$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: nAmsZQcHY2VQtLvhTJ1b0wjFrxFEG91h7ubscanNjcc= Subject key identifier: F6:77:20:AE:A3:68:BC:F2:F0:77:DD:18:4F:F6:FA:AF:07:17:4A:44 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 35AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 3582 Signing time: Sun 26 Jul 2026 14:18:53 +0000 Manifest this update: Sun 26 Jul 2026 14:18:52 +0000 Manifest next update: Sun 02 Aug 2026 14:18:52 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: rc2tSRhvv+234Os1B2N2RJIuzWchsppsaPryhzSvi3U=) 2: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: x1jt7itPjnC6MQbNejsBQgbeqBxLH2bZYuNPNtNXfYM=) 3: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (hash: x81djxirc4TZ7LBWsfaYDwm6dEqBh0TJcdGGB4pBfl8=) 4: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: uTwgdWpEtjV1ALHAM8OqP3F4AfwGv1rbWW6ZiHZWVyg=) 5: 1F40296A65AA11F1A2780DB67847A888.roa (hash: xCeE3NkSHLJX8hWD3lcocXTFRBLR4NjlfyWa7eSQ5Q0=) 6: B683232C65AA11F1B5A6BBF27847A888.roa (hash: ui+fKkNRAL+b96meDYqRb3fMZ9lGNQU6S4pF6IMCEJk=) 7: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: kemAcHttVJ/67VTbPvla1uxc5lCQKg8ypYYWxu51V6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 14:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13742 (0x35ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Jul 26 14:18:52 2026 GMT Not After : Aug 2 14:18:52 2026 GMT Subject: CN=6a66174d-6b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:01:93:07:39:97:a6:d9:1e:66:bd:7e:d0: 38:7a:15:59:22:d3:d4:04:0a:30:11:07:ef:5e:ae: f5:e5:23:24:2f:66:51:9b:2e:e8:d3:f4:f4:a9:b4: 05:5a:54:26:b7:c8:bd:cc:9d:36:56:f5:8d:bf:40: 03:92:31:e4:26:e5:a2:a2:87:50:fb:2c:6d:24:2c: 2a:61:15:d4:9b:0c:29:79:bc:1f:0c:79:23:c7:71: 2e:47:a8:11:0f:1f:57:25:fa:24:af:97:18:2d:55: 1b:45:e3:27:95:f9:40:f9:1f:a3:70:12:02:ba:dc: ec:2a:ad:cb:9f:60:b9:68:cc:90:67:a9:a3:66:56: ef:d5:54:dc:38:fe:c8:73:13:53:3d:56:7e:9d:b5: 3c:42:ed:b4:2e:18:d3:a8:de:c2:14:3b:90:3f:e2: b5:76:e8:32:91:5d:6b:cf:38:8e:f1:3a:9a:fe:1b: 93:c4:cb:fb:e1:fc:e3:45:38:75:92:a9:cb:53:16: d3:8d:8c:93:9a:56:4c:4f:30:b5:09:70:9d:43:f1: 6d:85:1e:46:f3:ac:87:1c:14:96:73:55:18:c4:41: de:ee:c4:ef:c2:81:dd:02:10:14:4d:50:49:55:a1: 43:d4:f3:28:94:10:ed:6d:7a:64:77:69:71:7f:b2: 3d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:77:20:AE:A3:68:BC:F2:F0:77:DD:18:4F:F6:FA:AF:07:17:4A:44 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a2:7d:b9:d4:a4:5c:a1:91:f0:d4:6d:dc:c5:5c:fc:51:b4: ea:2a:e7:cb:ce:ec:cc:5a:4f:db:89:ed:df:89:19:eb:fb:97: 3f:f7:ad:66:5d:63:bb:17:e3:f0:57:4c:6e:80:f0:4a:be:dc: 45:58:8d:79:e7:e7:fd:f2:a8:4f:65:39:6d:01:38:fc:b6:d1: 73:9a:8e:14:49:c3:90:79:13:0f:59:2a:47:88:57:d1:42:ab: fb:0d:73:a7:4f:20:ca:03:1a:96:59:2e:de:f2:24:9f:90:70: 1d:98:15:30:60:0d:58:d0:43:98:81:ec:6d:06:47:1c:42:b1: cf:33:dd:1c:31:3a:9a:09:f1:30:85:8f:a2:89:3e:51:a1:4d: 39:2d:07:5e:1f:95:67:88:90:1e:fa:04:2c:c4:e3:b1:62:a4: c9:98:24:1b:dd:12:7c:6f:d1:43:43:1d:e2:87:e4:d6:12:23: 07:38:67:8b:d0:e2:41:be:40:56:bb:5c:86:71:76:8c:0a:07: de:c2:34:83:07:4a:e3:c2:5c:3e:86:0a:97:35:88:db:f6:72: 75:83:74:e8:b5:6f:1d:48:a9:74:8b:67:79:0d:da:de:54:1c: 5d:52:89:5c:b6:a1:44:17:4c:1b:0f:b1:65:c6:94:ad:53:db: 08:38:96:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjYwNzI2MTQxODUyWhcNMjYwODAyMTQxODUyWjAYMRYwFAYD VQQDEw02YTY2MTc0ZC02YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDkBkwc5l6bZHma9ftA4ehVZItPUBAowEQfvXq715SMkL2ZRmy7o0/T0qbQF WlQmt8i9zJ02VvWNv0ADkjHkJuWioodQ+yxtJCwqYRXUmwwpebwfDHkjx3EuR6gR Dx9XJfokr5cYLVUbReMnlflA+R+jcBICutzsKq3Ln2C5aMyQZ6mjZlbv1VTcOP7I cxNTPVZ+nbU8Qu20LhjTqN7CFDuQP+K1dugykV1rzziO8Tqa/huTxMv74fzjRTh1 kqnLUxbTjYyTmlZMTzC1CXCdQ/FthR5G86yHHBSWc1UYxEHe7sTvwoHdAhAUTVBJ VaFD1PMolBDtbXpkd2lxf7I9OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZ3IK6j aLzy8HfdGE/2+q8HF0pEMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGqJ9udSkXKGR8NRt3MVc/FG06irny87szFpP24nt34kZ6/uXP/etZl1juxfj 8FdMboDwSr7cRViNeefn/fKoT2U5bQE4/LbRc5qOFEnDkHkTD1kqR4hX0UKr+w1z p08gygMallku3vIkn5BwHZgVMGANWNBDmIHsbQZHHEKxzzPdHDE6mgnxMIWPook+ UaFNOS0HXh+VZ4iQHvoELMTjsWKkyZgkG90SfG/RQ0Md4ofk1hIjBzhni9DiQb5A VrtchnF2jAoH3sI0gwdK48JcPoYKlzWI2/ZydYN06LVvHUipdItneQ3a3lQcXVKJ XLahRBdMGw+xZcaUrVPbCDiWkg== -----END CERTIFICATE-----Generated at Mon Jul 27 18:35:36 2026 by rpki-client