$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: G2xEnE8krDiuTaAqJsoqUnZvqWbHty2DWbkTvZjSp5Q= Subject key identifier: 8D:4B:4C:A2:86:81:5B:2F:4C:92:1A:B6:A8:78:60:BC:A3:0A:F4:D4 Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 29 Signing time: Thu 23 Jul 2026 10:54:09 +0000 Manifest this update: Thu 23 Jul 2026 10:54:09 +0000 Manifest next update: Thu 30 Jul 2026 10:54:09 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: wbqIEOXVAqHuQT5Lv/gvyfi3lO70RWZUFNwcUd12v2Y=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: cNvYO9Mx94LSKruAtGYqSyqtbxJvaQBMA0ykxsLIG5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: Jul 23 10:54:09 2026 GMT Not After : Jul 30 10:54:09 2026 GMT Subject: CN=6a61f2d1-0d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0b:e1:72:be:ed:4a:7d:39:68:58:14:c3:88: df:61:b6:eb:32:84:94:38:54:1e:5c:92:90:bd:6a: 56:8c:b0:81:f9:ab:c0:f2:ae:ba:95:f7:6f:08:cd: bd:37:bc:ce:40:29:d4:2f:e9:47:5a:1b:a3:c8:19: a8:46:14:40:c1:14:81:f6:05:1f:62:c2:19:e7:14: 55:50:6f:26:e4:94:08:cc:d8:e8:c2:a6:ae:d6:92: 45:bf:56:9f:3b:07:c6:a0:ab:b3:6d:00:dc:8f:fa: 64:ff:c8:28:32:9e:9d:3d:7a:8a:d6:9b:3b:27:e5: d7:7d:01:31:03:49:61:2c:bd:d5:b7:10:8d:80:27: cc:d5:da:38:a8:86:83:05:5b:f3:28:74:08:61:58: db:e9:34:5b:24:73:44:3b:d2:55:c2:fa:2a:d1:62: 50:66:8f:d0:d1:34:df:16:51:0d:80:65:c7:98:b0: 7f:36:14:dd:b9:83:ad:3c:32:ae:c5:a6:99:cc:bd: 4b:f8:ba:7c:65:a9:a0:5e:22:72:6b:88:3a:e3:15: 3e:fc:31:76:fe:26:94:db:65:00:5e:ae:1a:92:98: 35:af:2e:a4:d7:2d:42:9a:14:c4:04:56:42:55:5b: 61:fa:db:ef:bb:e5:fa:cb:0b:be:34:1a:da:d7:43: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4B:4C:A2:86:81:5B:2F:4C:92:1A:B6:A8:78:60:BC:A3:0A:F4:D4 X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b7:3b:33:fe:e3:3b:b4:b0:c1:bc:89:6f:b0:ea:d0:52:d1: 74:c4:c7:b7:38:4c:44:51:c3:56:53:80:d7:39:b5:f2:f5:a2: b8:dd:06:e5:a3:57:1b:91:fc:d0:dc:3a:b7:e8:56:94:59:ef: cd:47:1a:df:b5:90:13:a0:05:0d:63:a5:9e:c6:35:ef:6b:a6: 95:53:e1:cf:8c:b0:f7:ef:e8:58:64:ed:f0:c0:ea:91:9d:79: 02:9c:3f:16:ad:c0:d6:9d:d3:ee:58:ad:fe:27:84:9d:25:8d: 0e:ad:71:cf:40:23:f4:53:36:0e:31:7d:8e:c3:f0:0e:68:bf: 38:02:14:bc:31:ae:28:74:db:70:8d:82:50:d7:eb:87:9b:56: b7:c7:c2:65:55:e2:c1:43:53:d5:e2:b0:26:2f:b4:f4:f4:af: 51:76:67:29:01:65:c3:ea:6f:bb:d4:35:0d:86:0e:f8:6a:af: a1:79:7d:68:23:53:f5:e8:96:1f:83:1c:8f:f5:7a:f0:4b:29: c8:71:ff:e4:b3:43:cb:58:46:f7:78:56:cf:b5:7c:6c:6f:e0: cc:4e:2c:c3:0c:d0:c0:ba:f2:61:69:dc:c8:1e:98:4b:2a:09: 1b:a7:d4:12:b8:b7:96:b6:72:24:ce:17:06:9c:96:dc:82:e0: 7e:42:88:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjA3MjMxMDU0MDlaFw0yNjA3MzAxMDU0MDlaMBgxFjAUBgNV BAMTDTZhNjFmMmQxLTBkMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsC+Fyvu1KfTloWBTDiN9htusyhJQ4VB5ckpC9alaMsIH5q8DyrrqV928Izb03 vM5AKdQv6UdaG6PIGahGFEDBFIH2BR9iwhnnFFVQbybklAjM2OjCpq7WkkW/Vp87 B8agq7NtANyP+mT/yCgynp09eorWmzsn5dd9ATEDSWEsvdW3EI2AJ8zV2jiohoMF W/ModAhhWNvpNFskc0Q70lXC+irRYlBmj9DRNN8WUQ2AZceYsH82FN25g608Mq7F ppnMvUv4unxlqaBeInJriDrjFT78MXb+JpTbZQBerhqSmDWvLqTXLUKaFMQEVkJV W2H62++75frLC740GtrXQwjRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjUtMooaB Wy9Mkhq2qHhgvKMK9NQwHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdtzsz/uM7tLDBvIlvsOrQUtF0xMe3OExEUcNWU4DXObXy9aK43Qblo1cbkfzQ 3Dq36FaUWe/NRxrftZAToAUNY6WexjXva6aVU+HPjLD37+hYZO3wwOqRnXkCnD8W rcDWndPuWK3+J4SdJY0OrXHPQCP0UzYOMX2Ow/AOaL84AhS8Ma4odNtwjYJQ1+uH m1a3x8JlVeLBQ1PV4rAmL7T09K9RdmcpAWXD6m+71DUNhg74aq+heX1oI1P16JYf gxyP9XrwSynIcf/ks0PLWEb3eFbPtXxsb+DMTizDDNDAuvJhadzIHphLKgkbp9QS uLeWtnIkzhcGnJbcguB+Qohc -----END CERTIFICATE-----Generated at Fri Jul 24 04:19:50 2026 by rpki-client