$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: otxejn7SrSOLFhsdtIURsuiNIxBS7R58TkDG8m74wQU= Subject key identifier: EC:58:5F:FE:85:9A:70:0C:C9:38:7F:E0:EF:29:90:28:1A:97:10:44 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 3583 Signing time: Tue 28 Jul 2026 14:18:39 +0000 Manifest this update: Tue 28 Jul 2026 14:18:38 +0000 Manifest next update: Tue 04 Aug 2026 14:18:38 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: 2EbBoOl0gucw9mQaz8pQwoybQHyELAwQvGOiBzlStVk=) 2: B683232C65AA11F1B5A6BBF27847A888.roa (hash: ui+fKkNRAL+b96meDYqRb3fMZ9lGNQU6S4pF6IMCEJk=) 3: 1F40296A65AA11F1A2780DB67847A888.roa (hash: xCeE3NkSHLJX8hWD3lcocXTFRBLR4NjlfyWa7eSQ5Q0=) 4: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: x1jt7itPjnC6MQbNejsBQgbeqBxLH2bZYuNPNtNXfYM=) 5: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: x81djxirc4TZ7LBWsfaYDwm6dEqBh0TJcdGGB4pBfl8=) 6: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: uTwgdWpEtjV1ALHAM8OqP3F4AfwGv1rbWW6ZiHZWVyg=) 7: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: kemAcHttVJ/67VTbPvla1uxc5lCQKg8ypYYWxu51V6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13743 (0x35af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Jul 28 14:18:38 2026 GMT Not After : Aug 4 14:18:38 2026 GMT Subject: CN=6a68ba3e-cc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:28:ab:2d:9b:4c:c6:8a:d4:90:db:21:21: 58:d8:c4:3b:39:d2:39:d4:55:3b:37:eb:ee:f7:e7: 66:49:25:b1:d6:8f:36:fa:28:fd:6a:c1:6c:d7:77: c1:40:e0:ca:90:9a:52:1a:62:c5:12:39:c3:55:27: f9:30:87:1b:bf:59:d4:d6:7d:40:f6:9c:b8:e1:cf: bc:b8:b6:b6:cc:38:7a:d3:b7:80:f7:fe:cf:40:4a: 38:21:07:bb:4b:b9:22:8b:45:c4:7e:e1:68:40:3b: a7:c5:1c:5c:af:9e:49:99:33:cc:fc:19:34:5b:ea: d0:40:cc:5b:19:24:f9:9d:d9:97:ac:ac:0c:ff:84: e0:9d:16:ca:64:6a:c9:15:ae:b1:01:44:eb:66:c7: dc:25:2d:ac:0a:a0:c5:7f:a5:60:eb:81:97:eb:6e: c9:8d:2e:f4:58:13:9e:ea:48:eb:4e:25:7c:bd:21: 15:7e:a3:7e:f9:40:49:fc:c5:a3:d8:5c:13:5e:16: 7a:ef:40:36:e0:b2:b1:dd:ea:a3:f5:6a:a6:e1:a2: fa:16:5d:c6:f4:62:df:c8:bb:b6:b6:1d:cb:ce:19: aa:be:f6:40:27:e0:84:d6:fc:12:85:5f:4c:e5:c9: 20:15:7e:9c:e9:9b:d5:ad:8b:83:89:50:6f:41:f9: 3b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:58:5F:FE:85:9A:70:0C:C9:38:7F:E0:EF:29:90:28:1A:97:10:44 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:de:68:37:18:b6:79:60:35:46:de:e5:2b:70:87:a8:03:a9: d6:f1:2a:59:f2:66:a0:f7:67:ff:59:ae:64:cf:91:aa:b0:6a: 79:67:36:4b:0a:28:dd:02:d4:02:53:db:9f:32:de:ff:9a:11: 3f:cc:04:5b:c5:29:39:84:2b:25:8e:6e:61:09:93:89:00:fd: d1:6c:df:3e:04:39:8e:78:bf:d6:9c:c9:3e:4e:ae:43:4e:b9: 62:bf:ed:69:fe:fb:f7:5f:37:53:37:f8:1a:d0:92:2f:a7:af: 9b:d2:12:c6:29:a8:11:5b:10:d1:07:59:8f:0d:7c:7d:36:63: 98:6b:eb:8f:81:e3:b4:68:0c:1c:87:55:44:3f:69:f3:ff:e2: fc:82:39:7f:37:d8:81:1e:20:b9:d6:2a:f7:9a:6c:f2:97:f8: 3d:f9:a4:3d:6f:cb:78:2a:25:20:94:38:66:24:a7:f8:2d:77: 36:b1:a3:33:42:3c:1e:e3:bf:5d:4f:54:08:ec:bc:b8:a3:cc: 49:2b:f0:55:b5:7e:31:75:a3:0f:90:f3:58:4c:a4:39:dc:ce: c6:33:c4:ac:b7:21:fe:88:f8:0e:db:71:0c:bc:c7:0b:8c:a7: 81:49:52:a7:ff:ee:b5:97:19:27:60:6a:2b:54:bd:38:ce:5f: 1b:0d:70:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYwNzI4MTQxODM4WhcNMjYwODA0MTQxODM4WjAYMRYwFAYD VQQDEw02YTY4YmEzZS1jYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuO4oqy2bTMaK1JDbISFY2MQ7OdI51FU7N+vu9+dmSSWx1o82+ij9asFs13fB QODKkJpSGmLFEjnDVSf5MIcbv1nU1n1A9py44c+8uLa2zDh607eA9/7PQEo4IQe7 S7kii0XEfuFoQDunxRxcr55JmTPM/Bk0W+rQQMxbGST5ndmXrKwM/4TgnRbKZGrJ Fa6xAUTrZsfcJS2sCqDFf6Vg64GX627JjS70WBOe6kjrTiV8vSEVfqN++UBJ/MWj 2FwTXhZ670A24LKx3eqj9Wqm4aL6Fl3G9GLfyLu2th3LzhmqvvZAJ+CE1vwShV9M 5ckgFX6c6ZvVrYuDiVBvQfk7awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxYX/6F mnAMyTh/4O8pkCgalxBEMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf95oNxi2eWA1Rt7lK3CHqAOp1vEqWfJmoPdn/1muZM+RqrBqeWc2Swoo3QLU AlPbnzLe/5oRP8wEW8UpOYQrJY5uYQmTiQD90WzfPgQ5jni/1pzJPk6uQ065Yr/t af779183Uzf4GtCSL6evm9ISximoEVsQ0QdZjw18fTZjmGvrj4HjtGgMHIdVRD9p 8//i/II5fzfYgR4gudYq95ps8pf4PfmkPW/LeColIJQ4ZiSn+C13NrGjM0I8HuO/ XU9UCOy8uKPMSSvwVbV+MXWjD5DzWEykOdzOxjPErLch/oj4DttxDLzHC4yngUlS p//utZcZJ2BqK1S9OM5fGw1wlA== -----END CERTIFICATE-----Generated at Wed Jul 29 04:10:51 2026 by rpki-client