$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: jUJPnXAv4BpI3J1fv7OS9WGVj0e+4Uu3TkTLq2VQJTo= Subject key identifier: 7D:02:3E:5A:CF:B4:0F:F5:C1:D3:1B:BC:31:7A:F3:E6:30:EB:69:78 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: DB Signing time: Thu 23 Jul 2026 08:24:27 +0000 Manifest this update: Thu 23 Jul 2026 08:24:26 +0000 Manifest next update: Thu 30 Jul 2026 08:24:26 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: SM8GJqd6QQQpbrZppLG9xb98xwtTHL5/brqEHQqE0UQ=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Jul 23 08:24:26 2026 GMT Not After : Jul 30 08:24:26 2026 GMT Subject: CN=6a61cfba-3618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:d4:b3:cb:50:3b:a5:61:46:e3:b9:e0:b8: d4:90:b1:99:f1:7a:1c:29:dc:38:7d:40:da:ec:bc: 05:07:04:25:7d:08:d6:07:e9:44:74:94:9a:d9:37: 8f:48:f8:a6:9b:c0:c1:fd:19:31:b9:82:1b:a1:b0: 4b:7e:8c:5c:d6:e9:c7:48:4f:6c:13:b4:45:c0:2e: 35:34:e5:96:16:1a:58:5a:c8:71:89:9e:cf:58:e8: c9:a1:c0:4c:0d:dc:92:8b:45:47:10:5e:b2:f9:4a: 84:23:48:a7:60:ec:56:31:70:09:da:c1:7c:4d:f6: e3:af:f0:41:f1:e8:a4:b3:85:25:62:78:17:98:d6: 1b:d4:02:fe:17:c2:a6:1e:2f:31:92:40:5d:c2:d9: 0e:d3:64:4d:81:34:60:c5:4c:e4:4f:f3:b6:19:56: b4:fb:6d:2a:ac:15:d4:05:c1:9a:95:3f:91:db:14: 3d:97:41:c7:91:4f:0f:66:0d:b1:e4:21:9c:c6:0a: 00:8a:06:73:4d:29:06:13:5a:d6:fe:c7:73:9e:f7: 39:f7:91:37:92:00:87:91:18:71:c9:ad:a5:97:d8: b0:6f:37:31:2d:a1:b0:16:81:e3:b4:bb:79:43:66: 11:54:ed:0d:51:10:25:a5:5f:4e:00:aa:b8:c6:c6: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:02:3E:5A:CF:B4:0F:F5:C1:D3:1B:BC:31:7A:F3:E6:30:EB:69:78 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:2c:09:c4:79:b3:93:e2:f3:bb:8e:26:37:61:ff:bd:35:42: 94:d9:f2:70:57:89:42:41:88:ef:b3:72:bb:a1:d0:8d:41:88: 68:c9:6b:3b:93:d5:57:ac:07:30:56:94:e8:02:ae:6a:b2:28: 79:90:b1:11:bf:a2:7b:de:1b:18:77:e7:c6:18:2c:98:54:7c: 8d:fb:4c:32:b6:f0:22:b1:50:9c:3f:22:08:4b:89:1f:5b:de: 97:9f:55:03:d3:af:49:11:7a:89:5c:99:2c:51:78:4b:aa:20: 01:be:14:3d:05:8f:b5:58:41:bf:de:ad:90:bb:43:7a:ef:ca: 89:30:fc:2b:9f:98:a0:3c:8c:a8:0d:23:ff:ca:40:4c:49:eb: 9c:e7:43:3a:cf:9f:60:b6:79:9e:59:08:fc:14:7f:50:72:0f: 6a:58:fe:99:64:80:8b:a9:52:7f:df:ac:b8:64:cb:d0:90:04: d0:92:bf:e9:1d:bb:6b:ba:fa:37:bc:0a:a4:af:f1:ef:ec:f8: 3d:9c:83:5e:53:c3:2f:ce:c8:09:1a:80:d7:f3:13:78:55:ea: 1d:c8:d6:1e:f9:76:0d:3c:70:69:d3:a5:a2:24:9b:a0:45:a5: 01:3f:6c:84:8f:1d:0c:3f:bb:e2:38:0b:2e:e4:45:85:91:44: 24:8f:f2:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwNzIzMDgyNDI2WhcNMjYwNzMwMDgyNDI2WjAYMRYwFAYD VQQDEw02YTYxY2ZiYS0zNjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouLUs8tQO6VhRuO54LjUkLGZ8XocKdw4fUDa7LwFBwQlfQjWB+lEdJSa2TeP SPimm8DB/RkxuYIbobBLfoxc1unHSE9sE7RFwC41NOWWFhpYWshxiZ7PWOjJocBM DdySi0VHEF6y+UqEI0inYOxWMXAJ2sF8Tfbjr/BB8eiks4UlYngXmNYb1AL+F8Km Hi8xkkBdwtkO02RNgTRgxUzkT/O2GVa0+20qrBXUBcGalT+R2xQ9l0HHkU8PZg2x 5CGcxgoAigZzTSkGE1rW/sdznvc595E3kgCHkRhxya2ll9iwbzcxLaGwFoHjtLt5 Q2YRVO0NURAlpV9OAKq4xsaTPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0CPlrP tA/1wdMbvDF68+Yw62l4MB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAECwJxHmzk+Lzu44mN2H/vTVClNnycFeJQkGI77Nyu6HQjUGIaMlrO5PVV6wH MFaU6AKuarIoeZCxEb+ie94bGHfnxhgsmFR8jftMMrbwIrFQnD8iCEuJH1vel59V A9OvSRF6iVyZLFF4S6ogAb4UPQWPtVhBv96tkLtDeu/KiTD8K5+YoDyMqA0j/8pA TEnrnOdDOs+fYLZ5nlkI/BR/UHIPalj+mWSAi6lSf9+suGTL0JAE0JK/6R27a7r6 N7wKpK/x7+z4PZyDXlPDL87ICRqA1/MTeFXqHcjWHvl2DTxwadOloiSboEWlAT9s hI8dDD+74jgLLuRFhZFEJI/yQg== -----END CERTIFICATE-----Generated at Fri Jul 24 14:29:53 2026 by rpki-client