$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: um6rPsWS17kpT8CX0OmAbO3/m1LTzkDtYvjgzeGrK+k= Subject key identifier: F3:05:A1:33:B9:84:9A:91:D8:D9:84:7E:77:7D:9A:2D:A3:62:4D:5C Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 0848 Signing time: Mon 20 Jul 2026 21:39:12 +0000 Manifest this update: Mon 20 Jul 2026 21:39:12 +0000 Manifest next update: Mon 27 Jul 2026 21:39:12 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: emPDx9zsZ6E2BdkmGmoxMDhocembyHinFkf1AC+B6JI=) 2: ynE2cJx2tPBEuKgzdbsTmyeowJk.asa (hash: EweJrrImGX04lNcYsxwFSit8cSrY9BsT06vhpboqpTw=) 3: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 4V6lPO7ag/YW0Vp0T9oZKnRuFp3L/Sg6PmpvkYR7JtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jul 20 21:39:12 2026 GMT Not After : Jul 27 21:39:12 2026 GMT Subject: CN=6a5e9580-da7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:8a:01:11:86:b5:47:87:23:19:4c:9a:46: 06:d3:d8:89:bd:c7:cb:e0:7a:88:71:0f:48:a8:21: 16:13:4d:f2:15:e5:3e:ff:60:0e:ed:6e:58:16:8c: 82:e2:f3:e6:45:ba:e4:6f:7e:b0:f6:16:f1:98:70: b6:7b:c3:6c:71:36:17:32:4a:da:8e:a1:05:ab:d5: d5:c3:41:ce:4d:64:6b:c9:a1:73:88:55:63:02:8c: 27:a3:ae:f1:c8:c2:b5:ef:15:26:4e:46:a7:19:7b: ef:cf:a8:17:cc:56:e1:fb:82:8d:84:0a:46:fe:70: 7b:a1:25:87:e5:97:ee:a7:e8:df:0d:85:c5:04:2a: 44:e8:08:33:16:6a:04:9f:df:b9:12:61:ad:98:a4: 84:b3:dd:97:51:b3:b8:0a:d0:92:81:6a:db:57:0f: 7d:5e:34:f9:40:3e:d2:a3:10:5d:f2:6f:e1:ec:03: e1:6b:dd:1e:4d:2e:ef:fb:e8:27:de:e5:05:f1:73: 93:d3:7a:4d:bf:c1:54:2e:1c:0a:76:a3:bd:6f:3d: ce:c9:f3:20:e1:8e:9d:60:61:d6:95:ad:64:06:02: 37:b3:7a:89:cb:ee:6f:49:49:f0:3a:bc:76:6b:d5: 96:77:c6:f2:8b:d8:e3:57:cd:17:ee:bd:d1:0b:e6: 2a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:05:A1:33:B9:84:9A:91:D8:D9:84:7E:77:7D:9A:2D:A3:62:4D:5C X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3a:4f:ec:16:c4:7c:75:9d:5d:3e:b5:2b:4b:95:80:45:2f: 3f:62:15:41:f1:45:19:b2:0f:82:3a:b5:c5:d6:cd:d1:5f:a3: e8:d8:30:88:65:aa:5a:c7:d8:26:63:a3:c8:76:ba:da:72:b8: c4:84:e2:32:01:e4:1f:f6:0f:66:42:c6:b9:7f:21:b8:6a:30: a0:22:b1:9a:2a:ec:e8:87:b2:a1:e4:43:7f:40:3d:7c:92:b8: da:a0:9e:20:f6:35:45:eb:37:7c:f1:23:3e:3d:07:e6:8f:bb: e0:a5:f9:2e:e2:0b:f5:a5:8f:f4:e8:a2:da:a1:ba:e3:01:9c: 04:29:0f:81:69:b4:95:60:eb:b8:6a:d9:8a:51:2e:b6:66:e2: 44:0d:d4:7f:3e:31:5d:d3:71:9a:75:74:15:0a:c5:73:90:cc: 4f:35:4c:a1:27:8b:dd:8f:bf:6e:25:e9:d3:fd:8c:16:b8:33: 0a:d7:d1:cb:56:d6:92:02:b5:f5:29:c4:e2:a1:83:66:d3:2f: 79:5a:f9:b7:6b:a6:97:1a:8b:3f:7a:b6:f6:16:cf:06:6f:7c: c3:76:7e:19:bd:22:16:3c:fa:1f:58:89:70:ad:83:c1:c8:26: 5c:cb:cf:f9:ad:60:ce:4c:92:67:87:c2:62:51:e7:af:ac:c5: 52:29:6b:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjYwNzIwMjEzOTEyWhcNMjYwNzI3MjEzOTEyWjAYMRYwFAYD VQQDEw02YTVlOTU4MC1kYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEqKARGGtUeHIxlMmkYG09iJvcfL4HqIcQ9IqCEWE03yFeU+/2AO7W5YFoyC 4vPmRbrkb36w9hbxmHC2e8NscTYXMkrajqEFq9XVw0HOTWRryaFziFVjAowno67x yMK17xUmTkanGXvvz6gXzFbh+4KNhApG/nB7oSWH5Zfup+jfDYXFBCpE6AgzFmoE n9+5EmGtmKSEs92XUbO4CtCSgWrbVw99XjT5QD7SoxBd8m/h7APha90eTS7v++gn 3uUF8XOT03pNv8FULhwKdqO9bz3OyfMg4Y6dYGHWla1kBgI3s3qJy+5vSUnwOrx2 a9WWd8byi9jjV80X7r3RC+YqawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMFoTO5 hJqR2NmEfnd9mi2jYk1cMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJDpP7BbEfHWdXT61K0uVgEUvP2IVQfFFGbIPgjq1xdbN0V+j6NgwiGWqWsfY JmOjyHa62nK4xITiMgHkH/YPZkLGuX8huGowoCKxmirs6IeyoeRDf0A9fJK42qCe IPY1Res3fPEjPj0H5o+74KX5LuIL9aWP9Oii2qG64wGcBCkPgWm0lWDruGrZilEu tmbiRA3Ufz4xXdNxmnV0FQrFc5DMTzVMoSeL3Y+/biXp0/2MFrgzCtfRy1bWkgK1 9SnE4qGDZtMveVr5t2umlxqLP3q29hbPBm98w3Z+Gb0iFjz6H1iJcK2DwcgmXMvP +a1gzkySZ4fCYlHnr6zFUilrPQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:03 2026 by rpki-client