$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json) Hash identifier: 8HCjdKNRYiCZ7Py8gz4614y6t+xAc7r2O9itaiKojvU= Subject key identifier: A7:1F:E6:A4:C9:91:E8:44:00:DC:0C:41:35:CB:1F:A1:E0:0D:B8:0C Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft Manifest number: 03E3 Signing time: Sun 05 Jul 2026 00:56:48 +0000 Manifest this update: Sun 05 Jul 2026 00:56:47 +0000 Manifest next update: Sun 12 Jul 2026 00:56:47 +0000 Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: KTRlkzl/6aBjdyAbfcFKJ5JaSruM4s/ehdKihKeOjqs=) 2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: hAQl9H75BpKmN7Muu51VVyZ+oy7nwK9cCULcraz4/lY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 00:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: Jul 5 00:56:47 2026 GMT Not After : Jul 12 00:56:47 2026 GMT Subject: CN=6a49abd0-0d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:a1:11:4d:cf:32:fd:b3:72:b7:33:18:f0: e6:5e:29:fc:8f:87:ca:de:be:86:a2:6c:89:b4:e9: 84:05:7e:4b:f9:01:e9:ec:54:bd:85:e4:e3:fc:2a: aa:a3:30:7e:e4:b2:ca:fa:b1:94:d6:90:53:99:9d: e9:8b:a4:0a:9a:c2:15:42:91:e8:49:a8:a0:bd:7d: bc:0b:82:ba:a5:b8:e5:cf:86:3c:ef:69:88:4d:b5: bf:e2:d2:98:a6:12:55:98:89:d5:4b:14:79:a0:3c: 08:c0:3e:3b:e8:ca:c3:7f:6c:cc:cd:88:5e:f7:4d: 7a:05:be:cb:f6:bc:93:9b:c6:1e:e0:41:c2:4b:c8: 3b:0d:03:ec:e5:04:a0:b0:50:11:11:6a:4d:c5:8e: 37:c7:78:69:f8:a1:f5:a5:e7:c5:68:f5:12:67:ba: ce:d7:2d:18:1b:af:ed:69:ec:1a:02:6f:6a:0d:75: 3c:a9:0a:34:43:23:94:1e:9d:96:df:b0:f1:50:71: 09:5c:f1:4e:8d:aa:41:2b:61:b8:fc:37:f1:28:ba: 79:8d:d6:85:50:fd:68:5e:e5:80:d8:b0:aa:5b:a3: 15:5e:8f:ef:7a:b4:9c:1b:c2:a9:51:42:38:d1:f4: 3c:be:bd:79:4b:1e:86:68:5a:17:61:3d:cb:84:60: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1F:E6:A4:C9:91:E8:44:00:DC:0C:41:35:CB:1F:A1:E0:0D:B8:0C X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:26:31:a4:a1:61:a0:47:41:f2:8c:22:62:c0:47:7c:48:ce: 4f:ec:d6:e5:45:05:64:22:e4:b7:50:9d:5c:bf:dd:18:c5:1a: 98:f7:d4:33:b6:15:17:b2:7e:e5:16:a7:31:4b:4a:52:77:16: d7:48:7e:8e:10:e6:5a:94:2e:55:20:7a:4b:a0:60:02:bf:09: 40:55:ff:c1:83:14:b9:b9:80:2c:26:f7:ea:36:5a:ee:38:ee: 28:8a:6a:e7:70:93:82:a9:12:9f:30:2a:39:50:20:37:a8:23: 9b:31:d1:14:e7:92:10:e2:a3:eb:29:92:1a:3d:01:9f:e0:e3: 2d:75:ff:17:c4:6c:62:7b:2e:a3:c2:7e:53:d1:76:d8:e4:f8: 8d:2f:4c:15:0c:a5:19:d9:49:64:b2:e9:51:07:f8:8f:61:77: fc:3b:00:64:0c:7f:f5:23:94:9b:19:09:df:d1:bc:2d:56:bd: 09:72:db:56:c3:40:1f:dd:c5:07:19:17:e6:ad:ce:ad:3c:c5: cd:a1:79:cc:9b:e8:eb:12:fc:67:f9:36:fc:1f:68:9f:85:47: d7:ae:65:23:b7:63:93:19:d8:10:70:71:7b:0b:9a:5f:05:7a: cd:1a:46:0c:d1:7c:37:05:87:3a:36:da:d3:06:0b:48:ef:2d: ef:87:de:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjYwNzA1MDA1NjQ3WhcNMjYwNzEyMDA1NjQ3WjAYMRYwFAYD VQQDEw02YTQ5YWJkMC0wZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIOhEU3PMv2zcrczGPDmXin8j4fK3r6GomyJtOmEBX5L+QHp7FS9heTj/Cqq ozB+5LLK+rGU1pBTmZ3pi6QKmsIVQpHoSaigvX28C4K6pbjlz4Y872mITbW/4tKY phJVmInVSxR5oDwIwD476MrDf2zMzYhe9016Bb7L9ryTm8Ye4EHCS8g7DQPs5QSg sFAREWpNxY43x3hp+KH1pefFaPUSZ7rO1y0YG6/taewaAm9qDXU8qQo0QyOUHp2W 37DxUHEJXPFOjapBK2G4/DfxKLp5jdaFUP1oXuWA2LCqW6MVXo/verScG8KpUUI4 0fQ8vr15Sx6GaFoXYT3LhGAmMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcf5qTJ kehEANwMQTXLH6HgDbgMMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD UlV4WC1EN3NQazlFcDZpM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkiYxpKFhoEdB8owiYsBHfEjOT+zW5UUFZCLkt1CdXL/dGMUamPfUM7YVF7J+ 5RanMUtKUncW10h+jhDmWpQuVSB6S6BgAr8JQFX/wYMUubmALCb36jZa7jjuKIpq 53CTgqkSnzAqOVAgN6gjmzHRFOeSEOKj6ymSGj0Bn+DjLXX/F8RsYnsuo8J+U9F2 2OT4jS9MFQylGdlJZLLpUQf4j2F3/DsAZAx/9SOUmxkJ39G8LVa9CXLbVsNAH93F BxkX5q3OrTzFzaF5zJvo6xL8Z/k2/B9on4VH165lI7djkxnYEHBxewuaXwV6zRpG DNF8NwWHOjba0wYLSO8t74fecA== -----END CERTIFICATE-----Generated at Sun Jul 5 08:38:44 2026 by rpki-client