$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: x0oQx1S6OKj/4JmZ4IAPjQftklH37EJNlEcAzFORUe8= Subject key identifier: 7E:E8:DD:10:93:35:8B:6C:CA:AB:38:F5:25:EC:C2:95:AD:A5:3C:FA Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0DBD Signing time: Tue 28 Jul 2026 18:04:50 +0000 Manifest this update: Tue 28 Jul 2026 18:04:50 +0000 Manifest next update: Tue 04 Aug 2026 18:04:50 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: AfI4SNlYrzLEcrA2VpO9LrpNP6XhS0o3oTckoeH0Wjw=) 2: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A=) 3: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE=) 4: 762C16422E9811F1A14B442FB4833773.roa (hash: 6dVRqPwjNiBJWT/1IpcKvHD9YdgtV5RR7uiRlRvanfU=) 5: 6EA46446646511EFA9435879C4F9AE02.roa (hash: Rm8WBz8x56PvMmTC5b3xeemfV4sCOqTUTfsfsAfIyMw=) 6: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k=) 7: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: DcSbAXQAEFzo+aMwVJQyGPJY+2j/avyksp+4rQcX5Ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3578 (0xdfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Jul 28 18:04:50 2026 GMT Not After : Aug 4 18:04:50 2026 GMT Subject: CN=6a68ef42-9acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:c1:ff:30:64:29:8d:d4:56:a8:82:b7:84: bf:fc:c8:d4:e1:c1:21:0c:29:46:f4:9e:95:dc:bc: 51:42:04:f7:c7:47:6a:34:52:43:2a:02:17:cd:5f: ff:ad:75:15:7a:7e:8e:4e:e8:45:a8:b2:5c:1e:7a: 7a:72:81:f5:f5:5d:12:1e:95:6d:72:01:25:4b:e4: cb:db:ed:4b:ee:ec:79:2f:41:bb:c5:3c:01:6d:cc: b8:90:44:fe:68:0f:50:27:07:2e:93:ff:33:28:f7: fe:2f:e6:55:91:94:7c:fe:59:0c:f4:9c:6e:00:bb: 53:06:98:f4:36:e3:f2:90:be:a1:d8:5b:96:cd:24: d7:75:e2:0c:e8:2a:21:88:b0:95:60:69:27:6d:b3: 95:b3:ac:84:e3:ca:4a:7c:ed:f7:5e:05:4d:e0:2c: 84:b9:56:e3:06:cf:01:a4:77:b8:1d:27:fa:1c:f4: 3f:ad:02:b4:1f:10:e2:c6:e9:40:76:8e:7d:1d:e4: 6f:a3:f9:c9:e2:f7:cf:6f:01:4f:6f:7e:fd:5a:d3: 2d:e5:50:ed:f1:fc:d4:b8:ac:67:dc:71:f4:5f:4b: 2f:cc:89:fa:6d:18:4c:e7:3e:ac:d8:94:36:ae:ef: 54:c5:2e:02:6e:6d:d6:4d:86:5e:66:e1:6e:bf:a8: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E8:DD:10:93:35:8B:6C:CA:AB:38:F5:25:EC:C2:95:AD:A5:3C:FA X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:08:9e:13:7e:7d:69:f7:e2:93:e5:f3:77:d6:c3:f1:f7:50: c9:f5:f8:2e:49:50:fd:62:64:04:a1:5c:c2:07:48:c2:8a:27: 9e:4e:c2:0c:57:14:5f:82:c3:10:a7:1e:62:a6:d6:a3:c9:c8: 10:96:02:0c:75:ac:15:22:a3:6f:81:9d:5e:62:c0:3d:f5:21: ce:45:96:41:5b:6f:a6:ce:c2:b1:d7:fb:7a:74:52:0d:4f:bf: a7:dc:50:b0:3f:7a:7e:52:bf:23:76:32:8d:99:43:d4:4b:9b: a1:63:81:4c:cf:1c:03:a1:67:ca:8e:2c:85:d2:47:91:16:ea: 7d:33:19:d8:2d:63:40:94:06:ed:ad:b9:67:c7:49:42:34:93: 8a:99:ee:e4:32:9c:13:ce:85:cd:b4:69:7c:d6:cd:b3:28:0b: 53:3a:7a:21:22:2b:bb:fb:f4:71:85:8d:e0:ef:8c:5d:08:99: ac:73:17:8f:a4:a9:ab:6b:35:bf:16:4d:7c:13:12:1e:6c:6b: 70:c4:27:50:c8:4f:ed:14:62:a2:5f:15:1d:7f:6d:fa:b8:90: 8e:2f:f4:62:10:e0:8c:76:23:dd:5e:76:5a:3a:7f:a9:e3:66: 87:ab:97:ec:d2:9b:c1:b8:36:e5:0f:ef:4c:1b:3d:f2:bc:a8: fd:0a:c0:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwNzI4MTgwNDUwWhcNMjYwODA0MTgwNDUwWjAYMRYwFAYD VQQDEw02YTY4ZWY0Mi05YWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZ/B/zBkKY3UVqiCt4S//MjU4cEhDClG9J6V3LxRQgT3x0dqNFJDKgIXzV// rXUVen6OTuhFqLJcHnp6coH19V0SHpVtcgElS+TL2+1L7ux5L0G7xTwBbcy4kET+ aA9QJwcuk/8zKPf+L+ZVkZR8/lkM9JxuALtTBpj0NuPykL6h2FuWzSTXdeIM6Coh iLCVYGknbbOVs6yE48pKfO33XgVN4CyEuVbjBs8BpHe4HSf6HPQ/rQK0HxDixulA do59HeRvo/nJ4vfPbwFPb379WtMt5VDt8fzUuKxn3HH0X0svzIn6bRhM5z6s2JQ2 ru9UxS4Cbm3WTYZeZuFuv6i8LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7o3RCT NYtsyqs49SXswpWtpTz6MB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjAieE359affik+Xzd9bD8fdQyfX4LklQ/WJkBKFcwgdIwoonnk7CDFcUX4LD EKceYqbWo8nIEJYCDHWsFSKjb4GdXmLAPfUhzkWWQVtvps7Csdf7enRSDU+/p9xQ sD96flK/I3YyjZlD1EuboWOBTM8cA6Fnyo4shdJHkRbqfTMZ2C1jQJQG7a25Z8dJ QjSTipnu5DKcE86FzbRpfNbNsygLUzp6ISIru/v0cYWN4O+MXQiZrHMXj6Spq2s1 vxZNfBMSHmxrcMQnUMhP7RRiol8VHX9t+riQji/0YhDgjHYj3V52Wjp/qeNmh6uX 7NKbwbg25Q/vTBs98ryo/QrAdg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:48:59 2026 by rpki-client