$ rpki-client -vvf rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft File: xfPmCWA9MLk6tGt4klx63Q8s8hI.mft (raw, json) Hash identifier: 51jRGBY/44cSAeZFzxz/slbsYftxoMpdUI2eFtiaAak= Subject key identifier: B8:AF:5B:67:D6:7A:76:C5:D6:F2:B6:14:FF:91:A3:26:9A:14:8A:BF Authority key identifier: C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12 Certificate issuer: /CN=A917A689/serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft Manifest number: 0C Signing time: Mon 27 Jul 2026 11:33:07 +0000 Manifest this update: Mon 27 Jul 2026 11:33:06 +0000 Manifest next update: Mon 03 Aug 2026 11:33:06 +0000 Files and hashes: 1: xfPmCWA9MLk6tGt4klx63Q8s8hI.crl (hash: qI2MtwkT/4whOIVEiAVPgJM2ssczgMT3zYdY8wxJQUc=) 2: 714DAFEE86A111F194892C0771A30FBC.roa (hash: aD75nQc2fXXMCcS+5IKPeL3EjlizMDALNcXw/5SkpOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A689, serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212 Validity Not Before: Jul 27 11:33:06 2026 GMT Not After : Aug 3 11:33:06 2026 GMT Subject: CN=6a6741f3-041d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:32:19:54:70:0c:ca:34:5f:f7:fe:cf:fa:77: d0:5e:fc:52:3e:cd:e8:5f:d2:f0:a9:c8:7b:22:e4: 12:d6:c8:4a:4d:fb:94:cd:d9:61:31:ed:a3:7f:d6: 96:33:59:3e:7c:7a:25:08:d9:1c:dc:b4:87:53:e1: 7e:c3:b2:22:84:85:61:2e:17:41:66:33:f7:fb:bd: 31:91:3d:b8:20:9c:cb:1e:f9:c8:f2:be:d8:07:eb: 7f:4e:17:f8:d7:5d:3f:0d:7b:11:ac:f7:77:c2:42: 53:16:26:df:b8:10:ae:d9:7c:7f:33:85:e7:15:7b: 75:95:fc:1e:38:34:93:0a:16:84:26:55:5d:af:c2: 7d:9c:73:8c:21:ac:fd:c7:66:90:1b:84:3c:85:13: 88:1e:81:78:8c:d7:e3:d6:56:69:b5:6b:7a:24:b8: 46:80:8a:50:06:40:86:71:d9:60:c6:30:12:e0:a7: 3e:d5:9d:88:e6:96:3d:9c:45:72:f2:9b:98:c7:5a: a4:16:e7:62:9b:ce:d0:77:dd:58:9a:32:76:3b:e7: 45:08:4a:ec:ea:e6:24:3c:81:87:32:09:b0:24:50: 3a:9f:72:4a:74:f9:dd:1f:9e:e9:08:63:50:35:fb: 63:a3:c9:8d:f3:ef:4d:bd:df:91:76:fb:fc:7e:c4: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AF:5B:67:D6:7A:76:C5:D6:F2:B6:14:FF:91:A3:26:9A:14:8A:BF X509v3 Authority Key Identifier: keyid:C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:66:6f:7b:f1:cb:a4:53:71:6d:31:07:b4:52:2d:9b:01:3b: 15:c9:51:3e:f1:c6:69:2f:38:76:43:ca:b6:62:8f:24:a7:a1: 2e:52:c4:2b:e7:32:bb:9b:55:3f:82:0c:c8:8d:93:ec:ad:71: 49:da:0c:4e:53:db:7d:c5:0a:38:46:a3:97:33:66:c6:a0:98: 8f:4e:05:56:44:6a:c6:8d:5b:8a:9b:68:f5:d4:f0:1d:f7:4e: 60:f8:b1:59:92:96:9e:1b:b4:b8:df:90:7e:fb:4f:fa:a8:79: 9f:df:10:ba:e7:e2:d3:97:ae:9c:54:e0:97:32:88:5e:44:34: ed:d4:83:f1:cd:a4:ac:f2:92:ef:60:c9:a6:a4:1a:85:c2:04: 4d:6d:c0:ce:ab:95:fe:f8:07:b1:7a:94:7c:46:a7:ed:f0:f3: 43:bc:7b:20:c2:c6:7f:73:d7:d7:05:fa:bf:ad:ce:f1:e0:3d: da:c7:a0:b7:a0:34:ed:6f:ef:66:16:ac:27:0c:ce:99:8b:c7: 77:a5:9a:61:4e:bb:c4:44:18:57:cc:08:8e:d7:92:34:0c:b6: 50:52:bb:f0:fd:4a:f2:c2:4e:f1:eb:bb:27:fe:19:0b:55:35: a0:24:0f:ff:0b:c7:8d:3a:91:a9:39:dd:eb:3a:1a:61:ab:00: d8:cd:17:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTY4OTExMC8GA1UEBRMoQzVGM0U2MDk2MDNEMzBCOTNBQjQ2Qjc4OTI1QzdBREQw RjJDRjIxMjAeFw0yNjA3MjcxMTMzMDZaFw0yNjA4MDMxMTMzMDZaMBgxFjAUBgNV BAMTDTZhNjc0MWYzLTA0MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdMhlUcAzKNF/3/s/6d9Be/FI+zehf0vCpyHsi5BLWyEpN+5TN2WEx7aN/1pYz WT58eiUI2RzctIdT4X7DsiKEhWEuF0FmM/f7vTGRPbggnMse+cjyvtgH639OF/jX XT8NexGs93fCQlMWJt+4EK7ZfH8zhecVe3WV/B44NJMKFoQmVV2vwn2cc4whrP3H ZpAbhDyFE4gegXiM1+PWVmm1a3okuEaAilAGQIZx2WDGMBLgpz7VnYjmlj2cRXLy m5jHWqQW52KbztB33ViaMnY750UISuzq5iQ8gYcyCbAkUDqfckp0+d0fnukIY1A1 +2OjyY3z702935F2+/x+xAW9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuK9bZ9Z6 dsXW8rYU/5GjJpoUir8wHwYDVR0jBBgwFoAUxfPmCWA9MLk6tGt4klx63Q8s8hIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjg5LzhFOEM3NTU2N0E5 NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxrNnRHdDRrbHg2M1E4czho SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGZQbUNXQTlNTGs2dEd0NGtseDYzUThzOGhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB Njg5LzhFOEM3NTU2N0E5NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxr NnRHdDRrbHg2M1E4czhoSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKZm978cukU3FtMQe0Ui2bATsVyVE+8cZpLzh2Q8q2Yo8kp6EuUsQr5zK7m1U/ ggzIjZPsrXFJ2gxOU9t9xQo4RqOXM2bGoJiPTgVWRGrGjVuKm2j11PAd905g+LFZ kpaeG7S435B++0/6qHmf3xC65+LTl66cVOCXMoheRDTt1IPxzaSs8pLvYMmmpBqF wgRNbcDOq5X++AexepR8Rqft8PNDvHsgwsZ/c9fXBfq/rc7x4D3ax6C3oDTtb+9m FqwnDM6Zi8d3pZphTrvERBhXzAiO15I0DLZQUrvw/Urywk7x67sn/hkLVTWgJA// C8eNOpGpOd3rOhphqwDYzReS -----END CERTIFICATE-----Generated at Tue Jul 28 16:41:37 2026 by rpki-client