$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft File: x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft (raw, json) Hash identifier: EEnLUqOp0PCLJvIIe/bjHytnoeEwfMWdZHtWg773UKk= Subject key identifier: A1:3F:FF:C3:D9:70:1D:41:46:CA:49:7C:E3:3C:10:E6:10:1A:B6:87 Authority key identifier: C7:E7:DF:9D:80:97:F1:E4:74:E7:2E:83:C9:13:13:E1:9C:5B:5C:11 Certificate issuer: /CN=A917CD13/serialNumber=C7E7DF9D8097F1E474E72E83C91313E19C5B5C11 Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft Manifest number: 02 Signing time: Mon 27 Jul 2026 06:19:49 +0000 Manifest this update: Mon 27 Jul 2026 06:19:47 +0000 Manifest next update: Mon 03 Aug 2026 06:19:47 +0000 Files and hashes: 1: x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl (hash: crhFpx2Sn4vPcs9VWHo0BveH4bG5wR/4Mv8/5CU+vBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CD13, serialNumber=C7E7DF9D8097F1E474E72E83C91313E19C5B5C11 Validity Not Before: Jul 27 06:19:47 2026 GMT Not After : Aug 3 06:19:47 2026 GMT Subject: CN=6a66f884-2e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:d6:b8:97:8e:db:d9:fc:f5:0c:5f:3b:15: 2a:fd:da:ed:8d:08:6e:f5:1d:25:74:63:52:52:00: 2d:6b:60:3d:eb:fd:89:a9:26:98:92:86:b5:8a:f3: d8:81:ba:ae:fc:0f:d9:30:50:c2:62:a7:8c:d7:a1: 2e:79:f0:81:b4:ad:85:34:3a:69:17:d6:9b:c4:59: 22:a0:c3:d3:69:31:93:96:bd:3e:66:4e:be:9d:47: 37:9c:27:b6:7f:74:18:7c:f1:b2:83:e3:72:f5:79: e6:d6:d8:40:08:66:23:13:fb:c7:3a:f9:c7:db:48: 42:1c:a0:fd:b9:ab:61:6e:ee:e2:08:9b:da:bc:a9: 48:7b:f2:1a:2f:11:8e:7a:c2:fa:38:18:ea:dd:59: 94:e0:8d:e9:dc:a8:2b:af:d1:6d:5c:4e:a1:f8:d1: 34:55:a3:fe:1a:a0:b9:fd:ed:24:0c:b5:dd:67:96: 86:7d:75:b0:0a:99:8c:a8:a5:20:93:42:63:c0:86: 8f:9b:03:9f:65:a9:8b:19:9f:9d:3e:d6:fb:e4:d0: bd:ab:36:4c:e8:1c:c9:39:94:90:0e:a0:60:ab:ad: b6:a4:d6:e1:07:46:5b:78:2e:b4:b5:08:51:05:2e: 73:22:ba:a7:d7:27:f4:7a:8f:81:f0:8b:c5:88:fb: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:FF:C3:D9:70:1D:41:46:CA:49:7C:E3:3C:10:E6:10:1A:B6:87 X509v3 Authority Key Identifier: keyid:C7:E7:DF:9D:80:97:F1:E4:74:E7:2E:83:C9:13:13:E1:9C:5B:5C:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:23:96:08:2c:2d:63:57:43:8e:14:40:d5:3d:12:72:16:94: 04:d8:fd:2e:f6:40:cf:cd:13:53:9b:27:d2:04:09:e7:8e:13: 13:19:d7:b6:b1:e3:a8:76:5a:25:42:fe:32:3c:40:cb:3e:d9: f4:3f:d0:85:ee:a2:55:a5:66:fe:01:70:a6:42:66:3d:1b:98: 60:38:82:00:24:26:b9:67:d4:67:0c:73:2e:56:28:73:0a:c8: ce:ee:79:32:81:ed:c2:87:ee:c1:7d:1c:10:ac:39:65:40:e5: 68:df:0d:86:2b:ec:25:47:4a:0f:22:b4:f5:82:e4:e8:67:7a: 19:a7:35:a4:57:d4:7d:25:89:f0:ce:cd:c7:d5:d0:26:3c:eb: 4d:b8:8f:38:e0:ca:7d:b2:90:5b:34:fb:4a:f0:3a:d9:e0:21: 17:c7:4a:00:7f:2b:70:95:04:bd:36:e8:a9:90:06:15:00:b1: 98:1a:3f:99:cd:4c:bc:46:ed:f4:4a:0f:02:3b:cd:97:5b:c6: 70:89:08:b3:88:df:84:ca:54:75:84:d8:6f:34:9c:53:da:a8: ed:c9:7f:42:11:69:68:6c:1f:63:34:7e:69:8e:0d:3c:ac:1f: af:40:4e:a5:63:66:55:06:57:fa:4b:46:a1:fa:60:a7:7f:47: 18:ff:1e:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Q0QxMzExMC8GA1UEBRMoQzdFN0RGOUQ4MDk3RjFFNDc0RTcyRTgzQzkxMzEzRTE5 QzVCNUMxMTAeFw0yNjA3MjcwNjE5NDdaFw0yNjA4MDMwNjE5NDdaMBgxFjAUBgNV BAMTDTZhNjZmODg0LTJlNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOJta4l47b2fz1DF87FSr92u2NCG71HSV0Y1JSAC1rYD3r/YmpJpiShrWK89iB uq78D9kwUMJip4zXoS558IG0rYU0OmkX1pvEWSKgw9NpMZOWvT5mTr6dRzecJ7Z/ dBh88bKD43L1eebW2EAIZiMT+8c6+cfbSEIcoP25q2Fu7uIIm9q8qUh78hovEY56 wvo4GOrdWZTgjencqCuv0W1cTqH40TRVo/4aoLn97SQMtd1nloZ9dbAKmYyopSCT QmPAho+bA59lqYsZn50+1vvk0L2rNkzoHMk5lJAOoGCrrbak1uEHRlt4LrS1CFEF LnMiuqfXJ/R6j4Hwi8WI+x91AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoT//w9lw HUFGykl84zwQ5hAatocwHwYDVR0jBBgwFoAUx+ffnYCX8eR05y6DyRMT4ZxbXBEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDRDEzL0NEQzUwMTY2ODk3 NDExRjE4NjFCMkVFOTZEMTFGOTcwL3gtZmZuWUNYOGVSMDV5NkR5Uk1UNFp4YlhC RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveC1mZm5ZQ1g4ZVIwNXk2RHlSTVQ0WnhiWEJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD RDEzL0NEQzUwMTY2ODk3NDExRjE4NjFCMkVFOTZEMTFGOTcwL3gtZmZuWUNYOGVS MDV5NkR5Uk1UNFp4YlhCRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCxI5YILC1jV0OOFEDVPRJyFpQE2P0u9kDPzRNTmyfSBAnnjhMTGde2seOodlol Qv4yPEDLPtn0P9CF7qJVpWb+AXCmQmY9G5hgOIIAJCa5Z9RnDHMuVihzCsjO7nky ge3Ch+7BfRwQrDllQOVo3w2GK+wlR0oPIrT1guToZ3oZpzWkV9R9JYnwzs3H1dAm POtNuI844Mp9spBbNPtK8DrZ4CEXx0oAfytwlQS9NuipkAYVALGYGj+ZzUy8Ru30 Sg8CO82XW8ZwiQiziN+EylR1hNhvNJxT2qjtyX9CEWlobB9jNH5pjg08rB+vQE6l Y2ZVBlf6S0ah+mCnf0cY/x7y -----END CERTIFICATE-----Generated at Tue Jul 28 20:26:28 2026 by rpki-client