$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: Mk3LmSHi9KodMBNUiLkZybLe1k9ag7VgYp6a/dl2zmE= Subject key identifier: BC:48:05:3A:A3:89:43:AA:C5:60:7B:28:B8:6E:9B:23:FB:38:55:54 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: 0148 Signing time: Thu 23 Jul 2026 07:32:34 +0000 Manifest this update: Thu 23 Jul 2026 07:32:34 +0000 Manifest next update: Thu 30 Jul 2026 07:32:34 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: CMokVxFQPAjitp0Ffo2RrMYv5dSMgwbsSX0bndhRX+U=) 2: 6D79D956EF8E11F0A4EF9B52626F56BC.roa (hash: 4G7rkAOPzZxy6QxlsO0//em4aGUKuTqPaZNaxC3+I/U=) 3: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: N8subGTXgSFo4mT5pf8HJvgdyU5Rcsjvn4+t6H3QhDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Jul 23 07:32:34 2026 GMT Not After : Jul 30 07:32:34 2026 GMT Subject: CN=6a61c392-a9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:2e:ed:f9:a9:e5:e2:c0:fa:76:49:87:8f: c9:89:d4:7e:6a:dd:8b:f8:8e:39:51:0d:d0:ef:47: ac:5c:35:4b:cd:c6:b8:fc:6d:26:82:c8:b1:7b:37: fa:79:c8:9a:43:f8:9f:4f:f1:51:34:0d:a5:36:5c: 93:62:23:d8:88:e6:68:3f:a0:45:8a:1b:26:bb:2b: 50:7d:dc:a8:20:f9:7f:63:70:4b:0e:27:dc:7a:75: 29:23:c0:83:6f:43:5f:2a:1d:b4:d0:43:9a:ae:05: da:dd:37:97:e6:79:64:c3:5a:4a:ff:43:02:af:b2: 57:fe:3a:ec:72:31:23:5b:8c:43:cd:15:a7:db:f3: c0:71:66:16:84:0d:8f:8d:a3:89:59:e6:36:e2:4e: 5f:6f:a5:d2:34:be:9c:42:e1:c0:e8:af:38:d3:50: 29:c4:66:93:d8:8c:7f:c4:bb:43:f8:78:a9:25:fa: 47:b4:6f:50:09:06:ee:ff:f0:cd:73:ef:10:c1:a6: 6e:95:8d:76:5f:6b:f6:2a:61:9e:a7:53:82:38:79: 25:df:02:24:cf:57:28:3c:31:a8:26:4e:e7:71:2d: 82:41:9a:1c:49:7b:ca:f4:1e:2a:a3:ec:48:23:28: a1:21:36:3a:6a:b8:6e:fe:b3:f6:02:dc:d2:55:f8: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:05:3A:A3:89:43:AA:C5:60:7B:28:B8:6E:9B:23:FB:38:55:54 X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:b2:2f:59:b1:c0:a5:77:a7:4c:d5:8f:23:ae:6a:9f:71:3c: 77:90:47:c4:a3:82:c8:84:47:95:2e:cb:7a:4e:78:b1:85:a4: 83:53:2a:17:41:b3:6f:e2:38:a9:af:5a:bd:ea:44:d2:03:23: 56:9f:f2:b9:19:01:20:2c:44:0b:6f:a3:37:a4:72:f6:ba:c4: 8d:ed:d3:09:1b:03:21:28:8c:ff:85:e3:1f:78:51:c4:4b:91: bd:8d:8a:09:d6:ca:29:6e:8d:f6:b1:01:e9:50:13:82:10:e9: 23:c9:b6:2f:85:24:31:e9:52:53:4d:82:9c:e7:30:05:42:d8: e4:ff:8e:c4:11:cc:f0:6a:1c:cb:79:aa:41:2b:ed:0a:c7:19: 07:a0:5b:6a:63:7d:4a:be:cc:a9:b0:cf:1c:18:87:86:e4:d3: c6:4c:af:cf:39:d0:c0:3d:fd:db:63:1f:23:eb:cb:c0:01:83: a6:ff:c2:ec:15:86:4f:e0:4f:9d:cc:9e:c7:9e:9f:0e:0a:79: 41:be:b9:2b:c0:da:a5:09:a0:d6:e7:d6:e8:38:60:b2:88:30: 94:b7:c2:73:c8:c6:c4:cc:17:33:76:66:07:15:11:1c:01:02: 5f:f0:f2:ad:51:b2:be:1b:b7:1e:7a:5e:be:d6:2c:97:68:3e: 8a:92:a2:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjYwNzIzMDczMjM0WhcNMjYwNzMwMDczMjM0WjAYMRYwFAYD VQQDEw02YTYxYzM5Mi1hOWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIIu7fmp5eLA+nZJh4/JidR+at2L+I45UQ3Q70esXDVLzca4/G0mgsixezf6 eciaQ/ifT/FRNA2lNlyTYiPYiOZoP6BFihsmuytQfdyoIPl/Y3BLDifcenUpI8CD b0NfKh200EOargXa3TeX5nlkw1pK/0MCr7JX/jrscjEjW4xDzRWn2/PAcWYWhA2P jaOJWeY24k5fb6XSNL6cQuHA6K8401ApxGaT2Ix/xLtD+HipJfpHtG9QCQbu//DN c+8QwaZulY12X2v2KmGep1OCOHkl3wIkz1coPDGoJk7ncS2CQZocSXvK9B4qo+xI IyihITY6arhu/rP2AtzSVfhbQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxIBTqj iUOqxWB7KLhumyP7OFVUMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD Wnk1bTh3QmZaR20yS0pGeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApLIvWbHApXenTNWPI65qn3E8d5BHxKOCyIRHlS7Lek54sYWkg1MqF0Gzb+I4 qa9avepE0gMjVp/yuRkBICxEC2+jN6Ry9rrEje3TCRsDISiM/4XjH3hRxEuRvY2K CdbKKW6N9rEB6VATghDpI8m2L4UkMelSU02CnOcwBULY5P+OxBHM8Gocy3mqQSvt CscZB6BbamN9Sr7MqbDPHBiHhuTTxkyvzznQwD3922MfI+vLwAGDpv/C7BWGT+BP ncyex56fDgp5Qb65K8DapQmg1ufW6DhgsogwlLfCc8jGxMwXM3ZmBxURHAECX/Dy rVGyvhu3HnpevtYsl2g+ipKipw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:59:39 2026 by rpki-client