$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: gkCEBX4oE23sPq3jWc9Y0mpBtNk1c1ELrm/vbht4jHc= Subject key identifier: EC:EE:20:44:46:50:83:5F:7A:CE:11:15:96:9D:01:25:E1:37:D1:8D Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0D67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0D34 Signing time: Sun 26 Jul 2026 18:36:02 +0000 Manifest this update: Sun 26 Jul 2026 18:36:01 +0000 Manifest next update: Sun 02 Aug 2026 18:36:01 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: bijkH5/sHFaKw67QFd3zpNOEYFUpcB1+WYv5MJRjPVc=) 2: C13356C0921511F089DDCF39C4F9AE02.roa (hash: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=) 3: 1457405286F111F19E006003A7EE528E.roa (hash: DXkAVdTqtVw+EnDto9iziagqv6cs1aZGrAT3bRD4kFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3431 (0xd67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Jul 26 18:36:01 2026 GMT Not After : Aug 2 18:36:01 2026 GMT Subject: CN=6a665392-8591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:8f:3e:f2:30:4a:76:ea:ff:e2:a3:ee:9d: 16:ec:eb:f7:33:f6:22:a8:17:82:8f:ad:a2:65:5a: 84:3e:ce:17:b0:5a:49:8e:8f:be:ff:22:7c:da:f0: b0:30:47:13:21:fe:2a:cd:cc:ac:58:ed:ff:20:e7: 7a:ed:86:22:63:70:1f:41:26:53:7d:9d:5d:c8:3f: 15:e0:ea:18:8f:61:06:eb:e9:9a:b7:88:fd:1d:b4: 61:8d:a2:ca:f1:fe:7c:75:c5:31:3e:b3:2e:85:fb: 2e:6e:6e:51:0a:45:d7:32:96:6d:03:b7:ca:80:b7: 7e:a4:ac:7c:48:63:a4:8a:d8:23:3e:3c:ef:bd:63: e5:2f:7a:20:b4:ec:fd:f8:a6:a8:e4:d4:5a:59:d7: 27:af:35:b4:22:66:57:3a:6b:13:e3:da:76:cd:53: ac:5e:e4:e5:90:ec:0f:c2:40:f8:05:eb:05:7b:40: eb:e7:6b:14:46:c8:d6:ef:8a:fe:a7:d3:6c:83:07: 2f:6d:2f:30:3c:c1:16:7c:8b:eb:1e:83:ca:73:a9: 58:e7:2e:4f:83:d4:d5:34:d2:08:dc:56:a4:43:80: 29:fa:f7:be:b6:45:64:39:cb:d6:c7:a2:97:de:4f: 59:f6:16:e9:61:16:ec:0f:f6:fc:3f:4c:83:f9:de: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EE:20:44:46:50:83:5F:7A:CE:11:15:96:9D:01:25:E1:37:D1:8D X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c6:80:88:c5:8e:dc:76:57:8f:7e:f1:76:35:c7:26:a5:78: dd:64:98:30:ee:3d:02:6c:f4:dc:74:8f:3f:2d:fe:44:dd:4c: e0:d9:83:5b:19:c6:8e:a0:bb:01:9e:93:04:88:f9:f7:74:0b: 1d:c4:f7:54:b0:10:29:f0:d6:9b:36:ec:06:11:7d:5d:3e:36: 50:2b:3a:c8:e2:3d:a9:e1:76:1a:40:d5:4f:fa:79:79:0e:bb: 12:a4:71:13:36:16:9e:24:1d:2f:eb:73:0f:b7:b8:f2:cd:d1: 7c:f6:5d:98:a3:71:b2:35:2a:4d:4e:20:1c:5f:3b:82:30:6f: 7d:3d:39:8c:f0:4c:49:18:46:cf:ad:3d:4b:94:ea:30:e7:a1: 42:9f:18:6b:81:3c:03:95:ee:a4:10:09:e0:f4:9e:f2:38:6d: 14:2b:49:e3:84:4e:d4:8f:3f:22:77:9a:07:9c:fa:d7:2e:d4: 83:99:76:22:b6:e6:ea:13:0b:26:5e:df:4e:dc:03:12:35:e7: e4:9b:30:44:2d:33:db:f5:cf:16:75:04:4c:7a:5e:d9:2c:92: a5:f4:0a:8f:dd:ee:78:33:01:16:ae:5f:74:98:22:57:39:5c: 47:3f:77:5b:34:83:ac:9c:b7:8c:61:50:74:6c:5c:1f:16:60: 45:ea:20:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjYwNzI2MTgzNjAxWhcNMjYwODAyMTgzNjAxWjAYMRYwFAYD VQQDEw02YTY2NTM5Mi04NTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8CPPvIwSnbq/+Kj7p0W7Ov3M/YiqBeCj62iZVqEPs4XsFpJjo++/yJ82vCw MEcTIf4qzcysWO3/IOd67YYiY3AfQSZTfZ1dyD8V4OoYj2EG6+mat4j9HbRhjaLK 8f58dcUxPrMuhfsubm5RCkXXMpZtA7fKgLd+pKx8SGOkitgjPjzvvWPlL3ogtOz9 +Kao5NRaWdcnrzW0ImZXOmsT49p2zVOsXuTlkOwPwkD4BesFe0Dr52sURsjW74r+ p9NsgwcvbS8wPMEWfIvrHoPKc6lY5y5Pg9TVNNII3FakQ4Ap+ve+tkVkOcvWx6KX 3k9Z9hbpYRbsD/b8P0yD+d4xuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzuIERG UINfes4RFZadASXhN9GNMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJMaAiMWO3HZXj37xdjXHJqV43WSYMO49Amz03HSPPy3+RN1M4NmDWxnGjqC7 AZ6TBIj593QLHcT3VLAQKfDWmzbsBhF9XT42UCs6yOI9qeF2GkDVT/p5eQ67EqRx EzYWniQdL+tzD7e48s3RfPZdmKNxsjUqTU4gHF87gjBvfT05jPBMSRhGz609S5Tq MOehQp8Ya4E8A5XupBAJ4PSe8jhtFCtJ44RO1I8/IneaB5z61y7Ug5l2Irbm6hML Jl7fTtwDEjXn5JswRC0z2/XPFnUETHpe2SySpfQKj93ueDMBFq5fdJgiVzlcRz93 WzSDrJy3jGFQdGxcHxZgReogAg== -----END CERTIFICATE-----Generated at Tue Jul 28 04:23:19 2026 by rpki-client