$ rpki-client -vvf rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft File: X8FhrArBnYiSpuQmdvsPqdTO2yw.mft (raw, json) Hash identifier: QJOB4aAgD8EfQNQzt9yU/MXUDgg9uT1CFerYJr/8fzo= Subject key identifier: 8B:FB:06:09:08:2D:D6:17:81:4F:9B:52:35:B9:32:42:5A:92:BE:06 Authority key identifier: 5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C Certificate issuer: /CN=A912A45D/serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft Manifest number: 0C Signing time: Fri 17 Jul 2026 10:33:26 +0000 Manifest this update: Fri 17 Jul 2026 10:33:26 +0000 Manifest next update: Fri 24 Jul 2026 10:33:26 +0000 Files and hashes: 1: X8FhrArBnYiSpuQmdvsPqdTO2yw.crl (hash: zRasXBRpqa0XTYycFYkD/pU5F7v3FMJrFNs/qVlVkCQ=) 2: A55B56FC812311F1A313CCFA74A30FBC.roa (hash: B/6yUAqz3UFMEFVVFzKb3P2jonmiBMOTRqF1EEEr/+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A45D, serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C Validity Not Before: Jul 17 10:33:26 2026 GMT Not After : Jul 24 10:33:26 2026 GMT Subject: CN=6a5a04f6-58be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9c:d6:ef:72:e0:b2:08:aa:8d:8d:81:c2:6d: 63:ea:5c:56:6d:81:11:81:1b:ef:09:6c:2a:d0:a0: 44:d5:a0:ae:1f:b3:4b:8e:60:96:a6:d9:17:32:f7: d4:2d:a3:24:35:e0:5e:8d:39:b6:66:d0:cb:0a:e0: 3d:70:ca:6a:02:67:86:4e:bf:f3:82:0d:f8:36:e7: 44:f1:d3:e6:76:e4:2e:a6:7f:18:d5:55:7e:4b:45: cf:b8:b5:a1:90:81:02:2b:d5:8e:19:d2:19:b5:47: 5b:63:8f:56:4c:86:1c:6d:07:e7:3f:1a:29:fd:87: 11:90:0e:61:b4:5c:86:03:fa:a8:37:24:a1:81:38: 75:0c:ad:f2:0f:00:c3:5d:44:18:09:2a:98:43:fd: 24:5c:3b:cd:3c:d8:4e:db:df:a4:88:1f:f0:2a:dd: 8f:1f:9e:6e:d5:65:ed:93:e9:24:61:40:e5:96:f7: e4:69:96:1f:2d:03:e2:71:c5:03:31:d8:10:8d:ae: ae:78:d2:25:f2:e5:02:c4:08:e6:b2:8d:33:94:1d: 9a:b5:ef:18:84:a7:8c:3e:64:ec:b8:2e:96:d3:5b: 15:69:e9:e3:c5:62:7d:c8:88:63:37:d2:0e:ca:27: 2f:f0:8e:c4:65:22:32:aa:13:97:95:75:5f:a4:76: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FB:06:09:08:2D:D6:17:81:4F:9B:52:35:B9:32:42:5A:92:BE:06 X509v3 Authority Key Identifier: keyid:5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ac:f5:1e:07:8b:8d:0c:f4:cd:77:a3:36:80:07:06:ca:c1: 25:cc:5a:40:2e:97:df:8d:69:eb:a2:dd:c5:e6:c7:f5:45:3b: 9c:79:56:1c:dc:05:07:b7:a6:c2:d6:dd:0d:18:aa:27:31:93: fc:54:aa:68:90:01:e9:ff:e8:00:a0:51:ee:ba:78:df:7f:bb: 0e:f3:48:5b:f6:d7:13:45:57:f8:74:bf:d1:c7:c2:67:3c:62: 70:0c:7e:d1:3b:bf:4b:d3:7d:15:2c:9d:43:8d:a3:9d:b7:46: 7e:0b:21:09:49:bc:53:9e:cb:97:9f:3f:e2:e0:15:38:a6:a5: 0c:1f:4f:2a:38:6f:92:37:2a:90:2e:d2:fc:a5:d9:c1:32:59: fb:63:c3:df:42:bb:b1:0b:1b:f3:56:e2:32:58:f5:92:ef:10: 1d:9c:f0:bc:87:f5:7b:72:34:b5:71:7f:bb:c1:7f:91:c1:83: ad:c4:4f:b0:11:f6:92:5b:ed:13:ea:af:be:7b:48:2f:5e:f4: ae:e2:58:8f:6f:2c:1a:02:c6:1b:63:fc:75:77:84:68:5d:7b: d0:3c:3e:d2:75:74:6a:38:8a:60:6c:0d:02:cb:84:b0:f4:9b: 6e:cd:fd:aa:08:1f:b2:92:9b:3e:8f:30:99:f0:3e:74:b6:ac: ba:2e:d5:8d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTQ1RDExMC8GA1UEBRMoNUZDMTYxQUMwQUMxOUQ4ODkyQTZFNDI2NzZGQjBGQTlE NENFREIyQzAeFw0yNjA3MTcxMDMzMjZaFw0yNjA3MjQxMDMzMjZaMBgxFjAUBgNV BAMTDTZhNWEwNGY2LTU4YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4nNbvcuCyCKqNjYHCbWPqXFZtgRGBG+8JbCrQoETVoK4fs0uOYJam2Rcy99Qt oyQ14F6NObZm0MsK4D1wymoCZ4ZOv/OCDfg250Tx0+Z25C6mfxjVVX5LRc+4taGQ gQIr1Y4Z0hm1R1tjj1ZMhhxtB+c/Gin9hxGQDmG0XIYD+qg3JKGBOHUMrfIPAMNd RBgJKphD/SRcO8082E7b36SIH/Aq3Y8fnm7VZe2T6SRhQOWW9+Rplh8tA+JxxQMx 2BCNrq540iXy5QLECOayjTOUHZq17xiEp4w+ZOy4LpbTWxVp6ePFYn3IiGM30g7K Jy/wjsRlIjKqE5eVdV+kdi2LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUi/sGCQgt 1heBT5tSNbkyQlqSvgYwHwYDVR0jBBgwFoAUX8FhrArBnYiSpuQmdvsPqdTO2yww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNDVELzc2NTI4QjA2N0I5 QjExRjE5MTI0QzM0MTcxQTMwRkJDL1g4RmhyQXJCbllpU3B1UW1kdnNQcWRUTzJ5 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWDhGaHJBckJuWWlTcHVRbWR2c1BxZFRPMnl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NDVELzc2NTI4QjA2N0I5QjExRjE5MTI0QzM0MTcxQTMwRkJDL1g4RmhyQXJCbllp U3B1UW1kdnNQcWRUTzJ5dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvrPUeB4uNDPTNd6M2gAcGysElzFpALpffjWnrot3F5sf1RTuceVYc3AUHt6bC 1t0NGKonMZP8VKpokAHp/+gAoFHuunjff7sO80hb9tcTRVf4dL/Rx8JnPGJwDH7R O79L030VLJ1DjaOdt0Z+CyEJSbxTnsuXnz/i4BU4pqUMH08qOG+SNyqQLtL8pdnB Mln7Y8PfQruxCxvzVuIyWPWS7xAdnPC8h/V7cjS1cX+7wX+RwYOtxE+wEfaSW+0T 6q++e0gvXvSu4liPbywaAsYbY/x1d4RoXXvQPD7SdXRqOIpgbA0Cy4Sw9Jtuzf2q CB+ykps+jzCZ8D50tqy6LtWN -----END CERTIFICATE-----Generated at Sat Jul 18 04:29:00 2026 by rpki-client