$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft File: 4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json) Hash identifier: B18DMUij91kjLlDoE5w6MFQDjoNcQOQo16umvQzzxxg= Subject key identifier: 4C:C2:C1:78:67:DE:EC:75:1B:E6:B1:83:9E:48:CE:FE:B8:A0:4A:09 Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft Manifest number: 02A9 Signing time: Tue 21 Jul 2026 02:36:24 +0000 Manifest this update: Tue 21 Jul 2026 02:36:23 +0000 Manifest next update: Tue 28 Jul 2026 02:36:23 +0000 Files and hashes: 1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: VpJb0dEgMPrzeaD3+j5zHUzDTIRKARigTAi1/RuWLs0=) 2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: LdRxke1Bck5JxIBRCGjM9TpaCqk+l96r/JCtzyDPs+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277 Validity Not Before: Jul 21 02:36:23 2026 GMT Not After : Jul 28 02:36:23 2026 GMT Subject: CN=6a5edb28-e597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:00:8c:ad:8a:1c:6c:39:a6:db:37:7a:05: 0e:35:54:04:59:39:55:06:bf:5d:bb:49:fc:8d:bb: 83:01:26:af:39:b6:7c:4d:b5:2f:2a:83:85:44:07: cf:8f:3e:5b:97:14:5c:97:91:a7:2d:3e:51:c6:89: 26:41:8d:0a:e8:c2:84:4d:a9:8a:f8:d2:2f:5c:5c: 1b:7d:49:58:7e:e4:25:d9:cf:86:32:b4:a1:09:76: 7b:e8:70:3c:ea:ca:5a:10:82:d8:1f:6b:b2:bb:df: cd:ac:c4:cd:29:0a:40:6d:50:0a:e6:fc:9c:f1:b1: e0:5e:77:10:e5:4f:39:26:6f:a5:48:49:61:bc:45: d6:ff:e8:eb:06:ba:9b:0c:cf:a2:72:f3:0d:d7:f7: 36:33:a3:73:7a:3c:d4:3a:53:01:ec:e1:76:32:1b: b1:44:28:a4:44:e0:3c:f0:08:13:25:fd:fe:45:81: 8c:b9:db:df:23:04:93:64:ee:61:5f:29:35:c7:b7: 41:cc:66:b3:71:aa:75:cc:d6:45:dd:97:0b:13:31: 61:86:6e:ad:4f:19:da:67:74:f5:42:2f:d6:c2:3d: 22:23:cd:0d:de:5b:57:5b:31:7a:11:c5:cd:87:95: 23:45:e4:22:a4:0e:34:50:05:62:97:83:18:65:8f: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:C1:78:67:DE:EC:75:1B:E6:B1:83:9E:48:CE:FE:B8:A0:4A:09 X509v3 Authority Key Identifier: keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c5:2d:fd:74:47:3c:6d:8f:4a:27:66:00:bb:80:32:2e:30: d7:6a:11:9b:50:7c:f9:33:f8:98:dc:26:bc:59:13:36:0a:26: 3e:6c:51:c3:5e:02:95:8c:cf:9d:11:e6:79:dd:d8:40:ab:32: 02:e8:e6:dd:be:65:18:4a:11:f1:b5:73:61:e8:84:54:58:29: 70:e1:ec:6b:c4:be:e5:2b:f0:13:92:72:25:aa:e2:c4:c8:04: 1e:4b:03:b4:c8:31:6f:ab:20:43:20:47:19:cc:ce:7c:f1:6c: 78:a1:73:80:6b:bb:2b:a1:2e:3f:b0:69:ea:db:ef:f2:49:4d: e9:0a:27:90:0c:1c:25:c3:40:a7:46:eb:91:17:ed:91:14:8a: 01:8d:3f:bf:59:21:66:cd:e6:c1:e9:53:59:14:dd:89:22:fa: cd:23:b7:b1:8c:4b:c3:4b:cf:98:8a:67:86:ce:03:43:3b:91: 0e:ec:80:99:5f:15:4a:84:79:86:45:6f:c2:f0:ad:07:95:79: f9:66:d7:24:a3:e7:53:fc:00:4a:0d:80:f9:70:c8:0d:9e:11: b2:8a:c3:e1:7c:27:cf:05:e3:ef:bd:54:1e:98:77:49:3b:fb: 93:d6:a1:43:43:13:f5:85:b8:20:b3:ef:d4:f1:17:5b:95:5b: 9a:63:cf:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1Q0IxMTAvBgNVBAUTKEUxNzMzQjk3MEZEREY3NjdGRjE5NTQyODQzN0UxMjQy QTM3NjkyNzcwHhcNMjYwNzIxMDIzNjIzWhcNMjYwNzI4MDIzNjIzWjAYMRYwFAYD VQQDEw02YTVlZGIyOC1lNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ncAjK2KHGw5pts3egUONVQEWTlVBr9du0n8jbuDASavObZ8TbUvKoOFRAfP jz5blxRcl5GnLT5RxokmQY0K6MKETamK+NIvXFwbfUlYfuQl2c+GMrShCXZ76HA8 6spaEILYH2uyu9/NrMTNKQpAbVAK5vyc8bHgXncQ5U85Jm+lSElhvEXW/+jrBrqb DM+icvMN1/c2M6NzejzUOlMB7OF2MhuxRCikROA88AgTJf3+RYGMudvfIwSTZO5h Xyk1x7dBzGazcap1zNZF3ZcLEzFhhm6tTxnaZ3T1Qi/Wwj0iI80N3ltXWzF6EcXN h5UjReQipA40UAVil4MYZY9GWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzCwXhn 3ux1G+axg55Izv64oEoJMB8GA1UdIwQYMBaAFOFzO5cP3fdn/xlUKEN+EkKjdpJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVDQi81Mjg4RENFMDcw NDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDkyZl9HVlFvUTM0U1FxTjJr bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYTTdsd19kOTJmX0dWUW9RMzRTUXFOMmtuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTVDQi81Mjg4RENFMDcwNDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDky Zl9HVlFvUTM0U1FxTjJrbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAicUt/XRHPG2PSidmALuAMi4w12oRm1B8+TP4mNwmvFkTNgomPmxRw14ClYzP nRHmed3YQKsyAujm3b5lGEoR8bVzYeiEVFgpcOHsa8S+5SvwE5JyJarixMgEHksD tMgxb6sgQyBHGczOfPFseKFzgGu7K6EuP7Bp6tvv8klN6QonkAwcJcNAp0brkRft kRSKAY0/v1khZs3mwelTWRTdiSL6zSO3sYxLw0vPmIpnhs4DQzuRDuyAmV8VSoR5 hkVvwvCtB5V5+WbXJKPnU/wASg2A+XDIDZ4RsorD4XwnzwXj771UHph3STv7k9ah Q0MT9YW4ILPv1PEXW5VbmmPPUw== -----END CERTIFICATE-----Generated at Wed Jul 22 07:46:35 2026 by rpki-client