$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: iisWhOOWJEftql3gfSz6KC+hlXj/ww2YMd7NENqD+ZA= Subject key identifier: 38:E2:7E:F6:02:78:D7:B9:84:51:79:01:B6:34:7C:55:E9:C4:39:B0 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 01F9 Signing time: Thu 23 Jul 2026 04:42:31 +0000 Manifest this update: Thu 23 Jul 2026 04:42:30 +0000 Manifest next update: Thu 30 Jul 2026 04:42:30 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: EWJvdLxs84spqeyqgbnOiUsVXWcaGuNnZ20CWzygCbo=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Jul 23 04:42:30 2026 GMT Not After : Jul 30 04:42:30 2026 GMT Subject: CN=6a619bb6-ff6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:fe:a9:1f:b0:7d:a6:41:11:85:67:fc:5f: d7:6c:63:9d:9b:a4:12:d6:1a:88:1f:7c:1d:4f:fa: 82:a1:4e:22:fe:28:1d:09:d1:70:e5:d5:da:67:e2: 6f:79:58:30:34:fb:f9:ca:33:3c:d6:26:5b:74:c8: cd:60:39:7c:db:a8:fd:2e:a4:50:4a:10:bd:db:d6: fa:03:c6:fb:b4:a1:21:bf:a5:c3:8d:bf:3d:b6:2a: 4c:45:5c:03:5e:28:84:7e:39:d9:6e:63:0a:57:71: 03:6a:08:0f:e5:b3:a7:38:54:a3:6e:4d:90:3b:71: 4b:71:08:af:e4:69:e5:07:f8:7a:ec:8e:25:79:10: 3b:a3:b6:d8:8a:fd:9d:52:43:ec:e6:77:13:02:82: b6:c5:d0:a4:d3:90:d6:9e:ea:b7:10:bb:28:b5:da: 91:74:a9:69:9e:42:d5:0b:ac:3d:a4:5a:0b:d1:09: 19:9e:de:e3:ef:63:ca:a0:21:24:b8:49:68:43:b4: 4d:8e:3d:7e:02:74:9e:e4:52:8b:a8:56:a5:92:3a: da:a3:7e:31:d2:9c:f8:2f:61:81:5b:f6:16:89:80: 7b:97:6a:07:b8:f1:10:55:3c:6d:f2:86:2d:b5:82: dd:7d:47:31:80:f6:08:57:bf:a0:47:85:db:79:93: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E2:7E:F6:02:78:D7:B9:84:51:79:01:B6:34:7C:55:E9:C4:39:B0 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:4d:a6:06:e2:9b:f4:4f:3c:d3:b5:70:32:10:53:10:29:5e: ea:9a:7f:08:44:18:67:a2:a4:a2:a2:5d:c6:3a:46:a0:64:6c: 07:89:4f:60:aa:13:4f:a0:12:70:fd:e3:96:e9:6e:19:b1:01: 76:f9:92:d1:5b:6f:b7:30:28:94:cb:5f:f3:34:57:84:b7:3c: 9d:a3:60:15:4a:2a:5d:15:d1:e4:73:26:ef:f0:52:75:b3:36: 11:43:49:7a:f7:45:09:2d:00:69:1c:34:17:3d:f7:35:a7:44: 90:04:32:0b:dc:39:7e:d0:19:e2:af:b5:15:c9:1e:cf:a4:f3: d1:39:f3:34:f0:fa:61:68:9d:10:82:5a:0b:76:da:a2:c6:6d: df:21:da:be:a1:31:09:1b:1e:62:0e:d0:16:9a:96:3f:b8:8f: 2c:90:d6:11:a8:11:ac:cd:d6:40:75:a2:a0:38:ea:86:4f:f6: 61:4c:af:c3:c9:ed:7d:d0:bf:61:38:a2:78:b1:17:bb:90:33: 43:ec:3f:76:ae:99:fb:d3:10:4d:2b:1d:96:03:84:36:35:e1: d8:db:ba:47:f4:74:e6:5d:59:e4:68:05:1d:a5:bf:19:05:fb: 4a:9a:8c:2e:52:49:bb:61:eb:47:42:c8:ca:40:49:e6:98:22: e7:b2:69:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjYwNzIzMDQ0MjMwWhcNMjYwNzMwMDQ0MjMwWjAYMRYwFAYD VQQDEw02YTYxOWJiNi1mZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jj+qR+wfaZBEYVn/F/XbGOdm6QS1hqIH3wdT/qCoU4i/igdCdFw5dXaZ+Jv eVgwNPv5yjM81iZbdMjNYDl826j9LqRQShC929b6A8b7tKEhv6XDjb89tipMRVwD XiiEfjnZbmMKV3EDaggP5bOnOFSjbk2QO3FLcQiv5GnlB/h67I4leRA7o7bYiv2d UkPs5ncTAoK2xdCk05DWnuq3ELsotdqRdKlpnkLVC6w9pFoL0QkZnt7j72PKoCEk uEloQ7RNjj1+AnSe5FKLqFalkjrao34x0pz4L2GBW/YWiYB7l2oHuPEQVTxt8oYt tYLdfUcxgPYIV7+gR4XbeZNJYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjifvYC eNe5hFF5AbY0fFXpxDmwMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlk2mBuKb9E8807VwMhBTECle6pp/CEQYZ6KkoqJdxjpGoGRsB4lPYKoTT6AS cP3jluluGbEBdvmS0VtvtzAolMtf8zRXhLc8naNgFUoqXRXR5HMm7/BSdbM2EUNJ evdFCS0AaRw0Fz33NadEkAQyC9w5ftAZ4q+1Fckez6Tz0TnzNPD6YWidEIJaC3ba osZt3yHavqExCRseYg7QFpqWP7iPLJDWEagRrM3WQHWioDjqhk/2YUyvw8ntfdC/ YTiieLEXu5AzQ+w/dq6Z+9MQTSsdlgOENjXh2Nu6R/R05l1Z5GgFHaW/GQX7SpqM LlJJu2HrR0LIykBJ5pgi57JpCw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:27:51 2026 by rpki-client