$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: Ckfess/eRTkjzDzwBEzWVf/wALBRqMQC7w4vCxaF7xo= Subject key identifier: DC:52:FB:6F:3F:19:E6:3E:30:E5:7F:34:38:86:CB:25:58:3B:EA:21 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0DBC Signing time: Sun 26 Jul 2026 18:12:37 +0000 Manifest this update: Sun 26 Jul 2026 18:12:37 +0000 Manifest next update: Sun 02 Aug 2026 18:12:37 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: YG0jRM8rngZmK8xrAawGjU6F5wM741HYg3JQes0ggbo=) 2: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A=) 3: 762C16422E9811F1A14B442FB4833773.roa (hash: 6dVRqPwjNiBJWT/1IpcKvHD9YdgtV5RR7uiRlRvanfU=) 4: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: DcSbAXQAEFzo+aMwVJQyGPJY+2j/avyksp+4rQcX5Ms=) 5: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k=) 6: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE=) 7: 6EA46446646511EFA9435879C4F9AE02.roa (hash: Rm8WBz8x56PvMmTC5b3xeemfV4sCOqTUTfsfsAfIyMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3577 (0xdf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Jul 26 18:12:37 2026 GMT Not After : Aug 2 18:12:37 2026 GMT Subject: CN=6a664e15-f115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:db:50:9c:d7:52:f7:0b:49:fc:ce:68:61:e6: ea:7d:63:02:e6:38:a9:57:ea:ce:13:35:27:4f:db: fe:63:64:d9:af:0e:9d:45:88:d8:8e:0f:75:d5:fd: 61:0b:ad:9c:90:67:bb:8e:4e:c1:7f:7a:31:24:32: d6:26:6e:61:5f:3c:60:6c:2f:24:94:2b:0e:40:54: 8e:4b:05:00:ef:bf:77:45:05:96:67:e2:0a:ef:c6: 55:57:3c:7b:ee:75:4e:16:61:2b:2a:05:03:7c:bd: 40:95:26:0a:3f:f8:aa:be:89:f4:fe:ff:cb:d6:c1: 40:1c:dd:c7:c0:ff:9d:14:1f:00:6e:03:32:dc:b8: 79:3e:5c:60:f3:98:6b:08:9c:b6:b6:99:ba:60:93: ad:3d:33:6a:e3:64:e3:16:83:30:53:52:97:71:ba: 53:26:3e:0d:11:09:58:0b:91:be:b8:ed:ff:21:37: 0c:68:71:f9:30:87:c5:08:da:4d:12:94:e1:59:dc: c8:b5:d3:42:5a:c6:da:2b:e0:02:a7:16:51:e9:9f: f9:e2:af:9f:0e:b3:de:a0:6f:f8:de:dd:b8:7a:d4: 65:f7:75:72:f6:ef:3a:0d:2b:e9:bb:75:d3:b6:59: 55:ef:3d:c9:33:fe:44:da:41:05:84:e9:02:a1:f9: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:52:FB:6F:3F:19:E6:3E:30:E5:7F:34:38:86:CB:25:58:3B:EA:21 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:23:cc:b7:73:a4:d1:9c:7e:48:d1:51:85:a1:eb:8d:1e:83: 2f:d9:69:04:33:49:a8:10:14:c8:0c:51:cc:74:75:10:68:ed: 4b:04:a1:d1:e1:f1:76:ce:ec:be:7e:2f:af:32:23:5b:22:b6: eb:d3:0c:0a:6c:13:51:b3:ef:77:5d:35:8b:de:3b:f3:e0:fc: 43:bb:82:80:15:90:1d:8c:02:dd:af:4b:f3:fb:f1:4d:62:ec: dc:f8:a5:69:cb:d9:21:91:60:0c:27:21:32:66:67:6d:7a:d1: 15:a3:bb:e2:b1:7a:d0:fb:79:82:ae:47:0b:a5:52:72:c8:8c: 1f:6a:7b:b9:7e:05:c2:00:9b:b9:e1:e0:66:5b:e4:7a:4e:37: 4f:bc:26:ca:a0:d4:24:f8:29:44:b0:60:52:db:59:45:0d:f8: 23:31:72:77:0d:e3:6b:e3:d3:22:00:89:37:f0:c7:af:b7:f7: 0d:53:93:37:f7:63:31:27:37:ba:0f:48:5a:6b:59:2f:c5:5d: 95:fc:59:02:4b:4b:07:18:28:3c:0a:6b:4a:f2:ab:cb:b8:8e: 72:d7:ea:09:e5:a8:ac:a4:f1:8e:5e:c3:56:91:73:9d:4b:7c: e5:ef:53:8b:f2:b6:17:0a:47:6e:e5:5e:0a:53:28:ff:bf:3c: 4f:02:12:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwNzI2MTgxMjM3WhcNMjYwODAyMTgxMjM3WjAYMRYwFAYD VQQDEw02YTY2NGUxNS1mMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmttQnNdS9wtJ/M5oYebqfWMC5jipV+rOEzUnT9v+Y2TZrw6dRYjYjg911f1h C62ckGe7jk7Bf3oxJDLWJm5hXzxgbC8klCsOQFSOSwUA7793RQWWZ+IK78ZVVzx7 7nVOFmErKgUDfL1AlSYKP/iqvon0/v/L1sFAHN3HwP+dFB8AbgMy3Lh5Plxg85hr CJy2tpm6YJOtPTNq42TjFoMwU1KXcbpTJj4NEQlYC5G+uO3/ITcMaHH5MIfFCNpN EpThWdzItdNCWsbaK+ACpxZR6Z/54q+fDrPeoG/43t24etRl93Vy9u86DSvpu3XT tllV7z3JM/5E2kEFhOkCofnzXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxS+28/ GeY+MOV/NDiGyyVYO+ohMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAISPMt3Ok0Zx+SNFRhaHrjR6DL9lpBDNJqBAUyAxRzHR1EGjtSwSh0eHxds7s vn4vrzIjWyK269MMCmwTUbPvd101i9478+D8Q7uCgBWQHYwC3a9L8/vxTWLs3Pil acvZIZFgDCchMmZnbXrRFaO74rF60Pt5gq5HC6VScsiMH2p7uX4FwgCbueHgZlvk ek43T7wmyqDUJPgpRLBgUttZRQ34IzFydw3ja+PTIgCJN/DHr7f3DVOTN/djMSc3 ug9IWmtZL8VdlfxZAktLBxgoPAprSvKry7iOctfqCeWorKTxjl7DVpFznUt85e9T i/K2FwpHbuVeClMo/788TwISTQ== -----END CERTIFICATE-----Generated at Tue Jul 28 02:50:21 2026 by rpki-client