$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json) Hash identifier: nKl9bWXJZBjnQYL8VvqXDaCjWom/mwC25sAYVkTq+yU= Subject key identifier: C7:61:E1:C5:A6:4A:99:1D:4F:FF:D8:C3:D1:1A:F3:20:C4:CB:3E:9F Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Certificate serial: 0361 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft Manifest number: 0359 Signing time: Mon 27 Jul 2026 02:03:43 +0000 Manifest this update: Mon 27 Jul 2026 02:03:43 +0000 Manifest next update: Mon 03 Aug 2026 02:03:43 +0000 Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: fJMkXTkAHBp5reJVW1whPVz/0Ctwdt3NYaCfiRU4+TM=) 2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: QuRBjqYL6VvvVtV/Yy5pY7mFr/PgdXCJBU+5CQijQgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Validity Not Before: Jul 27 02:03:43 2026 GMT Not After : Aug 3 02:03:43 2026 GMT Subject: CN=6a66bc7f-76c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:72:ab:ae:89:3c:d0:e1:ee:3b:f4:ab:e0: 16:c0:fa:d9:e4:a0:68:3f:37:83:3b:81:0a:de:1f: 68:ae:0a:0d:73:56:ef:07:bd:47:f0:4e:e7:bb:1b: 46:f3:6c:5b:17:78:33:be:bd:7a:81:fa:cf:c6:64: a4:54:7e:61:c3:93:0b:07:4c:dc:d9:ff:16:67:33: 5e:4e:e3:46:13:33:35:aa:c2:0f:19:c0:a5:a6:2e: 6f:70:a5:ee:8a:6d:37:c3:7a:fc:22:58:92:8f:09: 0d:ad:b2:fe:ad:26:2c:5b:43:52:c7:7f:1f:bd:a1: 6a:85:9e:ec:41:de:a4:8f:95:30:1b:b3:b4:dd:52: ee:a6:55:34:1a:e7:41:d5:e8:b7:3f:5e:77:64:69: e2:a5:63:53:43:7a:d1:55:17:07:c6:78:30:f1:13: 9f:90:37:64:6b:40:9d:f4:ad:56:27:5c:5a:40:31: 3f:ad:da:c8:fa:33:a8:c4:92:d1:04:4c:f9:ab:36: 4c:97:cb:21:d3:3b:5e:83:33:8a:d3:4b:19:3d:a0: 72:0d:c2:a2:de:09:a4:42:b6:fe:79:f2:0d:c0:cd: 0f:0a:a5:52:d8:8a:63:dc:3e:e5:a8:3b:57:5b:cd: 3f:74:77:bc:e7:bd:37:5c:d4:76:bc:2a:31:c0:40: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:61:E1:C5:A6:4A:99:1D:4F:FF:D8:C3:D1:1A:F3:20:C4:CB:3E:9F X509v3 Authority Key Identifier: keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:14:2c:2e:2e:7f:6c:c0:da:9e:cd:e7:be:04:99:4a:d5:b3: e3:27:17:b0:0e:df:fd:f8:40:f0:e5:55:d7:ad:f4:3f:b9:31: ee:66:e0:00:f6:53:75:70:fe:ec:10:6d:63:38:c2:58:0a:63: 12:a2:42:35:a7:86:8d:96:e5:e4:ab:44:0f:af:c8:4f:54:c7: 66:c8:1e:6a:76:e8:a2:23:c7:ee:30:df:1e:43:74:af:3a:78: 1a:7e:e1:75:c7:36:7a:86:b1:3f:c9:5d:40:3b:99:02:c2:71: 8d:7e:1c:12:1e:65:67:d4:92:a6:42:c7:93:35:03:55:75:8f: 22:09:32:18:19:aa:76:1b:3e:b6:eb:6a:73:a1:81:d9:34:2a: 08:48:40:f7:f8:0a:97:7d:ad:34:ce:22:b2:68:1f:9f:2a:25: 29:1c:97:a0:c6:60:7c:27:e5:68:f3:c8:ab:1b:2d:14:85:f8: 86:ef:29:f2:24:19:f1:0b:0f:bd:3b:12:f3:53:95:d2:2d:28: 97:52:96:62:86:fd:b3:ae:0b:18:f4:a7:5d:8c:e5:88:a1:76: af:29:79:ab:a7:61:f8:ab:51:3d:b5:24:9c:75:67:f8:eb:5b: 5a:a0:d5:52:92:54:a2:f9:1e:3e:cb:12:e0:a9:ae:a0:7c:09: bb:ba:1c:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0 RDhGMkRGRjEwHhcNMjYwNzI3MDIwMzQzWhcNMjYwODAzMDIwMzQzWjAYMRYwFAYD VQQDEw02YTY2YmM3Zi03NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk4tyq66JPNDh7jv0q+AWwPrZ5KBoPzeDO4EK3h9orgoNc1bvB71H8E7nuxtG 82xbF3gzvr16gfrPxmSkVH5hw5MLB0zc2f8WZzNeTuNGEzM1qsIPGcClpi5vcKXu im03w3r8IliSjwkNrbL+rSYsW0NSx38fvaFqhZ7sQd6kj5UwG7O03VLuplU0GudB 1ei3P153ZGnipWNTQ3rRVRcHxngw8ROfkDdka0Cd9K1WJ1xaQDE/rdrI+jOoxJLR BEz5qzZMl8sh0ztegzOK00sZPaByDcKi3gmkQrb+efINwM0PCqVS2Ipj3D7lqDtX W80/dHe85703XNR2vCoxwEBcYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdh4cWm SpkdT//Yw9Ea8yDEyz6fMB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFDQi81MjNBOEY1NjBCQTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdU eU9vV09LOEd5Tk5OankzX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbhQsLi5/bMDans3nvgSZStWz4ycXsA7f/fhA8OVV1630P7kx7mbgAPZTdXD+ 7BBtYzjCWApjEqJCNaeGjZbl5KtED6/IT1THZsgeanbooiPH7jDfHkN0rzp4Gn7h dcc2eoaxP8ldQDuZAsJxjX4cEh5lZ9SSpkLHkzUDVXWPIgkyGBmqdhs+tutqc6GB 2TQqCEhA9/gKl32tNM4ismgfnyolKRyXoMZgfCflaPPIqxstFIX4hu8p8iQZ8QsP vTsS81OV0i0ol1KWYob9s64LGPSnXYzliKF2ryl5q6dh+KtRPbUknHVn+OtbWqDV UpJUovkePssS4KmuoHwJu7oclg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:19 2026 by rpki-client