$ rpki-client -vvf rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft File: xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft (raw, json) Hash identifier: S+6MbsPyhrWf1dC8lPT64qq64axvsg7rNRkF8JKO9aU= Subject key identifier: 3C:1B:DB:9F:A8:E1:3A:84:27:A8:83:C4:4F:F1:5F:05:C2:08:6C:9D Authority key identifier: C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64 Certificate issuer: /CN=A91582DF/serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft Manifest number: 28 Signing time: Thu 23 Jul 2026 10:51:47 +0000 Manifest this update: Thu 23 Jul 2026 10:51:46 +0000 Manifest next update: Thu 30 Jul 2026 10:51:46 +0000 Files and hashes: 1: xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl (hash: 9goMKZ1hX0Dcen3dq4a6tP3NPpgMIXQUAWsMO2034cs=) 2: A0AA3CC84A1D11F1B98DEBB6C9833773.roa (hash: vg1YeXy7A3skRrMrzsOzoL6vwmPs9b3WJpIatWza3uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582DF, serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64 Validity Not Before: Jul 23 10:51:46 2026 GMT Not After : Jul 30 10:51:46 2026 GMT Subject: CN=6a61f243-45e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:62:67:2b:1e:5b:13:11:de:38:96:7e:ff: 7e:1d:c1:eb:fb:08:7a:4e:ce:01:a2:6e:82:18:31: ae:e2:83:11:3e:cf:04:b9:5b:f3:e5:46:8d:22:de: ac:05:f5:60:f9:09:23:1d:30:8a:bc:82:c4:b6:6f: c1:8e:4b:9a:84:d7:6f:08:40:94:0b:ac:94:4c:9e: 57:35:ad:d1:96:ed:f4:92:a5:57:1b:16:bc:60:2b: 56:41:37:c8:0a:96:f5:12:ad:66:39:f5:65:20:3f: 2a:7e:8d:4f:25:2a:c3:ec:31:b6:cd:45:6a:86:31: 5f:d3:98:da:f1:5c:29:7a:cc:9b:d7:19:e8:8e:bb: 54:67:ed:7c:5b:a3:45:50:4b:fa:23:ca:4a:7e:4d: 5d:ce:8c:22:d0:2f:bd:5d:b4:4f:58:d8:93:b7:d6: fa:25:f7:9f:44:c7:53:e0:d5:e8:24:f6:b5:0e:32: 95:09:d7:38:37:ba:3f:4e:d3:99:13:af:f1:6b:e7: 44:49:96:c8:6d:d1:4e:41:f1:67:f5:07:0f:25:2d: 26:ee:ae:c1:56:bd:48:d4:85:b5:c6:9e:79:98:23: b8:64:47:aa:46:9c:f7:f7:4d:81:37:48:45:be:20: 9a:80:0e:76:55:89:1c:7f:3e:86:e8:50:8b:a3:88: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1B:DB:9F:A8:E1:3A:84:27:A8:83:C4:4F:F1:5F:05:C2:08:6C:9D X509v3 Authority Key Identifier: keyid:C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:89:ac:ba:f0:0e:6d:2c:d6:66:d3:57:ab:9c:f1:71:d7:55: 65:71:3f:9d:a9:70:cf:b9:35:3a:7b:2e:7e:cc:f1:25:3d:7a: 50:1b:cd:90:ec:3b:84:2b:97:48:21:91:70:ed:aa:64:d1:a4: 8b:e3:56:5f:b0:07:8a:5f:be:ed:63:b8:93:30:b3:21:04:d9: d5:dc:9e:4b:1f:97:f7:b8:f4:7a:28:52:91:d1:dc:7a:22:cc: 19:d2:4a:0a:16:1d:48:ee:e4:dc:c1:41:91:c0:d9:c8:56:6e: 20:29:b8:7a:32:31:67:42:6e:a5:4c:17:2d:f7:0d:86:ba:09: 01:41:e4:87:c7:f4:fa:49:9d:b8:55:c5:d6:ee:03:82:8a:fb: 1f:55:c0:f7:c4:55:21:ba:74:a6:1a:55:6c:52:8e:f5:70:21: 9d:11:a4:5b:4e:3d:ab:90:18:95:ab:eb:42:f4:00:38:b6:6d: c3:d9:a1:b5:21:d8:2c:bd:9d:80:33:be:d1:3b:97:3d:68:37: f1:d7:d2:f6:6c:25:2a:42:76:e9:6b:50:b5:51:0e:c1:83:96: 88:c0:b0:ab:9c:72:07:ea:9e:2e:ed:1d:27:bd:c1:26:c1:92: 35:01:80:b8:f1:17:25:fc:4b:b2:e1:de:a8:5e:e6:07:94:6e: 0f:d8:f5:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODJERjExMC8GA1UEBRMoQzczRDA2QzA1QTg3NTVFQzg2RjNBRjE5NDBFRTkwREE0 OUFFM0U2NDAeFw0yNjA3MjMxMDUxNDZaFw0yNjA3MzAxMDUxNDZaMBgxFjAUBgNV BAMTDTZhNjFmMjQzLTQ1ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC30mJnKx5bExHeOJZ+/34dwev7CHpOzgGiboIYMa7igxE+zwS5W/PlRo0i3qwF 9WD5CSMdMIq8gsS2b8GOS5qE128IQJQLrJRMnlc1rdGW7fSSpVcbFrxgK1ZBN8gK lvUSrWY59WUgPyp+jU8lKsPsMbbNRWqGMV/TmNrxXCl6zJvXGeiOu1Rn7Xxbo0VQ S/ojykp+TV3OjCLQL71dtE9Y2JO31vol959Ex1Pg1egk9rUOMpUJ1zg3uj9O05kT r/Fr50RJlsht0U5B8Wf1Bw8lLSbursFWvUjUhbXGnnmYI7hkR6pGnPf3TYE3SEW+ IJqADnZViRx/PoboUIujiNolAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPBvbn6jh OoQnqIPET/FfBcIIbJ0wHwYDVR0jBBgwFoAUxz0GwFqHVeyG868ZQO6Q2kmuPmQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MkRGLzk1MDFFMjQ2NEEx QzExRjFBQUZCQTZCMUM5ODMzNzczL3h6MEd3RnFIVmV5Rzg2OFpRTzZRMmttdVBt US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHowR3dGcUhWZXlHODY4WlFPNlEya211UG1RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MkRGLzk1MDFFMjQ2NEExQzExRjFBQUZCQTZCMUM5ODMzNzczL3h6MEd3RnFIVmV5 Rzg2OFpRTzZRMmttdVBtUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAciay68A5tLNZm01ernPFx11VlcT+dqXDPuTU6ey5+zPElPXpQG82Q7DuEK5dI IZFw7apk0aSL41ZfsAeKX77tY7iTMLMhBNnV3J5LH5f3uPR6KFKR0dx6IswZ0koK Fh1I7uTcwUGRwNnIVm4gKbh6MjFnQm6lTBct9w2GugkBQeSHx/T6SZ24VcXW7gOC ivsfVcD3xFUhunSmGlVsUo71cCGdEaRbTj2rkBiVq+tC9AA4tm3D2aG1IdgsvZ2A M77RO5c9aDfx19L2bCUqQnbpa1C1UQ7Bg5aIwLCrnHIH6p4u7R0nvcEmwZI1AYC4 8Rcl/Euy4d6oXuYHlG4P2PV6 -----END CERTIFICATE-----Generated at Fri Jul 24 12:59:42 2026 by rpki-client