22:16:ce:fe:f3:70:5f:7c:32:b9:33:8c:7b: 88:06:d4:56:3a:31:4e:37:e6:9e:da:f6:35:10:79: d9:03:5f:ae:ba:6d:50:32:8f:3d:1b:88:f0:fa:32: 62:b5:7f:09:c3:9c:97:20:60:be:fc:4a:b9:75:81: 9c:a3:02:27:df:7a:94:ce:0b:e6:39:1c:26:81:35: 78:d2:97:00:f6:f6:46:03:14:b0:84:04:3d:91:73: ba:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:18:39:E7:1D:72:D3:94:76:A6:AE:4C:96:70:CD:7C:EB:E5:9C:71 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3a:b3:cf:fa:2f:2f:71:9c:23:51:01:f8:90:68:3d:9f:ec: 5e:fe:98:24:c2:11:79:99:cd:e4:eb:3c:0a:45:97:45:02:6f: 20:86:0a:62:cc:93:9a:01:20:12:55:6e:3b:aa:89:1b:49:9f: 06:fe:9f:fb:16:35:92:9f:b4:3c:2a:05:b8:69:0d:58:da:2d: 4f:03:2f:4a:2c:cd:71:ad:14:b6:02:4c:8e:a6:53:b7:fa:59: 1f:18:04:86:79:a4:84:4a:87:50:63:45:60:d9:eb:fb:1b:78: 90:3f:89:81:28:e9:6f:74:f1:12:a9:f7:a5:01:f1:ea:36:fe: 8a:1c:06:c8:d6:46:21:c3:c4:1b:e8:65:e0:0f:b9:a0:b1:de: 4d:15:88:76:30:b2:c4:f9:ab:ae:eb:91:19:35:d1:bd:c3:23: 0c:c8:1c:68:2f:da:e0:57:3a:84:52:ca:e3:10:ba:2e:ea:b0: 89:cd:5b:71:a4:ca:81:33:d8:a9:cb:6d:32:3f:59:d8:4f:35: 9f:31:69:b2:b1:da:5b:36:2a:f8:da:2a:f3:67:d6:0f:5a:4e: 5e:23:95:6e:a9:86:f8:32:56:c0:b7:05:63:60:65:46:48:a5: 5f:6e:89:93:a6:27:31:5b:97:eb:77:cf:be:91:46:9e:2a:73: a7:0e:45:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjYwNzI2MjE0NTIwWhcNMjYwODAyMjE0NTIwWjAYMRYwFAYD VQQDEw02YTY2N2ZmMC1lOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8CCJTGHXZwr3qVkgApol8k8HCrys7iYB1kqIg8Dm1mLRlj6GSke/GiEo9rw B53HjXyf6mHon8v/6Ux/Tg4T8H6eALGqbRWRgO5Fi7914rrUr7jKzgTZoe5Vs92Q CMSj9/kB23wqmzCOjrfyA+cDfIiwYQrNWstx/+RakZi1YXStV6levucsaFu3R65W 3rKh89km+yQBH4gRB5ybOr/7FvWgKEu75SIWzv7zcF98MrkzjHuIBtRWOjFON+ae 2vY1EHnZA1+uum1QMo89G4jw+jJitX8Jw5yXIGC+/Eq5dYGcowIn33qUzgvmORwm gTV40pcA9vZGAxSwhAQ9kXO6XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsYOecd ctOUdqauTJZwzXzr5ZxxMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcjqzz/ovL3GcI1EB+JBoPZ/sXv6YJMIReZnN5Os8CkWXRQJvIIYKYsyTmgEg ElVuO6qJG0mfBv6f+xY1kp+0PCoFuGkNWNotTwMvSizNca0UtgJMjqZTt/pZHxgE hnmkhEqHUGNFYNnr+xt4kD+JgSjpb3TxEqn3pQHx6jb+ihwGyNZGIcPEG+hl4A+5 oLHeTRWIdjCyxPmrruuRGTXRvcMjDMgcaC/a4Fc6hFLK4xC6Luqwic1bcaTKgTPY qcttMj9Z2E81nzFpsrHaWzYq+Noq82fWD1pOXiOVbqmG+DJWwLcFY2BlRkilX26J k6YnMVuX63fPvpFGnipzpw5FSQ== -----END CERTIFICATE-----Generated at Tue Jul 28 13:36:04 2026 by rpki-client