$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft File: XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json) Hash identifier: SxZkMlaKpzHd0a+sDShpgd9+5o4aJu2GKBOUuw1Euzo= Subject key identifier: E4:AC:6E:A5:34:3C:6F:E2:9E:0B:96:9B:66:AF:64:C9:E6:29:62:F5 Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 Certificate issuer: /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft Manifest number: 0A4A Signing time: Tue 28 Jul 2026 20:02:28 +0000 Manifest this update: Tue 28 Jul 2026 20:02:28 +0000 Manifest next update: Tue 04 Aug 2026 20:02:28 +0000 Files and hashes: 1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: AyoWJdUnG3WulaTuDTySuVDjApYpCnJfBH7UYH9dNZg=) 2: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: V4TtDHDwWfSTPDtmdJxLiYpQrBPMzCI9Mup9QQhSTOc=) 3: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: phoNlFrzl7WYjyRvdppnlSL/FBRV8iS5x5iyLwB+dTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Validity Not Before: Jul 28 20:02:28 2026 GMT Not After : Aug 4 20:02:28 2026 GMT Subject: CN=6a690ad4-c02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:de:04:b5:6d:51:89:01:0b:89:07:12:69: 87:92:3e:53:87:df:e6:74:cd:66:8d:86:44:37:e2: f2:c7:08:90:c6:af:ab:ce:38:d7:bf:41:bd:0b:64: 19:1e:50:1a:9e:81:be:15:12:3d:65:9e:6d:ce:7a: 14:cb:26:30:4e:bf:fe:6a:dd:4f:23:15:ec:43:da: 63:85:7c:0e:52:2b:22:67:9e:89:02:78:3f:36:a3: 6e:b5:6d:0a:53:f5:2e:78:99:18:d7:79:a0:80:e8: 2e:ab:33:47:cd:50:c2:59:7f:4b:59:bf:4b:fc:4e: 20:df:fa:61:f1:81:09:97:e6:58:73:1d:87:80:40: 70:fa:e6:e3:e5:e0:30:e9:f3:8b:86:96:ac:8a:56: 06:f8:2a:a0:e0:d8:a0:45:71:9f:82:ac:40:ab:b6: 69:60:46:12:ba:07:83:ac:2e:b0:7c:60:ce:e3:3b: 2c:5e:27:49:e4:d2:e7:e6:5b:bb:96:a5:f5:2a:65: a8:30:a1:59:6a:79:3a:b3:5e:62:6e:df:e3:ce:c8: 08:26:ca:1c:83:63:4c:8d:96:a2:8d:eb:ca:d3:fa: d6:4f:27:16:73:a2:03:f0:63:88:92:34:d7:b8:ac: c2:fd:af:3d:b7:86:4f:0b:85:80:48:21:8a:3d:f4: c9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AC:6E:A5:34:3C:6F:E2:9E:0B:96:9B:66:AF:64:C9:E6:29:62:F5 X509v3 Authority Key Identifier: keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:6b:62:ad:19:08:10:84:46:f2:29:fc:4f:02:c9:22:e1:23: 95:20:5e:79:51:92:c5:1e:cc:a3:01:1d:17:1b:95:e2:85:3d: 69:18:db:44:d4:dc:37:46:26:e0:c8:14:7e:74:f4:31:5d:b3: a2:7b:e5:00:c0:62:b8:7a:19:9c:75:69:74:f8:ec:6a:94:80: 89:cf:54:20:26:c4:13:2a:8d:45:41:47:bd:6f:df:9d:c9:5f: 8c:7d:0c:e7:5e:e4:b9:dd:d2:79:57:9f:90:cf:ee:c7:4a:8c: 3c:7c:1d:c9:ed:49:c0:01:cb:b2:35:b9:21:37:8d:23:b1:20: d8:a1:55:b9:3d:46:5a:41:6d:b5:9c:5b:2e:51:16:7b:40:0b: 70:f8:6a:8c:bf:0f:53:46:37:dd:d0:11:1c:3b:67:7c:2b:c9: 0f:10:f9:38:54:0d:5c:e1:14:46:c7:3e:c9:7f:9b:6f:dc:e4: 3c:ea:69:df:64:75:6a:9a:5f:bd:97:96:f0:ac:f6:84:94:8d: 38:66:b5:8b:2f:20:79:c2:52:86:50:fa:56:ea:34:cc:55:d8: 03:01:fc:07:ff:c9:f3:f0:38:e2:40:f2:b7:4f:40:ec:bc:42: 89:0c:1c:a2:13:a9:e2:c7:f9:61:95:2d:b4:d0:d9:fc:38:ef: 5d:e6:ea:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4QTkxMTAvBgNVBAUTKDVDMEFCNDI1RjJCNDIzNUUxQzgxNTY4M0JENkM4RThC N0I4MEI3MjcwHhcNMjYwNzI4MjAwMjI4WhcNMjYwODA0MjAwMjI4WjAYMRYwFAYD VQQDEw02YTY5MGFkNC1jMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2M3eBLVtUYkBC4kHEmmHkj5Th9/mdM1mjYZEN+LyxwiQxq+rzjjXv0G9C2QZ HlAanoG+FRI9ZZ5tznoUyyYwTr/+at1PIxXsQ9pjhXwOUisiZ56JAng/NqNutW0K U/UueJkY13mggOguqzNHzVDCWX9LWb9L/E4g3/ph8YEJl+ZYcx2HgEBw+ubj5eAw 6fOLhpasilYG+Cqg4NigRXGfgqxAq7ZpYEYSugeDrC6wfGDO4zssXidJ5NLn5lu7 lqX1KmWoMKFZank6s15ibt/jzsgIJsocg2NMjZaijevK0/rWTycWc6ID8GOIkjTX uKzC/a89t4ZPC4WASCGKPfTJ+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOSsbqU0 PG/inguWm2avZMnmKWL1MB8GA1UdIwQYMBaAFFwKtCXytCNeHIFWg71sjot7gLcn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhBOS8yQUEwNDMzMDk0 RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkxNGNnVmFEdld5T2kzdUF0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBcTBKZkswSTE0Y2dWYUR2V3lPaTN1QXR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhBOS8yQUEwNDMzMDk0RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkx NGNnVmFEdld5T2kzdUF0eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARGtirRkIEIRG8in8TwLJIuEjlSBeeVGSxR7MowEdFxuV4oU9aRjbRNTcN0Ym 4MgUfnT0MV2zonvlAMBiuHoZnHVpdPjsapSAic9UICbEEyqNRUFHvW/fnclfjH0M 517kud3SeVefkM/ux0qMPHwdye1JwAHLsjW5ITeNI7Eg2KFVuT1GWkFttZxbLlEW e0ALcPhqjL8PU0Y33dARHDtnfCvJDxD5OFQNXOEURsc+yX+bb9zkPOpp32R1appf vZeW8Kz2hJSNOGa1iy8gecJShlD6Vuo0zFXYAwH8B//J8/A44kDyt09A7LxCiQwc ohOp4sf5YZUttNDZ/DjvXebqtg== -----END CERTIFICATE-----Generated at Wed Jul 29 08:19:42 2026 by rpki-client