$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: gRwpI+GxjU/EprJDckna1sh5jPxk6omLf22VHEURwX0= Subject key identifier: 33:64:B7:9C:9D:A8:A6:0A:6A:2B:03:65:68:E5:F4:B3:82:AC:01:A7 Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: BC Signing time: Mon 27 Jul 2026 09:09:00 +0000 Manifest this update: Mon 27 Jul 2026 09:09:00 +0000 Manifest next update: Mon 03 Aug 2026 09:09:00 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: pR7tMLpQ4chSMKxooNbeb+r5t5bIaLvaTGpS7yqBKfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Jul 27 09:09:00 2026 GMT Not After : Aug 3 09:09:00 2026 GMT Subject: CN=6a67202c-bc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:36:76:af:89:6a:9a:71:f5:07:0b:81:d8: c5:44:f4:23:a3:7d:c6:e9:56:07:f0:8d:55:10:17: c5:ae:a7:b7:46:00:79:98:11:ff:5a:88:3b:e8:9d: a5:8c:01:76:d1:b1:e0:79:ca:0a:f7:b4:77:31:d8: 90:73:a9:1f:42:47:dd:b9:85:8f:fd:46:6b:59:4c: 26:e7:92:31:6c:71:c7:f3:83:64:94:8f:1b:eb:b3: 67:5d:bc:5b:1a:6a:0f:88:e4:c9:1f:4c:15:85:79: 9c:5a:24:c0:72:2d:f3:d2:8a:bf:88:85:58:ff:86: dc:d7:04:1e:d4:57:3e:cb:5c:cc:b5:e5:bd:7d:26: 51:0b:a5:47:69:49:c0:79:26:8f:6d:8e:05:73:27: 8f:bf:d8:a3:b0:56:5c:1d:8f:4f:dd:67:75:75:89: 1b:e3:1f:78:d4:82:a4:dd:ec:1e:ed:ca:46:c7:7d: f1:54:4b:c2:a1:52:2c:f3:50:78:13:63:2f:05:41: d2:11:9a:c5:70:9e:96:cb:8c:30:ef:fd:41:dd:4a: 95:c6:98:19:02:20:2f:8c:b1:94:1c:c6:84:76:a1: 0a:75:92:42:27:aa:db:53:88:5e:e9:ad:82:76:88: 82:54:9f:e0:a3:bd:22:c9:b6:e8:4d:ce:4e:2b:82: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:64:B7:9C:9D:A8:A6:0A:6A:2B:03:65:68:E5:F4:B3:82:AC:01:A7 X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:3e:31:30:1d:28:f4:5f:21:c7:e0:4a:ad:4c:fa:dd:e4: 53:40:97:61:9f:b1:4d:05:d0:93:24:d2:b0:d2:21:4f:ef:30: b9:49:40:b6:61:88:38:82:c1:04:54:03:d5:ea:85:14:94:33: cd:c3:48:c1:5c:0e:44:5e:72:2a:d2:ce:14:eb:21:37:b1:20: 71:63:52:95:6c:cc:c8:39:77:c9:3d:c2:eb:94:c9:eb:9e:ed: 5e:34:4c:82:45:d7:6a:ba:c7:78:53:9e:3e:9a:2a:a2:8f:bf: 55:61:b9:fc:97:d5:d9:a3:c6:c2:c4:5f:f4:a6:c0:9a:fe:3a: c6:63:0b:74:c6:c6:d4:6f:67:4c:34:74:13:9f:d8:8d:b3:cd: 65:70:de:0c:13:74:ea:9b:4c:34:3a:0f:2c:53:35:70:97:0c: 2f:f1:4f:20:ad:6b:d0:e8:35:35:01:80:4c:bf:be:f3:03:ea: 49:e3:c1:11:71:b2:01:f4:af:46:6a:9a:68:62:d2:e1:78:ab: 6f:3d:65:d7:d0:ce:ea:93:f7:5d:a1:ac:bb:1f:25:e6:a1:5f: 05:3a:e1:a7:93:0c:f5:e9:eb:9e:58:95:7b:bc:82:92:a1:eb: ae:69:5c:46:3c:e6:75:59:11:26:a8:81:11:1f:f5:78:a0:3e: cb:23:d4:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZEQzAxMTAvBgNVBAUTKDExN0MwRDZEMTlCRkJBNDhCNUZBOUU1MTdEMEU2OTI2 NTVDOThDNDQwHhcNMjYwNzI3MDkwOTAwWhcNMjYwODAzMDkwOTAwWjAYMRYwFAYD VQQDEw02YTY3MjAyYy1iYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv02dq+Jappx9QcLgdjFRPQjo33G6VYH8I1VEBfFrqe3RgB5mBH/Wog76J2l jAF20bHgecoK97R3MdiQc6kfQkfduYWP/UZrWUwm55IxbHHH84NklI8b67NnXbxb GmoPiOTJH0wVhXmcWiTAci3z0oq/iIVY/4bc1wQe1Fc+y1zMteW9fSZRC6VHaUnA eSaPbY4FcyePv9ijsFZcHY9P3Wd1dYkb4x941IKk3ewe7cpGx33xVEvCoVIs81B4 E2MvBUHSEZrFcJ6Wy4ww7/1B3UqVxpgZAiAvjLGUHMaEdqEKdZJCJ6rbU4he6a2C doiCVJ/go70iybboTc5OK4K8cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNkt5yd qKYKaisDZWjl9LOCrAGnMB8GA1UdIwQYMBaAFBF8DW0Zv7pItfqeUX0OaSZVyYxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkRDMC8zMzExRjBFRTY5 RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3VraTEtcDVSZlE1cEpsWEpq RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkRDMC8zMzExRjBFRTY5RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3Vr aTEtcDVSZlE1cEpsWEpqRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMmw+MTAdKPRfIcfgSq1M+t3kU0CXYZ+xTQXQkyTSsNIhT+8wuUlAtmGIOILB BFQD1eqFFJQzzcNIwVwORF5yKtLOFOshN7EgcWNSlWzMyDl3yT3C65TJ657tXjRM gkXXarrHeFOePpoqoo+/VWG5/JfV2aPGwsRf9KbAmv46xmMLdMbG1G9nTDR0E5/Y jbPNZXDeDBN06ptMNDoPLFM1cJcML/FPIK1r0Og1NQGATL++8wPqSePBEXGyAfSv RmqaaGLS4Xirbz1l19DO6pP3XaGsux8l5qFfBTrhp5MM9enrnliVe7yCkqHrrmlc RjzmdVkRJqiBER/1eKA+yyPUIA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:48:31 2026 by rpki-client