$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft File: 6xxYjN08G9CTTu5TXHqhEm0ScoE.mft (raw, json) Hash identifier: cZ7PYrNM8z0v2AmE7RvZv5k6Mbzg8xtXzih/UwR65Vg= Subject key identifier: 44:28:70:09:71:E0:0D:41:55:1A:5E:91:EE:45:DF:49:31:09:A8:A4 Authority key identifier: EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81 Certificate issuer: /CN=A91E5988/serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft Manifest number: 16 Signing time: Thu 23 Jul 2026 11:05:50 +0000 Manifest this update: Thu 23 Jul 2026 11:05:49 +0000 Manifest next update: Thu 30 Jul 2026 11:05:49 +0000 Files and hashes: 1: 6xxYjN08G9CTTu5TXHqhEm0ScoE.crl (hash: CNJEDE2eDn4Cj1kdAmm9diBvpqyNjXmxiLuTrFs0420=) 2: 634DC83C662D11F1A5BC4310A247A888.roa (hash: Ep5nijWyMpK5/K7vEOePnlUlFj8UkDN9w696/7fsWDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5988, serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281 Validity Not Before: Jul 23 11:05:49 2026 GMT Not After : Jul 30 11:05:49 2026 GMT Subject: CN=6a61f58e-0eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:26:32:c5:3a:5b:32:59:0f:0a:f0:5d:62: a9:6f:41:84:c1:04:a4:4d:24:f2:a7:b5:18:75:32: 55:bb:a5:3d:30:f9:a9:d4:68:48:d5:a1:57:16:8d: 81:fa:11:92:2b:c4:a9:dc:fc:46:d7:06:d3:12:6a: c5:6d:95:6b:19:75:e1:76:0c:15:4c:23:a5:8c:ad: dc:09:db:e5:5a:ef:06:2d:98:56:87:0c:10:f0:0d: 06:59:aa:4a:95:33:57:94:68:82:d0:21:18:f1:9e: 55:b8:09:a8:cd:66:06:ac:f1:33:65:f7:2e:c2:22: d6:3c:22:2a:6a:e1:cc:6c:ef:ab:b2:70:0d:cc:26: 24:fa:f7:2f:e0:1c:4f:66:99:91:08:bb:ff:a0:c4: bf:8c:34:0e:8f:b4:66:62:02:11:b5:cd:2e:66:68: cf:b5:65:1f:6c:b0:41:0d:78:59:4d:9a:5d:f9:18: 0e:27:6e:bd:d3:55:e5:7e:56:7f:90:9b:07:9f:68: 5c:93:d2:83:41:cb:2d:4c:df:57:62:c0:82:6c:81: 39:a1:45:5b:a4:95:9a:88:50:5d:c5:0c:dc:2e:bb: 12:f4:8f:89:11:99:85:83:61:4f:49:36:9e:ed:7e: c5:06:38:7f:c4:be:13:20:08:fa:40:49:e6:eb:f3: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:28:70:09:71:E0:0D:41:55:1A:5E:91:EE:45:DF:49:31:09:A8:A4 X509v3 Authority Key Identifier: keyid:EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:2c:a0:05:eb:c4:dc:9b:3d:67:0f:55:d3:92:40:15:3e:14: 5b:f8:8b:95:74:4a:67:a8:c3:54:27:ff:12:6b:65:eb:fc:6a: 21:8e:02:7d:5f:f0:1f:03:1c:c1:e7:2f:bc:67:e4:c2:d3:1e: f0:18:c1:10:c9:21:e4:ea:13:e0:17:44:86:ee:05:04:4b:2a: b5:36:3c:d7:68:e0:41:03:3c:64:5e:2b:47:73:d7:78:af:73: 59:cc:ce:66:ef:bf:81:55:e5:77:e0:88:5a:56:a1:7a:cb:e5: a5:aa:da:01:f3:04:7f:6d:19:72:db:72:a8:01:57:e2:f9:6c: e9:e9:53:f7:0b:9c:de:d7:6c:98:f6:6b:34:40:3f:46:d9:bc: 8d:74:83:f4:a1:2b:32:87:89:82:68:31:4b:7f:31:74:22:fe: 10:e2:1d:da:fd:b3:ad:38:43:d7:94:01:e7:fa:98:be:cd:4a: ea:04:a1:c0:f6:52:12:5f:9a:d0:76:8a:24:28:68:1f:df:f8: 61:f3:98:38:63:78:b5:ab:f3:09:1f:67:6a:e3:0b:ab:5c:17: 38:8e:ed:ce:7a:53:64:64:f8:e8:25:55:06:d9:ef:f3:f8:fa: b8:78:63:d3:a3:90:b4:f1:2b:c9:a5:06:27:76:ce:80:22:36: 21:c4:c2:cd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTk4ODExMC8GA1UEBRMoRUIxQzU4OENERDNDMUJEMDkzNEVFRTUzNUM3QUExMTI2 RDEyNzI4MTAeFw0yNjA3MjMxMTA1NDlaFw0yNjA3MzAxMTA1NDlaMBgxFjAUBgNV BAMTDTZhNjFmNThlLTBlZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41iYyxTpbMlkPCvBdYqlvQYTBBKRNJPKntRh1MlW7pT0w+anUaEjVoVcWjYH6 EZIrxKnc/EbXBtMSasVtlWsZdeF2DBVMI6WMrdwJ2+Va7wYtmFaHDBDwDQZZqkqV M1eUaILQIRjxnlW4CajNZgas8TNl9y7CItY8Iipq4cxs76uycA3MJiT69y/gHE9m mZEIu/+gxL+MNA6PtGZiAhG1zS5maM+1ZR9ssEENeFlNml35GA4nbr3TVeV+Vn+Q mwefaFyT0oNByy1M31diwIJsgTmhRVuklZqIUF3FDNwuuxL0j4kRmYWDYU9JNp7t fsUGOH/EvhMgCPpASebr830ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURChwCXHg DUFVGl6R7kXfSTEJqKQwHwYDVR0jBBgwFoAU6xxYjN08G9CTTu5TXHqhEm0ScoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1OTg4L0FDMjA4ODdBNjYy QzExRjFCMEJBQzczQ0ExNDdBODg4LzZ4eFlqTjA4RzlDVFR1NVRYSHFoRW0wU2Nv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnh4WWpOMDhHOUNUVHU1VFhIcWhFbTBTY29FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 OTg4L0FDMjA4ODdBNjYyQzExRjFCMEJBQzczQ0ExNDdBODg4LzZ4eFlqTjA4RzlD VFR1NVRYSHFoRW0wU2NvRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4LKAF68Tcmz1nD1XTkkAVPhRb+IuVdEpnqMNUJ/8Sa2Xr/GohjgJ9X/AfAxzB 5y+8Z+TC0x7wGMEQySHk6hPgF0SG7gUESyq1NjzXaOBBAzxkXitHc9d4r3NZzM5m 77+BVeV34IhaVqF6y+WlqtoB8wR/bRly23KoAVfi+Wzp6VP3C5ze12yY9ms0QD9G 2byNdIP0oSsyh4mCaDFLfzF0Iv4Q4h3a/bOtOEPXlAHn+pi+zUrqBKHA9lISX5rQ dookKGgf3/hh85g4Y3i1q/MJH2dq4wurXBc4ju3OelNkZPjoJVUG2e/z+Pq4eGPT o5C08SvJpQYnds6AIjYhxMLN -----END CERTIFICATE-----Generated at Fri Jul 24 23:04:54 2026 by rpki-client