$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: 6XNMl4FfoWpPsXLQAb3Ncyf6jPRZ1neyQdC9iNt4KQI= Subject key identifier: A0:AB:1B:2F:94:5A:E2:82:8C:2A:A2:0E:61:EB:2B:DA:1E:06:73:53 Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 38 Signing time: Thu 23 Jul 2026 10:37:57 +0000 Manifest this update: Thu 23 Jul 2026 10:37:56 +0000 Manifest next update: Thu 30 Jul 2026 10:37:56 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: CCMhhgUoIS7WoO/2Q0+YjB/AAjKN2qlopS3nXOqionE=) 2: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) 3: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: Jul 23 10:37:56 2026 GMT Not After : Jul 30 10:37:56 2026 GMT Subject: CN=6a61ef05-4a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:8e:ea:eb:19:25:30:55:4c:c0:f1:54:62: fd:c6:35:77:23:51:99:a5:76:74:44:d4:1e:71:49: a5:af:d7:d4:b0:ec:d4:c3:91:4e:34:e0:96:54:bb: a8:c4:bf:90:af:cb:e0:34:29:a9:a0:f5:78:9b:db: 3b:dd:17:83:6e:f8:a4:28:2f:8a:d5:f4:4b:07:c9: 1f:ed:97:f4:ee:2a:fe:74:c0:92:b7:99:0d:d1:e1: 07:c3:0f:14:cf:23:b7:a7:75:41:b7:ce:98:f3:cd: d4:32:99:59:1a:62:9c:a5:8f:7f:38:e5:05:a6:39: 77:f0:3c:6c:8b:fc:2b:ec:e3:13:3d:02:81:f5:d7: 2a:60:7d:09:42:9d:40:bf:33:65:9c:4d:36:ad:73: a8:a8:10:2c:ee:75:5a:4a:08:e8:0b:b7:27:5c:41: 7c:33:3e:c8:b2:bf:20:93:76:15:91:cb:f3:7b:a1: c9:b3:8a:c3:a8:c6:ad:65:f1:d4:7d:1b:83:94:a3: aa:02:80:5d:e3:2e:f8:f1:ea:e7:c5:28:03:78:91: df:1d:cd:d8:3f:a5:6e:73:97:62:b9:47:28:d5:c9: fe:cb:d1:d7:40:5a:c7:d6:1f:ca:fe:f0:b5:8a:d5: 61:88:80:a3:d3:85:5d:75:b4:55:aa:79:ea:8a:5e: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AB:1B:2F:94:5A:E2:82:8C:2A:A2:0E:61:EB:2B:DA:1E:06:73:53 X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:a5:39:04:5e:6c:22:e2:c1:6b:bc:ed:2a:c8:56:c0:0d:29: 50:40:bb:17:02:67:98:de:cd:f6:47:6e:f5:6f:a9:1f:f6:e1: 71:3d:de:13:ee:30:ce:ee:3f:b0:9c:47:fa:b2:21:94:ee:73: bd:6f:99:71:83:d3:16:c8:12:5d:a0:51:4a:7d:7a:e5:60:bd: de:a8:60:15:72:fe:73:84:d2:61:1d:23:f0:8d:ff:08:02:8f: 03:28:25:75:8a:e9:14:1e:b6:fb:f5:a0:f1:fd:83:da:f6:66: f7:9d:87:33:8f:13:c8:9d:30:92:91:eb:f8:07:b9:0a:43:2d: b9:d8:d9:86:62:7d:89:cd:b8:e7:92:52:c2:3d:c2:b0:5d:2c: 42:7c:78:11:de:7f:56:9a:2f:2b:20:03:a4:1b:f3:59:fa:ee: 53:7a:3d:d7:22:25:9c:93:02:be:6f:95:dc:84:04:4e:4d:03: 4e:ab:45:5d:8e:c1:10:de:ca:4d:b2:42:db:5a:59:21:bd:6c: 45:46:f2:55:85:43:0d:a9:6a:10:d2:b8:2d:8f:67:2e:ed:ce: 43:82:87:0c:68:f6:96:b0:14:05:20:59:e2:20:35:2e:c4:54: 8f:73:5f:cd:b9:f7:d5:14:bc:dd:2e:c2:c1:05:3f:03:b2:af: ef:cd:2e:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjA3MjMxMDM3NTZaFw0yNjA3MzAxMDM3NTZaMBgxFjAUBgNV BAMTDTZhNjFlZjA1LTRhMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPPY7q6xklMFVMwPFUYv3GNXcjUZmldnRE1B5xSaWv19Sw7NTDkU404JZUu6jE v5Cvy+A0Kamg9Xib2zvdF4Nu+KQoL4rV9EsHyR/tl/TuKv50wJK3mQ3R4QfDDxTP I7endUG3zpjzzdQymVkaYpylj3845QWmOXfwPGyL/Cvs4xM9AoH11ypgfQlCnUC/ M2WcTTatc6ioECzudVpKCOgLtydcQXwzPsiyvyCTdhWRy/N7ocmzisOoxq1l8dR9 G4OUo6oCgF3jLvjx6ufFKAN4kd8dzdg/pW5zl2K5RyjVyf7L0ddAWsfWH8r+8LWK 1WGIgKPThV11tFWqeeqKXqrZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoKsbL5Ra 4oKMKqIOYesr2h4Gc1MwHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqpTkEXmwi4sFrvO0qyFbADSlQQLsXAmeY3s32R271b6kf9uFxPd4T7jDO7j+w nEf6siGU7nO9b5lxg9MWyBJdoFFKfXrlYL3eqGAVcv5zhNJhHSPwjf8IAo8DKCV1 iukUHrb79aDx/YPa9mb3nYczjxPInTCSkev4B7kKQy252NmGYn2JzbjnklLCPcKw XSxCfHgR3n9Wmi8rIAOkG/NZ+u5Tej3XIiWckwK+b5XchAROTQNOq0VdjsEQ3spN skLbWlkhvWxFRvJVhUMNqWoQ0rgtj2cu7c5DgocMaPaWsBQFIFniIDUuxFSPc1/N uffVFLzdLsLBBT8Dsq/vzS7v -----END CERTIFICATE-----Generated at Fri Jul 24 02:13:16 2026 by rpki-client