$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: eLKxQXZQ4J2WbLu0Mee5aYNw4R5tb79uwy3OAmtvx8U= Subject key identifier: 33:3F:29:CF:47:72:7F:78:6D:96:5F:3C:5A:92:FD:69:C7:84:3E:58 Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 0A95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 0A6C Signing time: Wed 22 Jul 2026 20:03:52 +0000 Manifest this update: Wed 22 Jul 2026 20:03:51 +0000 Manifest next update: Wed 29 Jul 2026 20:03:51 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: W1Aw0rp8IJfW7Jvr8O0YKn6mSTZa30gxPf228wG0dDI=) 2: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 72DcOTbzZF7+TCywcpXepZonikbAwf9INnwgkXqBzAU=) 3: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: WPLajparplJU8xXoLqj3sJQqQv2qTK7SmIP3Bri0gcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2709 (0xa95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: Jul 22 20:03:51 2026 GMT Not After : Jul 29 20:03:51 2026 GMT Subject: CN=6a612228-602d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:cf:c0:64:84:a5:2b:7e:94:b4:70:db:a3: 34:4f:71:17:1a:61:9f:59:55:bd:97:44:5b:cb:f5: 2c:eb:fe:9a:fe:93:0e:77:0c:c3:ee:84:0a:12:8f: c1:f6:12:cc:91:95:d2:2b:48:c2:62:73:e7:e6:4c: bc:ae:5d:4e:ff:2b:d6:17:8e:9b:40:d0:3d:ab:ef: fd:d8:85:bd:10:2f:6d:17:04:d3:5c:13:3e:7f:38: 44:90:05:d1:c7:79:1e:ff:f4:cb:ff:a6:e7:01:6e: e5:92:7f:20:82:7e:4f:20:18:47:5a:ea:59:4a:f2: 59:78:35:eb:35:da:6e:43:3c:6b:59:c2:81:14:33: 87:62:c5:4c:df:53:02:6b:cd:c7:f3:a4:88:a3:0e: 6b:25:8b:76:2f:c2:b0:3e:12:9f:35:86:f7:7c:f9: d8:06:b2:b3:d4:23:24:c8:d9:c3:a3:26:3c:62:df: 14:52:76:dc:0c:a4:50:33:ba:fb:9f:88:d5:40:15: 46:2b:f6:33:34:b6:17:51:85:d4:92:2c:01:94:de: 56:9e:93:58:15:9a:de:9f:4c:fd:f9:16:e7:81:3f: 9d:ba:f6:ad:ca:c3:c0:9d:e7:2f:c8:0d:65:22:10: 98:d2:ec:2f:ea:07:c8:83:3b:c4:6f:90:d3:97:0f: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3F:29:CF:47:72:7F:78:6D:96:5F:3C:5A:92:FD:69:C7:84:3E:58 X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:24:23:2a:7e:24:5f:55:96:88:82:e2:a6:70:43:a2:b4:4a: 1a:51:bf:4a:dc:c9:78:7e:88:3c:6f:31:14:26:8c:58:3f:c9: 52:bd:cc:ae:dd:ac:cf:eb:b8:f2:52:aa:17:fd:3c:3b:f1:a4: e8:29:50:01:5f:25:a9:44:d9:f9:27:27:50:a9:21:9b:9a:e6: 19:3a:f1:7c:b8:94:d7:4c:6d:79:46:fb:5f:f7:73:37:14:88: f4:6d:1b:40:ba:55:82:1d:d4:6d:61:b5:94:03:18:55:05:53: 4f:22:91:c4:dd:d0:dd:16:a6:2c:d3:80:03:0f:bf:c2:d8:ad: 35:24:4e:b4:62:fd:55:39:a4:cd:1c:ef:b7:ab:9e:fb:43:18: b4:53:88:be:6e:2e:f1:b6:b5:e9:05:55:cd:02:ba:91:77:d3: cd:da:48:82:31:de:be:d3:1a:60:41:a9:ab:a5:59:90:38:8d: 7e:77:13:ff:77:31:e6:9b:b0:f0:75:c4:32:0c:d6:17:6d:8e: 81:40:ef:8f:c2:49:b6:17:25:0a:a2:8f:7d:ad:1e:23:c2:b7: 1c:53:a3:30:4c:38:a6:7f:b7:d8:c1:aa:a2:83:c3:49:4e:0d: 43:30:10:c0:ba:8e:82:6d:4f:07:aa:9d:0f:c4:2d:68:c5:07: cb:91:b2:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjYwNzIyMjAwMzUxWhcNMjYwNzI5MjAwMzUxWjAYMRYwFAYD VQQDEw02YTYxMjIyOC02MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs3PwGSEpSt+lLRw26M0T3EXGmGfWVW9l0Rby/Us6/6a/pMOdwzD7oQKEo/B 9hLMkZXSK0jCYnPn5ky8rl1O/yvWF46bQNA9q+/92IW9EC9tFwTTXBM+fzhEkAXR x3ke//TL/6bnAW7lkn8ggn5PIBhHWupZSvJZeDXrNdpuQzxrWcKBFDOHYsVM31MC a83H86SIow5rJYt2L8KwPhKfNYb3fPnYBrKz1CMkyNnDoyY8Yt8UUnbcDKRQM7r7 n4jVQBVGK/YzNLYXUYXUkiwBlN5WnpNYFZren0z9+RbngT+duvatysPAnecvyA1l IhCY0uwv6gfIgzvEb5DTlw9FqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDM/Kc9H cn94bZZfPFqS/WnHhD5YMB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQyQjKn4kX1WWiILipnBDorRKGlG/StzJeH6IPG8xFCaMWD/JUr3Mrt2sz+u4 8lKqF/08O/Gk6ClQAV8lqUTZ+ScnUKkhm5rmGTrxfLiU10xteUb7X/dzNxSI9G0b QLpVgh3UbWG1lAMYVQVTTyKRxN3Q3RamLNOAAw+/wtitNSROtGL9VTmkzRzvt6ue +0MYtFOIvm4u8ba16QVVzQK6kXfTzdpIgjHevtMaYEGpq6VZkDiNfncT/3cx5puw 8HXEMgzWF22OgUDvj8JJthclCqKPfa0eI8K3HFOjMEw4pn+32MGqooPDSU4NQzAQ wLqOgm1PB6qdD8QtaMUHy5Gy1w== -----END CERTIFICATE-----Generated at Fri Jul 24 13:20:50 2026 by rpki-client