$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: yl7Q8ENca52rOfy8cfAE50Tcr4+VZ05dVIcxnaknpEk= Subject key identifier: 08:41:DE:CF:1C:89:25:E1:9D:A9:FC:26:17:DC:DA:77:B2:EC:EC:9B Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: 0133 Signing time: Thu 23 Jul 2026 06:07:52 +0000 Manifest this update: Thu 23 Jul 2026 06:07:52 +0000 Manifest next update: Thu 30 Jul 2026 06:07:52 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: XB4Wsvk6pXEByckoFNi0u/EYBHs100TTjemgnBFXVlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Jul 23 06:07:52 2026 GMT Not After : Jul 30 06:07:52 2026 GMT Subject: CN=6a61afb8-ccab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:f9:26:ac:92:25:33:39:88:fd:db:dc:64: 71:52:7f:ee:b7:85:c3:a7:48:17:94:eb:f2:00:fa: be:3b:b4:8f:61:36:06:d9:4a:32:44:23:d1:cf:03: 12:7a:8c:54:ec:92:17:ba:f7:25:f5:ef:ab:8d:67: f6:db:cf:3b:a1:a9:c7:fd:fe:3d:f1:23:cb:33:b9: 72:cb:ea:8e:0a:db:de:d6:12:5b:a1:8d:2a:c9:12: b0:ba:6b:d1:69:ca:2d:64:cd:37:5a:b2:b8:d1:ff: a1:13:53:90:47:98:4e:e8:c1:36:b2:6d:66:ab:04: 8e:68:56:72:c2:4d:a8:01:4d:35:98:92:49:4b:0b: 8d:1c:cc:15:36:96:8d:c0:c8:f8:3b:ce:55:3b:2e: 65:28:99:42:97:1c:9a:b0:8a:07:d6:3e:99:13:3e: b4:5e:6c:e0:a7:d9:5a:80:e3:d2:a2:5d:47:67:e5: 4a:72:53:cd:2c:20:fa:3d:22:e4:de:54:32:15:e0: f3:e3:38:85:e8:3d:53:b6:7e:d4:be:ad:89:ee:d6: 79:da:43:34:be:4f:c6:da:7d:8b:ff:d4:4c:1c:ec: c4:28:3f:ec:04:4d:a4:fa:72:da:10:05:dc:0b:91: f5:94:79:bc:f1:61:ab:e4:f7:94:42:47:22:45:be: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:41:DE:CF:1C:89:25:E1:9D:A9:FC:26:17:DC:DA:77:B2:EC:EC:9B X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d6:55:78:c8:08:52:a0:bf:1a:f5:f9:cd:1b:e2:c7:29:4b: ac:45:7d:d2:ac:16:9e:0e:7b:66:45:b3:b0:07:2d:c6:63:4d: 48:39:68:45:82:b0:aa:7b:78:6b:bf:c2:17:d0:01:a2:2b:4f: a1:19:c2:9a:2e:30:e6:2a:ca:73:36:d3:91:03:06:79:71:aa: 26:2f:2e:59:c1:34:7e:10:e4:c0:43:92:a6:7e:02:2e:d4:00: b0:eb:07:7c:ce:13:c0:05:8c:e9:ab:0e:a2:0a:3e:b5:71:a9: ac:b4:c0:51:04:58:c0:6f:e3:54:a0:05:09:35:c2:0b:67:ce: da:d6:3e:dd:87:85:19:23:14:36:1b:e0:30:e4:d6:b3:9a:55: a5:5c:3c:ae:f0:b0:ab:90:0d:58:fe:5d:3d:36:de:dc:c4:26: 64:55:fe:0b:fb:cf:a3:1e:46:63:73:c7:7c:5b:d1:63:86:dd: a0:37:5c:f4:38:95:eb:47:e4:4d:7d:68:9d:41:41:a9:2b:c7: f3:b7:98:b4:71:3a:cd:71:4c:a0:90:78:8e:d2:de:50:22:42: 44:df:bb:95:65:42:15:cf:25:08:a8:45:3d:8e:f7:02:cf:da: 41:4a:42:8b:25:02:a3:1c:2c:41:b3:aa:74:07:65:5e:8d:f6: 0e:5b:5b:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKDVFRjVFMUE1ODVDNDhFMkJDNDUwQkE3MkY0QzMxMzQ2 ODBFNTJCMEQwHhcNMjYwNzIzMDYwNzUyWhcNMjYwNzMwMDYwNzUyWjAYMRYwFAYD VQQDEw02YTYxYWZiOC1jY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsur5JqySJTM5iP3b3GRxUn/ut4XDp0gXlOvyAPq+O7SPYTYG2UoyRCPRzwMS eoxU7JIXuvcl9e+rjWf22887oanH/f498SPLM7lyy+qOCtve1hJboY0qyRKwumvR acotZM03WrK40f+hE1OQR5hO6ME2sm1mqwSOaFZywk2oAU01mJJJSwuNHMwVNpaN wMj4O85VOy5lKJlClxyasIoH1j6ZEz60Xmzgp9lagOPSol1HZ+VKclPNLCD6PSLk 3lQyFeDz4ziF6D1Ttn7Uvq2J7tZ52kM0vk/G2n2L/9RMHOzEKD/sBE2k+nLaEAXc C5H1lHm88WGr5PeUQkciRb5u2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhB3s8c iSXhnan8Jhfc2ney7OybMB8GA1UdIwQYMBaAFF714aWFxI4rxFC6cvTDE0aA5SsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS9FMUFFNTQ3Q0Ix MzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWppdkVVTHB5OU1NVFJvRGxL dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS9FMUFFNTQ3Q0IxMzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWpp dkVVTHB5OU1NVFJvRGxLdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAodZVeMgIUqC/GvX5zRvixylLrEV90qwWng57ZkWzsActxmNNSDloRYKwqnt4 a7/CF9ABoitPoRnCmi4w5irKczbTkQMGeXGqJi8uWcE0fhDkwEOSpn4CLtQAsOsH fM4TwAWM6asOogo+tXGprLTAUQRYwG/jVKAFCTXCC2fO2tY+3YeFGSMUNhvgMOTW s5pVpVw8rvCwq5ANWP5dPTbe3MQmZFX+C/vPox5GY3PHfFvRY4bdoDdc9DiV60fk TX1onUFBqSvH87eYtHE6zXFMoJB4jtLeUCJCRN+7lWVCFc8lCKhFPY73As/aQUpC iyUCoxwsQbOqdAdlXo32DltbzA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:59:37 2026 by rpki-client