$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: 8L3tt5p9IbtTYe1nEZVitsOvKCmxUGWGmS3QKjR7p6g= Subject key identifier: D0:17:68:CF:0B:EF:DD:D1:FB:4C:5F:D4:F0:05:C1:96:78:FC:D4:8D Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0F14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0EE0 Signing time: Sun 26 Jul 2026 17:53:24 +0000 Manifest this update: Sun 26 Jul 2026 17:53:24 +0000 Manifest next update: Sun 02 Aug 2026 17:53:24 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: z/7f98R71NQUbCvpJ4/jPEfFAW/jLaqsOISL/dyiq9Y=) 2: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E+4UeHlGnBHL9IRmWm+TexcyHwom9b/OOAx0STjQIo0=) 3: 670DF186232111EB9896B783C4F9AE02.roa (hash: JDnnr+gXElLZfFNqxroiEtHe91q0ZicgMHi1XY427Ss=) 4: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: IJy6vq3u18sfK/PaqQ4HkbGHvtQ0+WpPPGjw18M6VWY=) 5: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: xo+tt5lov3udnd3XAOiK90QcwkAcxMUW1iuUC+4M+z8=) 6: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: bKvSPuftAoTubmq1z1G2lBaSXWyaRfT8vN+YYMv11yI=) 7: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: jPTrigcWq4coxSH4UL7oP5hGP5jZz/yTxLEnnmOBFlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 17:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3860 (0xf14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Jul 26 17:53:24 2026 GMT Not After : Aug 2 17:53:24 2026 GMT Subject: CN=6a664994-dbad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:32:f6:b8:1e:7c:12:65:08:a7:cf:db:ef:78: 5d:17:ed:03:db:52:04:7f:c8:5d:0f:0f:ff:c7:48: a8:2d:a8:71:33:27:78:55:6d:89:e9:fd:d7:19:48: 9f:54:c9:74:d3:b9:cf:66:0e:67:33:2f:8f:7f:25: 39:97:bd:7a:fc:59:c1:23:95:f2:f0:a9:5e:84:6a: 3b:a5:7a:20:72:62:3e:0c:5d:17:91:88:19:b2:98: 48:d6:9f:db:52:b5:85:57:9c:99:27:6d:5f:5f:3f: 28:f2:a0:0c:6a:01:ef:e5:44:bc:d1:3d:c8:84:26: c7:50:32:af:02:49:e9:fa:47:ef:b0:d2:4b:cd:e4: f3:e5:a9:64:ad:7d:51:1a:58:2a:47:f3:95:a2:ce: 53:32:13:58:37:34:00:0d:e3:7c:b8:e2:8a:f9:e4: 16:19:6f:36:b4:b0:ab:9a:71:01:31:24:22:59:70: 5b:42:4c:5d:9f:ae:3d:4d:f0:63:be:17:ed:34:f7: fa:9a:d2:bc:63:60:9f:86:85:63:ba:98:94:6f:4c: 21:b7:f7:29:13:87:08:8f:b7:09:6e:e8:2b:68:74: 47:4d:58:f0:d5:7d:3f:6d:e2:1e:b8:69:4d:21:43: 2e:68:87:ae:cf:3a:86:f1:00:00:bb:b9:e3:67:65: 65:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:17:68:CF:0B:EF:DD:D1:FB:4C:5F:D4:F0:05:C1:96:78:FC:D4:8D X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ea:b2:8a:5d:3f:22:70:63:f4:18:cd:0d:19:df:8d:37:a6: 2c:ea:6e:ba:ba:66:2f:01:aa:4c:09:bf:9e:87:e8:0c:00:f1: ee:db:5a:68:b7:57:69:c5:7c:31:98:51:a7:79:fa:9a:d4:d8: 04:53:d4:e8:c7:26:8b:6c:2d:8d:ef:59:34:65:dc:a8:e5:17: d7:13:db:14:c2:a6:1e:43:02:f7:e2:a4:c9:cf:a7:45:7e:d0: ae:4f:40:4f:98:6f:79:d9:a6:f7:d1:2b:5b:b9:7e:11:10:47: cc:f2:0e:22:43:c6:d8:e9:45:e6:62:f1:8f:b1:32:d8:9c:db: 7d:6d:c0:cd:eb:e8:ce:e0:d6:6f:a0:cf:52:90:20:a0:36:40: e7:c1:27:da:8e:a1:9e:a4:02:f4:32:6d:cc:a0:2a:ce:75:90: 5b:15:e8:5e:32:1c:23:ba:f0:f0:78:04:f4:c7:3b:b7:8e:69: a6:02:5c:cf:7a:fa:24:4e:e9:34:bf:f9:c4:03:26:ce:4b:c9: 5d:4d:dd:0f:5e:26:e9:a3:62:1d:25:3b:36:3d:50:e1:ec:a4: 27:32:19:a3:ad:fd:8e:98:17:83:ca:28:f7:b7:bc:58:e2:79: fe:82:ac:9e:0f:69:35:ce:b4:6f:cc:2e:bf:d5:3e:6a:d2:6a: df:a6:0d:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwNzI2MTc1MzI0WhcNMjYwODAyMTc1MzI0WjAYMRYwFAYD VQQDEw02YTY2NDk5NC1kYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zL2uB58EmUIp8/b73hdF+0D21IEf8hdDw//x0ioLahxMyd4VW2J6f3XGUif VMl007nPZg5nMy+PfyU5l716/FnBI5Xy8KlehGo7pXogcmI+DF0XkYgZsphI1p/b UrWFV5yZJ21fXz8o8qAMagHv5US80T3IhCbHUDKvAknp+kfvsNJLzeTz5alkrX1R GlgqR/OVos5TMhNYNzQADeN8uOKK+eQWGW82tLCrmnEBMSQiWXBbQkxdn649TfBj vhftNPf6mtK8Y2CfhoVjupiUb0wht/cpE4cIj7cJbugraHRHTVjw1X0/beIeuGlN IUMuaIeuzzqG8QAAu7njZ2VliwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAXaM8L 793R+0xf1PAFwZZ4/NSNMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUuqyil0/InBj9BjNDRnfjTemLOpuurpmLwGqTAm/nofoDADx7ttaaLdXacV8 MZhRp3n6mtTYBFPU6Mcmi2wtje9ZNGXcqOUX1xPbFMKmHkMC9+Kkyc+nRX7Qrk9A T5hvedmm99ErW7l+ERBHzPIOIkPG2OlF5mLxj7Ey2JzbfW3AzevozuDWb6DPUpAg oDZA58En2o6hnqQC9DJtzKAqznWQWxXoXjIcI7rw8HgE9Mc7t45ppgJcz3r6JE7p NL/5xAMmzkvJXU3dD14m6aNiHSU7Nj1Q4eykJzIZo639jpgXg8oo97e8WOJ5/oKs ng9pNc60b8wuv9U+atJq36YNww== -----END CERTIFICATE-----Generated at Mon Jul 27 04:15:34 2026 by rpki-client