$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: /l43+323bOa3tmvtWt8PWFGjidL6HmhA+dhHMvT3GWc= Subject key identifier: 23:12:EE:A7:CB:E6:AF:14:A1:F0:1B:B4:8D:B8:D0:48:E9:8E:78:17 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 025C Signing time: Thu 23 Jul 2026 03:29:36 +0000 Manifest this update: Thu 23 Jul 2026 03:29:35 +0000 Manifest next update: Thu 30 Jul 2026 03:29:35 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: NucKwfjLHE4/jyD06AjNHjclkZSoAj2ShlwFpInGXkM=) 2: 4C1DFC6E600F11F1B719D3058847A888.roa (hash: XI/6ywdBOKZJkA6ntRfKeh+vbgYn6sdPFXnFJIGb2HE=) 3: 297CAAF2600F11F19DD612FE8747A888.roa (hash: 3caSMOx+p5Jr6uBlGiryWygb4IBsCl4CdewfhyZYMAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Jul 23 03:29:35 2026 GMT Not After : Jul 30 03:29:35 2026 GMT Subject: CN=6a618a9f-0788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:6e:12:53:af:99:28:86:1d:84:37:ef:44: 2d:22:58:2f:c1:dd:37:41:84:19:be:4b:76:4a:e6: 76:be:72:b5:e8:b8:c2:82:86:9f:ce:ea:7f:31:41: 23:e7:b2:51:2f:11:15:f4:91:22:28:51:cb:d6:24: d1:80:a2:38:9a:66:85:46:f6:7e:4b:9e:5c:ec:68: 5a:b4:91:66:64:f2:40:62:2a:91:e2:1e:21:b3:c2: ee:9b:7e:35:0e:00:29:f1:8a:2c:51:02:8b:b5:37: 42:15:b3:82:a2:1e:d9:86:e3:c2:58:cd:e4:61:77: b6:20:de:36:e2:d9:18:ba:0d:62:09:4f:1b:bc:9e: 58:5d:56:93:cf:cc:26:69:44:aa:93:95:89:cc:3a: 84:b2:43:18:af:0c:10:73:e3:ff:dc:07:47:84:2d: 90:2e:1e:bc:a3:70:40:53:23:7a:15:72:e2:d3:fa: d9:b4:08:6e:5d:c4:8d:b8:60:ee:70:86:f4:18:50: 40:f9:52:c9:a3:81:9f:04:15:80:3e:c2:e4:0b:c0: d5:2f:86:e8:46:24:e9:f6:d1:06:19:36:d6:20:dd: 7d:ae:ee:da:e7:b8:29:d7:7e:15:b6:7b:34:18:62: 16:37:27:65:0a:2d:ed:fe:47:23:3b:cf:d3:78:cf: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:12:EE:A7:CB:E6:AF:14:A1:F0:1B:B4:8D:B8:D0:48:E9:8E:78:17 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:22:00:06:ab:4d:38:53:c3:18:42:91:8a:cc:ec:c1:c6:46: a4:c7:16:7c:31:7b:bf:80:64:54:fe:2e:ad:d7:cf:82:dd:b8: a0:e3:17:d4:74:c1:ad:33:ad:d0:82:99:8d:f6:fc:98:12:0f: 9a:a2:ad:70:b7:49:a2:8d:9a:38:36:cb:dd:a1:5a:1a:78:cd: c3:65:cb:27:4f:f2:3f:36:ac:7e:81:30:8d:80:ca:be:9e:c0: 3d:44:f6:f4:cb:71:d5:57:28:97:ad:6b:60:7f:2b:08:ee:e3: 23:86:35:aa:6a:c2:d1:44:fe:44:11:ef:ff:3a:cd:3a:2c:63: 38:f5:b3:8e:cf:74:00:ad:8d:3b:df:2c:25:b1:2c:5e:ce:8b: 59:58:cf:9a:b6:26:53:32:c8:4e:04:92:19:38:3e:9d:cd:8e: f4:73:68:7e:4a:6d:da:be:c9:dc:7d:c2:74:b5:69:a8:19:1a: 00:74:7a:f1:af:82:1c:d9:12:9d:dd:08:13:18:d7:80:ca:66: 1c:40:52:5f:87:c6:49:52:28:64:f2:0b:df:12:ca:df:2e:7a: 3f:d2:dd:7d:47:66:d3:6e:45:ee:8d:c6:72:ad:bc:77:7a:d2: 31:57:5f:34:29:99:f3:ce:e3:ed:1c:fa:cd:23:97:ce:cf:25: 36:50:17:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjYwNzIzMDMyOTM1WhcNMjYwNzMwMDMyOTM1WjAYMRYwFAYD VQQDEw02YTYxOGE5Zi0wNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmntuElOvmSiGHYQ370QtIlgvwd03QYQZvkt2SuZ2vnK16LjCgoafzup/MUEj 57JRLxEV9JEiKFHL1iTRgKI4mmaFRvZ+S55c7GhatJFmZPJAYiqR4h4hs8Lum341 DgAp8YosUQKLtTdCFbOCoh7ZhuPCWM3kYXe2IN424tkYug1iCU8bvJ5YXVaTz8wm aUSqk5WJzDqEskMYrwwQc+P/3AdHhC2QLh68o3BAUyN6FXLi0/rZtAhuXcSNuGDu cIb0GFBA+VLJo4GfBBWAPsLkC8DVL4boRiTp9tEGGTbWIN19ru7a57gp134Vtns0 GGIWNydlCi3t/kcjO8/TeM86TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMS7qfL 5q8UofAbtI240EjpjngXMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeSIABqtNOFPDGEKRiszswcZGpMcWfDF7v4BkVP4urdfPgt24oOMX1HTBrTOt 0IKZjfb8mBIPmqKtcLdJoo2aODbL3aFaGnjNw2XLJ0/yPzasfoEwjYDKvp7APUT2 9Mtx1Vcol61rYH8rCO7jI4Y1qmrC0UT+RBHv/zrNOixjOPWzjs90AK2NO98sJbEs Xs6LWVjPmrYmUzLITgSSGTg+nc2O9HNofkpt2r7J3H3CdLVpqBkaAHR68a+CHNkS nd0IExjXgMpmHEBSX4fGSVIoZPIL3xLK3y56P9LdfUdm025F7o3Gcq28d3rSMVdf NCmZ887j7Rz6zSOXzs8lNlAXeA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:50 2026 by rpki-client