$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: vZyR9cNOQECX2jzFSzIdNZN8+QZBL89XgQALrNQyfGc= Subject key identifier: 22:B9:45:AE:A9:3B:B5:31:CE:E9:2F:4B:3C:5B:0E:CE:CE:D9:1E:60 Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 01F9 Signing time: Tue 21 Jul 2026 04:32:39 +0000 Manifest this update: Tue 21 Jul 2026 04:32:38 +0000 Manifest next update: Tue 28 Jul 2026 04:32:38 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: 6oKzR+oXnk9JNbyKymdAJCcsZaVMJlLNrqGP55KDDlA=) 2: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: 9nJcymyhJdyjosWxKF37Ye2GxMONKGYPO84iI01RFGA=) 3: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: m2Uv3v7XUW3vXrCq6wyXHCyPqWh0u6BnyHOlUQ7XuZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: Jul 21 04:32:38 2026 GMT Not After : Jul 28 04:32:38 2026 GMT Subject: CN=6a5ef666-bfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:1b:58:2f:94:eb:c3:53:5b:2b:b4:fb:3e: 0c:2e:ba:4d:74:64:21:a1:cf:02:93:ed:2a:67:a3: 63:b0:0f:5d:7a:41:81:58:bd:20:e7:3a:8e:f7:31: 39:2a:d0:31:6d:c6:35:a0:82:c3:b4:d4:8a:b5:6a: 0b:b5:da:aa:ed:94:64:fa:fe:19:22:91:25:9e:69: 4c:ed:49:97:3e:66:93:78:26:c6:f5:89:cb:7c:ef: 63:a7:bd:7d:a9:3b:22:f5:34:95:01:d7:d3:f6:34: f1:7b:66:b7:1d:7f:06:cb:fc:1b:33:71:07:bd:eb: 8f:f8:82:38:7c:43:a2:0b:15:b9:ce:74:63:98:49: d8:a7:f0:bd:1d:a5:18:0d:75:78:da:5c:73:c2:04: ff:0a:d5:b7:f6:25:7c:d4:9f:e1:c5:72:3e:03:40: e4:92:e3:4b:57:26:3e:7a:65:65:9e:52:50:02:fe: c1:3a:22:06:be:63:0c:4c:7d:93:39:e6:1a:3d:93: 7a:4c:89:91:5c:2a:da:90:66:e2:e3:3e:e2:11:cd: b8:65:55:82:6c:c6:ed:26:ad:30:99:50:77:c9:43: 53:6e:18:bf:86:53:f7:1f:a3:64:df:9e:01:80:d2: 6b:79:c5:e9:e9:dd:dd:87:c0:42:f7:57:1a:70:4a: 19:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B9:45:AE:A9:3B:B5:31:CE:E9:2F:4B:3C:5B:0E:CE:CE:D9:1E:60 X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2a:3b:11:ac:8a:9a:31:7b:dd:a3:29:52:f1:cc:3f:82:90: 6e:aa:8f:d1:2c:67:20:05:5f:2f:f6:53:87:b5:3d:80:3a:d0: 23:ac:4f:5b:f5:81:ab:d0:f4:35:eb:96:c4:aa:18:e4:23:45: b9:1c:57:6b:37:52:bc:0e:af:d9:6d:b5:19:2f:f2:47:6e:06: 5b:78:fd:a5:0b:ec:07:81:6e:fa:9a:08:67:ef:95:c3:43:01: 46:29:ba:e9:a4:37:ae:ad:5a:ce:8a:2f:7d:e0:c6:f1:74:6e: b7:5b:d7:9b:72:26:87:75:3c:53:7a:1b:5a:92:cb:50:b6:fd: 16:c8:67:ae:69:22:2b:db:70:04:e4:02:b1:e8:b4:1c:9f:f4: e9:84:20:32:71:62:cd:f1:a4:8b:7c:48:fb:30:10:ae:cb:b5: 46:66:f5:23:d2:5a:68:e5:33:8a:aa:4b:df:60:e6:0c:c7:c7: 4d:06:56:1e:05:e1:76:23:38:a4:35:5f:1e:ad:c9:29:70:85: d0:dc:7f:ae:71:c4:f0:9f:b2:20:3e:9d:fb:74:ae:ef:60:13: 8f:64:22:a9:ff:a9:82:85:b6:4d:27:00:64:5d:69:4e:7f:3d: 29:ed:0a:a0:dc:ea:aa:d9:12:0e:94:d6:77:8d:47:ce:94:b8: e5:e3:09:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjYwNzIxMDQzMjM4WhcNMjYwNzI4MDQzMjM4WjAYMRYwFAYD VQQDEw02YTVlZjY2Ni1iZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7MbWC+U68NTWyu0+z4MLrpNdGQhoc8Ck+0qZ6NjsA9dekGBWL0g5zqO9zE5 KtAxbcY1oILDtNSKtWoLtdqq7ZRk+v4ZIpElnmlM7UmXPmaTeCbG9YnLfO9jp719 qTsi9TSVAdfT9jTxe2a3HX8Gy/wbM3EHveuP+II4fEOiCxW5znRjmEnYp/C9HaUY DXV42lxzwgT/CtW39iV81J/hxXI+A0DkkuNLVyY+emVlnlJQAv7BOiIGvmMMTH2T OeYaPZN6TImRXCrakGbi4z7iEc24ZVWCbMbtJq0wmVB3yUNTbhi/hlP3H6Nk354B gNJrecXp6d3dh8BC91cacEoZNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCK5Ra6p O7UxzukvSzxbDs7O2R5gMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFyo7EayKmjF73aMpUvHMP4KQbqqP0SxnIAVfL/ZTh7U9gDrQI6xPW/WBq9D0 NeuWxKoY5CNFuRxXazdSvA6v2W21GS/yR24GW3j9pQvsB4Fu+poIZ++Vw0MBRim6 6aQ3rq1azoovfeDG8XRut1vXm3Imh3U8U3obWpLLULb9FshnrmkiK9twBOQCsei0 HJ/06YQgMnFizfGki3xI+zAQrsu1Rmb1I9JaaOUziqpL32DmDMfHTQZWHgXhdiM4 pDVfHq3JKXCF0Nx/rnHE8J+yID6d+3Su72ATj2Qiqf+pgoW2TScAZF1pTn89Ke0K oNzqqtkSDpTWd41HzpS45eMJGA== -----END CERTIFICATE-----Generated at Tue Jul 21 21:51:04 2026 by rpki-client