$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json) Hash identifier: oZY+OGetzGw+hERIGRnfYf57a+M0pBQGf+pWS8rkrL8= Subject key identifier: 10:33:29:C7:67:68:C7:FB:1D:5A:EB:A3:68:AD:E1:D8:7B:EA:8B:F5 Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft Manifest number: 81 Signing time: Thu 23 Jul 2026 09:34:05 +0000 Manifest this update: Thu 23 Jul 2026 09:34:05 +0000 Manifest next update: Thu 30 Jul 2026 09:34:05 +0000 Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: JTb5wnmmvBxPBSWL/F43kuaL4ewvXRA9TxkDA4NhC8Q=) 2: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: e6p12F49PX7qCkcwZNgn+CaOt0/TImrLuvnCu7Vczvc=) 3: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: 11c8TK/vLAQyKDtxVuKGgv22tCaQip5k8q75oDTrT4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Validity Not Before: Jul 23 09:34:05 2026 GMT Not After : Jul 30 09:34:05 2026 GMT Subject: CN=6a61e00d-34eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:a0:a4:5c:c6:f0:6e:30:bb:b0:77:d7:07: bb:4d:35:7d:23:38:af:31:52:38:9a:b3:09:7d:e5: 38:7d:14:78:fe:51:b3:2a:72:b7:6e:b3:dc:00:70: 57:0d:5f:d2:58:72:ff:5a:f5:c7:f3:4d:74:3c:55: 96:8b:6c:bd:ae:6c:57:16:a9:9c:9b:99:4c:3f:1e: 9b:71:c1:10:b7:a1:94:1a:c4:ca:0d:d4:16:42:8d: 68:df:66:6c:33:36:2a:ee:4b:fd:21:30:b5:99:c4: d2:77:83:44:7d:ee:a9:e0:5e:7f:bf:5d:f0:df:a6: 5f:63:5d:67:e2:77:a8:7a:32:9a:be:a2:d6:76:5a: 47:12:75:e0:ad:c5:d5:a0:a5:2e:ec:7f:32:c6:99: 9a:f3:86:e6:8f:ed:ea:a1:09:be:5d:12:23:1a:dc: f8:04:19:f3:83:77:e5:38:00:04:43:48:19:f7:f2: ae:11:57:94:c4:4d:2a:18:6e:f0:7e:2b:a7:e6:3c: 66:bb:9b:35:94:51:76:2c:98:8a:8c:7f:d7:dc:9b: 57:76:92:c0:68:50:2e:0b:31:c1:c9:a9:ab:be:72: da:46:88:4e:1f:e2:00:bd:bf:ac:75:2f:85:d2:2d: e0:ba:51:87:88:8b:a9:c2:35:36:53:a1:33:19:b7: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:29:C7:67:68:C7:FB:1D:5A:EB:A3:68:AD:E1:D8:7B:EA:8B:F5 X509v3 Authority Key Identifier: keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c0:53:5b:44:28:08:50:93:1c:8f:59:d2:1f:c3:78:e7:24: 59:52:05:53:bb:a7:de:b1:db:cc:54:08:f5:31:81:3e:31:70: 62:dd:6f:2c:aa:85:27:eb:b2:13:1a:7d:6b:dd:35:fe:07:e8: 5a:fa:23:74:83:15:13:83:97:a5:2e:f0:8f:4f:79:ad:3b:29: cc:bd:24:42:83:3d:c2:6a:db:b3:27:33:e4:3a:5e:c5:fa:4c: 92:9a:53:fb:2d:86:84:60:f1:d1:47:45:c6:31:e8:19:3d:32: 74:a7:ee:50:4b:65:49:58:4a:c5:77:c0:61:15:8f:eb:3c:97: 39:97:59:be:1d:e2:c6:e5:89:fb:57:c1:95:56:a9:af:56:5e: 26:cf:a8:00:b2:67:14:de:3e:b3:18:d8:37:86:16:56:1e:d3: 4e:fe:33:fd:4b:81:5e:30:65:0e:92:ef:6e:df:8e:0d:31:60: 01:d5:53:49:75:15:a0:3d:0f:dd:7e:e5:1b:c3:ed:af:c1:f4: e4:35:e1:02:1b:22:c5:ae:05:8f:4b:d0:b0:14:14:ec:60:47: 60:3b:03:15:28:47:74:fc:52:bf:e4:c4:d8:bb:c7:31:0e:f6: fd:9a:21:4a:04:46:b3:01:11:23:1f:52:f5:18:59:3d:ae:1b: 14:7a:76:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNGQzUxMTAvBgNVBAUTKDVDQ0E5OEY4NzhDOTI0MDJFMkYxMDRFMkI4QkRBQjgx OTBCMUZBQTIwHhcNMjYwNzIzMDkzNDA1WhcNMjYwNzMwMDkzNDA1WjAYMRYwFAYD VQQDEw02YTYxZTAwZC0zNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukagpFzG8G4wu7B31we7TTV9IzivMVI4mrMJfeU4fRR4/lGzKnK3brPcAHBX DV/SWHL/WvXH8010PFWWi2y9rmxXFqmcm5lMPx6bccEQt6GUGsTKDdQWQo1o32Zs MzYq7kv9ITC1mcTSd4NEfe6p4F5/v13w36ZfY11n4neoejKavqLWdlpHEnXgrcXV oKUu7H8yxpma84bmj+3qoQm+XRIjGtz4BBnzg3flOAAEQ0gZ9/KuEVeUxE0qGG7w fiun5jxmu5s1lFF2LJiKjH/X3JtXdpLAaFAuCzHByamrvnLaRohOH+IAvb+sdS+F 0i3gulGHiIupwjU2U6EzGbd4hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAzKcdn aMf7HVrro2it4dh76ov1MB8GA1UdIwQYMBaAFFzKmPh4ySQC4vEE4ri9q4GQsfqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0ZDNS85OTlGMDI0OEM1 QUIxMUYwOEEyMDM1NERDNEY5QUUwMi9YTXFZLUhqSkpBTGk4UVRpdUwycmdaQ3gt cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNcVktSGpKSkFMaThRVGl1TDJyZ1pDeC1xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0ZDNS85OTlGMDI0OEM1QUIxMUYwOEEyMDM1NERDNEY5QUUwMi9YTXFZLUhqSkpB TGk4UVRpdUwycmdaQ3gtcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAcBTW0QoCFCTHI9Z0h/DeOckWVIFU7un3rHbzFQI9TGBPjFwYt1vLKqFJ+uy Exp9a901/gfoWvojdIMVE4OXpS7wj095rTspzL0kQoM9wmrbsycz5DpexfpMkppT +y2GhGDx0UdFxjHoGT0ydKfuUEtlSVhKxXfAYRWP6zyXOZdZvh3ixuWJ+1fBlVap r1ZeJs+oALJnFN4+sxjYN4YWVh7TTv4z/UuBXjBlDpLvbt+ODTFgAdVTSXUVoD0P 3X7lG8Ptr8H05DXhAhsixa4Fj0vQsBQU7GBHYDsDFShHdPxSv+TE2LvHMQ72/Zoh SgRGswERIx9S9RhZPa4bFHp2kQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:03:06 2026 by rpki-client