$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json) Hash identifier: n/doiK7y5BX4exHRDli97GjVAmG93WnE+6O5cGYzVnE= Subject key identifier: F2:79:A7:CE:DA:31:2E:65:BF:DA:48:74:08:3E:7A:BD:7A:FB:FD:62 Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft Manifest number: 0633 Signing time: Wed 22 Jul 2026 23:29:03 +0000 Manifest this update: Wed 22 Jul 2026 23:29:03 +0000 Manifest next update: Wed 29 Jul 2026 23:29:03 +0000 Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: FoPj8oeIaQ9or0BjyLoiTivuDpj7atmM5cAQf3scQpk=) 2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: 3VA1KwUIIhxyT4ghxT229oTXXd7seGOOX/95PCsXUZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Validity Not Before: Jul 22 23:29:03 2026 GMT Not After : Jul 29 23:29:03 2026 GMT Subject: CN=6a61523f-54b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:66:3a:4a:f5:7d:99:53:b4:8b:b9:11:b5: 26:59:6a:ea:93:41:1f:d9:fe:4c:ef:b9:01:5f:c5: f2:5c:f9:3e:35:c8:74:01:74:a3:85:bb:be:4e:26: bd:79:9e:8b:7d:80:e0:78:bc:eb:a7:c0:3e:81:1c: da:ec:19:a8:61:08:ca:38:cb:7b:f4:4a:d9:47:11: ec:79:54:78:68:77:cc:5a:2c:ad:fc:d0:b0:b5:c7: 5f:5f:9b:1b:86:8d:6a:41:8e:ee:92:89:52:04:06: a7:51:b4:50:6c:ae:a3:41:06:ad:00:f5:8a:22:63: 6b:15:97:37:92:ab:a0:fc:e0:93:3a:60:aa:ba:4d: 8a:3d:7d:0d:a3:16:f1:21:83:11:be:ea:20:c0:f1: b3:4f:2e:f5:c5:43:b8:60:d9:83:c4:60:c4:70:d3: 1d:be:43:0e:6b:e1:64:67:00:82:97:c7:82:51:a7: 3a:2b:14:e0:62:41:81:81:72:10:3f:7b:bc:f9:c5: 39:7e:bb:9a:4f:6c:ca:b7:e8:88:c8:f1:90:08:c1: 36:28:f7:df:3d:3d:92:13:7a:05:97:12:18:f9:67: b9:89:c9:47:e7:a0:cb:45:b6:c5:fa:e6:1b:ae:6d: 28:48:e0:f3:ab:d8:e6:0c:f0:b8:59:15:18:20:3d: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:79:A7:CE:DA:31:2E:65:BF:DA:48:74:08:3E:7A:BD:7A:FB:FD:62 X509v3 Authority Key Identifier: keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:e4:d5:97:e2:76:92:9c:dc:b3:55:9a:ae:f6:c0:32:df:32: 05:82:a9:a6:5c:b3:86:20:a2:c8:03:8d:2e:47:f1:a7:9a:06: 92:36:59:59:cd:94:7c:f9:3e:c6:5c:1c:c4:a5:9b:0e:cb:06: d8:b8:bb:25:ea:2c:ca:13:e8:3b:cc:10:44:e7:c0:82:ee:ad: 77:80:97:91:52:93:32:2a:f8:81:35:9f:6a:65:ad:aa:f9:6b: 59:08:c9:30:5e:0d:8c:a6:a6:04:a0:28:e0:ba:5c:34:cc:ed: 24:ca:10:b8:7a:93:8d:cf:2c:db:17:dc:19:f6:c2:96:9f:a8: 9b:c5:66:3c:49:87:2d:85:63:e0:02:5b:4f:f7:9f:42:ea:77: cd:a2:57:8e:0d:cf:a5:07:5a:ca:60:5b:02:1c:ad:7a:20:86: ea:07:0b:59:f7:fd:ba:fa:d3:8c:d1:04:6f:ab:67:53:c3:24: d3:5d:e0:ea:e7:1e:c8:72:a8:8f:fa:c2:b6:bc:1d:c2:56:62: 0f:8d:5b:6f:2c:a1:fe:46:29:ed:16:39:a9:44:77:4f:83:5a: 4a:45:4f:17:c1:07:b6:07:77:af:41:8e:7a:01:ad:81:bf:76: 2b:f0:b6:cc:10:54:72:64:fd:bc:f5:fc:64:15:6c:7a:79:37: 0e:dd:f0:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RUIxMTAvBgNVBAUTKDVDMzY1QjE3MzFDQTdDRTdEQjgxREQ1NzEzMEJENEQ2 NDMwMTlCNUUwHhcNMjYwNzIyMjMyOTAzWhcNMjYwNzI5MjMyOTAzWjAYMRYwFAYD VQQDEw02YTYxNTIzZi01NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGdmOkr1fZlTtIu5EbUmWWrqk0Ef2f5M77kBX8XyXPk+Nch0AXSjhbu+Tia9 eZ6LfYDgeLzrp8A+gRza7BmoYQjKOMt79ErZRxHseVR4aHfMWiyt/NCwtcdfX5sb ho1qQY7ukolSBAanUbRQbK6jQQatAPWKImNrFZc3kqug/OCTOmCquk2KPX0Noxbx IYMRvuogwPGzTy71xUO4YNmDxGDEcNMdvkMOa+FkZwCCl8eCUac6KxTgYkGBgXIQ P3u8+cU5fruaT2zKt+iIyPGQCME2KPffPT2SE3oFlxIY+We5iclH56DLRbbF+uYb rm0oSODzq9jmDPC4WRUYID22zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJ5p87a MS5lv9pIdAg+er16+/1iMB8GA1UdIwQYMBaAFFw2Wxcxynzn24HdVxML1NZDAZte MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFQi83NzE0OEFDNkVC MDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZPZmJnZDFYRXd2VTFrTUJt MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEWmJGekhLZk9mYmdkMVhFd3ZVMWtNQm0xNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFQi83NzE0OEFDNkVCMDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZP ZmJnZDFYRXd2VTFrTUJtMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF+TVl+J2kpzcs1WarvbAMt8yBYKpplyzhiCiyAONLkfxp5oGkjZZWc2UfPk+ xlwcxKWbDssG2Li7JeosyhPoO8wQROfAgu6td4CXkVKTMir4gTWfamWtqvlrWQjJ MF4NjKamBKAo4LpcNMztJMoQuHqTjc8s2xfcGfbClp+om8VmPEmHLYVj4AJbT/ef Qup3zaJXjg3PpQdaymBbAhyteiCG6gcLWff9uvrTjNEEb6tnU8Mk013g6uceyHKo j/rCtrwdwlZiD41bbyyh/kYp7RY5qUR3T4NaSkVPF8EHtgd3r0GOegGtgb92K/C2 zBBUcmT9vPX8ZBVsenk3Dt3wSA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:08 2026 by rpki-client