$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: cGpJs/HS6EvyJEs1XSR7i9/hFTPE9djN6WwWM7GGrlQ= Subject key identifier: 1D:9E:8E:B6:D0:2C:2C:CD:D7:77:CE:5E:9E:71:EE:C4:3F:3A:45:B0 Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: 01A8 Signing time: Mon 27 Jul 2026 05:55:14 +0000 Manifest this update: Mon 27 Jul 2026 05:55:14 +0000 Manifest next update: Mon 03 Aug 2026 05:55:14 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: It+H++QR1OxAxQJBLL1WCbij4dNQ/dZY8jbcAbC+aIg=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: 6+bY61LdDlam0PC7GuKMwEXRvre/3cSdh3l+aLkv2pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: Jul 27 05:55:14 2026 GMT Not After : Aug 3 05:55:14 2026 GMT Subject: CN=6a66f2c2-5ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:37:20:5d:f7:28:3e:25:04:ef:c6:0c:e2: 2c:27:f7:a6:f4:42:4c:36:75:41:fd:88:aa:0c:49: 0c:7f:9e:5d:52:64:ca:9a:06:a1:f2:2b:35:85:0d: 80:b9:aa:7e:a9:5b:5a:64:52:fb:d0:1e:e1:12:ce: 80:d6:c9:3d:f4:76:a8:31:58:e5:34:0c:54:96:f0: 7c:78:74:96:b0:b0:b6:39:3e:d8:81:c6:fe:0c:bd: fb:ec:d2:e8:76:73:0a:5b:8e:71:67:b8:ee:b4:72: 0b:f9:41:24:bb:6d:37:5b:24:c7:df:d0:2f:24:79: 1a:18:a8:9c:10:d6:9d:17:5f:e4:f1:6e:2b:42:7e: d6:72:4a:2b:4d:22:7c:03:17:08:0d:b3:42:d9:39: 84:a9:3f:25:81:27:8e:2f:02:05:92:88:30:0c:9a: 00:4b:8f:30:29:33:e3:6a:5e:f0:f6:63:0a:b9:f7: 9d:fb:97:08:4e:90:e0:b9:87:2f:49:f0:3c:41:fe: 5a:10:8a:78:0b:21:ed:46:03:92:1d:1d:42:f5:7d: 36:b6:a6:cf:88:8d:c1:a4:52:08:b7:27:5f:f6:c8: 21:ea:b0:9a:1e:2d:38:ba:19:65:a5:cd:c6:ef:28: 4e:30:52:a1:f0:29:98:f9:ec:2e:7c:2d:62:33:94: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9E:8E:B6:D0:2C:2C:CD:D7:77:CE:5E:9E:71:EE:C4:3F:3A:45:B0 X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b6:d9:a5:1a:95:74:f6:78:80:73:02:4c:de:58:35:34:80: fd:d2:c7:cf:a9:7c:7a:7d:05:73:d6:ec:57:24:99:c0:87:aa: ea:b0:bc:ee:a4:24:eb:99:02:5a:c5:c5:bc:de:8e:90:fa:00: fb:b9:f2:fd:a2:c1:13:b5:69:a6:2b:5a:56:85:e2:11:bf:44: bb:f7:10:c0:a1:e0:64:38:67:9d:79:a0:e0:9d:65:c1:e0:12: ea:4a:6e:fc:14:0a:13:cc:b7:7c:f3:e6:c0:77:bc:54:61:a6: e3:9e:be:2c:a8:81:d8:e7:dd:d9:7e:14:cb:72:95:c0:cc:48: df:47:ab:87:e9:7c:5e:7e:3e:fc:e7:a4:65:6b:31:e1:02:21: 79:22:15:55:75:cf:50:d2:8e:25:c4:15:ed:fc:fe:4e:e8:57: 65:f4:e4:9e:70:fe:ff:5d:50:ee:30:d3:e6:ef:5f:71:56:9f: f1:5f:0e:94:96:54:e1:ae:46:56:25:6b:85:e8:23:ad:91:7c: e3:8c:40:91:3c:1e:95:f4:70:7b:d3:ea:b1:25:35:fb:71:85: 73:57:7c:11:e6:32:ed:34:07:08:80:9e:49:62:49:0e:9f:a9: 98:45:78:ca:16:b4:5d:80:2a:2b:2f:92:c8:5f:cd:4f:a4:99: bb:51:22:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjYwNzI3MDU1NTE0WhcNMjYwODAzMDU1NTE0WjAYMRYwFAYD VQQDEw02YTY2ZjJjMi01YWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbs3IF33KD4lBO/GDOIsJ/em9EJMNnVB/YiqDEkMf55dUmTKmgah8is1hQ2A uap+qVtaZFL70B7hEs6A1sk99HaoMVjlNAxUlvB8eHSWsLC2OT7Ygcb+DL377NLo dnMKW45xZ7jutHIL+UEku203WyTH39AvJHkaGKicENadF1/k8W4rQn7WckorTSJ8 AxcIDbNC2TmEqT8lgSeOLwIFkogwDJoAS48wKTPjal7w9mMKufed+5cITpDguYcv SfA8Qf5aEIp4CyHtRgOSHR1C9X02tqbPiI3BpFIItydf9sgh6rCaHi04uhllpc3G 7yhOMFKh8CmY+ewufC1iM5T1jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2ejrbQ LCzN13fOXp5x7sQ/OkWwMB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0 S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQbbZpRqVdPZ4gHMCTN5YNTSA/dLHz6l8en0Fc9bsVySZwIeq6rC87qQk65kC WsXFvN6OkPoA+7ny/aLBE7VppitaVoXiEb9Eu/cQwKHgZDhnnXmg4J1lweAS6kpu /BQKE8y3fPPmwHe8VGGm456+LKiB2Ofd2X4Uy3KVwMxI30erh+l8Xn4+/OekZWsx 4QIheSIVVXXPUNKOJcQV7fz+TuhXZfTknnD+/11Q7jDT5u9fcVaf8V8OlJZU4a5G ViVrhegjrZF844xAkTwelfRwe9PqsSU1+3GFc1d8EeYy7TQHCICeSWJJDp+pmEV4 yha0XYAqKy+SyF/NT6SZu1EiEw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:11 2026 by rpki-client