$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json) Hash identifier: aTC4mlYq9+9aHn44Eco03Q3duKnUh9E9Bqgo+XuoDRw= Subject key identifier: 33:04:A4:D8:15:2C:F6:01:41:3D:7C:52:43:BF:35:A2:72:CC:8B:5F Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Certificate serial: 35E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft Manifest number: 3599 Signing time: Mon 20 Jul 2026 14:23:06 +0000 Manifest this update: Mon 20 Jul 2026 14:23:06 +0000 Manifest next update: Mon 27 Jul 2026 14:23:06 +0000 Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: OeoAOW5bGpE4nenFQVuV7W3Z1rjWZrftvJK8GEi0wfM=) 2: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: BJoCud12RqYU139X5Hg1YEdiSoJoBorro9yFYj7EiQY=) 3: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: izVvMKnosN85WDCwiZeSTea3usmMiFXGuieIuV+2wlI=) 4: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: Im+A1kygYXCcmKM1N88CQpYfMfI1pkZXcprVNJAgc7Y=) 5: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: ledywzn44AtfNdf65irkSbejoe2qe67kQVSrxPSpLj8=) 6: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: c5BWjsV+5qy4Czn1fNB7N39xouqCRvW12ZZgXgS4ZDQ=) 7: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: CWD+yCy6yNtHR/CgsSdRActZ6Gz+ygW0qqlW1BWQfN0=) 8: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: VXO5/U8cHHCFaikukuqO1qnp6nbKhmKzeuFoVz0LqaU=) 9: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: qiT/GVvRCXwwQO5czxfwtuP70nIiPr4STQfaVH+7UL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13797 (0x35e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Validity Not Before: Jul 20 14:23:06 2026 GMT Not After : Jul 27 14:23:06 2026 GMT Subject: CN=6a5e2f4a-cac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:00:4e:6f:2d:28:60:16:09:77:7f:b9:2f: f7:f9:3d:87:71:f1:f4:8c:3b:d1:cb:7b:d7:0d:e9: 7d:c1:66:37:26:e7:3f:42:03:be:0a:63:31:a8:86: e8:c1:f8:c7:a6:c2:b9:fd:f1:b9:ea:4d:d4:8c:d3: fc:ef:fd:f3:5b:b6:32:0d:2c:08:4c:e3:53:e8:d8: 7e:d3:ba:f2:b2:6a:fd:24:26:e5:be:f2:88:b3:7b: 89:6a:31:bc:b2:1c:a0:6b:2a:9b:c3:a6:fa:eb:a2: 36:ce:b3:0b:5e:08:ed:32:55:bd:12:8a:e8:58:31: fc:3f:41:17:49:d5:15:f1:33:af:f8:c2:c9:98:81: f9:e3:e2:f2:8c:01:b1:3d:d9:62:24:6a:0d:39:0c: 7e:ca:70:b6:de:23:7b:64:12:6a:ab:b5:95:ee:1d: 1c:e7:0a:0b:19:e0:09:43:c5:d3:9f:70:22:06:f8: bd:88:89:b7:2c:2a:26:7f:f2:e6:01:ca:07:e7:4e: bf:98:61:17:79:08:6e:54:1f:ce:ed:9e:fb:5f:89: fe:fd:cb:22:fe:9d:aa:b5:9d:59:24:2d:be:3b:aa: 0c:07:a4:fe:57:a9:71:38:67:9a:84:d8:81:57:cf: d2:74:7c:eb:98:1d:6d:a5:af:8f:c9:6d:3d:64:8e: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:04:A4:D8:15:2C:F6:01:41:3D:7C:52:43:BF:35:A2:72:CC:8B:5F X509v3 Authority Key Identifier: keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bd:0e:17:b0:9d:b2:fb:75:89:a9:b0:fb:11:ac:35:7e:56: db:8e:ef:b9:ae:e0:ec:18:dd:9f:af:40:53:d6:61:8d:fb:3e: 1c:90:b8:e5:3a:ac:56:86:d5:7c:1e:ac:fb:43:9f:0a:98:f6: f9:12:40:6e:4b:e0:e8:9c:ed:20:be:be:e6:55:d7:a2:d3:66: 77:27:d7:24:1f:88:77:ec:54:ca:76:44:ea:2b:17:5c:56:c0: a7:a2:93:b7:3b:32:91:cf:42:b1:2d:c9:d7:6e:64:44:94:fa: b3:41:97:d7:9e:dd:e4:fe:9a:96:7b:52:77:e3:43:d6:a5:22: 1f:c3:e4:95:d0:1b:57:14:a4:ab:b0:7f:58:a2:7f:61:4b:a6: 46:d0:d1:8c:df:ad:98:a3:32:d6:1a:88:82:67:ea:0b:2f:dc: 3a:9b:d2:b7:94:30:22:85:94:6d:af:2e:3d:62:67:5a:1d:0a: 8e:ac:cb:3e:ed:2d:10:24:07:33:d7:35:a6:61:05:2d:b4:7b: 95:3d:24:f0:05:b4:9d:32:09:f9:e6:cd:29:3d:2f:ee:5c:a3: 26:ca:a1:99:60:ab:11:51:93:2f:35:04:c7:bd:41:d8:89:e6: 72:a6:bd:10:f6:2b:84:a5:be:3f:6d:49:63:95:4c:4c:72:76: cb:15:8f:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG NzMzQTJGMUEwHhcNMjYwNzIwMTQyMzA2WhcNMjYwNzI3MTQyMzA2WjAYMRYwFAYD VQQDEw02YTVlMmY0YS1jYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4oATm8tKGAWCXd/uS/3+T2HcfH0jDvRy3vXDel9wWY3Juc/QgO+CmMxqIbo wfjHpsK5/fG56k3UjNP87/3zW7YyDSwITONT6Nh+07rysmr9JCblvvKIs3uJajG8 shygayqbw6b666I2zrMLXgjtMlW9EoroWDH8P0EXSdUV8TOv+MLJmIH54+LyjAGx PdliJGoNOQx+ynC23iN7ZBJqq7WV7h0c5woLGeAJQ8XTn3AiBvi9iIm3LComf/Lm AcoH506/mGEXeQhuVB/O7Z77X4n+/csi/p2qtZ1ZJC2+O6oMB6T+V6lxOGeahNiB V8/SdHzrmB1tpa+PyW09ZI4sbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMEpNgV LPYBQT18UkO/NaJyzItfMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzVCMC80MEM4RDVBNjFEODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNx MEttX21TVm9PNjczTTZMeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb70OF7Cdsvt1iamw+xGsNX5W247vua7g7Bjdn69AU9Zhjfs+HJC45TqsVobV fB6s+0OfCpj2+RJAbkvg6JztIL6+5lXXotNmdyfXJB+Id+xUynZE6isXXFbAp6KT tzsykc9CsS3J125kRJT6s0GX157d5P6alntSd+ND1qUiH8PkldAbVxSkq7B/WKJ/ YUumRtDRjN+tmKMy1hqIgmfqCy/cOpvSt5QwIoWUba8uPWJnWh0KjqzLPu0tECQH M9c1pmEFLbR7lT0k8AW0nTIJ+ebNKT0v7lyjJsqhmWCrEVGTLzUEx71B2Inmcqa9 EPYrhKW+P21JY5VMTHJ2yxWPQw== -----END CERTIFICATE-----Generated at Wed Jul 22 00:24:03 2026 by rpki-client