$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft File: X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft (raw, json) Hash identifier: Gj5D6AM4pLOzQA9S7NH/EJ+sphflCB5IY+d3aqSeijk= Subject key identifier: 7B:4F:3F:34:04:CB:19:BE:39:0A:16:B5:C1:6B:18:44:F2:39:14:08 Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D Certificate issuer: /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft Manifest number: F3 Signing time: Thu 23 Jul 2026 08:09:36 +0000 Manifest this update: Thu 23 Jul 2026 08:09:36 +0000 Manifest next update: Thu 30 Jul 2026 08:09:36 +0000 Files and hashes: 1: X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl (hash: kBx0bk/1/M89/PkhfGg7puxSW8ooypfIBF9fV/TrQIE=) 2: D522C16CBAEB11F09547BA51C4F9AE02.roa (hash: gWwM8BCGpWWubDG2MVtbVJvT2zPmgCLxqAql3fBRxFQ=) 3: B245BA601C4311F08254DE40C4F9AE02.roa (hash: dWmVj4jtVJHc4wNWMusSMHmYNjBn61d8/+MaIxcv/eU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Validity Not Before: Jul 23 08:09:36 2026 GMT Not After : Jul 30 08:09:36 2026 GMT Subject: CN=6a61cc40-786d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:81:4a:41:e8:60:9a:70:17:dd:7a:c9:49: d1:8b:78:58:9a:f0:0e:15:68:bb:5a:89:32:8e:6c: 50:71:a7:0a:4c:17:17:94:54:e6:bf:ea:16:29:49: 37:d3:4d:2e:d2:a2:37:62:86:d7:fc:d1:9f:7e:11: 94:82:ad:28:62:b6:30:45:00:98:aa:7e:dc:37:0d: 62:78:ed:ab:88:97:64:07:75:60:98:12:59:a2:ec: 23:40:7b:eb:70:ed:4c:be:de:f0:8b:21:c4:ce:4f: 88:b9:23:c6:b3:dd:11:c2:44:a9:cd:57:ec:06:8b: 6c:b6:37:26:da:d1:eb:d2:4a:b5:bc:e4:ef:4a:77: 04:2d:49:b2:14:94:5a:60:d6:85:e9:d6:be:c2:61: 01:6f:47:1a:de:e0:7f:93:ac:bd:e9:9e:01:0a:df: 83:3a:36:77:eb:61:60:c0:ca:f3:ab:96:fb:cb:ad: 88:14:2a:fb:10:5e:95:37:a5:3d:32:c2:a7:0a:91: 35:e9:2d:94:3a:53:0e:d3:7c:eb:55:d0:cb:41:af: e2:36:a8:79:b7:a3:e9:be:22:c9:6e:1f:2d:38:13: b8:fa:8f:1e:4b:ee:cb:22:e1:63:17:43:08:01:fa: 71:c0:72:ad:85:90:e6:bb:77:13:ff:ab:43:38:9d: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4F:3F:34:04:CB:19:BE:39:0A:16:B5:C1:6B:18:44:F2:39:14:08 X509v3 Authority Key Identifier: keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:09:cc:86:05:ee:f9:a1:d9:d4:c5:7a:85:df:75:85:ea:20: 05:85:06:6c:6a:81:22:c9:4e:7f:e4:f7:53:69:ae:69:41:70: 42:8d:f8:67:49:19:81:62:27:24:70:ac:25:7b:fb:5b:de:38: 6a:a1:50:5d:06:fb:ff:b9:29:c7:41:d8:2b:f8:21:58:c1:65: 2c:f0:24:61:dd:7c:de:6c:a5:96:ca:33:1a:b7:93:13:36:9a: 00:b2:2c:31:fd:52:52:c6:9b:e6:f2:7a:93:23:b6:b0:2f:24: 22:16:6d:a5:47:c7:5d:7c:68:1a:d2:ff:97:5b:93:82:1d:4d: 07:4c:46:82:94:45:e2:86:4f:c8:b0:d4:a6:3f:d4:e7:86:12: 8f:b9:d2:5e:45:bb:b5:d6:51:74:8a:6c:d4:39:77:a3:f7:d6: 04:b3:ea:59:b9:a1:e3:a4:f2:c8:2f:8a:fa:36:4e:8a:a3:ac: 83:b9:91:63:4f:e7:86:b5:6e:d7:2e:4c:12:df:30:45:89:5a: ef:1a:db:9e:58:d8:e6:55:ec:9a:e6:5e:f8:1c:4d:90:38:65: 76:4e:21:0a:ce:f6:28:2b:90:e2:3c:4a:80:26:d1:73:16:74: e8:b1:1f:80:fe:21:19:89:cd:32:10:59:b8:a7:48:6c:0f:d8: fb:3a:ba:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTYxMTAvBgNVBAUTKDVGNjk5MTg2QTJFQkNENDVCMUZGNkEwQTRBRjYwNjA2 RjNCM0QwOEQwHhcNMjYwNzIzMDgwOTM2WhcNMjYwNzMwMDgwOTM2WjAYMRYwFAYD VQQDEw02YTYxY2M0MC03ODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/6BSkHoYJpwF916yUnRi3hYmvAOFWi7WokyjmxQcacKTBcXlFTmv+oWKUk3 000u0qI3YobX/NGffhGUgq0oYrYwRQCYqn7cNw1ieO2riJdkB3VgmBJZouwjQHvr cO1Mvt7wiyHEzk+IuSPGs90RwkSpzVfsBotstjcm2tHr0kq1vOTvSncELUmyFJRa YNaF6da+wmEBb0ca3uB/k6y96Z4BCt+DOjZ362FgwMrzq5b7y62IFCr7EF6VN6U9 MsKnCpE16S2UOlMO03zrVdDLQa/iNqh5t6PpviLJbh8tOBO4+o8eS+7LIuFjF0MI AfpxwHKthZDmu3cT/6tDOJ3OwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtPPzQE yxm+OQoWtcFrGETyORQIMB8GA1UdIwQYMBaAFF9pkYai681Fsf9qCkr2Bgbzs9CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Ni9FRkYyQTBBMDFD NDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpVV3hfMm9LU3ZZR0J2T3ow STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybVJocUxyelVXeF8yb0tTdllHQnZPejBJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Ni9FRkYyQTBBMDFDNDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpV V3hfMm9LU3ZZR0J2T3owSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADQnMhgXu+aHZ1MV6hd91heogBYUGbGqBIslOf+T3U2muaUFwQo34Z0kZgWIn JHCsJXv7W944aqFQXQb7/7kpx0HYK/ghWMFlLPAkYd183myllsozGreTEzaaALIs Mf1SUsab5vJ6kyO2sC8kIhZtpUfHXXxoGtL/l1uTgh1NB0xGgpRF4oZPyLDUpj/U 54YSj7nSXkW7tdZRdIps1Dl3o/fWBLPqWbmh46TyyC+K+jZOiqOsg7mRY0/nhrVu 1y5MEt8wRYla7xrbnljY5lXsmuZe+BxNkDhldk4hCs72KCuQ4jxKgCbRcxZ06LEf gP4hGYnNMhBZuKdIbA/Y+zq6DA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:44:10 2026 by rpki-client