$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft File: XsGmrXajq_3B4TKesmN8AYZLSAg.mft (raw, json) Hash identifier: IrsaP16dLZ7HCQnAqCzIkCGLi+ffrlFc45oWxZV/kdo= Subject key identifier: 06:8D:BC:1F:15:CE:29:10:15:A0:1B:0D:6C:29:CA:FF:1A:F3:1A:F5 Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 08D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft Manifest number: 0889 Signing time: Wed 22 Jul 2026 21:25:29 +0000 Manifest this update: Wed 22 Jul 2026 21:25:29 +0000 Manifest next update: Wed 29 Jul 2026 21:25:29 +0000 Files and hashes: 1: XsGmrXajq_3B4TKesmN8AYZLSAg.crl (hash: j8HBUvwzHqtSTRTAXNY1HMcFxtVMsLi2IVvcXHHMpho=) 2: 46D6261876A511EB82E04A2FC4F9AE02.roa (hash: +cRs2PboXe8g3+V+AJzpQpdTweZR3TGc016yIhZSQMI=) 3: CF41132A1DE811EB9DE34963C4F9AE02.roa (hash: JkwlB4IFE4Dgm1EcLQn9CRo6PclYWkjqCYFJJbMHsj0=) 4: 82BB885E4B9811EB85F74960C4F9AE02.roa (hash: +r+gvF4pkq6hFHbY+ZoaIiUoalmLLSMykW5BxcQDeFU=) 5: B512A570109211ECA693D74EC4F9AE02.roa (hash: L7d1U3gGL3grFk1wnPeyJKdZ3FejFM4vvmLKY3IRi5A=) 6: E3AAE94243B511EB8DA3F473C4F9AE02.roa (hash: i7X6zewMmXOfmuZsHLNceM/lQghxWwQZ7AxU0vSWV0M=) 7: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (hash: 2mIyjIYN6IO7ZQ4FUwscfGnk78kTtsjolDojwIN0av0=) 8: 046130D225FC11EC9D57EA7CC4F9AE02.roa (hash: ESImnuHKksdWJK2TDU4E1UVvcvoZ37KeHVw4wPPeVXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Jul 22 21:25:29 2026 GMT Not After : Jul 29 21:25:29 2026 GMT Subject: CN=6a613549-7b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:7c:e4:8c:31:5c:6e:10:9b:20:be:5b:e4: f6:ad:36:37:7a:80:85:ba:aa:82:83:a4:91:08:fe: 05:be:c9:fe:8d:c8:e2:f2:fe:a8:13:3d:5b:9d:e6: 7d:a5:2c:c9:2b:57:22:7c:03:7b:9c:cd:64:fc:42: 19:71:da:67:89:f2:bf:1e:69:a9:4a:09:90:43:53: 56:25:01:bc:d6:3e:f1:01:d8:46:e4:7b:c4:27:49: 5e:08:43:c0:b2:16:f9:9b:d8:16:8e:95:0d:73:a0: ae:7a:d5:c9:2d:6c:b5:32:44:85:b8:7a:87:f5:34: 31:72:cd:43:56:77:8c:04:33:91:ef:41:06:10:b6: 78:06:25:9a:2b:4d:f7:b1:c5:60:34:f9:98:8c:f0: f2:df:56:90:07:7f:f1:1c:da:a4:d7:87:28:77:d4: dd:ad:74:5a:37:d2:dc:01:35:9f:f6:43:9c:53:a3: 34:c2:a2:76:ab:e8:99:74:ce:43:c9:2f:25:a9:1d: e7:07:b2:32:e8:3d:98:54:cd:26:00:a2:c8:0c:2b: 74:91:a3:cc:c1:ad:c7:4b:20:57:91:ec:d4:37:fd: 07:54:c8:c5:4f:b5:1f:6d:7b:a9:65:6c:f1:75:a3: 5b:85:8e:6c:64:91:47:16:6d:5a:8b:ca:c3:b6:b7: 11:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8D:BC:1F:15:CE:29:10:15:A0:1B:0D:6C:29:CA:FF:1A:F3:1A:F5 X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:09:b0:c6:87:42:2f:ed:1d:82:97:b1:c5:df:c8:35:36:67: d6:23:2b:af:60:62:7e:3f:0e:46:29:d3:40:a5:5c:ac:1e:71: ea:c5:71:03:0e:7f:f0:0e:1e:9b:0e:8d:20:c7:61:2d:65:31: 3c:77:c5:6a:be:ea:0a:fd:6a:f7:f1:33:80:0d:be:ad:34:c3: dc:7b:38:47:89:32:fc:cf:ca:12:95:a8:50:b3:d9:1a:46:c8: 4c:b6:e2:be:d7:c7:98:41:ee:42:db:a1:fe:1d:c4:16:b6:27: cf:f7:25:c3:54:02:9b:86:91:51:db:cf:51:52:87:c1:07:78: 10:98:42:f0:8f:bc:de:3d:dc:45:53:a3:04:86:ca:dc:29:5a: 2d:a5:b1:79:c1:2e:33:ac:eb:ce:a7:81:82:40:c7:40:fe:c3: 24:a9:e7:f4:1f:ce:6b:01:15:03:f1:95:81:8e:3d:ad:be:ad: 81:a2:64:25:a0:19:f2:49:a3:01:d1:ef:16:60:b0:79:3c:cd: 65:67:52:e3:30:bd:da:01:5d:32:03:b1:f5:c0:8d:84:0a:2c: 53:4f:b8:84:15:5f:4f:46:55:dd:74:55:e2:73:b1:fb:91:60: dd:ef:34:f7:a3:b7:da:36:db:f9:c7:99:b6:75:37:b2:33:55: 44:84:36:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjYwNzIyMjEyNTI5WhcNMjYwNzI5MjEyNTI5WjAYMRYwFAYD VQQDEw02YTYxMzU0OS03YjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxt85IwxXG4QmyC+W+T2rTY3eoCFuqqCg6SRCP4Fvsn+jcji8v6oEz1bneZ9 pSzJK1cifAN7nM1k/EIZcdpnifK/HmmpSgmQQ1NWJQG81j7xAdhG5HvEJ0leCEPA shb5m9gWjpUNc6CuetXJLWy1MkSFuHqH9TQxcs1DVneMBDOR70EGELZ4BiWaK033 scVgNPmYjPDy31aQB3/xHNqk14cod9TdrXRaN9LcATWf9kOcU6M0wqJ2q+iZdM5D yS8lqR3nB7Iy6D2YVM0mAKLIDCt0kaPMwa3HSyBXkezUN/0HVMjFT7UfbXupZWzx daNbhY5sZJFHFm1ai8rDtrcRdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAaNvB8V zikQFaAbDWwpyv8a8xr1MB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIwQi9CQTcxQjY0ODEyMDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFf M0I0VEtlc21OOEFZWkxTQWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANwmwxodCL+0dgpexxd/INTZn1iMrr2Bifj8ORinTQKVcrB5x6sVxAw5/8A4e mw6NIMdhLWUxPHfFar7qCv1q9/EzgA2+rTTD3Hs4R4ky/M/KEpWoULPZGkbITLbi vtfHmEHuQtuh/h3EFrYnz/clw1QCm4aRUdvPUVKHwQd4EJhC8I+83j3cRVOjBIbK 3ClaLaWxecEuM6zrzqeBgkDHQP7DJKnn9B/OawEVA/GVgY49rb6tgaJkJaAZ8kmj AdHvFmCweTzNZWdS4zC92gFdMgOx9cCNhAosU0+4hBVfT0ZV3XRV4nOx+5Fg3e80 96O32jbb+ceZtnU3sjNVRIQ2eQ== -----END CERTIFICATE-----Generated at Fri Jul 24 08:02:53 2026 by rpki-client