$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft File: XYnzqvmxOgelsmTy3rpk1cUAZRw.mft (raw, json) Hash identifier: vyg9TSuc5gIOnBX2QcDPtQGBnSGNQnWPaH3nQB6tBdI= Subject key identifier: 37:A6:EC:06:F4:38:F5:CC:08:FA:40:C4:84:43:6E:DC:E8:1C:04:EE Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft Manifest number: 0294 Signing time: Thu 23 Jul 2026 02:51:25 +0000 Manifest this update: Thu 23 Jul 2026 02:51:24 +0000 Manifest next update: Thu 30 Jul 2026 02:51:24 +0000 Files and hashes: 1: XYnzqvmxOgelsmTy3rpk1cUAZRw.crl (hash: osUwfnby7AsH6rOiBnGughtMvu0EYh414uMo5fbWUp0=) 2: 5DCE1A1AA63C11ED9306165AC4F9AE02.roa (hash: ry8gAyMl/oF2tDrb6QBcr0lUpoct2VpMmyLx0Y2gIls=) 3: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (hash: ClwvMUH1LVLekjvPCckwoGuRynW5TD4w0EqiLo6Abj0=) 4: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (hash: DHZLT6kRWzcG3+2PiBnd4pNnMfMfwzitkH/VyFmiyhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240, serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Validity Not Before: Jul 23 02:51:24 2026 GMT Not After : Jul 30 02:51:24 2026 GMT Subject: CN=6a6181ad-7719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0c:79:46:c5:50:c3:04:4f:8c:66:d9:20:68: e2:b8:99:2a:1b:47:dd:bf:65:77:38:f3:95:62:43: ce:ab:b6:2d:b2:a4:4a:df:7f:79:f1:6f:e3:d8:e7: 37:ea:64:33:e7:42:e3:fc:d7:e9:2c:63:6c:05:d8: 31:78:14:50:c5:a4:1d:26:96:54:b3:82:4e:6c:ae: 10:7f:c8:74:52:2c:83:32:72:32:51:af:f7:58:04: 32:7d:da:f9:9d:5d:68:02:fd:96:a9:56:60:2c:c6: e8:de:2f:c5:f6:11:8f:6f:22:b7:58:b5:80:bf:a0: c0:a0:dc:11:a5:fe:0f:da:3e:c8:10:7b:04:3e:a7: ee:9e:98:6e:ec:e5:c3:e9:01:5a:e0:9c:e8:e0:1e: e1:5e:73:a1:71:c4:9a:47:77:7c:d9:b6:e5:85:10: 23:7c:a3:65:d1:00:76:c8:a5:7f:a2:a2:45:a6:6a: f7:d1:91:ac:bc:9c:1e:0d:1a:34:62:e0:76:e7:2f: 9b:ce:e3:62:d5:a5:21:c3:48:78:f7:cb:b6:af:ed: ac:1a:c3:28:d2:5b:65:f8:01:b1:fc:24:3b:5f:01: c5:6e:18:82:56:c4:82:64:95:88:b7:1f:aa:52:1f: 41:34:70:13:16:c5:6b:1b:fa:a5:73:fe:61:f9:1c: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A6:EC:06:F4:38:F5:CC:08:FA:40:C4:84:43:6E:DC:E8:1C:04:EE X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:aa:26:ee:8f:2b:f0:35:1b:30:79:ee:e1:60:01:a1:e0:56: 1a:2f:5f:a3:1b:1e:54:44:9a:ac:f6:e2:b2:ad:3b:95:2c:ef: 09:b3:4e:79:26:0a:bf:8e:55:eb:e7:a7:72:0c:d7:57:8d:88: d0:17:2f:61:45:fd:ec:03:a7:df:8b:10:f9:6c:76:49:2d:db: 24:56:c8:56:36:42:33:24:64:c4:e4:e6:b5:2b:e7:a9:1c:d5: a7:bf:38:89:52:66:c4:0a:11:7d:61:a0:f7:ed:9d:4a:a4:ff: 50:fd:cd:42:84:33:4a:e7:dd:98:45:33:63:c6:b7:85:00:21: 81:d0:09:de:08:64:f6:93:6b:8c:ee:cf:56:2d:b2:0a:7f:06: cc:c1:cf:49:5a:1e:d0:2f:fe:83:c3:d3:8a:0d:54:6b:5d:55: d6:8c:d8:36:5a:e1:c7:90:09:40:91:c0:90:d8:f8:48:58:3d: 92:f8:92:d8:dd:5e:e1:2e:e8:f8:e4:68:03:8a:b3:86:2c:71: 55:0e:cc:89:59:13:e1:f0:20:73:43:ff:b2:c2:d2:00:ff:7e: 43:7f:04:b7:0f:65:55:13:a6:51:d6:36:56:83:b0:a2:0c:28: 74:32:c8:f9:02:06:37:ff:33:02:71:1e:97:f9:02:b3:71:58: 47:d2:f5:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjYwNzIzMDI1MTI0WhcNMjYwNzMwMDI1MTI0WjAYMRYwFAYD VQQDEw02YTYxODFhZC03NzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gx5RsVQwwRPjGbZIGjiuJkqG0fdv2V3OPOVYkPOq7YtsqRK33958W/j2Oc3 6mQz50Lj/NfpLGNsBdgxeBRQxaQdJpZUs4JObK4Qf8h0UiyDMnIyUa/3WAQyfdr5 nV1oAv2WqVZgLMbo3i/F9hGPbyK3WLWAv6DAoNwRpf4P2j7IEHsEPqfunphu7OXD 6QFa4Jzo4B7hXnOhccSaR3d82bblhRAjfKNl0QB2yKV/oqJFpmr30ZGsvJweDRo0 YuB25y+bzuNi1aUhw0h498u2r+2sGsMo0ltl+AGx/CQ7XwHFbhiCVsSCZJWItx+q Uh9BNHATFsVrG/qlc/5h+Rz58QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDem7Ab0 OPXMCPpAxIRDbtzoHATuMB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTI0MC8yN0RERTdEODlCN0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9n ZWxzbVR5M3JwazFjVUFaUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuKom7o8r8DUbMHnu4WABoeBWGi9foxseVESarPbisq07lSzvCbNOeSYKv45V 6+encgzXV42I0BcvYUX97AOn34sQ+Wx2SS3bJFbIVjZCMyRkxOTmtSvnqRzVp784 iVJmxAoRfWGg9+2dSqT/UP3NQoQzSufdmEUzY8a3hQAhgdAJ3ghk9pNrjO7PVi2y Cn8GzMHPSVoe0C/+g8PTig1Ua11V1ozYNlrhx5AJQJHAkNj4SFg9kviS2N1e4S7o +ORoA4qzhixxVQ7MiVkT4fAgc0P/ssLSAP9+Q38Etw9lVROmUdY2VoOwogwodDLI +QIGN/8zAnEel/kCs3FYR9L1Sw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:02:38 2026 by rpki-client