$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: RMvKaDBVwXcDdRKxNHWruW3H7A22VQaox4KxX0A58ek= Subject key identifier: 47:D0:AF:F5:94:D4:8E:68:B7:7C:82:0D:D4:97:43:52:1C:41:E4:99 Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 05C1 Signing time: Mon 27 Jul 2026 02:10:16 +0000 Manifest this update: Mon 27 Jul 2026 02:10:15 +0000 Manifest next update: Mon 03 Aug 2026 02:10:15 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: qC4g0l8dZfy+dEOnHmoXKG7VU9cPiTcvgu+qwnoNlgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Jul 27 02:10:15 2026 GMT Not After : Aug 3 02:10:15 2026 GMT Subject: CN=6a66be08-befe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:5c:34:12:eb:1d:73:bd:77:28:65:e2:76: e5:3b:84:b1:16:ae:4c:0e:e8:4c:b6:02:52:3b:17: 6f:f9:cd:15:05:c2:36:e4:1d:d8:a5:8a:e3:58:1b: ec:ea:89:90:6e:f8:56:a4:dc:4c:5d:6e:7d:95:31: bf:dd:5f:81:d5:dd:01:e8:92:a8:9d:2e:d4:21:f6: f7:ba:70:69:ab:7a:f7:e2:2f:51:59:db:72:ad:a5: a2:d5:3f:16:c1:63:a4:a6:f2:ef:a2:0b:a3:e2:e7: 72:df:aa:90:b8:51:fc:1c:39:6e:d1:a4:cc:8d:50: cb:d4:f8:c4:27:df:2a:30:e7:6f:85:37:fa:ce:6e: d4:54:7e:6c:0c:da:ea:41:81:4d:9f:98:62:fc:c5: 42:db:44:04:a1:77:3b:fe:ad:76:0a:de:c1:93:d9: 11:8b:89:aa:98:88:e2:40:4f:1b:80:bf:cf:49:f6: 5f:a3:e7:7d:8b:77:57:1c:37:8e:0f:73:53:92:5e: 23:9f:74:9b:f3:42:59:59:9e:08:98:49:d8:18:f3: 60:5c:96:74:de:c6:a1:53:b7:a9:3b:ee:62:56:cc: a7:f3:4e:5c:58:10:77:24:24:15:ed:62:43:58:88: 48:e7:1a:db:5e:52:d4:7b:a8:98:f1:a5:13:27:98: 92:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D0:AF:F5:94:D4:8E:68:B7:7C:82:0D:D4:97:43:52:1C:41:E4:99 X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:69:10:c6:e8:76:86:c5:fc:5f:3f:03:b7:fb:7b:1f:9b:dc: 71:fd:6b:92:af:11:99:51:20:9e:9b:5b:44:7e:d2:24:55:ad: 01:af:00:2a:03:54:b4:28:52:8c:d3:ab:6b:c8:22:85:08:87: f0:e0:20:6e:9d:ad:37:44:57:87:a2:6f:c9:67:1c:9f:63:44: d9:38:b0:d9:1b:87:c2:ff:0a:d3:9d:0e:2d:02:bd:8d:09:37: 3b:06:3d:c4:08:c6:76:2f:56:94:d4:bd:6e:a1:53:4d:82:5d: 1a:23:39:2e:28:d2:ff:a0:8b:08:25:4e:f7:ac:95:c3:e5:c5: f4:c5:ff:32:8a:46:20:e2:80:e2:53:0d:50:03:f9:67:6f:1c: df:30:2f:4f:2c:08:64:b9:f5:39:41:c3:82:b7:a2:ff:79:7b: b7:3e:d0:f6:20:5e:43:52:04:62:9f:1b:51:35:d0:ab:ab:98: c5:15:35:f9:8c:72:0a:c6:73:b0:c1:48:8c:ed:aa:32:20:89: 10:db:cc:62:2f:4d:97:6f:1a:0a:95:e9:bc:04:46:79:b4:5a: ee:1d:24:4c:aa:07:23:8d:20:34:88:7b:d9:37:ee:fe:94:fb: e0:09:67:b5:b3:74:cc:e9:54:6b:10:ca:af:da:f0:5b:18:2a: 49:9b:1a:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjYwNzI3MDIxMDE1WhcNMjYwODAzMDIxMDE1WjAYMRYwFAYD VQQDEw02YTY2YmUwOC1iZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAFcNBLrHXO9dyhl4nblO4SxFq5MDuhMtgJSOxdv+c0VBcI25B3YpYrjWBvs 6omQbvhWpNxMXW59lTG/3V+B1d0B6JKonS7UIfb3unBpq3r34i9RWdtyraWi1T8W wWOkpvLvoguj4udy36qQuFH8HDlu0aTMjVDL1PjEJ98qMOdvhTf6zm7UVH5sDNrq QYFNn5hi/MVC20QEoXc7/q12Ct7Bk9kRi4mqmIjiQE8bgL/PSfZfo+d9i3dXHDeO D3NTkl4jn3Sb80JZWZ4ImEnYGPNgXJZ03sahU7epO+5iVsyn805cWBB3JCQV7WJD WIhI5xrbXlLUe6iY8aUTJ5iSwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfQr/WU 1I5ot3yCDdSXQ1IcQeSZMB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO2kQxuh2hsX8Xz8Dt/t7H5vccf1rkq8RmVEgnptbRH7SJFWtAa8AKgNUtChS jNOra8gihQiH8OAgbp2tN0RXh6JvyWccn2NE2Tiw2RuHwv8K050OLQK9jQk3OwY9 xAjGdi9WlNS9bqFTTYJdGiM5LijS/6CLCCVO96yVw+XF9MX/MopGIOKA4lMNUAP5 Z28c3zAvTywIZLn1OUHDgrei/3l7tz7Q9iBeQ1IEYp8bUTXQq6uYxRU1+YxyCsZz sMFIjO2qMiCJENvMYi9Nl28aCpXpvARGebRa7h0kTKoHI40gNIh72Tfu/pT74Aln tbN0zOlUaxDKr9rwWxgqSZsajg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:33 2026 by rpki-client