$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: J4lcV15LiL0NQGvXu8rEsG2IrQRd2N7GiLbONOEOlsI= Subject key identifier: AA:EB:29:96:CD:0A:FA:85:60:EB:FB:D8:84:43:30:71:D9:1E:08:C6 Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 046B Signing time: Mon 27 Jul 2026 01:16:00 +0000 Manifest this update: Mon 27 Jul 2026 01:15:59 +0000 Manifest next update: Mon 03 Aug 2026 01:15:59 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: 7OXypuupJrPlrK9HtxL9HiGwE1s5YMoQ39M1xc3ddxc=) 2: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: Xwopv44IWtrA47h99nFS1HcICRmL98rRNkBLnVkufOs=) 3: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: htWOUsGCluqo+bDLkY52m9kGHamjAwjskMqRyVdOAVI=) 4: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: W4goqtPYzyLcCdBI7xc2Qn8MqCV+FsXgvw4MFdwTxhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Jul 27 01:15:59 2026 GMT Not After : Aug 3 01:15:59 2026 GMT Subject: CN=6a66b150-67cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:3d:a3:c2:3a:10:18:f5:00:88:16:9c:19: 48:2d:b0:da:f0:4e:91:5b:7f:81:a2:e8:48:12:a4: ab:6c:f2:9c:02:59:61:2b:df:6e:69:06:4b:f3:c4: 31:f6:f6:c0:72:82:69:e4:00:a8:39:3c:72:ba:08: cf:ec:25:49:6f:a0:4f:cd:14:27:cd:39:f8:e2:88: bf:dc:7f:8c:f9:b4:05:69:df:b1:7b:60:d2:e3:1f: 1b:71:30:14:88:b4:4e:75:d5:f1:b6:e6:9c:79:d1: 7b:90:3a:81:8d:f4:7a:e3:9e:f4:fe:31:e3:66:3d: 4a:e9:78:51:c9:c7:01:cb:c6:c7:cd:0a:c1:a3:56: 39:03:cf:6c:a9:87:8d:5d:63:22:43:c6:46:5a:98: 22:37:8c:3a:80:8b:5f:f2:a9:2a:46:1b:f3:4d:3e: cd:5d:00:32:b1:c5:91:e8:7c:4c:f0:ae:14:e7:d6: b6:6b:81:2b:8f:92:31:84:9b:1c:09:e6:36:f5:01: 25:f2:bc:ec:64:6e:59:13:4e:b4:b1:63:ad:a2:c9: b5:43:98:a7:d7:32:6f:2b:19:bf:62:a8:6d:d3:4b: 08:3c:7b:d0:3d:8a:f4:83:31:6e:03:ff:35:fd:eb: eb:6b:42:47:92:64:05:ea:35:5b:35:7a:bc:51:9b: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EB:29:96:CD:0A:FA:85:60:EB:FB:D8:84:43:30:71:D9:1E:08:C6 X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:e4:7a:9c:4f:30:7c:74:c2:42:a9:d3:b2:d7:43:bb:c6:1c: 56:20:0b:85:1d:83:97:b6:86:d3:44:43:95:73:d2:bd:3e:24: ef:a0:0f:0d:02:0d:80:23:fa:26:90:b0:51:45:92:2c:a5:90: c0:67:06:4c:01:3a:74:9f:15:de:58:29:08:d4:43:d6:8a:70: 6b:25:0f:76:35:49:c1:0a:0d:ca:57:c2:5e:e4:80:aa:0c:26: 2c:81:4d:fc:6a:5a:6e:ad:b0:ff:86:b4:ba:58:6e:60:dc:bf: 75:0a:60:e6:50:c4:0b:96:2b:93:5a:f8:4f:c4:a1:7a:dd:70: 03:cb:c0:6e:d7:67:f3:62:92:11:08:57:d8:fd:f2:6b:66:bd: 79:22:ce:5b:a2:ef:58:aa:cf:2f:67:08:9b:47:73:67:f2:c2: 7d:ac:4d:91:3e:45:32:64:69:95:ab:ff:7c:e7:a2:8c:58:e9: 3c:f9:e8:91:ee:dd:b6:cd:34:b5:fb:5a:7a:56:a5:0f:d0:d9: 5f:31:49:92:00:57:59:48:bd:ea:76:36:7b:cf:91:e6:af:75: 9f:b2:46:85:9b:02:66:95:7f:72:d5:72:ff:0e:b8:65:2f:76: 1d:1d:08:a2:53:f3:e4:b1:36:1d:b6:97:f0:ba:ff:94:c6:63: 19:f9:99:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjYwNzI3MDExNTU5WhcNMjYwODAzMDExNTU5WjAYMRYwFAYD VQQDEw02YTY2YjE1MC02N2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt449o8I6EBj1AIgWnBlILbDa8E6RW3+BouhIEqSrbPKcAllhK99uaQZL88Qx 9vbAcoJp5ACoOTxyugjP7CVJb6BPzRQnzTn44oi/3H+M+bQFad+xe2DS4x8bcTAU iLROddXxtuacedF7kDqBjfR64570/jHjZj1K6XhRyccBy8bHzQrBo1Y5A89sqYeN XWMiQ8ZGWpgiN4w6gItf8qkqRhvzTT7NXQAyscWR6HxM8K4U59a2a4Erj5IxhJsc CeY29QEl8rzsZG5ZE060sWOtosm1Q5in1zJvKxm/Yqht00sIPHvQPYr0gzFuA/81 /evra0JHkmQF6jVbNXq8UZu3kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrrKZbN CvqFYOv72IRDMHHZHgjGMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkuR6nE8wfHTCQqnTstdDu8YcViALhR2Dl7aG00RDlXPSvT4k76APDQINgCP6 JpCwUUWSLKWQwGcGTAE6dJ8V3lgpCNRD1opwayUPdjVJwQoNylfCXuSAqgwmLIFN /Gpabq2w/4a0ulhuYNy/dQpg5lDEC5Yrk1r4T8Shet1wA8vAbtdn82KSEQhX2P3y a2a9eSLOW6LvWKrPL2cIm0dzZ/LCfaxNkT5FMmRplav/fOeijFjpPPnoke7dts00 tftaelalD9DZXzFJkgBXWUi96nY2e8+R5q91n7JGhZsCZpV/ctVy/w64ZS92HR0I olPz5LE2HbaX8Lr/lMZjGfmZ0g== -----END CERTIFICATE-----Generated at Tue Jul 28 02:28:03 2026 by rpki-client