$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json) Hash identifier: i3v/LZgVbnYUJrLVqCzV3g0jHQ0FrxM7o+iI9Gzu0HM= Subject key identifier: 4F:2D:A1:F5:E8:98:EB:6A:25:1F:9E:72:75:6D:D6:3C:EF:93:CB:26 Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft Manifest number: 0545 Signing time: Tue 21 Jul 2026 00:16:24 +0000 Manifest this update: Tue 21 Jul 2026 00:16:23 +0000 Manifest next update: Tue 28 Jul 2026 00:16:23 +0000 Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: dZqL+tkVW0oUcM1CAENG9pI2asbvjgVBD6X4dgaX3jY=) 2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: d542I90WWDGGQbicaXbMdjG+yHM90agVdnOM5BcvIy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: Jul 21 00:16:23 2026 GMT Not After : Jul 28 00:16:23 2026 GMT Subject: CN=6a5eba58-08ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ce:1a:52:e8:35:51:e0:61:f8:a1:3b:5f:f8: 4a:11:23:45:98:23:4a:79:18:09:ef:e6:fe:8e:2d: c4:da:48:b0:82:eb:a4:86:0b:ef:77:d7:d2:38:7b: ed:d0:a1:b3:f4:54:73:cf:31:8f:93:cb:a7:75:e1: 52:78:84:27:db:af:a9:5a:d5:31:d9:f3:83:32:86: 19:21:3f:a4:b1:67:ba:50:40:d9:8e:87:8f:5d:01: f2:2a:e9:ef:07:b5:7f:a3:dd:91:ad:e1:e5:cd:73: 0c:af:72:e5:e0:0c:83:a3:3e:d5:fa:f2:43:42:cd: 47:2d:02:4e:38:8e:1c:77:18:aa:d2:0d:e2:51:12: ea:0b:89:d1:2d:bf:98:81:36:f0:e9:d7:f8:ac:d8: 76:0a:a0:c4:fd:f0:d6:8a:6e:30:f8:cd:81:e9:5a: e8:c6:b0:e2:96:9b:58:d5:db:9b:03:c4:a8:9f:d0: be:66:18:84:8f:8c:cc:3b:15:63:cf:2b:4d:13:8a: 13:03:40:c8:3c:8e:84:22:1c:c8:eb:9f:18:da:3d: 81:38:35:6c:dc:cb:b2:6e:da:ea:78:f8:57:81:f2: 38:c6:72:91:90:06:65:fb:d7:45:7f:18:5e:88:d5: c3:1a:cc:84:56:5d:92:44:0f:4d:1d:09:9b:47:70: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2D:A1:F5:E8:98:EB:6A:25:1F:9E:72:75:6D:D6:3C:EF:93:CB:26 X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4a:a5:db:fb:11:bf:e7:e6:a9:c1:8e:32:09:53:33:86:cd: d8:3e:b6:bf:50:9d:fb:ef:4f:89:9a:8f:b3:8f:8a:89:fa:43: d1:b3:65:62:b6:e4:9e:15:8a:7a:8f:39:f9:42:47:4a:e9:a1: 69:b1:49:20:93:8c:68:ea:cf:54:b6:9b:3d:15:00:d6:e9:c8: db:45:8d:8b:09:22:32:93:40:78:73:3a:7d:0c:c6:52:80:30: d5:3c:e2:91:20:81:29:af:f9:81:83:6b:85:e0:a7:f4:6e:f5: 1b:79:d8:4c:3d:30:cb:95:d6:e8:68:58:bc:cb:e6:84:90:a4: e3:bc:7d:27:b5:71:1c:ec:86:6a:4c:ca:6f:3f:0f:45:f3:2a: 90:92:9a:b3:c3:ae:43:e1:c8:ff:65:06:7d:55:cc:bc:b8:a1: 65:c4:ad:d7:c4:4b:49:13:ce:2e:a1:df:23:d1:8e:72:98:85: 2c:69:71:93:44:78:a6:07:ac:87:5f:94:2d:70:b9:6b:b1:fa: a3:3c:00:48:09:24:04:92:c2:7f:b0:6a:f8:af:80:6e:bb:4e: fb:56:ff:ce:c5:03:5c:3e:62:50:b1:87:98:50:b7:7d:f5:1e: 4a:af:76:80:23:38:70:68:ab:bc:b2:3e:4b:31:6e:61:2a:6e: 34:9e:0a:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjYwNzIxMDAxNjIzWhcNMjYwNzI4MDAxNjIzWjAYMRYwFAYD VQQDEw02YTVlYmE1OC0wOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8c4aUug1UeBh+KE7X/hKESNFmCNKeRgJ7+b+ji3E2kiwguukhgvvd9fSOHvt 0KGz9FRzzzGPk8undeFSeIQn26+pWtUx2fODMoYZIT+ksWe6UEDZjoePXQHyKunv B7V/o92RreHlzXMMr3Ll4AyDoz7V+vJDQs1HLQJOOI4cdxiq0g3iURLqC4nRLb+Y gTbw6df4rNh2CqDE/fDWim4w+M2B6VroxrDilptY1dubA8Son9C+ZhiEj4zMOxVj zytNE4oTA0DIPI6EIhzI658Y2j2BODVs3MuybtrqePhXgfI4xnKRkAZl+9dFfxhe iNXDGsyEVl2SRA9NHQmbR3Ay0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8tofXo mOtqJR+ecnVt1jzvk8smMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O YVdwY0dwLW5ncDlsSnp5bmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnEql2/sRv+fmqcGOMglTM4bN2D62v1Cd++9PiZqPs4+KifpD0bNlYrbknhWK eo85+UJHSumhabFJIJOMaOrPVLabPRUA1unI20WNiwkiMpNAeHM6fQzGUoAw1Tzi kSCBKa/5gYNrheCn9G71G3nYTD0wy5XW6GhYvMvmhJCk47x9J7VxHOyGakzKbz8P RfMqkJKas8OuQ+HI/2UGfVXMvLihZcSt18RLSRPOLqHfI9GOcpiFLGlxk0R4pges h1+ULXC5a7H6ozwASAkkBJLCf7Bq+K+AbrtO+1b/zsUDXD5iULGHmFC3ffUeSq92 gCM4cGirvLI+SzFuYSpuNJ4Ksw== -----END CERTIFICATE-----Generated at Wed Jul 22 04:41:15 2026 by rpki-client