$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: wZxGMP4u787HM8kDznxViRwOk6pj9LEqXN/1zh5tF+E= Subject key identifier: 9C:A2:A0:BC:84:3A:31:94:F5:64:A1:E3:54:3F:F9:7F:1C:64:AB:56 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 0189 Signing time: Thu 23 Jul 2026 05:58:21 +0000 Manifest this update: Thu 23 Jul 2026 05:58:21 +0000 Manifest next update: Thu 30 Jul 2026 05:58:21 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: QJjqydhCcCQvzotXQ8r4lR2lg9UnVFxyO2X5U/c2MZA=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Jul 23 05:58:21 2026 GMT Not After : Jul 30 05:58:21 2026 GMT Subject: CN=6a61ad7d-ebd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:57:6c:34:46:77:8c:1d:43:e3:bb:df:18: 12:cc:fc:d4:16:f3:eb:86:78:ae:70:ce:dd:32:9b: d0:cd:e0:d9:64:01:91:fc:75:09:40:14:0e:20:e8: 16:6c:10:00:6a:c6:e0:89:61:aa:3a:71:4d:66:d9: 68:23:59:6a:af:06:d3:0b:30:b8:c9:7c:05:1e:7c: cd:40:b0:25:e4:53:b1:08:c8:85:d7:bb:a6:d3:23: e7:8e:68:29:9d:4b:fb:f0:85:9d:a3:cf:67:88:be: 85:b2:c2:ad:30:77:1e:72:66:01:ae:2b:79:13:16: 22:63:54:24:da:bb:7d:f7:98:37:8b:31:9b:9c:5b: 43:e5:a0:c4:d6:2b:81:94:0f:65:62:f2:d6:74:d0: c3:37:1d:68:82:10:bf:b9:e9:17:83:6b:04:4b:75: ac:16:9f:9e:a5:be:cd:e1:54:00:a6:1a:b8:1e:d8: 82:cd:85:79:e7:0b:fd:7c:9c:d1:2c:1c:ab:9e:c8: 0e:ad:59:cf:6d:17:13:6e:16:8b:0b:c7:60:59:0c: ea:8c:9a:2e:72:46:6d:73:ea:b4:5a:f8:91:d0:3e: 6d:ce:bd:fc:09:62:80:5d:09:d9:a9:95:96:ce:af: a3:27:32:a4:1f:82:5e:e8:65:89:c0:81:4b:10:a9: 64:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A2:A0:BC:84:3A:31:94:F5:64:A1:E3:54:3F:F9:7F:1C:64:AB:56 X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:5c:3a:de:92:b5:37:33:d1:21:e5:84:bc:48:fe:c8:f8:1c: 49:2c:e5:03:fe:2f:e7:d4:9f:a7:ea:37:3d:59:25:9d:f7:fb: 1d:c6:6c:d1:e3:e5:89:00:a2:61:e8:cf:ce:86:3e:71:6f:08: 20:94:7a:99:20:99:2e:bc:46:b1:d3:2a:70:d4:49:16:6c:85: 48:79:43:e0:03:cc:09:0a:09:54:60:02:22:46:10:46:5b:a2: 45:58:b1:21:5e:94:4c:7d:1d:58:0b:59:d8:2e:fd:4d:94:23: d9:fa:69:4d:c0:84:09:6c:c3:c5:4c:5e:50:ea:b0:09:7f:84: 72:6e:73:de:b6:24:66:8a:67:65:5d:1c:bf:8f:3b:1d:a4:30: 8a:21:48:13:75:a3:e5:42:a2:e2:ba:fd:ea:33:b5:18:55:04: 8f:ec:10:e1:5b:0b:f9:67:63:45:c5:96:9a:5f:5e:b2:d1:54: 5d:c0:09:6f:0f:2f:11:87:41:14:73:f0:1b:c8:d8:be:d8:82: 1c:59:ae:5c:ff:57:40:c4:6d:8e:c0:98:d5:62:4a:37:9d:c7: 41:40:02:9a:e8:48:66:50:72:16:1c:16:dc:9a:51:e5:23:be: 27:6a:01:e3:90:5a:5c:1c:09:99:f5:70:3b:79:3c:7f:28:b9: b7:30:7e:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjYwNzIzMDU1ODIxWhcNMjYwNzMwMDU1ODIxWjAYMRYwFAYD VQQDEw02YTYxYWQ3ZC1lYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKxXbDRGd4wdQ+O73xgSzPzUFvPrhniucM7dMpvQzeDZZAGR/HUJQBQOIOgW bBAAasbgiWGqOnFNZtloI1lqrwbTCzC4yXwFHnzNQLAl5FOxCMiF17um0yPnjmgp nUv78IWdo89niL6FssKtMHcecmYBrit5ExYiY1Qk2rt995g3izGbnFtD5aDE1iuB lA9lYvLWdNDDNx1oghC/uekXg2sES3WsFp+epb7N4VQAphq4HtiCzYV55wv9fJzR LByrnsgOrVnPbRcTbhaLC8dgWQzqjJouckZtc+q0WviR0D5tzr38CWKAXQnZqZWW zq+jJzKkH4Je6GWJwIFLEKlkDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyioLyE OjGU9WSh41Q/+X8cZKtWMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAylw63pK1NzPRIeWEvEj+yPgcSSzlA/4v59Sfp+o3PVklnff7HcZs0ePliQCi YejPzoY+cW8IIJR6mSCZLrxGsdMqcNRJFmyFSHlD4APMCQoJVGACIkYQRluiRVix IV6UTH0dWAtZ2C79TZQj2fppTcCECWzDxUxeUOqwCX+Ecm5z3rYkZopnZV0cv487 HaQwiiFIE3Wj5UKi4rr96jO1GFUEj+wQ4VsL+WdjRcWWml9estFUXcAJbw8vEYdB FHPwG8jYvtiCHFmuXP9XQMRtjsCY1WJKN53HQUACmuhIZlByFhwW3JpR5SO+J2oB 45BaXBwJmfVwO3k8fyi5tzB+EQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:29:46 2026 by rpki-client