$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft File: XTDuvxHkF41iO-G95Nu0y1nMhDc.mft (raw, json) Hash identifier: QAcMFLADkXRAICItp6J59YOPVEBZlS7NoDk3TekHIR8= Subject key identifier: 76:8F:BF:97:34:AB:9D:74:F0:BD:42:19:4E:54:E7:B8:1D:50:8A:67 Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft Manifest number: 75 Signing time: Thu 23 Jul 2026 09:50:07 +0000 Manifest this update: Thu 23 Jul 2026 09:50:06 +0000 Manifest next update: Thu 30 Jul 2026 09:50:06 +0000 Files and hashes: 1: XTDuvxHkF41iO-G95Nu0y1nMhDc.crl (hash: oKLr7Sd6pxQ6VEFHG+v1+k8ZqlZSEsJg5jwmYZbcIVU=) 2: 24992E62E0FC11F0B50D6A7D5F6F56BC.roa (hash: eAx7dd7W8IzFugozPftJzHrtY4Ej4f42CnK31HLLaRE=) 3: 253978EAE0FC11F0B50D6A7D5F6F56BC.roa (hash: 6RxldyO2/Y3wToEhzB/mHNRPtNgIGcUmqFl9NgQBrdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Validity Not Before: Jul 23 09:50:06 2026 GMT Not After : Jul 30 09:50:06 2026 GMT Subject: CN=6a61e3ce-a67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:a6:47:0a:8b:c4:9c:fd:04:9e:6e:99:2a: 66:a7:b2:e9:59:af:3b:09:5b:6c:9c:f8:8d:9d:e1: a7:10:37:c3:f1:c0:b1:24:97:83:b3:6b:ae:13:fb: f9:11:5b:4f:63:5f:f8:b9:bc:89:ce:46:7b:ae:86: 97:7e:90:c5:dd:1e:4c:36:81:08:51:85:34:6f:98: c4:98:c7:a3:6b:a1:98:a1:79:50:7b:58:f1:f4:5f: e5:f8:31:bf:b9:61:7a:7c:0f:11:cf:8d:77:22:b9: 76:d9:47:e4:ac:12:98:6f:4b:77:18:e5:1d:41:f8: 16:fe:6c:db:07:9b:d5:13:90:22:19:3e:d5:9a:77: 26:b3:37:b4:76:31:90:ee:51:e1:49:7f:8e:9d:45: 55:1e:fd:46:6f:64:12:74:3a:c4:bf:e3:31:56:8b: bb:3d:4f:6e:92:86:35:29:44:95:6c:89:d6:c5:0f: 93:59:74:87:2b:97:fd:3d:da:0e:b0:f4:1d:38:d7: 5e:1d:3c:3b:af:b1:e2:ca:ef:01:ac:cc:dc:0d:a6: d6:33:24:72:d2:b9:44:4b:52:83:dc:c3:10:38:df: 30:24:71:58:e3:0b:38:ac:0b:ee:0c:17:18:73:73: cb:66:63:f3:0b:fe:b8:c3:b3:ad:04:76:35:c6:43: bc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8F:BF:97:34:AB:9D:74:F0:BD:42:19:4E:54:E7:B8:1D:50:8A:67 X509v3 Authority Key Identifier: keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:8b:fe:36:b2:f0:e5:0b:8b:80:e0:02:e2:f5:9e:a6:b2:be: 3f:a1:09:22:b6:37:c4:50:25:73:9f:99:86:3e:18:57:87:90: 04:3d:5f:d7:87:90:67:b3:a6:5e:1e:8b:77:46:6a:e9:c2:77: 8f:14:fe:4d:80:6b:df:76:78:7e:3e:ad:ff:98:2d:ea:a2:39: 8d:20:57:d7:d0:28:c9:36:b5:92:14:07:26:a3:26:9d:93:d9: 00:2f:9d:53:e3:7f:4c:d4:bd:b3:80:7d:04:37:18:76:1f:30: 1f:36:85:f8:b1:63:a6:2c:bc:8b:9f:79:2a:03:19:94:33:4e: 6a:2a:f9:71:5f:8d:66:25:c7:e4:f3:8a:7e:91:93:ba:1b:58: bd:71:3a:69:59:83:64:40:82:65:63:2d:ae:d0:95:ec:56:d2: 7d:3d:83:fb:5e:f0:a3:bc:42:9b:7e:42:1d:f5:b6:f0:10:e1: e8:42:f7:54:19:67:d3:12:70:c2:6e:9c:6f:35:20:f8:9a:a1: 31:ef:80:60:07:cc:e7:f2:b3:6a:22:9a:2e:63:61:2e:45:8f: 10:92:76:ba:7b:16:20:16:36:29:a1:53:33:4a:ae:59:16:56: 9e:0f:96:bb:8d:92:fc:02:b0:4b:2c:2c:17:47:7a:a2:d6:80: 0c:f0:cb:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjFDMjExMC8GA1UEBRMoNUQzMEVFQkYxMUU0MTc4RDYyM0JFMUJERTREQkI0Q0I1 OUNDODQzNzAeFw0yNjA3MjMwOTUwMDZaFw0yNjA3MzAwOTUwMDZaMBgxFjAUBgNV BAMTDTZhNjFlM2NlLWE2N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKkqZHCovEnP0Enm6ZKmansulZrzsJW2yc+I2d4acQN8PxwLEkl4Oza64T+/kR W09jX/i5vInORnuuhpd+kMXdHkw2gQhRhTRvmMSYx6NroZiheVB7WPH0X+X4Mb+5 YXp8DxHPjXciuXbZR+SsEphvS3cY5R1B+Bb+bNsHm9UTkCIZPtWadyazN7R2MZDu UeFJf46dRVUe/UZvZBJ0OsS/4zFWi7s9T26ShjUpRJVsidbFD5NZdIcrl/092g6w 9B04114dPDuvseLK7wGszNwNptYzJHLSuURLUoPcwxA43zAkcVjjCzisC+4MFxhz c8tmY/ML/rjDs60EdjXGQ7xxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdo+/lzSr nXTwvUIZTlTnuB1QimcwHwYDVR0jBBgwFoAUXTDuvxHkF41iO+G95Nu0y1nMhDcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzBGOTEwNzU0RENB MzExRjA4NUQ2RjE1QjQzNkY1NkJDL1hURHV2eEhrRjQxaU8tRzk1TnUweTFuTWhE Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWFREdXZ4SGtGNDFpTy1HOTVOdTB5MW5NaERjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzBGOTEwNzU0RENBMzExRjA4NUQ2RjE1QjQzNkY1NkJDL1hURHV2eEhrRjQx aU8tRzk1TnUweTFuTWhEYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCgi/42svDlC4uA4ALi9Z6msr4/oQkitjfEUCVzn5mGPhhXh5AEPV/Xh5Bns6Ze Hot3RmrpwnePFP5NgGvfdnh+Pq3/mC3qojmNIFfX0CjJNrWSFAcmoyadk9kAL51T 439M1L2zgH0ENxh2HzAfNoX4sWOmLLyLn3kqAxmUM05qKvlxX41mJcfk84p+kZO6 G1i9cTppWYNkQIJlYy2u0JXsVtJ9PYP7XvCjvEKbfkId9bbwEOHoQvdUGWfTEnDC bpxvNSD4mqEx74BgB8zn8rNqIpouY2EuRY8Qkna6exYgFjYpoVMzSq5ZFlaeD5a7 jZL8ArBLLCwXR3qi1oAM8Ms2 -----END CERTIFICATE-----Generated at Fri Jul 24 14:30:56 2026 by rpki-client