$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: wuASU37ZpHyPI+/tMPiqHtSg6foZy+LXEW2dRma80/Y= Subject key identifier: 98:88:BE:29:20:6C:BD:40:E2:C0:44:3E:23:35:2B:23:7F:2F:DC:DA Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0AF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0AE4 Signing time: Tue 28 Jul 2026 19:42:15 +0000 Manifest this update: Tue 28 Jul 2026 19:42:15 +0000 Manifest next update: Tue 04 Aug 2026 19:42:15 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: YGAH9o0gkqUKk5+YlDAU/SapnUETAlzZJDZSmhfTCuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Jul 28 19:42:15 2026 GMT Not After : Aug 4 19:42:15 2026 GMT Subject: CN=6a690617-c3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:27:ef:e0:e8:29:de:78:6e:73:4b:d5:1f: 4d:a9:d7:1c:15:a5:23:14:69:60:e3:1b:20:a4:b3: ef:52:06:e1:42:6e:e7:6a:14:99:5e:9d:96:fb:05: 57:a4:34:f2:f7:23:38:2f:dd:e2:fd:24:f7:3f:e8: c3:d2:70:c3:84:0a:b9:03:b0:23:04:e6:c0:0c:cc: 0a:d3:38:53:dd:3e:75:4c:00:eb:e9:5d:32:f3:7c: 78:ee:fb:50:d8:5e:b8:8a:6e:f2:31:dd:71:63:af: 0a:9a:28:62:75:29:86:1b:2c:2d:0d:ca:d2:4d:a4: 49:62:cd:f0:ac:e2:5b:bd:b8:bf:58:88:ca:2b:2d: 61:32:ad:a6:70:23:2b:de:06:6c:bc:9a:3e:f2:e1: 47:40:e7:4e:49:51:41:10:45:3e:db:d5:86:42:37: c1:40:66:51:38:10:26:cb:d0:e4:ef:31:df:5d:82: a4:5f:c4:ba:a3:fb:a9:bc:fb:9f:52:fa:3b:b7:77: 40:16:18:cb:fd:4b:62:24:0a:e9:bd:51:59:18:af: 6c:10:86:93:e7:e8:fb:9d:32:2d:44:67:55:33:f4: 8c:3f:f5:f8:a3:f9:09:4f:69:be:01:04:de:e5:3e: 18:1d:6f:98:35:7c:7c:c3:90:56:5e:b2:11:e8:86: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:88:BE:29:20:6C:BD:40:E2:C0:44:3E:23:35:2B:23:7F:2F:DC:DA X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:dd:40:b0:79:94:85:82:5c:e6:ac:95:d5:f4:36:0b:81:33: cd:e7:d1:5e:ba:ef:54:23:9f:86:c8:47:db:12:43:6d:c7:4f: ab:9f:84:16:e6:ad:6a:f9:77:ff:e3:b1:b6:8f:e1:39:4f:84: 30:74:73:f8:87:bf:cd:c1:d5:d5:fa:3e:6e:2b:3e:a3:9b:6b: dd:18:e2:20:96:6a:29:97:08:de:7c:da:b4:4f:a1:45:93:fc: 3b:17:de:3b:15:06:dd:aa:f0:6b:04:2c:ca:c2:d0:b5:32:65: d5:c2:9c:7e:b4:fb:22:8e:ff:00:96:27:44:10:9a:37:e4:00: a2:89:f5:1f:2b:55:bd:c8:a1:33:a3:e8:7b:b6:0b:1b:5e:60: ea:3f:53:e1:7d:d4:98:bb:33:07:4a:dc:ef:9b:1b:78:92:8e: 28:49:a7:0a:dc:5d:8e:71:94:f3:c9:48:a4:5b:e5:27:b3:eb: 68:a2:31:97:e7:9d:57:b1:19:8e:25:c0:71:35:62:d6:df:97: cc:dc:aa:9f:3e:68:3e:5c:1a:62:67:49:ea:9a:8f:aa:e6:bd: d9:4d:92:98:40:9a:f9:da:d8:47:05:58:4c:a1:19:0c:82:22: 3c:b7:58:d9:39:27:de:c5:9f:95:61:ad:89:d1:f5:c9:d4:0f: 3b:eb:4c:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjYwNzI4MTk0MjE1WhcNMjYwODA0MTk0MjE1WjAYMRYwFAYD VQQDEw02YTY5MDYxNy1jM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovsn7+DoKd54bnNL1R9NqdccFaUjFGlg4xsgpLPvUgbhQm7nahSZXp2W+wVX pDTy9yM4L93i/ST3P+jD0nDDhAq5A7AjBObADMwK0zhT3T51TADr6V0y83x47vtQ 2F64im7yMd1xY68KmihidSmGGywtDcrSTaRJYs3wrOJbvbi/WIjKKy1hMq2mcCMr 3gZsvJo+8uFHQOdOSVFBEEU+29WGQjfBQGZROBAmy9Dk7zHfXYKkX8S6o/upvPuf Uvo7t3dAFhjL/UtiJArpvVFZGK9sEIaT5+j7nTItRGdVM/SMP/X4o/kJT2m+AQTe 5T4YHW+YNXx8w5BWXrIR6IZP3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiIvikg bL1A4sBEPiM1KyN/L9zaMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWt1AsHmUhYJc5qyV1fQ2C4EzzefRXrrvVCOfhshH2xJDbcdPq5+EFuatavl3 /+Oxto/hOU+EMHRz+Ie/zcHV1fo+bis+o5tr3RjiIJZqKZcI3nzatE+hRZP8Oxfe OxUG3arwawQsysLQtTJl1cKcfrT7Io7/AJYnRBCaN+QAoon1HytVvcihM6Poe7YL G15g6j9T4X3UmLszB0rc75sbeJKOKEmnCtxdjnGU88lIpFvlJ7PraKIxl+edV7EZ jiXAcTVi1t+XzNyqnz5oPlwaYmdJ6pqPqua92U2SmECa+drYRwVYTKEZDIIiPLdY 2Tkn3sWflWGtidH1ydQPO+tMyw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:32:19 2026 by rpki-client