$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json) Hash identifier: 5AWcH87SSx8Ybjxl9IG7gMcn4UBfHzSVlVRPAi8O2Xc= Subject key identifier: 13:AF:59:FF:C1:67:C6:B4:34:51:2D:7C:D8:CB:F9:FA:47:9B:D2:3B Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft Manifest number: 018E Signing time: Tue 23 Jun 2026 04:36:22 +0000 Manifest this update: Tue 23 Jun 2026 04:36:21 +0000 Manifest next update: Tue 30 Jun 2026 04:36:21 +0000 Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: 1/XW0Bdb8UcCgGBQIHcKrSJzaZGnev9ztKrshe+lAoM=) 2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: U8i0qlU1iG7iGGOct1cXwPlwr4Q9fN1z2Du4FOYXcDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 04:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Validity Not Before: Jun 23 04:36:21 2026 GMT Not After : Jun 30 04:36:21 2026 GMT Subject: CN=6a3a0d45-d38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:02:85:bd:ba:58:c6:2f:d5:7c:4c:76:96: 71:4f:7a:e4:16:ef:c7:f5:c2:15:4e:ef:0b:9d:37: c3:97:b8:8b:1d:c5:6c:e9:20:88:f8:14:e7:9d:d0: e2:22:5c:18:86:6b:a7:78:0a:77:de:b6:79:14:7b: 5e:c9:76:a7:8f:3a:db:c1:0d:83:1d:b7:a7:30:12: d1:63:9e:e3:1b:3c:ea:96:2e:bc:ba:f6:7b:9e:b7: d3:90:09:3b:5a:8c:9c:58:0b:3b:9e:5c:18:84:64: 68:fe:e2:90:db:95:a1:32:d8:6f:51:ba:63:cc:b2: 8d:89:ec:ee:ab:2a:73:a3:81:20:b4:38:e8:0c:7b: 4e:10:cd:ed:17:28:fa:d4:71:68:57:d8:05:e7:f8: c0:7c:6b:b8:4b:1a:10:da:f4:0a:15:17:ac:5c:4d: 5b:ed:4c:9e:05:a5:e0:b1:af:1b:e1:ff:ff:50:98: f8:6f:ad:1d:9e:0e:17:46:6e:9b:1b:4a:3a:de:6f: 8e:37:14:c6:91:a7:e6:a8:c3:71:36:3e:96:c5:79: 0a:38:ca:53:5f:e3:5a:ed:fe:32:ba:44:f5:67:5b: 55:c7:f9:fd:2f:51:77:76:4c:6e:87:fc:f2:b0:3d: d9:d3:fe:c6:58:70:bb:a2:76:d9:f1:cc:64:56:a4: f1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AF:59:FF:C1:67:C6:B4:34:51:2D:7C:D8:CB:F9:FA:47:9B:D2:3B X509v3 Authority Key Identifier: keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:66:a5:85:44:64:1e:18:be:29:77:1b:9e:d4:8f:75:14:d4: e1:3d:db:e6:37:3a:68:b3:5e:cb:f2:e2:d6:a7:31:10:08:db: df:38:51:58:61:8a:6d:a5:96:52:c0:f5:e0:d9:fa:28:50:b2: 5f:2e:03:e5:aa:32:b7:66:c7:6e:25:28:c0:c4:9d:cb:60:3c: 4f:63:16:32:00:07:17:fe:cd:d9:a3:ba:ba:f7:ba:ce:64:c6: cf:a6:eb:b2:51:cb:0b:b2:fd:57:ea:d7:64:1e:50:d5:06:59: 73:27:c8:63:4c:1e:40:fc:23:97:31:79:d2:2a:20:ce:96:99: 00:7b:b0:86:db:ca:4d:29:62:1a:c3:94:a6:64:c5:3d:42:e3: 67:d9:cf:1e:bd:5c:aa:d1:59:46:f2:90:e1:52:6f:fa:97:e9: 27:90:9d:f1:de:90:8b:fb:b6:98:8c:bb:b1:2e:4b:92:78:a8: a9:f5:36:f0:81:d3:29:7d:74:77:49:09:e4:46:30:79:0d:a3: b6:1c:d9:09:28:f4:19:ae:5f:8f:8c:ac:de:95:d0:c2:39:ba: d5:6a:ca:a1:69:21:aa:1c:8b:6d:4c:c7:ba:bc:1c:9d:10:e6: 75:d7:7d:7e:8c:04:69:38:6e:ce:46:49:b3:4a:de:af:a4:f6: 97:e4:20:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCNDcxMTAvBgNVBAUTKDVERjU2NkQ3NjIzNjdDMjhDN0YzRjEyNTYxQjQ3MTZC OENBMUI5NjYwHhcNMjYwNjIzMDQzNjIxWhcNMjYwNjMwMDQzNjIxWjAYMRYwFAYD VQQDEw02YTNhMGQ0NS1kMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08MChb26WMYv1XxMdpZxT3rkFu/H9cIVTu8LnTfDl7iLHcVs6SCI+BTnndDi IlwYhmuneAp33rZ5FHteyXanjzrbwQ2DHbenMBLRY57jGzzqli68uvZ7nrfTkAk7 WoycWAs7nlwYhGRo/uKQ25WhMthvUbpjzLKNiezuqypzo4EgtDjoDHtOEM3tFyj6 1HFoV9gF5/jAfGu4SxoQ2vQKFResXE1b7UyeBaXgsa8b4f//UJj4b60dng4XRm6b G0o63m+ONxTGkafmqMNxNj6WxXkKOMpTX+Na7f4yukT1Z1tVx/n9L1F3dkxuh/zy sD3Z0/7GWHC7onbZ8cxkVqTxnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOvWf/B Z8a0NFEtfNjL+fpHm9I7MB8GA1UdIwQYMBaAFF31ZtdiNnwox/PxJWG0cWuMoblm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0I0Ny84NzFCOTI5NDBG QTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZDakg4X0VsWWJSeGE0eWh1 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmVm0xMkkyZkNqSDhfRWxZYlJ4YTR5aHVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0I0Ny84NzFCOTI5NDBGQTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZD akg4X0VsWWJSeGE0eWh1V1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzmalhURkHhi+KXcbntSPdRTU4T3b5jc6aLNey/Li1qcxEAjb3zhRWGGKbaWW UsD14Nn6KFCyXy4D5aoyt2bHbiUowMSdy2A8T2MWMgAHF/7N2aO6uve6zmTGz6br slHLC7L9V+rXZB5Q1QZZcyfIY0weQPwjlzF50iogzpaZAHuwhtvKTSliGsOUpmTF PULjZ9nPHr1cqtFZRvKQ4VJv+pfpJ5Cd8d6Qi/u2mIy7sS5LknioqfU28IHTKX10 d0kJ5EYweQ2jthzZCSj0Ga5fj4ys3pXQwjm61WrKoWkhqhyLbUzHurwcnRDmddd9 fowEaThuzkZJs0rer6T2l+QgNQ== -----END CERTIFICATE-----Generated at Wed Jun 24 15:41:36 2026 by rpki-client