$ rpki-client -vvf rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft File: xh7aKdRphAjI5WdDhpTVNnJaEn0.mft (raw, json) Hash identifier: CYPUa+7ArIKiopXw9hSs+/Hv7LkneuzjW7f+dgn8HXY= Subject key identifier: 59:58:A0:63:13:4B:AA:D0:7E:31:C8:69:49:6D:A4:12:6A:C5:B9:06 Authority key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D Certificate issuer: /CN=A918966F/serialNumber=C61EDA29D4698408C8E567438694D536725A127D Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft Manifest number: 4C Signing time: Sun 05 Jul 2026 09:04:30 +0000 Manifest this update: Sun 05 Jul 2026 09:04:29 +0000 Manifest next update: Sun 12 Jul 2026 09:04:29 +0000 Files and hashes: 1: xh7aKdRphAjI5WdDhpTVNnJaEn0.crl (hash: yywpoHuICscUVTmTjBSDRvjehDtZrz8asiOmRCNZ4mk=) 2: 7FA6A66E072511F18DD83FDE2B3D8C67.roa (hash: Yle2np8VHG9XuuKa/Zf8owqSx1f8Kx45AoedIOUz9Gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 09:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D Validity Not Before: Jul 5 09:04:29 2026 GMT Not After : Jul 12 09:04:29 2026 GMT Subject: CN=6a4a1e1e-43da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:66:dd:95:7e:f8:cc:fe:fb:9e:72:33:07: bd:63:58:1a:6b:61:f8:e6:98:df:52:0d:08:81:6d: ff:7c:a2:1f:84:39:d6:30:d2:9f:33:67:c6:b2:91: eb:8e:b5:b8:f5:ac:3b:17:fb:6e:4a:0a:0d:ad:f4: 0f:4a:e3:7d:f2:45:45:1a:5c:9f:05:ef:69:b6:af: 0e:d3:16:a1:66:ae:db:32:3c:61:d5:b1:6b:2e:c1: 5d:b4:50:5e:cd:f8:e1:5c:3a:26:c2:51:ae:61:01: 10:82:9b:ef:93:bf:df:16:f6:ee:9a:a6:04:f2:18: 9c:03:37:53:ee:f0:bd:7e:40:7c:49:fc:6a:fa:78: e0:8b:f4:6c:9f:ef:ff:94:6b:61:1c:95:65:d0:f3: 72:6b:52:26:f2:01:4e:a8:6e:bc:e5:48:35:8c:43: 4c:ca:13:0e:1c:36:5b:3d:d1:a9:93:ed:c5:8b:10: 12:71:b5:da:66:e9:cf:33:8e:df:73:18:0b:52:ea: fa:b6:ee:5d:8a:09:02:a5:25:a2:4c:f1:e5:da:0c: cd:94:9f:59:cf:d4:55:c2:7b:8b:06:d9:04:97:6c: 4b:70:e9:c2:93:55:ea:1d:ec:25:72:1e:f4:e9:87: 67:4a:9c:44:b4:27:ff:ff:91:99:aa:39:0a:cf:d6: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:58:A0:63:13:4B:AA:D0:7E:31:C8:69:49:6D:A4:12:6A:C5:B9:06 X509v3 Authority Key Identifier: keyid:C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9d:5b:e9:3f:12:35:f2:08:17:70:6b:c0:76:2d:e9:44:57: 88:c7:67:ee:ab:d3:87:84:85:59:73:d0:ec:43:ea:75:e0:25: 24:12:15:54:d0:0f:04:a1:4f:cf:f2:4f:ab:25:cd:2a:d0:88: d7:fa:9c:48:53:8c:2d:68:06:62:d4:48:8d:46:08:44:91:ff: 76:55:b6:c6:2b:5a:79:2a:77:e9:b9:03:c7:e8:da:45:43:fa: 97:12:a9:46:e3:12:9c:19:cd:be:ad:75:c9:7f:77:7c:f9:9a: 44:ed:76:8b:a6:28:eb:f2:f0:01:97:b1:03:60:ca:8b:18:94: 5b:99:00:2f:21:2b:f7:a1:22:6a:f4:c4:34:ee:59:c5:ab:3a: 05:f0:e0:14:9c:04:23:3f:4c:03:ee:b5:71:3a:5a:a1:2b:93: 7f:d8:9c:9a:fa:16:98:11:5d:ba:51:8b:37:6f:d3:91:e5:4f: 94:1d:9a:08:45:6f:21:8d:a5:66:a9:7a:8f:85:76:19:73:63: 12:0d:30:bb:25:83:a8:53:c0:f3:ee:e6:1a:be:5d:6d:56:7b: 02:3f:3c:42:20:d6:fe:31:98:89:90:f7:d9:82:62:b7:97:9e: 67:f1:0f:fa:fc:b7:cc:94:b2:2c:50:57:70:b8:c2:77:eb:27: 38:0f:0f:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTY2RjExMC8GA1UEBRMoQzYxRURBMjlENDY5ODQwOEM4RTU2NzQzODY5NEQ1MzY3 MjVBMTI3RDAeFw0yNjA3MDUwOTA0MjlaFw0yNjA3MTIwOTA0MjlaMBgxFjAUBgNV BAMTDTZhNGExZTFlLTQzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7d2bdlX74zP77nnIzB71jWBprYfjmmN9SDQiBbf98oh+EOdYw0p8zZ8aykeuO tbj1rDsX+25KCg2t9A9K433yRUUaXJ8F72m2rw7TFqFmrtsyPGHVsWsuwV20UF7N +OFcOibCUa5hARCCm++Tv98W9u6apgTyGJwDN1Pu8L1+QHxJ/Gr6eOCL9Gyf7/+U a2EclWXQ83JrUibyAU6obrzlSDWMQ0zKEw4cNls90amT7cWLEBJxtdpm6c8zjt9z GAtS6vq27l2KCQKlJaJM8eXaDM2Un1nP1FXCe4sG2QSXbEtw6cKTVeod7CVyHvTp h2dKnES0J///kZmqOQrP1gHjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWVigYxNL qtB+MchpSW2kEmrFuQYwHwYDVR0jBBgwFoAUxh7aKdRphAjI5WdDhpTVNnJaEn0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5NjZGLzdFMjI5MDE2MDcy MzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFqSTVXZERocFRWTm5KYUVu MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveGg3YUtkUnBoQWpJNVdkRGhwVFZObkphRW4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 NjZGLzdFMjI5MDE2MDcyMzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFq STVXZERocFRWTm5KYUVuMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAKnVvpPxI18ggXcGvAdi3pRFeIx2fuq9OHhIVZc9DsQ+p14CUkEhVU0A8EoU/P 8k+rJc0q0IjX+pxIU4wtaAZi1EiNRghEkf92VbbGK1p5KnfpuQPH6NpFQ/qXEqlG 4xKcGc2+rXXJf3d8+ZpE7XaLpijr8vABl7EDYMqLGJRbmQAvISv3oSJq9MQ07lnF qzoF8OAUnAQjP0wD7rVxOlqhK5N/2Jya+haYEV26UYs3b9OR5U+UHZoIRW8hjaVm qXqPhXYZc2MSDTC7JYOoU8Dz7uYavl1tVnsCPzxCINb+MZiJkPfZgmK3l55n8Q/6 /LfMlLIsUFdwuMJ36yc4Dw9v -----END CERTIFICATE-----Generated at Mon Jul 6 09:01:21 2026 by rpki-client