$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft File: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json) Hash identifier: /fy0xCL96KbENXfW1rHeDF9cCj44WPBn2vJXrBsfC1s= Subject key identifier: 5A:8F:54:83:E9:3A:ED:62:E0:20:31:51:ED:50:C8:8A:44:61:1B:52 Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 Certificate issuer: /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft Manifest number: CA Signing time: Tue 21 Jul 2026 08:35:32 +0000 Manifest this update: Tue 21 Jul 2026 08:35:32 +0000 Manifest next update: Tue 28 Jul 2026 08:35:32 +0000 Files and hashes: 1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: DE8T1i4zxRRraG70jPV0DMeILMcaIm5v/8NBw4ExZaw=) 2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: tlq/2xG0yhdoKwT6Az/0eNkst0Iretd6YucgKMDqYag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Validity Not Before: Jul 21 08:35:32 2026 GMT Not After : Jul 28 08:35:32 2026 GMT Subject: CN=6a5f2f54-ced7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:21:6b:2a:55:44:5b:cd:a6:e1:2d:a9:94: d8:57:28:1b:15:ba:b7:a7:e1:37:c7:a0:c1:97:6a: 11:10:a8:9e:df:58:89:84:0e:38:97:2a:44:6f:72: 0a:70:71:ff:5b:20:ec:e0:ad:46:86:6c:9e:7d:67: 19:e7:8b:0a:77:53:a8:77:95:6e:ae:0c:df:63:9a: ba:5a:b1:4c:19:ab:11:b5:29:84:09:98:5b:e2:11: 48:cd:e3:5d:6c:95:19:41:ee:6c:5b:af:a7:3b:20: 8f:0a:ab:53:b2:43:f4:f1:17:38:0f:e4:1e:bb:bf: 91:b3:1e:d5:f8:e5:22:a9:24:92:b8:44:aa:ae:d0: b0:7d:ce:e8:f2:32:60:30:7a:07:5e:bb:ef:2e:40: 2a:1b:f1:25:8d:c9:38:52:f9:6a:5f:8b:14:db:0e: dc:dd:b0:9d:1d:d7:4d:f3:9d:a7:32:56:16:34:ca: 24:37:0b:10:22:05:3e:ea:9a:2b:b2:7c:4c:ed:a6: 52:69:eb:65:54:52:91:4d:fb:c4:3d:a6:32:10:5c: 53:ab:4a:eb:7d:db:c4:55:e9:6d:3d:9f:7b:49:12: d6:c7:c7:c6:50:41:2f:ab:2f:34:3c:9c:7d:5c:ad: 64:69:f6:15:6a:79:82:78:20:e0:ce:72:84:17:d9: 1f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8F:54:83:E9:3A:ED:62:E0:20:31:51:ED:50:C8:8A:44:61:1B:52 X509v3 Authority Key Identifier: keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:ea:33:55:15:ff:38:0e:6e:f9:67:d2:4a:4c:a2:c4:a3:e8: 82:a2:9a:ca:71:00:ee:ae:55:65:23:a6:ac:44:37:c0:44:1a: 73:1a:2f:7e:95:1e:ed:64:79:19:a0:a9:d9:e6:8d:cb:11:63: 80:ec:32:83:4d:18:c6:0f:36:74:5e:da:e1:b9:00:63:09:be: 72:1e:0e:9c:4f:94:85:88:32:26:24:8f:7a:52:70:87:5d:bf: f9:5c:87:6a:aa:a4:3b:b9:7c:73:9c:5b:9e:8e:57:5e:d8:27: 84:16:25:81:18:f3:73:1c:69:52:1c:a7:a2:4e:ac:12:87:3a: 96:93:c1:d0:a2:56:59:fd:7f:65:cd:f5:91:23:f6:ea:72:82: 3b:dc:ba:16:e8:8e:03:0b:64:89:f2:23:df:7a:6a:0b:55:0b: 5a:9d:0e:13:27:dd:02:55:44:bb:4c:94:ad:ab:db:6b:35:57: a1:31:b8:bd:a8:ce:02:54:ba:63:ad:4b:7b:23:3d:9d:f0:e9: 49:90:a9:09:f2:67:04:2f:22:5c:4f:3a:6b:97:48:fe:43:97: 73:53:1f:1e:52:7f:80:67:3b:bc:51:da:be:ba:ce:67:12:5f: 84:d9:ab:ef:56:26:8c:62:54:2c:67:b9:5c:bb:da:d9:3d:b3: 8e:4a:bb:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNzIxMTAvBgNVBAUTKDVFNjBCODREQjkxQjZDMDg2NTAyMENFMEYyMDZDNTM0 OUU0QjgzNDgwHhcNMjYwNzIxMDgzNTMyWhcNMjYwNzI4MDgzNTMyWjAYMRYwFAYD VQQDEw02YTVmMmY1NC1jZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLAhaypVRFvNpuEtqZTYVygbFbq3p+E3x6DBl2oREKie31iJhA44lypEb3IK cHH/WyDs4K1GhmyefWcZ54sKd1Ood5VurgzfY5q6WrFMGasRtSmECZhb4hFIzeNd bJUZQe5sW6+nOyCPCqtTskP08Rc4D+Qeu7+Rsx7V+OUiqSSSuESqrtCwfc7o8jJg MHoHXrvvLkAqG/Eljck4UvlqX4sU2w7c3bCdHddN852nMlYWNMokNwsQIgU+6por snxM7aZSaetlVFKRTfvEPaYyEFxTq0rrfdvEVeltPZ97SRLWx8fGUEEvqy80PJx9 XK1kafYVanmCeCDgznKEF9kf/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqPVIPp Ou1i4CAxUe1QyIpEYRtSMB8GA1UdIwQYMBaAFF5guE25G2wIZQIM4PIGxTSeS4NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM3Mi9FNkQ5NTI2MDU5 QTAxMUYwODI4NkQzMzJDNEY5QUUwMi9YbUM0VGJrYmJBaGxBZ3pnOGdiRk5KNUxn MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1htQzRUYmtiYkFobEFnemc4Z2JGTko1TGcwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM3Mi9FNkQ5NTI2MDU5QTAxMUYwODI4NkQzMzJDNEY5QUUwMi9YbUM0VGJrYmJB aGxBZ3pnOGdiRk5KNUxnMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw+ozVRX/OA5u+WfSSkyixKPogqKaynEA7q5VZSOmrEQ3wEQacxovfpUe7WR5 GaCp2eaNyxFjgOwyg00Yxg82dF7a4bkAYwm+ch4OnE+UhYgyJiSPelJwh12/+VyH aqqkO7l8c5xbno5XXtgnhBYlgRjzcxxpUhynok6sEoc6lpPB0KJWWf1/Zc31kSP2 6nKCO9y6FuiOAwtkifIj33pqC1ULWp0OEyfdAlVEu0yUravbazVXoTG4vajOAlS6 Y61LeyM9nfDpSZCpCfJnBC8iXE86a5dI/kOXc1MfHlJ/gGc7vFHavrrOZxJfhNmr 71YmjGJULGe5XLva2T2zjkq7zw== -----END CERTIFICATE-----Generated at Wed Jul 22 00:42:59 2026 by rpki-client