$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json) Hash identifier: X1TXCrZ0qi9q/6uZfeuUoDf8013GZ7jPcyZ4Ook6sKk= Subject key identifier: AD:15:96:3F:F6:C9:5C:1F:07:06:B5:AF:0A:A4:27:B0:03:8E:FF:92 Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Certificate serial: 1137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft Manifest number: 1127 Signing time: Fri 24 Jul 2026 17:27:10 +0000 Manifest this update: Fri 24 Jul 2026 17:27:10 +0000 Manifest next update: Fri 31 Jul 2026 17:27:10 +0000 Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: 711eNL/fcDSrg3pIYukN3O0YulZl92PIKKD8sma0AHM=) 2: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: yaNkgji9jGH4TTyhCOL2/K5RHSqEhk35tfGLeGGK6L0=) 3: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 3XIdOKZPD+XETwFVUGrUUljIP0PedqBSSrgTHEH2oF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 17:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4407 (0x1137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Validity Not Before: Jul 24 17:27:10 2026 GMT Not After : Jul 31 17:27:10 2026 GMT Subject: CN=6a63a06e-a69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:4e:4c:b1:1c:b0:ab:ba:8b:07:42:3d:12: 7c:02:a9:59:c7:f3:fc:30:2c:d4:51:b2:8e:68:c5: 22:d0:6e:b6:93:35:e9:96:fa:ab:74:9b:24:be:20: 57:e0:71:f9:0d:f9:e5:74:f1:ab:05:a2:29:55:fb: 05:a6:d5:f7:72:e0:8f:94:df:00:23:04:d5:5a:38: c2:cf:18:50:fc:ae:59:df:68:e9:f2:5f:e4:5a:0c: e3:19:50:14:32:0e:28:25:23:95:13:e0:71:f3:c3: d2:8c:77:12:59:57:49:39:63:98:ae:6d:9e:54:ba: 63:0f:ba:71:12:79:09:12:2d:3a:64:88:65:6c:99: 49:db:6a:0f:f5:ad:24:40:85:cc:31:94:59:9e:fc: a8:59:8a:36:01:df:05:d6:73:b1:40:79:4e:99:00: 15:a4:3b:fc:50:14:04:b1:79:36:f8:a6:9c:ec:91: fd:f1:c2:08:68:11:f5:2c:a3:41:c0:cf:26:57:e1: f4:69:4c:f7:40:1f:a4:6f:44:75:87:6f:85:36:07: 2c:a8:94:6d:53:ec:55:de:24:55:59:9d:70:30:8d: 81:d8:9c:8b:34:30:6e:50:73:77:17:4b:7e:ff:ca: e1:ea:16:23:c7:01:a1:a2:a6:0a:aa:54:2e:f2:b1: 55:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:15:96:3F:F6:C9:5C:1F:07:06:B5:AF:0A:A4:27:B0:03:8E:FF:92 X509v3 Authority Key Identifier: keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:8d:fe:0b:69:8f:70:01:79:82:30:43:85:39:67:7c:54:c8: f0:0b:6c:ed:62:bb:88:5f:3e:b2:e0:a4:4e:c1:26:97:09:66: c8:eb:f2:9d:09:1b:5f:b1:e1:75:3f:2f:8b:22:95:fa:b9:6d: 42:49:19:31:2d:5d:cc:38:38:f8:fd:3b:50:01:29:4a:d9:76: 8e:b6:ab:03:71:2d:65:bf:12:cf:79:e4:a1:4e:ef:69:bf:ce: 03:b3:f4:35:73:53:01:91:98:34:e2:d3:4b:aa:47:57:2f:12: dd:e9:aa:d9:8e:b8:26:3b:a7:dc:7e:0b:c1:69:0f:3f:c8:39: 6e:33:11:c7:6e:b6:6c:77:46:ca:73:7d:6f:e4:c8:22:d9:a6: 3c:93:7f:9d:c8:bb:ea:b9:41:97:8f:e0:c1:3f:f5:68:e2:f1: 6f:2d:a3:f7:43:97:74:f5:be:73:d4:16:dc:ef:b5:34:c4:1e: fe:c0:13:cb:04:2d:a6:e0:bb:66:75:a5:27:ee:bb:c7:ac:b5: 9a:db:30:70:89:a9:bc:97:7a:2a:f2:ec:9f:f9:cf:84:11:9b: d3:56:a8:03:a2:3c:c7:84:c4:be:6c:c8:21:12:7c:af:9c:03: fb:80:c9:7d:11:83:1d:ee:bc:c7:eb:ba:24:be:ca:8e:2a:6c: b5:13:33:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICETcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1 MUEyMzUwQUYwHhcNMjYwNzI0MTcyNzEwWhcNMjYwNzMxMTcyNzEwWjAYMRYwFAYD VQQDEw02YTYzYTA2ZS1hNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIpOTLEcsKu6iwdCPRJ8AqlZx/P8MCzUUbKOaMUi0G62kzXplvqrdJskviBX 4HH5DfnldPGrBaIpVfsFptX3cuCPlN8AIwTVWjjCzxhQ/K5Z32jp8l/kWgzjGVAU Mg4oJSOVE+Bx88PSjHcSWVdJOWOYrm2eVLpjD7pxEnkJEi06ZIhlbJlJ22oP9a0k QIXMMZRZnvyoWYo2Ad8F1nOxQHlOmQAVpDv8UBQEsXk2+Kac7JH98cIIaBH1LKNB wM8mV+H0aUz3QB+kb0R1h2+FNgcsqJRtU+xV3iRVWZ1wMI2B2JyLNDBuUHN3F0t+ /8rh6hYjxwGhoqYKqlQu8rFVOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0Vlj/2 yVwfBwa1rwqkJ7ADjv+SMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1 cVIxejAyUTg2N3RSb2pVSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVY3+C2mPcAF5gjBDhTlnfFTI8Ats7WK7iF8+suCkTsEmlwlmyOvynQkbX7Hh dT8viyKV+rltQkkZMS1dzDg4+P07UAEpStl2jrarA3EtZb8Sz3nkoU7vab/OA7P0 NXNTAZGYNOLTS6pHVy8S3emq2Y64Jjun3H4LwWkPP8g5bjMRx262bHdGynN9b+TI ItmmPJN/nci76rlBl4/gwT/1aOLxby2j90OXdPW+c9QW3O+1NMQe/sATywQtpuC7 ZnWlJ+67x6y1mtswcImpvJd6KvLsn/nPhBGb01aoA6I8x4TEvmzIIRJ8r5wD+4DJ fRGDHe68x+u6JL7KjipstRMzjw== -----END CERTIFICATE-----Generated at Fri Jul 24 20:26:00 2026 by rpki-client