$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft File: XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft (raw, json) Hash identifier: jOvJmWQCnw7Q47S4giCw4P2E24VGd2qY7YGpxHnrYB4= Subject key identifier: 9D:64:53:0A:4C:68:9F:86:6F:60:EB:D3:51:CF:32:E4:3B:6B:19:53 Authority key identifier: 5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 Certificate issuer: /CN=A91E7B89/serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft Manifest number: 74 Signing time: Thu 23 Jul 2026 09:47:37 +0000 Manifest this update: Thu 23 Jul 2026 09:47:36 +0000 Manifest next update: Thu 30 Jul 2026 09:47:36 +0000 Files and hashes: 1: XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl (hash: aTU9mTh5ghg47gJs5xOMcMbUOt2kr+nQHQiF3OSHtbE=) 2: 1BD6E18E1D1A11F1B8E79D60103D8C67.roa (hash: rrytxPSd1VoT8yzZHF5nlkUhFP1WWEaU2+XamxIi/z8=) 3: 1C61CBFA1D1A11F1B8E79D60103D8C67.roa (hash: a189GeZn/qoKIWbLCd3ZJZBVaZ36ji3gpESDwYzEX9s=) 4: 72480DC0D9A111F0989DD75268D3641D.roa (hash: 254YjhyMn8TcecNMQW2J/rfKDC3ffHZAOD2O4s1Qu3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7B89, serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Validity Not Before: Jul 23 09:47:36 2026 GMT Not After : Jul 30 09:47:36 2026 GMT Subject: CN=6a61e339-3f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:b2:cb:79:5e:06:9d:1c:54:8b:37:18:64: 2f:2d:29:ae:36:ff:91:dd:53:be:c5:42:44:61:e8: f9:2f:cd:59:30:2a:86:31:84:21:c7:64:b9:6f:5b: 83:3f:b0:93:8b:10:41:4b:50:62:d5:98:61:a9:ea: b3:f0:0c:cc:b7:fd:8c:ad:1f:7b:c7:95:12:4c:27: a1:6f:6f:d2:6f:5f:3b:09:95:81:4c:2e:24:b3:87: 2e:d3:44:57:fb:38:5b:bd:64:82:cc:d3:3d:8b:95: 03:6c:aa:29:23:c8:55:14:10:91:ca:9e:f3:7e:1b: 55:3d:e4:e9:00:26:d9:4b:ed:32:93:03:ea:ac:49: f0:b8:9e:02:98:3c:d5:67:51:eb:1c:c3:a6:82:04: d0:87:18:92:a3:05:d2:67:0f:2b:29:b0:bd:f2:b0: 4a:10:11:b6:af:f1:64:74:a1:7f:ab:9e:c1:16:6f: 2f:cd:d0:30:b3:b3:7a:89:ae:24:51:8a:b3:02:89: ec:a1:74:96:fd:d0:d3:85:8b:e0:cf:7f:d1:58:20: ea:6b:31:5c:59:8e:fd:73:85:66:81:72:9a:ad:9f: 40:c0:ce:74:e5:47:45:73:43:69:0c:d4:84:49:c0: c7:32:75:06:c7:a0:ff:0e:f6:6d:84:ed:ec:4f:fb: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:64:53:0A:4C:68:9F:86:6F:60:EB:D3:51:CF:32:E4:3B:6B:19:53 X509v3 Authority Key Identifier: keyid:5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:0a:bf:69:5e:d9:a0:a3:71:01:7e:00:b9:dc:a2:17:ff:d3: 89:31:8d:68:f5:26:d0:4b:49:14:27:51:43:27:57:a8:94:55: 0c:52:90:79:6b:c6:0b:35:46:39:39:0a:3b:a8:07:ed:49:da: 7f:f4:c5:2a:dd:0b:ac:ab:a6:d7:16:91:d4:04:0f:38:e7:90: ea:3b:e2:ff:71:7c:a0:77:84:e4:45:51:af:d7:39:b4:57:75: ef:eb:ee:5f:be:79:14:3c:f0:69:4c:7d:f3:d7:dc:ea:98:e6: be:2b:5b:45:7e:82:ac:16:e9:46:34:a1:86:07:d2:60:17:d2: f3:0c:7c:29:5b:28:37:d4:d0:34:1a:7a:9f:27:8b:2d:29:62: 2b:84:7f:d5:0a:56:d7:91:ef:81:97:2f:69:4b:59:7c:ac:cb: f1:ed:37:f2:d2:38:1e:20:3b:2b:3b:12:22:4a:72:70:92:22: 9d:57:6d:cc:9e:be:b8:2f:9c:6e:7a:31:9a:65:cc:2e:52:6c: 70:d9:10:b8:9b:16:8e:44:ed:40:b4:63:7a:5b:c8:7c:57:4a: 07:e0:2f:69:53:a9:9c:29:a2:d9:f6:c2:53:0f:e7:f8:12:da: 1a:ac:6f:91:ba:ab:95:1b:59:a0:1d:bf:25:13:0d:9d:f8:96: 1c:0f:e1:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0I4OTExMC8GA1UEBRMoNUU3ODY0MkIwM0NDMzdFMjZGRDQxNUU3RDc2MUJFNDg0 NzM2QzU2NjAeFw0yNjA3MjMwOTQ3MzZaFw0yNjA3MzAwOTQ3MzZaMBgxFjAUBgNV BAMTDTZhNjFlMzM5LTNmNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0kLLLeV4GnRxUizcYZC8tKa42/5HdU77FQkRh6PkvzVkwKoYxhCHHZLlvW4M/ sJOLEEFLUGLVmGGp6rPwDMy3/YytH3vHlRJMJ6Fvb9JvXzsJlYFMLiSzhy7TRFf7 OFu9ZILM0z2LlQNsqikjyFUUEJHKnvN+G1U95OkAJtlL7TKTA+qsSfC4ngKYPNVn Uescw6aCBNCHGJKjBdJnDyspsL3ysEoQEbav8WR0oX+rnsEWby/N0DCzs3qJriRR irMCieyhdJb90NOFi+DPf9FYIOprMVxZjv1zhWaBcpqtn0DAznTlR0VzQ2kM1IRJ wMcydQbHoP8O9m2E7exP+6H3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnWRTCkxo n4ZvYOvTUc8y5DtrGVMwHwYDVR0jBBgwFoAUXnhkKwPMN+Jv1BXn12G+SEc2xWYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3Qjg5LzQxQkU0RjQ0RDlB MDExRjA5MzEzMEUwNzY4RDM2NDFEL1huaGtLd1BNTi1KdjFCWG4xMkctU0VjMnhX WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWG5oa0t3UE1OLUp2MUJYbjEyRy1TRWMyeFdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 Qjg5LzQxQkU0RjQ0RDlBMDExRjA5MzEzMEUwNzY4RDM2NDFEL1huaGtLd1BNTi1K djFCWG4xMkctU0VjMnhXWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDdCr9pXtmgo3EBfgC53KIX/9OJMY1o9SbQS0kUJ1FDJ1eolFUMUpB5a8YLNUY5 OQo7qAftSdp/9MUq3Qusq6bXFpHUBA8455DqO+L/cXygd4TkRVGv1zm0V3Xv6+5f vnkUPPBpTH3z19zqmOa+K1tFfoKsFulGNKGGB9JgF9LzDHwpWyg31NA0GnqfJ4st KWIrhH/VClbXke+Bly9pS1l8rMvx7Tfy0jgeIDsrOxIiSnJwkiKdV23Mnr64L5xu ejGaZcwuUmxw2RC4mxaORO1AtGN6W8h8V0oH4C9pU6mcKaLZ9sJTD+f4EtoarG+R uquVG1mgHb8lEw2d+JYcD+EW -----END CERTIFICATE-----Generated at Fri Jul 24 21:30:57 2026 by rpki-client