$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft File: XiBrZUYXUm6oHe9p1A3KkMONpJM.mft (raw, json) Hash identifier: AQiHyRrrOkLtJuxv1w4S07lJINqQ8tcGV434nc/gulA= Subject key identifier: 75:6F:1E:37:96:5E:A6:29:27:A3:70:42:CE:AE:A6:34:99:EB:07:23 Authority key identifier: 5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 Certificate issuer: /CN=A91C7106/serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft Manifest number: 0A Signing time: Thu 23 Jul 2026 11:15:17 +0000 Manifest this update: Thu 23 Jul 2026 11:15:17 +0000 Manifest next update: Thu 30 Jul 2026 11:15:17 +0000 Files and hashes: 1: XiBrZUYXUm6oHe9p1A3KkMONpJM.crl (hash: 6Ip7DaSe5NMRh2wQNtdZlwpRSd+Tfugivx/x6EA4I8M=) 2: 40CA1FF879AC11F1A4BD68E295A30FBC.roa (hash: dxvzMh7pViI4BlQNkWmxdOF/VYXouPMtNS8/qBafvbA=) 3: 403D780079AC11F1A4BD68E295A30FBC.roa (hash: PX6Hn6xK6Ug95lfOomfVfmyROaB7znZe36dnapQD0gE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7106, serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Validity Not Before: Jul 23 11:15:17 2026 GMT Not After : Jul 30 11:15:17 2026 GMT Subject: CN=6a61f7c5-54e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:fb:46:f0:a3:8c:20:2c:b8:62:d0:cf:11: c2:23:ab:1b:88:01:b6:c1:03:fb:f6:65:dc:c7:c4: 78:95:76:4e:d6:09:76:dd:60:9e:ac:c3:e8:f4:c5: b8:12:ca:37:66:ef:de:0f:0f:c7:38:e6:7a:1e:c8: b0:90:87:14:84:fa:90:a5:02:f3:12:ae:cf:0b:8e: 23:c3:16:d2:1f:90:d0:1c:dc:32:b3:d9:30:e1:26: 37:ef:65:6b:77:e2:a6:df:2a:5b:c3:b1:d0:19:5c: 49:a8:0a:d8:d2:2d:6c:89:4a:a3:ff:19:dd:be:b6: 76:98:45:34:36:52:45:67:92:66:d7:1e:3a:1e:53: 3c:3b:a6:ba:16:60:3b:03:c7:79:2e:b3:e1:ac:e9: 29:51:8f:64:91:e3:b2:a9:a7:6a:b9:52:05:6f:3d: bd:1b:0e:05:04:7b:0b:c6:e4:91:23:96:9e:1e:20: 91:aa:3d:14:1f:c8:f8:ce:8a:5e:35:49:31:8f:43: 66:14:78:dd:f6:1f:7b:32:91:90:e9:ec:95:78:4b: 32:e6:72:e4:ed:24:21:a9:fc:71:e2:bb:c0:8e:cf: 36:be:d2:1b:ab:b2:fd:5e:52:27:98:fd:e1:11:79: 94:1b:af:f0:34:ef:f7:83:e3:f9:dd:1e:d3:ee:c9: c1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6F:1E:37:96:5E:A6:29:27:A3:70:42:CE:AE:A6:34:99:EB:07:23 X509v3 Authority Key Identifier: keyid:5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:a3:e1:b9:51:72:33:0c:e5:84:4e:63:38:41:54:73:22:9c: 90:90:cb:1c:69:02:c6:3f:c0:4b:8f:7b:63:c8:40:2d:a7:6b: 22:97:a1:58:40:73:0b:eb:a3:3a:ab:10:80:85:2c:b3:b7:cd: d1:db:66:5d:c1:44:3e:df:7e:9c:41:c0:a2:19:09:d5:7b:94: 5d:f1:7d:8a:95:61:6a:80:18:17:3c:e2:72:ab:f3:99:57:7b: d8:50:e0:e2:52:06:ce:d8:dc:9c:6b:fb:e4:01:2a:65:7e:69: 65:82:82:bf:c0:ba:a7:46:08:87:49:64:b6:9f:67:0f:f6:b4: 4e:24:e4:7b:93:68:6b:13:84:fd:8c:fb:61:8e:a8:25:f9:c5: 3f:da:6a:f0:22:6a:38:2d:62:fc:2b:4b:d5:35:14:63:39:04: 93:16:56:4d:f6:0a:61:c3:ed:7c:f0:fd:6d:95:2c:01:a4:c3: 4c:0f:40:8f:93:34:4b:2d:35:87:9a:07:b7:73:1d:81:8f:68: a3:4e:b1:2f:ef:21:82:2f:5f:81:00:c3:73:4e:01:0f:7e:b3: e5:63:2d:67:26:11:e1:95:4a:5b:c0:55:53:d5:4c:03:ac:50: 54:23:f3:13:48:ef:16:e9:b6:d6:f4:18:b8:de:da:ab:95:60: f4:bb:f4:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzEwNjExMC8GA1UEBRMoNUUyMDZCNjU0NjE3NTI2RUE4MURFRjY5RDQwRENBOTBD MzhEQTQ5MzAeFw0yNjA3MjMxMTE1MTdaFw0yNjA3MzAxMTE1MTdaMBgxFjAUBgNV BAMTDTZhNjFmN2M1LTU0ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCS+vtG8KOMICy4YtDPEcIjqxuIAbbBA/v2ZdzHxHiVdk7WCXbdYJ6sw+j0xbgS yjdm794PD8c45noeyLCQhxSE+pClAvMSrs8LjiPDFtIfkNAc3DKz2TDhJjfvZWt3 4qbfKlvDsdAZXEmoCtjSLWyJSqP/Gd2+tnaYRTQ2UkVnkmbXHjoeUzw7proWYDsD x3kus+Gs6SlRj2SR47Kpp2q5UgVvPb0bDgUEewvG5JEjlp4eIJGqPRQfyPjOil41 STGPQ2YUeN32H3sykZDp7JV4SzLmcuTtJCGp/HHiu8COzza+0hursv1eUieY/eER eZQbr/A07/eD4/ndHtPuycF1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdW8eN5Ze pikno3BCzq6mNJnrByMwHwYDVR0jBBgwFoAUXiBrZUYXUm6oHe9p1A3KkMONpJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTA2LzdDRjE1RDgwNzlB QjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02b0hlOXAxQTNLa01PTnBK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlCclpVWVhVbTZvSGU5cDFBM0trTU9OcEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTA2LzdDRjE1RDgwNzlBQjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02 b0hlOXAxQTNLa01PTnBKTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByo+G5UXIzDOWETmM4QVRzIpyQkMscaQLGP8BLj3tjyEAtp2sil6FYQHML66M6 qxCAhSyzt83R22ZdwUQ+336cQcCiGQnVe5Rd8X2KlWFqgBgXPOJyq/OZV3vYUODi UgbO2Nyca/vkASplfmllgoK/wLqnRgiHSWS2n2cP9rROJOR7k2hrE4T9jPthjqgl +cU/2mrwImo4LWL8K0vVNRRjOQSTFlZN9gphw+188P1tlSwBpMNMD0CPkzRLLTWH mge3cx2Bj2ijTrEv7yGCL1+BAMNzTgEPfrPlYy1nJhHhlUpbwFVT1UwDrFBUI/MT SO8W6bbW9Bi43tqrlWD0u/QH -----END CERTIFICATE-----Generated at Fri Jul 24 10:25:24 2026 by rpki-client