$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: NRwzfD0QyacHIFLsuMj8+p0OsOEh0Hz3UvKs3QRioJ4= Subject key identifier: 2B:22:A0:FD:EE:EC:7E:00:C5:0A:47:7D:F4:B7:EE:AC:73:33:F3:CD Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 0243 Signing time: Thu 23 Jul 2026 03:48:29 +0000 Manifest this update: Thu 23 Jul 2026 03:48:29 +0000 Manifest next update: Thu 30 Jul 2026 03:48:29 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: ylgCjeE6XKQ0xSlumlJZ9PbEP4ltKXa9GV8tuvXwHTM=) 2: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: WQFzmtRcnRTzLa+owzbcIOOpVzi5EXn6wMZBFZmtrx0=) 3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: mxZONybayBYjT/wE5ER2yG5aHXpF0N7OGPjQ6melKBE=) 4: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: vDv+eD+OfMVa33qvWILzbZ7BF93e5A2vMNwg9cii/zI=) 5: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: zYrmifFyXf8eyAWgav1JJc7uPLea+6me2PDJlPHyfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Jul 23 03:48:29 2026 GMT Not After : Jul 30 03:48:29 2026 GMT Subject: CN=6a618f0d-23de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:23:e1:69:cf:e1:90:9a:64:1d:53:c3:76: ce:64:da:26:09:b9:27:e6:43:bb:da:2c:0f:9a:1e: 73:98:9e:a0:c3:39:8f:59:e1:e5:f7:ad:64:57:63: e3:87:7a:46:49:4a:e2:cc:ac:cf:a9:4c:9d:59:a2: 1e:26:01:cd:b2:d6:1f:fc:b7:3d:de:9b:9a:38:99: 45:27:14:df:c3:76:58:f7:7c:48:03:a2:a8:fe:d9: b4:e2:1f:9b:ac:e0:b3:96:2a:2e:9b:0e:2d:00:a1: b3:d2:f5:23:6e:d7:0c:e5:9c:e4:7f:a7:33:80:3d: c8:a8:d6:71:23:cc:b9:98:79:1b:d0:bd:95:65:a3: da:00:23:21:a8:e0:b8:f3:44:b6:67:8c:48:2f:ab: 44:62:a0:ca:34:40:80:dc:70:c5:f2:2e:25:ba:14: 94:ba:6f:b4:57:1e:73:e9:b6:a2:07:49:5c:1a:09: a3:f0:13:fb:d5:c2:03:e9:9c:04:bd:8e:17:b9:55: a5:9b:e5:04:43:36:a1:6a:2a:a8:c7:fc:da:af:06: 4f:fa:7b:0d:f0:a8:7d:18:65:05:1d:d2:3b:7a:e7: 21:13:7b:5f:d8:8c:3d:66:d6:07:ea:c2:47:a0:5c: c1:3f:35:6e:88:1b:90:6d:ac:26:31:0a:89:b7:13: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:A0:FD:EE:EC:7E:00:C5:0A:47:7D:F4:B7:EE:AC:73:33:F3:CD X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d0:a2:cb:2c:10:7f:4d:5f:f4:00:89:7a:1f:d7:3c:e6:5c: 64:c7:15:5d:a6:af:17:70:28:99:df:dd:06:af:a7:aa:69:b9: 29:02:eb:aa:8a:45:29:87:07:78:51:4f:58:1f:de:de:13:58: d2:f3:4c:61:38:7c:38:4f:2f:5e:a9:f0:ba:22:d0:b4:d5:37: 6d:22:14:0b:aa:75:5e:f6:aa:20:2f:c1:6f:d8:1b:25:c9:29: 43:ee:f5:de:61:d0:d7:f1:9a:d0:64:29:a1:1c:0d:9d:74:aa: 6b:42:8d:66:db:74:f0:e8:c8:83:3c:29:3e:24:c4:1d:f6:62: 44:57:bb:2b:20:f7:eb:bd:18:c9:3c:57:91:37:b4:45:28:c0: 4b:89:f5:ec:b6:69:34:fd:1a:6f:89:49:d1:00:dd:6f:15:3c: e7:01:37:6d:8e:0e:5b:34:d7:6e:ae:8a:92:4c:a3:f9:0d:49: a6:d8:15:ec:f8:42:7d:c5:51:4c:37:62:f5:32:c0:6a:5b:03: 23:72:f0:d7:1d:41:2a:d8:47:05:e9:4d:fe:e1:7e:c9:01:51: fb:21:7a:9d:18:eb:a4:6c:60:65:9f:ed:09:21:88:11:18:8d: 5d:a3:e7:b8:03:ef:ff:c4:b0:fe:6f:5b:0a:a1:b8:e6:f6:90: 69:e9:9a:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjYwNzIzMDM0ODI5WhcNMjYwNzMwMDM0ODI5WjAYMRYwFAYD VQQDEw02YTYxOGYwZC0yM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYMj4WnP4ZCaZB1Tw3bOZNomCbkn5kO72iwPmh5zmJ6gwzmPWeHl961kV2Pj h3pGSUrizKzPqUydWaIeJgHNstYf/Lc93puaOJlFJxTfw3ZY93xIA6Ko/tm04h+b rOCzlioumw4tAKGz0vUjbtcM5Zzkf6czgD3IqNZxI8y5mHkb0L2VZaPaACMhqOC4 80S2Z4xIL6tEYqDKNECA3HDF8i4luhSUum+0Vx5z6baiB0lcGgmj8BP71cID6ZwE vY4XuVWlm+UEQzahaiqox/zarwZP+nsN8Kh9GGUFHdI7euchE3tf2Iw9ZtYH6sJH oFzBPzVuiBuQbawmMQqJtxONwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsioP3u 7H4AxQpHffS37qxzM/PNMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKtCiyywQf01f9ACJeh/XPOZcZMcVXaavF3Aomd/dBq+nqmm5KQLrqopFKYcH eFFPWB/e3hNY0vNMYTh8OE8vXqnwuiLQtNU3bSIUC6p1XvaqIC/Bb9gbJckpQ+71 3mHQ1/Ga0GQpoRwNnXSqa0KNZtt08OjIgzwpPiTEHfZiRFe7KyD3670YyTxXkTe0 RSjAS4n17LZpNP0ab4lJ0QDdbxU85wE3bY4OWzTXbq6Kkkyj+Q1JptgV7PhCfcVR TDdi9TLAalsDI3Lw1x1BKthHBelN/uF+yQFR+yF6nRjrpGxgZZ/tCSGIERiNXaPn uAPv/8Sw/m9bCqG45vaQaemaHg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:20:24 2026 by rpki-client