$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json) Hash identifier: tX8b+ay4GszUbFHCsXEiMoVeoqSW7jCV7KN09k4Lhb4= Subject key identifier: 88:4C:BD:77:B1:A0:B9:C5:3C:61:7C:0A:E8:F3:F3:9B:0C:40:F6:3E Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft Manifest number: 0142 Signing time: Thu 23 Jul 2026 07:32:49 +0000 Manifest this update: Thu 23 Jul 2026 07:32:48 +0000 Manifest next update: Thu 30 Jul 2026 07:32:48 +0000 Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: 1IpoqQsSus/IJT0tqo8V2CksuDDSZO8e25DUAiWS+HA=) 2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: eZlsZmk8/ekeyqy6I3i3ZeeEd5v4ZHZyH6nwRwpqrDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Validity Not Before: Jul 23 07:32:48 2026 GMT Not After : Jul 30 07:32:48 2026 GMT Subject: CN=6a61c3a1-f7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:e7:ee:50:36:2c:de:a1:cb:36:d3:66:e1: 16:84:14:e1:f0:45:41:3c:a5:9a:1d:e9:51:20:c0: 15:ea:b4:56:cf:3d:5f:dc:4e:3f:96:b1:ff:15:83: c9:10:40:2a:30:28:68:49:85:74:a9:61:b3:a9:4f: b9:8d:78:55:9f:5a:3c:96:72:61:3b:1d:30:36:6e: ce:eb:74:bc:3c:58:9b:1b:63:65:08:6f:00:d3:d1: b7:9c:26:dd:11:08:23:dd:f0:d3:56:c8:d4:8c:e4: 2a:cc:83:43:45:0c:e6:86:a3:df:4f:35:51:14:12: a7:50:0c:31:c2:cf:24:97:cc:bd:3d:52:36:da:ad: 3e:69:57:79:fd:d6:b8:b9:ad:0a:e8:23:c3:77:0b: 80:0f:7d:6e:aa:43:7e:9a:7e:a8:14:e5:18:3e:21: 44:c7:94:7c:d5:83:11:40:d6:1b:0b:a0:a7:4d:4d: e0:db:da:41:82:24:30:a7:0f:87:b1:e6:1e:44:2e: fc:94:46:0c:f7:89:93:7e:e3:01:63:80:63:40:d2: b9:60:81:c0:b7:56:fb:19:53:bf:15:92:90:42:c3: 14:a9:c7:6c:ae:52:4f:1f:69:7f:05:b7:7a:70:0c: a7:30:fd:6a:59:c2:10:87:69:63:d6:26:06:65:1b: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4C:BD:77:B1:A0:B9:C5:3C:61:7C:0A:E8:F3:F3:9B:0C:40:F6:3E X509v3 Authority Key Identifier: keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:26:98:6a:87:a0:b7:02:ae:23:fe:c0:e2:c3:a0:62:4b:17: c0:d5:78:3c:fc:54:92:76:d4:95:af:ee:8d:44:e2:e8:f7:b3: b3:74:0b:05:17:14:73:a1:21:b4:82:30:b6:d4:69:33:af:1d: 22:6a:b4:d5:a6:e3:44:6f:fa:fc:01:87:f0:f9:76:cb:48:30: b1:e1:60:78:84:b6:10:36:ea:98:16:22:42:d8:ba:bb:26:4e: 76:23:36:41:b6:cf:4c:0a:8e:73:54:36:f2:49:12:5e:56:cf: 02:2f:c1:35:76:d8:69:17:79:67:aa:4e:fa:c4:12:d2:cf:4b: c2:ac:57:0b:eb:86:3f:50:d0:8d:de:38:62:11:6c:a2:92:71: 0c:c2:7c:68:d1:89:e4:55:f4:f0:56:40:d2:92:ab:16:10:fb: 57:e0:94:18:bc:bc:6c:a6:31:91:bd:e7:11:97:45:20:b8:ab: de:61:0b:47:f5:47:3a:3a:33:07:2a:c7:c6:27:4e:98:86:45: e9:42:af:e9:52:f2:c0:7f:24:27:c1:39:f7:72:64:45:f9:ea: 8d:19:71:39:01:30:81:cf:f7:8f:79:2f:02:f7:18:b2:29:8e: 0a:98:84:87:b0:e8:b3:d9:eb:df:fe:e6:ab:1c:d6:a8:23:14: c6:4d:06:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgxMDRCOTRERTBG QTQ3NTIxMTMwHhcNMjYwNzIzMDczMjQ4WhcNMjYwNzMwMDczMjQ4WjAYMRYwFAYD VQQDEw02YTYxYzNhMS1mN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+Xn7lA2LN6hyzbTZuEWhBTh8EVBPKWaHelRIMAV6rRWzz1f3E4/lrH/FYPJ EEAqMChoSYV0qWGzqU+5jXhVn1o8lnJhOx0wNm7O63S8PFibG2NlCG8A09G3nCbd EQgj3fDTVsjUjOQqzINDRQzmhqPfTzVRFBKnUAwxws8kl8y9PVI22q0+aVd5/da4 ua0K6CPDdwuAD31uqkN+mn6oFOUYPiFEx5R81YMRQNYbC6CnTU3g29pBgiQwpw+H seYeRC78lEYM94mTfuMBY4BjQNK5YIHAt1b7GVO/FZKQQsMUqcdsrlJPH2l/Bbd6 cAynMP1qWcIQh2lj1iYGZRtXMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhMvXex oLnFPGF8Cujz85sMQPY+MB8GA1UdIwQYMBaAFHMX13e9qmMzzZaoEEuU3g+kdSET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85QjNEMjU0OEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6UE5scWdRUzVUZUQ2UjFJ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTk0MS85QjNEMjU0OEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6 UE5scWdRUzVUZUQ2UjFJUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARCaYaoegtwKuI/7A4sOgYksXwNV4PPxUknbUla/ujUTi6Pezs3QLBRcUc6Eh tIIwttRpM68dImq01abjRG/6/AGH8Pl2y0gwseFgeIS2EDbqmBYiQti6uyZOdiM2 QbbPTAqOc1Q28kkSXlbPAi/BNXbYaRd5Z6pO+sQS0s9LwqxXC+uGP1DQjd44YhFs opJxDMJ8aNGJ5FX08FZA0pKrFhD7V+CUGLy8bKYxkb3nEZdFILir3mELR/VHOjoz ByrHxidOmIZF6UKv6VLywH8kJ8E593JkRfnqjRlxOQEwgc/3j3kvAvcYsimOCpiE h7Dos9nr3/7mqxzWqCMUxk0Gpw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:24:33 2026 by rpki-client