$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: dbNBvI4ZIt5SN0V7biJ3rJOf2Jv5bqEVlgvzdvQa3mY= Subject key identifier: 23:8B:AD:A7:61:EC:01:D4:23:6B:86:E1:94:7D:AF:3B:AC:4E:DD:37 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 064D Signing time: Wed 22 Jul 2026 23:26:10 +0000 Manifest this update: Wed 22 Jul 2026 23:26:10 +0000 Manifest next update: Wed 29 Jul 2026 23:26:10 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: FB2ufWlaXmj7IZQo/yYbPDYNdNN0hweNRSc8HCMJXUY=) 2: F50A884C5DDF11F197B40288B8833773.roa (hash: 9rUDU6NmwXNmelpt6cYq2BCwimYK9ztmiUJ8y08WBM4=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: uYxDc2s73H33RAjSESYgkRg+fhVzlnP0WIWOn/2ko/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Jul 22 23:26:10 2026 GMT Not After : Jul 29 23:26:10 2026 GMT Subject: CN=6a615192-f8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:57:26:97:90:91:03:03:29:3c:5d:85:57: 83:d2:53:70:0d:85:64:39:3d:82:3e:ba:7a:9e:cd: 89:dc:07:97:b0:87:7b:11:8f:b2:c8:f4:b7:84:e5: 51:f1:11:c5:4b:54:51:a4:f9:87:f0:f3:d8:5d:db: b8:d8:8c:b5:2d:4e:7c:e2:26:6d:ac:a7:f2:bf:e1: 87:79:68:16:57:33:8e:e2:4e:06:fc:5d:49:63:47: 30:30:e4:80:80:6d:7b:b2:b0:3b:4d:14:f4:70:81: de:bc:c6:74:75:56:8d:d7:9a:5a:6f:8f:06:7a:bb: 2a:af:c4:4c:de:cc:01:5a:bf:9a:0e:b9:23:1e:fc: 46:8a:06:c9:27:ea:fd:72:2e:75:03:37:8c:73:83: 89:76:66:b0:3d:25:00:ca:bd:c7:ed:71:72:66:15: 0e:d4:ad:fe:82:7a:30:8c:dd:16:ea:34:c4:31:5b: 5a:be:7c:40:00:cc:4e:f3:87:8c:b2:3c:c6:5c:f6: 28:b1:a0:34:87:a8:a5:a3:47:9b:cc:9f:d8:fd:d2: 34:3f:c8:38:1c:42:f2:dd:28:f1:b7:6c:82:13:81: f2:dd:9f:2f:09:d1:66:f6:cd:be:a6:bd:9a:0f:c0: c7:78:1c:27:72:62:28:a1:1a:7f:14:c2:bd:46:fe: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:AD:A7:61:EC:01:D4:23:6B:86:E1:94:7D:AF:3B:AC:4E:DD:37 X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a4:3e:96:bd:81:16:00:7b:94:dc:8e:a8:89:92:54:f9:8b: 43:73:36:d9:1e:04:15:13:91:8e:e7:c9:f7:27:9e:56:9e:56: 4e:03:2e:c2:f9:25:26:3c:31:7e:d7:50:cc:35:fd:18:e6:0e: 6e:1d:c8:fe:3a:e5:f9:ca:4e:78:40:0b:49:16:aa:b3:8a:e3: 85:14:b2:2c:f8:8e:d1:32:55:96:80:b9:48:eb:4c:20:64:74: 10:5a:8e:6b:27:8d:5e:72:11:d1:48:61:d9:43:ab:a1:be:d1: 91:fa:c8:be:46:07:40:87:a0:60:89:d6:bc:d4:70:8f:7f:9e: 94:fa:e9:76:da:82:d4:dd:97:a2:51:b6:2a:54:a0:23:67:35: 05:27:e6:b4:de:a2:e7:2d:8b:b5:ba:46:0d:58:a0:25:32:36: e1:87:46:35:1f:b1:e8:29:b9:f5:f4:73:e9:fc:58:8d:08:d1: c3:2e:af:a1:a4:fd:1d:d2:3f:de:0a:ff:4c:a8:61:ff:f1:8c: 66:a2:63:2d:da:48:b0:55:ac:ae:1c:25:00:ab:b0:1d:19:8b: e9:ec:fa:47:d9:42:dc:2c:6a:84:e7:a4:2e:92:78:0f:3e:6f: 3e:86:74:69:e5:99:66:5a:8f:01:24:d0:df:d4:98:2f:ec:f3: 8f:f8:6a:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjYwNzIyMjMyNjEwWhcNMjYwNzI5MjMyNjEwWjAYMRYwFAYD VQQDEw02YTYxNTE5Mi1mOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSlXJpeQkQMDKTxdhVeD0lNwDYVkOT2CPrp6ns2J3AeXsId7EY+yyPS3hOVR 8RHFS1RRpPmH8PPYXdu42Iy1LU584iZtrKfyv+GHeWgWVzOO4k4G/F1JY0cwMOSA gG17srA7TRT0cIHevMZ0dVaN15pab48Gersqr8RM3swBWr+aDrkjHvxGigbJJ+r9 ci51AzeMc4OJdmawPSUAyr3H7XFyZhUO1K3+gnowjN0W6jTEMVtavnxAAMxO84eM sjzGXPYosaA0h6ilo0ebzJ/Y/dI0P8g4HELy3Sjxt2yCE4Hy3Z8vCdFm9s2+pr2a D8DHeBwncmIooRp/FMK9Rv4l9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOLradh 7AHUI2uG4ZR9rzusTt03MB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVKQ+lr2BFgB7lNyOqImSVPmLQ3M22R4EFRORjufJ9yeeVp5WTgMuwvklJjwx ftdQzDX9GOYObh3I/jrl+cpOeEALSRaqs4rjhRSyLPiO0TJVloC5SOtMIGR0EFqO ayeNXnIR0Uhh2UOrob7RkfrIvkYHQIegYInWvNRwj3+elPrpdtqC1N2XolG2KlSg I2c1BSfmtN6i5y2LtbpGDVigJTI24YdGNR+x6Cm59fRz6fxYjQjRwy6voaT9HdI/ 3gr/TKhh//GMZqJjLdpIsFWsrhwlAKuwHRmL6ez6R9lC3CxqhOekLpJ4Dz5vPoZ0 aeWZZlqPASTQ39SYL+zzj/hqfg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:44:20 2026 by rpki-client