$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft File: XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json) Hash identifier: nhu8ztRLIesANEiy6CQMeNmsSUcooWW9yPAMvAQrfi0= Subject key identifier: 72:2C:0C:61:1C:FC:4B:17:C2:B7:67:84:BA:53:81:9A:6E:86:81:E6 Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft Manifest number: 88 Signing time: Thu 23 Jul 2026 09:30:26 +0000 Manifest this update: Thu 23 Jul 2026 09:30:26 +0000 Manifest next update: Thu 30 Jul 2026 09:30:26 +0000 Files and hashes: 1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: 9aiec5cHecnPcDkGGgJfzTcClwQ8z5KQWKc1NECG2OM=) 2: 40506BD64F6311F1B33586E9C4833773.roa (hash: /xujX/eflt5wRcWaBi7MbQ6JbnMkzZt1Nfl3vZK9gwA=) 3: 6273B5964F6411F1B5990A8BC5833773.roa (hash: y3V7Ac3VRTVKkf/zwxo2Yj3w4U6T8D7jfnzMbqhRIFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Validity Not Before: Jul 23 09:30:26 2026 GMT Not After : Jul 30 09:30:26 2026 GMT Subject: CN=6a61df32-fa88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:4a:de:c3:fc:70:4e:d9:42:1f:17:1e:b7: 77:4a:a9:36:82:75:37:59:4a:bc:24:5a:df:e9:6d: 6c:ec:04:70:7f:4e:4d:5f:aa:ee:df:b7:48:c2:5f: bf:0f:2d:58:b8:01:1f:12:c3:b6:5d:ea:b9:9d:1c: e8:e0:f1:2d:bf:be:d3:1c:2d:0e:6a:40:59:cc:89: 15:67:27:08:09:70:29:a8:69:ba:9d:da:ff:6e:e4: 5e:92:cb:96:a5:53:8d:3f:12:df:3b:02:77:78:e9: c4:46:d6:88:cf:54:89:fa:b7:e7:4c:e2:0f:e4:cf: d1:07:5a:1f:72:84:41:83:a9:a5:46:b6:a5:f3:d6: f2:60:79:6b:ad:30:bc:5a:c5:75:e1:ce:66:2f:ec: 14:b5:1f:56:67:58:b6:53:ea:71:4e:e0:99:93:43: 43:8e:58:0c:2c:fb:bf:01:63:7b:cc:14:01:06:aa: 8a:9e:de:0e:43:6c:20:c5:1e:ed:98:a1:f1:c5:e1: 20:77:61:6f:5e:29:51:f3:95:46:d6:be:66:88:9a: dd:1b:84:57:90:c8:e4:e8:f8:7a:a9:19:aa:be:79: 0f:85:90:cc:b6:1d:80:f4:a9:a0:bf:9e:ba:db:b7: 17:8b:bd:dd:8b:91:00:86:e7:39:54:e3:f0:6b:bb: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2C:0C:61:1C:FC:4B:17:C2:B7:67:84:BA:53:81:9A:6E:86:81:E6 X509v3 Authority Key Identifier: keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:31:81:45:c2:54:e7:f6:68:ee:8b:56:fe:6e:bc:61:3c:eb: bc:36:40:ff:a3:4d:e1:74:80:46:51:7f:09:ee:fd:b7:b3:69: f3:16:1c:94:45:69:32:cf:6a:60:2f:aa:0e:cc:77:3d:4f:01: 8c:69:8d:7c:36:76:1f:92:e8:04:c8:36:d4:ed:f7:76:ea:e9: d0:25:ce:2c:ce:36:a2:d0:7c:58:07:1c:89:0a:13:cf:9a:cd: b9:66:46:81:90:82:8d:ca:69:da:bb:73:12:2a:8e:cb:18:14: bf:4f:bd:66:8a:0d:72:95:1f:99:5e:ad:79:03:62:af:94:00: 60:98:e6:59:12:dd:a5:2f:d3:41:f5:45:cf:b7:4e:a8:75:a3: 04:9d:71:35:b1:e2:a3:1f:ca:57:12:2e:81:60:62:69:15:05: e3:50:a4:62:c9:21:1c:05:67:e6:09:7b:1e:3a:f3:e4:93:37: 26:1f:40:fc:7d:ab:5d:1d:c4:98:ca:81:72:19:13:2a:ee:07: e2:5f:4c:53:59:87:02:1b:df:cd:fc:c5:f3:61:c0:b8:f8:60: 00:2b:4e:d7:d4:53:af:c7:87:0a:45:13:73:25:3d:11:85:0b: a1:43:72:d2:be:5d:ae:b8:3c:a3:e4:b7:85:1a:cd:37:8e:84: 33:25:d1:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNBNUIxMTAvBgNVBAUTKDVENEY0MTJBRTQ4MDEwRkU1NDg3RjAxOEYxNzFBOUM2 NDY5RDlBQzUwHhcNMjYwNzIzMDkzMDI2WhcNMjYwNzMwMDkzMDI2WjAYMRYwFAYD VQQDEw02YTYxZGYzMi1mYTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTxK3sP8cE7ZQh8XHrd3Sqk2gnU3WUq8JFrf6W1s7ARwf05NX6ru37dIwl+/ Dy1YuAEfEsO2Xeq5nRzo4PEtv77THC0OakBZzIkVZycICXApqGm6ndr/buReksuW pVONPxLfOwJ3eOnERtaIz1SJ+rfnTOIP5M/RB1ofcoRBg6mlRral89byYHlrrTC8 WsV14c5mL+wUtR9WZ1i2U+pxTuCZk0NDjlgMLPu/AWN7zBQBBqqKnt4OQ2wgxR7t mKHxxeEgd2FvXilR85VG1r5miJrdG4RXkMjk6Ph6qRmqvnkPhZDMth2A9Kmgv566 27cXi73di5EAhuc5VOPwa7vitQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIsDGEc /EsXwrdnhLpTgZpuhoHmMB8GA1UdIwQYMBaAFF1PQSrkgBD+VIfwGPFxqcZGnZrF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0E1Qi9EMjVEODY4RUMw M0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQNVVoX0FZOFhHcHhrYWRt c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1zVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0E1Qi9EMjVEODY4RUMwM0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQ NVVoX0FZOFhHcHhrYWRtc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgDGBRcJU5/Zo7otW/m68YTzrvDZA/6NN4XSARlF/Ce79t7Np8xYclEVpMs9q YC+qDsx3PU8BjGmNfDZ2H5LoBMg21O33durp0CXOLM42otB8WAcciQoTz5rNuWZG gZCCjcpp2rtzEiqOyxgUv0+9ZooNcpUfmV6teQNir5QAYJjmWRLdpS/TQfVFz7dO qHWjBJ1xNbHiox/KVxIugWBiaRUF41CkYskhHAVn5gl7Hjrz5JM3Jh9A/H2rXR3E mMqBchkTKu4H4l9MU1mHAhvfzfzF82HAuPhgACtO19RTr8eHCkUTcyU9EYULoUNy 0r5drrg8o+S3hRrNN46EMyXRnw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:55:52 2026 by rpki-client