$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: Ao9dhJwObMOUzQXQSsRYNgAsmYhIFP2Gd2lme3iRPYg= Subject key identifier: E6:76:09:52:E8:99:79:71:A9:8E:1C:81:2D:89:5D:8B:B8:F1:CE:4E Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: 027B Signing time: Mon 27 Jul 2026 03:26:38 +0000 Manifest this update: Mon 27 Jul 2026 03:26:38 +0000 Manifest next update: Mon 03 Aug 2026 03:26:38 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: Z1MWdS6obYSbyhWCjjesKlcDc0RNIcBLvqra5QlQ/QA=) 2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 41mYeLJTrr6m5wB9HGw37UApRa2JZ2ZaJVCcumD/aT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: Jul 27 03:26:38 2026 GMT Not After : Aug 3 03:26:38 2026 GMT Subject: CN=6a66cfee-b371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:86:fa:e7:82:e9:e1:8b:92:93:81:92:ad: 89:5c:17:26:5a:85:9d:2f:cc:e5:d8:e2:63:51:77: 5a:cc:2a:51:2d:12:91:6a:b2:69:21:22:d5:e5:57: ff:1d:84:dd:d7:8f:f6:92:70:99:a9:ef:d9:72:2c: 73:e4:bb:62:4f:34:4c:65:65:15:ea:91:40:3c:a9: c7:fe:6b:d7:77:55:88:89:03:84:4f:df:3a:a7:22: 42:59:05:af:c9:83:28:61:aa:8a:a7:50:1c:44:b2: c0:26:30:b4:c6:39:f6:a7:86:32:1d:5a:3b:15:e0: d1:8c:b4:22:4c:56:61:8a:6a:9c:fa:49:ac:33:6a: 20:bd:56:ae:2b:dd:e3:b1:5d:2b:8a:1c:81:27:65: 5c:9c:ac:b7:bf:73:d3:68:be:e3:89:12:d1:5d:5b: 12:45:42:86:19:26:eb:41:4c:18:0b:99:a9:fa:6b: cb:9f:cd:6d:bf:1f:f3:17:75:e2:8b:57:7f:c0:71: c2:b0:00:5e:34:21:96:fb:e0:69:fd:37:66:8c:cc: c1:a9:9f:89:4c:d2:d6:80:70:44:b4:1d:7a:73:9d: c8:6e:e9:3d:bf:4e:60:bc:be:9e:12:df:5b:2d:36: 2b:13:74:95:e6:c5:6f:26:9f:87:7a:65:02:27:ed: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:76:09:52:E8:99:79:71:A9:8E:1C:81:2D:89:5D:8B:B8:F1:CE:4E X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b3:5e:1c:4a:6e:1b:70:44:20:cd:29:21:e4:fc:4d:37:2d: 04:f2:5e:65:15:64:d7:fa:be:3c:9a:68:bf:46:b5:fe:65:c8: ba:fe:ce:eb:f2:df:e9:6f:18:ab:82:f5:78:30:1b:99:04:a3: bd:56:92:57:85:34:6f:02:7c:f3:fd:a8:cc:2d:dc:d1:85:4f: c4:ab:e0:7b:10:1a:0e:db:de:29:7f:38:c1:65:42:61:8f:7b: 93:84:5e:07:60:ee:68:2e:5a:a1:8d:a0:99:1e:53:ef:d2:47: de:c2:f2:0c:3e:a2:98:f4:fe:cc:f4:3c:f0:6f:60:0e:55:3b: 34:3e:73:a4:e6:b7:de:b8:49:54:d8:1c:d5:71:56:c1:ba:d0: 06:63:4a:a5:31:48:bb:aa:b4:aa:d8:1d:fa:34:dc:27:a2:68: 74:2e:69:1d:7c:98:cd:1d:5b:b3:6e:1e:1e:d1:50:51:98:6b: d9:11:ce:57:01:b4:20:65:a2:3d:d9:65:4c:27:85:06:85:80: fb:56:8f:91:0b:84:bf:52:7b:66:cd:99:d9:68:35:a4:e7:5c: fe:cd:f4:c2:55:66:30:2b:af:53:93:a3:d9:95:9d:56:b9:20: 6f:8f:79:02:73:8a:85:15:a4:5c:dc:29:8b:b6:8d:fa:a8:e7: 5c:10:88:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjYwNzI3MDMyNjM4WhcNMjYwODAzMDMyNjM4WjAYMRYwFAYD VQQDEw02YTY2Y2ZlZS1iMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsreG+ueC6eGLkpOBkq2JXBcmWoWdL8zl2OJjUXdazCpRLRKRarJpISLV5Vf/ HYTd14/2knCZqe/Zcixz5LtiTzRMZWUV6pFAPKnH/mvXd1WIiQOET986pyJCWQWv yYMoYaqKp1AcRLLAJjC0xjn2p4YyHVo7FeDRjLQiTFZhimqc+kmsM2ogvVauK93j sV0rihyBJ2VcnKy3v3PTaL7jiRLRXVsSRUKGGSbrQUwYC5mp+mvLn81tvx/zF3Xi i1d/wHHCsABeNCGW++Bp/TdmjMzBqZ+JTNLWgHBEtB16c53Ibuk9v05gvL6eEt9b LTYrE3SV5sVvJp+HemUCJ+06twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOZ2CVLo mXlxqY4cgS2JXYu48c5OMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsbNeHEpuG3BEIM0pIeT8TTctBPJeZRVk1/q+PJpov0a1/mXIuv7O6/Lf6W8Y q4L1eDAbmQSjvVaSV4U0bwJ88/2ozC3c0YVPxKvgexAaDtveKX84wWVCYY97k4Re B2DuaC5aoY2gmR5T79JH3sLyDD6imPT+zPQ88G9gDlU7ND5zpOa33rhJVNgc1XFW wbrQBmNKpTFIu6q0qtgd+jTcJ6JodC5pHXyYzR1bs24eHtFQUZhr2RHOVwG0IGWi PdllTCeFBoWA+1aPkQuEv1J7Zs2Z2Wg1pOdc/s30wlVmMCuvU5Oj2ZWdVrkgb495 AnOKhRWkXNwpi7aN+qjnXBCIBg== -----END CERTIFICATE-----Generated at Mon Jul 27 23:28:01 2026 by rpki-client