$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: rxiUOyRMEa5TkIaITdH5ueuf1A6KTPFx7gvaEuTWt7Q= Subject key identifier: 0A:F1:B8:A0:1B:57:E3:4E:CC:49:B1:F4:31:45:88:8B:AC:D8:15:11 Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 0944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 093B Signing time: Wed 22 Jul 2026 20:39:06 +0000 Manifest this update: Wed 22 Jul 2026 20:39:05 +0000 Manifest next update: Wed 29 Jul 2026 20:39:05 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: bQM/XMBfMJ32+mI/GJ7kUlrPo/HKruAUr6CfVaQqEpg=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: cUXww9pLUmzXMLoFEIgXrShzexTLcuKYoU1Hg9CwYj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2372 (0x944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Jul 22 20:39:05 2026 GMT Not After : Jul 29 20:39:05 2026 GMT Subject: CN=6a612a6a-77b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:eb:06:9d:7d:25:30:52:5b:48:eb:fb:f1: c3:af:37:4c:68:c2:d9:6a:44:55:75:eb:1a:d5:3c: 86:d3:d0:b6:5e:a8:59:ab:6f:4e:e1:16:76:53:d9: 30:a6:09:27:ea:0f:1a:f4:01:c8:e1:87:91:57:74: d5:6b:17:86:00:c7:5e:6e:b6:98:a9:2c:60:cd:24: a7:be:d3:ca:93:4a:2d:d1:e0:8a:a3:8a:eb:d4:66: 40:d0:74:9d:a1:9c:29:5f:c4:4c:25:91:89:4c:a2: 83:98:0a:43:1e:bc:b4:45:e9:f9:48:6f:08:6a:ef: 78:87:32:d5:d5:05:56:b8:b6:c9:94:51:78:2d:85: 45:03:fd:e0:29:cc:5b:8c:69:0a:ae:de:53:7b:fb: d6:19:af:1b:0f:8e:70:51:ab:5b:d4:54:50:da:3a: 5c:fe:00:5a:06:e9:3a:5c:63:43:cf:3d:5c:fa:f8: 94:92:64:49:f9:85:3e:53:12:15:eb:a0:1c:47:f5: e9:99:6b:a9:c9:d7:46:89:60:fc:49:d1:52:33:01: c5:f9:1a:6b:1d:43:d6:46:f5:cc:56:3d:d2:d9:74: 47:b1:23:de:c3:0c:8c:07:c7:d1:be:76:b6:5e:c3: 58:67:6f:ed:83:14:03:6f:d6:d8:68:a8:28:ac:0c: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F1:B8:A0:1B:57:E3:4E:CC:49:B1:F4:31:45:88:8B:AC:D8:15:11 X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:2f:b6:08:28:c2:b5:2d:21:f5:5b:d6:f1:c7:b8:3d:22:0d: bc:8a:1a:10:3d:2d:5f:96:59:14:bb:2c:4f:25:81:fd:a3:bf: 80:15:da:3d:ec:3f:4d:96:53:d0:68:fd:8a:83:fe:a1:d3:3e: 1e:a2:f9:0e:c8:92:39:e7:0a:da:5e:34:ad:a9:c1:33:cc:fa: d2:a5:51:be:04:ac:ed:db:97:be:c1:83:dd:8a:b7:4d:c4:22: 6b:bb:d5:31:79:d4:c0:ce:78:7e:90:bc:ad:80:83:e9:ab:0b: 94:2b:71:6d:5e:d3:1e:2a:f7:0f:18:be:5c:5a:d2:21:54:36: 56:5a:06:d0:05:95:61:38:9d:de:d0:4b:b4:f2:f4:14:77:b9: ff:a3:60:b5:c7:d5:83:60:49:c4:5b:9b:7a:0e:fe:98:f3:26: 7d:6f:e5:43:f1:1f:eb:7b:29:a6:fb:31:d7:fa:84:53:da:9f: 9f:5b:21:7f:08:df:d8:5e:15:ed:05:7f:e3:1a:c0:36:45:ff: e7:cd:57:52:7a:b8:73:7e:8a:50:99:83:9a:ad:bb:95:d2:4d: a9:33:26:d3:ce:96:56:a1:b7:85:95:6d:7a:a1:eb:7c:06:39: 4e:b9:b5:bd:67:f4:cd:b0:ef:9d:87:11:20:04:d5:40:60:fd: 22:bb:11:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjYwNzIyMjAzOTA1WhcNMjYwNzI5MjAzOTA1WjAYMRYwFAYD VQQDEw02YTYxMmE2YS03N2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjLrBp19JTBSW0jr+/HDrzdMaMLZakRVdesa1TyG09C2XqhZq29O4RZ2U9kw pgkn6g8a9AHI4YeRV3TVaxeGAMdebraYqSxgzSSnvtPKk0ot0eCKo4rr1GZA0HSd oZwpX8RMJZGJTKKDmApDHry0Ren5SG8Iau94hzLV1QVWuLbJlFF4LYVFA/3gKcxb jGkKrt5Te/vWGa8bD45wUatb1FRQ2jpc/gBaBuk6XGNDzz1c+viUkmRJ+YU+UxIV 66AcR/XpmWupyddGiWD8SdFSMwHF+RprHUPWRvXMVj3S2XRHsSPewwyMB8fRvna2 XsNYZ2/tgxQDb9bYaKgorAxVrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArxuKAb V+NOzEmx9DFFiIus2BURMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaC+2CCjCtS0h9VvW8ce4PSINvIoaED0tX5ZZFLssTyWB/aO/gBXaPew/TZZT 0Gj9ioP+odM+HqL5DsiSOecK2l40ranBM8z60qVRvgSs7duXvsGD3Yq3TcQia7vV MXnUwM54fpC8rYCD6asLlCtxbV7THir3Dxi+XFrSIVQ2VloG0AWVYTid3tBLtPL0 FHe5/6NgtcfVg2BJxFubeg7+mPMmfW/lQ/Ef63sppvsx1/qEU9qfn1shfwjf2F4V 7QV/4xrANkX/581XUnq4c36KUJmDmq27ldJNqTMm086WVqG3hZVteqHrfAY5Trm1 vWf0zbDvnYcRIATVQGD9IrsR0g== -----END CERTIFICATE-----Generated at Fri Jul 24 17:09:09 2026 by rpki-client