$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: QcNuDqVV8eDNo+vte4aqaRMpSq6M2qZ/du7Ps3e/Im8= Subject key identifier: 96:A4:1D:F2:98:E7:9F:6A:FA:38:BA:06:8F:DD:10:B1:A4:C3:62:30 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 0270 Signing time: Thu 23 Jul 2026 03:11:54 +0000 Manifest this update: Thu 23 Jul 2026 03:11:53 +0000 Manifest next update: Thu 30 Jul 2026 03:11:53 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: 1L+12pB7poN2SXieLP+MW5fjUu+OTUHyNmGLudPZbBA=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: YiM67MBOQyQiFAZiHKZnFOav4WykQTG7bAqQs/W9ABA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Jul 23 03:11:53 2026 GMT Not After : Jul 30 03:11:53 2026 GMT Subject: CN=6a61867a-511e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:8b:49:64:7a:b5:32:c2:ad:7e:3f:38:c5: 18:eb:c2:21:4f:a2:4d:c7:8e:15:b6:16:c7:ba:89: 01:9e:72:d0:03:84:b9:52:79:be:75:26:58:bb:0a: df:5f:ec:74:83:2c:75:c5:34:ac:a4:b4:ec:00:75: 15:6a:29:5a:27:1e:4a:6c:ce:af:b3:ce:d8:48:b9: 2d:dd:aa:9b:f0:63:1a:6a:4f:39:b7:48:5d:a1:7b: 50:27:75:39:96:26:53:20:25:f8:20:a1:6e:81:32: 81:7e:99:97:7d:e8:5a:e8:48:b7:ec:de:04:eb:2e: 99:fd:f1:72:b6:02:53:af:56:6a:7b:0e:c7:35:ba: 38:83:63:b5:d5:47:a6:08:7e:fb:5d:18:3b:69:7d: 60:f6:70:41:0c:26:ed:40:5d:50:3b:56:42:d6:aa: 63:e5:ab:1c:74:00:ae:62:64:92:b0:2c:8f:d6:70: 4c:ac:e2:ef:c4:48:03:15:8b:f1:2c:13:7e:88:6d: 5b:5a:01:46:fa:9b:3f:39:5d:70:cc:a5:21:71:4c: 8e:de:ac:6b:a5:98:de:7d:d1:40:52:c7:64:da:55: 8c:d3:c8:c5:62:34:de:9e:74:89:26:27:52:e0:30: dd:9a:dd:76:75:56:34:f0:74:fa:28:7b:72:9b:aa: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A4:1D:F2:98:E7:9F:6A:FA:38:BA:06:8F:DD:10:B1:A4:C3:62:30 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:53:42:e1:57:a0:f8:ed:e4:ce:e0:d0:1d:32:45:8e:ba:56: 64:ef:8e:d1:18:ee:35:7f:ec:92:79:d1:24:83:a6:4a:b3:a1: 64:9f:c6:c4:6b:78:e1:78:38:2d:8a:91:be:2a:97:b6:18:67: 66:49:2f:5e:d6:ca:0e:47:46:7f:2c:43:81:f4:d3:8b:aa:0b: 0e:15:d6:c1:07:74:7a:31:9b:b7:b8:83:7f:8a:49:ec:e3:63: 7c:50:58:fa:b4:b9:bd:74:8e:95:72:67:ca:e7:6f:e2:84:b4: 4d:9a:56:c0:79:94:3f:ab:e5:46:e3:22:5b:ac:f9:21:16:3f: 65:8b:4c:f3:31:db:4c:8e:8a:40:7a:8c:6a:5d:54:04:72:31: 28:74:3b:93:47:5a:88:7f:44:b3:aa:ec:fa:26:31:18:72:24: 41:c7:98:8f:74:75:09:c4:43:62:99:6d:23:b7:28:bb:18:1e: e8:35:38:26:e0:32:31:29:a7:1f:b6:dc:91:de:1b:03:a9:a4: b2:1f:3a:f2:4d:d1:a5:27:ac:b7:3e:c3:96:28:e0:c4:06:65: 0d:85:cc:d9:8c:10:9c:db:b1:a4:01:70:9c:e1:c2:db:44:46: ff:f9:da:e9:6b:72:99:c1:5d:49:31:e9:7a:d4:8e:64:4d:79: 35:29:b4:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjYwNzIzMDMxMTUzWhcNMjYwNzMwMDMxMTUzWjAYMRYwFAYD VQQDEw02YTYxODY3YS01MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rWLSWR6tTLCrX4/OMUY68IhT6JNx44VthbHuokBnnLQA4S5Unm+dSZYuwrf X+x0gyx1xTSspLTsAHUVailaJx5KbM6vs87YSLkt3aqb8GMaak85t0hdoXtQJ3U5 liZTICX4IKFugTKBfpmXfeha6Ei37N4E6y6Z/fFytgJTr1Zqew7HNbo4g2O11Uem CH77XRg7aX1g9nBBDCbtQF1QO1ZC1qpj5ascdACuYmSSsCyP1nBMrOLvxEgDFYvx LBN+iG1bWgFG+ps/OV1wzKUhcUyO3qxrpZjefdFAUsdk2lWM08jFYjTennSJJidS 4DDdmt12dVY08HT6KHtym6rObQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJakHfKY 559q+ji6Bo/dELGkw2IwMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAFNC4Veg+O3kzuDQHTJFjrpWZO+O0RjuNX/sknnRJIOmSrOhZJ/GxGt44Xg4 LYqRviqXthhnZkkvXtbKDkdGfyxDgfTTi6oLDhXWwQd0ejGbt7iDf4pJ7ONjfFBY +rS5vXSOlXJnyudv4oS0TZpWwHmUP6vlRuMiW6z5IRY/ZYtM8zHbTI6KQHqMal1U BHIxKHQ7k0daiH9Es6rs+iYxGHIkQceYj3R1CcRDYpltI7couxge6DU4JuAyMSmn H7bckd4bA6mksh868k3RpSestz7DlijgxAZlDYXM2YwQnNuxpAFwnOHC20RG//na 6WtymcFdSTHpetSOZE15NSm0Kw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:08:57 2026 by rpki-client