$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: utBBL3BtPpsY5T3rIpmH71L7WFhn1qJ6Ve0CsTddByo= Subject key identifier: 2F:60:D0:33:00:E1:31:E3:89:33:12:11:F8:BB:91:70:D0:76:BD:0C Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0AAF Signing time: Wed 22 Jul 2026 19:56:40 +0000 Manifest this update: Wed 22 Jul 2026 19:56:39 +0000 Manifest next update: Wed 29 Jul 2026 19:56:39 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: D5MxqVU3Lfy2kQuQ2+53OdVrjCUw0yyjTKZYJjhkeoM=) 2: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=) 3: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=) 4: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=) 5: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=) 6: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Jul 22 19:56:39 2026 GMT Not After : Jul 29 19:56:39 2026 GMT Subject: CN=6a612078-c1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:70:f7:c7:29:c6:90:a2:d8:43:8f:ed:99: 22:6b:53:e5:9a:27:94:93:4d:4c:43:cb:3e:88:ac: dd:76:17:5b:11:34:0c:34:cf:ad:43:c3:66:d3:f1: eb:02:44:b5:e9:b7:96:af:45:c5:eb:42:7c:77:be: 4e:2d:a5:9c:dd:46:e6:72:ac:fc:ed:be:8b:f6:fc: c8:8d:b1:11:f2:3c:7d:d8:c2:09:e2:29:f2:e9:0c: e9:51:37:fe:61:e6:7d:5d:3e:ab:93:f2:80:9b:08: bf:69:e1:bf:20:53:2d:59:32:63:da:df:04:05:d3: 4f:42:a4:0d:24:c4:83:35:ee:2e:8c:28:21:03:13: 9d:2b:3d:53:5a:4a:af:84:fb:af:93:29:7d:94:d1: 2c:03:73:65:b7:e1:05:33:fe:a2:67:2e:68:60:df: 87:d0:e3:72:f8:91:be:cc:0a:0e:83:3c:4a:c7:bc: fb:41:35:62:02:25:44:7d:09:24:79:3e:14:33:1e: b8:31:c5:b0:87:c4:b3:1c:79:6b:40:24:0b:e0:ac: 8b:7e:70:94:0a:f5:50:5e:c3:a6:68:11:a6:7d:79: 9f:30:62:7c:37:52:fc:1c:fb:8c:4c:60:a7:94:db: 80:5c:6c:53:5d:f6:43:f9:38:08:52:45:39:38:18: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:60:D0:33:00:E1:31:E3:89:33:12:11:F8:BB:91:70:D0:76:BD:0C X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d0:79:81:e0:d6:05:38:2e:9e:e5:df:10:77:5d:cb:c9:a2: 59:e2:6a:d8:16:b0:59:2e:b6:44:4f:44:ae:30:c8:d1:b6:97: 5b:43:3f:2a:8b:30:25:55:49:ae:60:22:52:38:c4:9c:e7:9b: 9f:4b:97:83:ff:ba:52:8b:ca:a6:5d:3e:67:9b:ca:63:46:75: 8c:71:12:82:ed:54:2c:f5:f2:ac:0d:88:a0:94:61:97:f5:a3: 76:04:3f:f1:84:1d:3f:c7:e5:67:5b:e3:d4:23:49:03:8c:8a: 2b:fa:ae:84:ec:35:73:da:51:51:95:d1:ec:5f:64:2b:3a:66: 6e:74:7d:a5:20:55:c5:89:72:32:5a:ff:d5:f6:8e:a1:24:d2: c1:a9:48:b8:19:0e:fc:80:b0:46:58:39:61:cf:48:9d:82:d0: 60:64:b2:ee:bb:ce:53:f2:ae:29:cc:71:bb:1c:b5:1b:ae:79: 08:4d:d2:1e:fd:f6:1b:4a:3a:db:b0:9d:0e:e5:47:4c:f2:53: c4:67:2b:9d:38:f3:f2:ee:6d:37:33:34:87:30:37:e0:6b:e7: 56:a7:2d:c7:21:a1:bc:2c:99:02:4b:e0:d7:bf:3a:a8:25:64: f1:8f:16:58:0f:8b:46:ee:d4:70:b4:71:2c:7b:ef:b8:c2:93: 39:47:06:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjYwNzIyMTk1NjM5WhcNMjYwNzI5MTk1NjM5WjAYMRYwFAYD VQQDEw02YTYxMjA3OC1jMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDVw98cpxpCi2EOP7Zkia1PlmieUk01MQ8s+iKzddhdbETQMNM+tQ8Nm0/Hr AkS16beWr0XF60J8d75OLaWc3Ubmcqz87b6L9vzIjbER8jx92MIJ4iny6QzpUTf+ YeZ9XT6rk/KAmwi/aeG/IFMtWTJj2t8EBdNPQqQNJMSDNe4ujCghAxOdKz1TWkqv hPuvkyl9lNEsA3Nlt+EFM/6iZy5oYN+H0ONy+JG+zAoOgzxKx7z7QTViAiVEfQkk eT4UMx64McWwh8SzHHlrQCQL4KyLfnCUCvVQXsOmaBGmfXmfMGJ8N1L8HPuMTGCn lNuAXGxTXfZD+TgIUkU5OBg1BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9g0DMA 4THjiTMSEfi7kXDQdr0MMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAetB5geDWBTgunuXfEHddy8miWeJq2BawWS62RE9ErjDI0baXW0M/KoswJVVJ rmAiUjjEnOebn0uXg/+6UovKpl0+Z5vKY0Z1jHESgu1ULPXyrA2IoJRhl/WjdgQ/ 8YQdP8flZ1vj1CNJA4yKK/quhOw1c9pRUZXR7F9kKzpmbnR9pSBVxYlyMlr/1faO oSTSwalIuBkO/ICwRlg5Yc9InYLQYGSy7rvOU/KuKcxxuxy1G655CE3SHv32G0o6 27CdDuVHTPJTxGcrnTjz8u5tNzM0hzA34GvnVqctxyGhvCyZAkvg1786qCVk8Y8W WA+LRu7UcLRxLHvvuMKTOUcGOQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:03:30 2026 by rpki-client