$ rpki-client -vvf rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft File: RXfmNryC40djCTad9uzHkOsrkUU.mft (raw, json) Hash identifier: 6O+rRlLchFS4RShu20ynSEWFTm5009TGc6p9/UWEy2o= Subject key identifier: 0B:12:B3:96:DB:E6:4B:D2:B9:BD:38:2E:A9:69:8A:D4:3C:88:58:4E Authority key identifier: 45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45 Certificate issuer: /CN=A91614E3/serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft Manifest number: 2E Signing time: Thu 23 Jul 2026 10:44:44 +0000 Manifest this update: Thu 23 Jul 2026 10:44:43 +0000 Manifest next update: Thu 30 Jul 2026 10:44:43 +0000 Files and hashes: 1: RXfmNryC40djCTad9uzHkOsrkUU.crl (hash: di5DIzU/ONO/tBmrq/VIDTTqqEpaM1FJCirjm/ShdWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91614E3, serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145 Validity Not Before: Jul 23 10:44:43 2026 GMT Not After : Jul 30 10:44:43 2026 GMT Subject: CN=6a61f09c-37ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:2b:6f:77:83:6e:51:d1:f1:22:4d:af:08: 8d:af:12:ea:7f:98:ae:14:a2:c9:66:93:3e:cf:8d: b5:8c:a2:fe:72:07:14:91:4f:c4:d1:c4:c9:d4:6a: 0c:44:f8:aa:38:70:21:c2:d0:79:61:80:b2:b0:43: 78:7c:5f:b3:5c:30:bf:d0:6e:76:02:f2:73:17:51: 98:5b:8f:92:66:7f:59:5c:bc:7c:b1:2f:26:0c:27: bc:b7:56:46:7f:28:5d:c3:77:2b:dd:f5:ce:75:17: 91:43:49:c7:dd:a2:9b:50:ce:13:8f:48:32:32:96: c6:c2:e2:25:75:e9:29:76:ef:00:f0:a6:82:e7:f9: 3e:d3:e0:d1:ab:34:ab:0d:99:75:43:4e:69:c5:72: 84:ed:e7:52:f2:83:35:d0:c9:64:90:16:c5:91:b3: 05:b7:92:80:ba:44:1a:e3:99:49:e7:6c:ea:33:8e: 97:45:aa:d0:0f:eb:aa:92:d0:67:be:ae:dd:4a:61: 81:49:d0:0a:f2:c3:2f:43:2b:f9:e9:33:7b:c9:ad: 56:4c:54:bd:85:09:f4:96:09:9f:a3:33:05:f0:61: 4b:d2:15:55:12:29:7a:82:73:ad:e4:12:92:76:18: 77:b6:6c:cc:b1:da:e9:e2:e7:03:d6:f2:31:9f:ae: 2d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:12:B3:96:DB:E6:4B:D2:B9:BD:38:2E:A9:69:8A:D4:3C:88:58:4E X509v3 Authority Key Identifier: keyid:45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:19:74:2a:c3:ff:16:d6:3c:c8:bc:c0:b2:6c:ee:88:a6:e7: f8:21:e3:df:9b:a6:01:f1:e7:b0:99:ed:02:4d:13:92:a6:86: aa:c0:90:6e:99:0b:cb:3f:0a:59:91:5e:93:d9:8b:e8:84:29: cf:c7:5c:41:52:5d:04:06:5f:04:2f:cf:a2:3a:a2:28:1d:29: 39:91:02:56:9b:9e:9e:d7:e6:15:8b:24:da:19:65:30:f1:e8: 0c:52:73:f8:2d:ca:c5:fa:a9:82:5b:3d:48:21:bd:77:7c:7b: 79:df:ad:10:8d:38:9f:a2:93:3a:ea:07:a3:e9:c0:57:8c:78: c7:a8:81:83:98:61:1b:b7:90:f8:19:ce:a5:1c:a4:9d:44:8f: 28:fe:32:ba:5b:47:be:3b:77:9c:8b:f7:fd:96:94:d5:b1:c6: 3b:8f:88:69:b1:e3:23:de:f5:e1:a1:fd:fe:86:f6:dd:e5:b1: da:db:9f:4f:33:ee:73:85:11:4c:9a:c4:82:26:c5:55:d9:72: 8d:ba:03:0e:6f:33:5d:1e:11:a4:80:3a:01:46:4b:61:35:8f: 58:61:70:d4:3b:d5:6d:0c:ae:20:73:50:5b:fa:88:4e:e7:b6: 44:c7:4c:b5:9f:48:15:35:9c:c3:a9:e4:53:f5:73:f5:74:77: 61:d8:82:3a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTRFMzExMC8GA1UEBRMoNDU3N0U2MzZCQzgyRTM0NzYzMDkzNjlERjZFQ0M3OTBF QjJCOTE0NTAeFw0yNjA3MjMxMDQ0NDNaFw0yNjA3MzAxMDQ0NDNaMBgxFjAUBgNV BAMTDTZhNjFmMDljLTM3ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSaytvd4NuUdHxIk2vCI2vEup/mK4Uoslmkz7PjbWMov5yBxSRT8TRxMnUagxE +Ko4cCHC0HlhgLKwQ3h8X7NcML/QbnYC8nMXUZhbj5Jmf1lcvHyxLyYMJ7y3VkZ/ KF3Ddyvd9c51F5FDScfdoptQzhOPSDIylsbC4iV16Sl27wDwpoLn+T7T4NGrNKsN mXVDTmnFcoTt51LygzXQyWSQFsWRswW3koC6RBrjmUnnbOozjpdFqtAP66qS0Ge+ rt1KYYFJ0Arywy9DK/npM3vJrVZMVL2FCfSWCZ+jMwXwYUvSFVUSKXqCc63kEpJ2 GHe2bMyx2uni5wPW8jGfri1nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCxKzltvm S9K5vTguqWmK1DyIWE4wHwYDVR0jBBgwFoAURXfmNryC40djCTad9uzHkOsrkUUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxNEUzL0ZBRkY5OTg2M0VE MTExRjFBM0JDMTE0OUIwODMzNzczL1JYZm1OcnlDNDBkakNUYWQ5dXpIa09zcmtV VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlhmbU5yeUM0MGRqQ1RhZDl1ekhrT3Nya1VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx NEUzL0ZBRkY5OTg2M0VEMTExRjFBM0JDMTE0OUIwODMzNzczL1JYZm1OcnlDNDBk akNUYWQ5dXpIa09zcmtVVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZGXQqw/8W1jzIvMCybO6Ipuf4IePfm6YB8eewme0CTROSpoaqwJBumQvLPwpZ kV6T2YvohCnPx1xBUl0EBl8EL8+iOqIoHSk5kQJWm56e1+YViyTaGWUw8egMUnP4 LcrF+qmCWz1IIb13fHt5360QjTifopM66gej6cBXjHjHqIGDmGEbt5D4Gc6lHKSd RI8o/jK6W0e+O3eci/f9lpTVscY7j4hpseMj3vXhof3+hvbd5bHa259PM+5zhRFM msSCJsVV2XKNugMObzNdHhGkgDoBRkthNY9YYXDUO9VtDK4gc1Bb+ohO57ZEx0y1 n0gVNZzDqeRT9XP1dHdh2II6 -----END CERTIFICATE-----Generated at Fri Jul 24 02:35:11 2026 by rpki-client