$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json) Hash identifier: mOEWDU+5ndaWqe0PyqAVUdLd3Z7v+XLnz47GHl7l9bU= Subject key identifier: 94:3F:D4:39:60:02:22:A0:5C:7B:E4:2C:C6:34:FE:91:2F:B9:59:1E Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft Manifest number: 0588 Signing time: Mon 27 Jul 2026 00:11:04 +0000 Manifest this update: Mon 27 Jul 2026 00:11:03 +0000 Manifest next update: Mon 03 Aug 2026 00:11:03 +0000 Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: rGSt6r5b6lBs/4FJwubN/Zx6O8Jiu7Gr2pV4PdQa+l0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AE24, serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Validity Not Before: Jul 27 00:11:03 2026 GMT Not After : Aug 3 00:11:03 2026 GMT Subject: CN=6a66a218-0c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:2f:61:74:bc:38:f4:0f:53:ef:b2:fe:95: 0b:17:69:3a:e8:c3:65:4b:c4:ae:d5:81:00:16:3c: 31:86:80:8c:bc:11:20:bd:97:6c:2f:ab:83:e2:e1: 8f:da:98:e7:4d:1f:cd:e2:08:9d:54:d1:ec:0a:d7: 5d:e2:ee:f4:e8:37:4d:59:b0:06:55:8a:7d:8e:12: 29:97:31:80:9e:be:26:ec:b9:94:ab:4f:28:32:0e: bd:ed:12:9b:e1:f5:e1:62:1d:5a:fc:83:ec:bc:df: c9:f3:11:fd:b7:91:fc:25:d7:48:f6:ba:c7:09:f5: ff:8a:31:d0:4b:73:fe:66:29:7b:da:f5:1e:42:68: 9e:42:21:a9:4a:dd:a7:6d:24:f9:8d:5a:2f:7c:cc: 1e:c2:d4:00:1b:df:8f:64:6c:4a:99:0d:12:70:3c: 5f:76:41:ea:c6:02:b1:1c:29:d1:83:c3:28:5b:a9: 35:e3:25:bd:14:89:94:76:3a:ec:76:a8:92:8c:8d: 0c:07:02:d9:4d:c1:ef:8c:ac:8c:77:2e:a5:e4:b6: 04:1b:fc:75:15:40:1b:ae:3c:d6:2e:7d:11:fc:20: c4:49:ab:0e:24:07:69:92:3f:f2:92:60:07:a4:27: 69:4e:5e:18:cb:af:c3:4f:e8:ba:5a:32:69:5e:da: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3F:D4:39:60:02:22:A0:5C:7B:E4:2C:C6:34:FE:91:2F:B9:59:1E X509v3 Authority Key Identifier: keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:bf:74:3d:05:7e:5f:9a:73:12:12:bc:0c:fc:d7:95:8f:6d: 89:9b:15:ec:8a:e3:4b:e3:5c:36:83:f0:ed:7e:d4:ec:88:e1: 65:e5:36:d8:ab:c8:bc:5a:25:39:3c:2c:71:b6:3e:58:07:de: ca:c4:f7:2c:b7:68:7b:29:66:2d:12:05:c4:f4:30:a6:08:16: cd:45:c5:34:24:fb:30:5a:42:88:d3:12:6a:25:d6:89:64:33: aa:7a:7c:62:9f:83:13:74:67:60:4f:78:41:6b:5b:cb:c1:c1: 46:05:48:2f:22:1f:44:43:8f:6f:64:df:b0:0b:48:9c:8a:60: d0:d7:8d:a0:67:4b:29:77:29:f0:87:69:30:df:1b:f6:a6:20: a2:ae:b0:7e:5f:03:01:6e:b9:8e:4a:69:a2:84:db:79:f0:40: 37:74:be:bf:30:8a:8f:ae:13:95:41:07:87:41:20:bb:eb:71: bb:99:4a:a5:fa:d2:bc:30:a6:f0:ef:c4:af:34:23:30:db:27: 3c:f3:b9:70:e0:9c:25:55:0f:68:69:08:c4:0f:61:c0:ac:5a: 1f:b1:ba:4a:59:17:a3:69:6e:d3:68:f4:42:ed:ec:fa:94:95: de:1c:8f:04:cd:13:42:db:0f:09:8f:3e:98:29:18:e3:f7:cc: 44:86:03:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FFMjQxMTAvBgNVBAUTKEQ3NzNBNzYzMTdCQ0FCMUVFRjAzNkY1RjZFNEM3QjM0 QzRBQjZCN0IwHhcNMjYwNzI3MDAxMTAzWhcNMjYwODAzMDAxMTAzWjAYMRYwFAYD VQQDEw02YTY2YTIxOC0wYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT4vYXS8OPQPU++y/pULF2k66MNlS8Su1YEAFjwxhoCMvBEgvZdsL6uD4uGP 2pjnTR/N4gidVNHsCtdd4u706DdNWbAGVYp9jhIplzGAnr4m7LmUq08oMg697RKb 4fXhYh1a/IPsvN/J8xH9t5H8JddI9rrHCfX/ijHQS3P+Zil72vUeQmieQiGpSt2n bST5jVovfMwewtQAG9+PZGxKmQ0ScDxfdkHqxgKxHCnRg8MoW6k14yW9FImUdjrs dqiSjI0MBwLZTcHvjKyMdy6l5LYEG/x1FUAbrjzWLn0R/CDESasOJAdpkj/ykmAH pCdpTl4Yy6/DT+i6WjJpXtoz+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQ/1Dlg AiKgXHvkLMY0/pEvuVkeMB8GA1UdIwQYMBaAFNdzp2MXvKse7wNvX25MezTEq2t7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUUyNC84RUM0MDA5NDMw QTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4N3ZBMjlmYmt4N05NU3Jh M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzT25ZeGU4cXg3dkEyOWZia3g3Tk1TcmEzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUUyNC84RUM0MDA5NDMwQTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4 N3ZBMjlmYmt4N05NU3JhM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ790PQV+X5pzEhK8DPzXlY9tiZsV7IrjS+NcNoPw7X7U7IjhZeU22KvIvFol OTwscbY+WAfeysT3LLdoeylmLRIFxPQwpggWzUXFNCT7MFpCiNMSaiXWiWQzqnp8 Yp+DE3RnYE94QWtby8HBRgVILyIfREOPb2TfsAtInIpg0NeNoGdLKXcp8IdpMN8b 9qYgoq6wfl8DAW65jkppooTbefBAN3S+vzCKj64TlUEHh0Egu+txu5lKpfrSvDCm 8O/ErzQjMNsnPPO5cOCcJVUPaGkIxA9hwKxaH7G6SlkXo2lu02j0Qu3s+pSV3hyP BM0TQtsPCY8+mCkY4/fMRIYDWw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:58:50 2026 by rpki-client