$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: A+a6/EhKikSEYmsUWdRmourAOh0nEjX16ywM0bgMC3c= Subject key identifier: EA:40:CD:43:FE:AA:0D:9C:1D:B2:53:94:A4:32:C6:7B:1D:37:88:BA Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 09C6 Signing time: Wed 22 Jul 2026 20:22:29 +0000 Manifest this update: Wed 22 Jul 2026 20:22:28 +0000 Manifest next update: Wed 29 Jul 2026 20:22:28 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: nDbLCtwWnT22f9MZD4ziEMmxyEGsnQgPvWHnOkD0ohI=) 2: 7B3252CC014911F1B56055C9516F56BC.roa (hash: Q4zhbv5IYafCWF+cKZ+N5EqVvhygYSFdunW/fgxR9Ms=) 3: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: soe5Moz4gQVVes64vfH27mxJAWxDV9xSP3vrYYcdBj8=) 4: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: rC7/cLhAbtNiKypXkgnC2P4P5so5I+YnfNchz84YMA0=) 5: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: +RYGeu7uX4uBBcHWusqQhkXqLpcB4R1AKfIKops3PNA=) 6: 03706138786411EC8624EB12C4F9AE02.roa (hash: BrG7Q3Tkykmo9xilseoxsNjwLBVZ7ijytYCkK61f/ms=) 7: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: 95lSl7vVPRfDQ24xYlePTZRf3aCd1VmR4GdHAdsIHtU=) 8: 2BFE357EF06211F08763644E5C6F56BC.roa (hash: 7NcbnhD/HJ8NBFUu7bu5fda+cHjTW1crabfldM6QJwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Jul 22 20:22:28 2026 GMT Not After : Jul 29 20:22:28 2026 GMT Subject: CN=6a612684-1fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:86:8c:cc:d4:a4:83:a9:16:8f:fd:ea:48: 3f:23:7d:f1:1d:74:c0:fa:09:39:aa:96:a0:82:f0: 8b:10:bf:3e:b9:db:91:c8:8d:9d:1f:39:88:01:a1: 43:b6:bf:3f:4d:5f:a8:c9:61:e9:7b:83:30:52:6c: 08:3e:4d:60:4c:cf:f5:11:5e:03:5c:11:41:57:b4: d4:05:7d:b5:b6:9e:2a:d5:0e:1d:3e:0a:aa:0d:82: ad:2b:ed:10:02:e9:8d:31:07:bf:8a:cd:69:55:e9: 0f:9c:9f:4d:ba:21:e1:71:d7:02:f1:22:44:cd:0d: 1a:6e:5d:15:e3:e9:0e:43:18:97:56:85:a8:7c:64: 10:bb:46:49:6b:b3:6d:a6:99:7b:5f:1e:ef:8d:3a: 19:a9:e6:46:92:e0:93:22:76:d5:6b:aa:04:6a:4e: 43:5d:2a:68:92:42:a9:9e:b9:21:c7:77:ad:ad:f1: 81:d9:61:d2:84:d1:ff:9b:e7:04:19:d3:e2:fe:c0: 49:cd:3c:48:57:ad:74:7f:b1:15:31:80:f0:87:d2: 31:85:c8:45:08:c3:67:d2:0a:b6:11:de:59:fc:d9: 76:7c:8e:3d:f1:59:61:e9:33:97:64:88:5e:f0:af: 57:64:16:e0:78:2a:aa:e0:fa:b5:32:b6:ed:25:2d: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:40:CD:43:FE:AA:0D:9C:1D:B2:53:94:A4:32:C6:7B:1D:37:88:BA X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b9:03:47:ef:c5:14:40:f4:70:db:04:9e:3b:30:26:9d:69: 73:48:ed:18:02:e7:81:79:2f:04:a9:27:28:77:87:0d:e7:a5: ab:a9:db:13:19:c2:fe:15:e5:8d:fe:55:34:6e:2a:26:bd:76: ce:67:26:73:73:40:be:f2:c1:4e:24:70:5a:5a:47:25:6d:cf: fc:19:5d:49:3b:f7:d2:61:a9:4e:d5:b5:10:25:76:f3:48:f7: f7:34:12:7e:60:ed:c8:e6:5d:de:23:c5:04:67:66:15:f1:95: 05:f3:20:88:c7:4f:37:4c:a5:19:a0:26:a7:6f:c0:c9:8b:78: 1c:f6:db:f1:95:b6:d3:0e:7f:fe:bb:c6:15:64:20:f9:43:a4: f7:c8:23:35:1f:8b:4a:48:dc:a3:bf:d3:b0:d7:5f:dc:1d:48: c7:60:ba:a8:b6:88:ad:ce:f9:a8:86:2a:47:d8:b9:db:c3:04: c7:32:01:2d:87:66:c1:42:23:5a:42:eb:c0:78:fa:7b:17:96: 88:aa:9a:c7:67:88:13:b4:16:c4:c9:18:9f:8b:88:d0:46:18: 48:83:5e:4b:59:31:68:b3:09:f9:f0:1d:24:d3:8b:83:12:37: 4f:ce:30:6a:28:e0:43:f4:99:82:00:48:5f:7d:29:91:e7:13: 82:f7:59:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjYwNzIyMjAyMjI4WhcNMjYwNzI5MjAyMjI4WjAYMRYwFAYD VQQDEw02YTYxMjY4NC0xZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqGGjMzUpIOpFo/96kg/I33xHXTA+gk5qpaggvCLEL8+uduRyI2dHzmIAaFD tr8/TV+oyWHpe4MwUmwIPk1gTM/1EV4DXBFBV7TUBX21tp4q1Q4dPgqqDYKtK+0Q AumNMQe/is1pVekPnJ9NuiHhcdcC8SJEzQ0abl0V4+kOQxiXVoWofGQQu0ZJa7Nt ppl7Xx7vjToZqeZGkuCTInbVa6oEak5DXSpokkKpnrkhx3etrfGB2WHShNH/m+cE GdPi/sBJzTxIV610f7EVMYDwh9IxhchFCMNn0gq2Ed5Z/Nl2fI498Vlh6TOXZIhe 8K9XZBbgeCqq4Pq1MrbtJS2N4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpAzUP+ qg2cHbJTlKQyxnsdN4i6MB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnbkDR+/FFED0cNsEnjswJp1pc0jtGALngXkvBKknKHeHDeelq6nbExnC/hXl jf5VNG4qJr12zmcmc3NAvvLBTiRwWlpHJW3P/BldSTv30mGpTtW1ECV280j39zQS fmDtyOZd3iPFBGdmFfGVBfMgiMdPN0ylGaAmp2/AyYt4HPbb8ZW20w5//rvGFWQg +UOk98gjNR+LSkjco7/TsNdf3B1Ix2C6qLaIrc75qIYqR9i528MExzIBLYdmwUIj WkLrwHj6exeWiKqax2eIE7QWxMkYn4uI0EYYSINeS1kxaLMJ+fAdJNOLgxI3T84w aijgQ/SZggBIX30pkecTgvdZUA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:08:43 2026 by rpki-client