$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft File: CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft (raw, json) Hash identifier: JEjE9YvrHc09EYQFYLkSH9tkQzTojXDGu4nJhdroti0= Subject key identifier: 3B:E8:1F:CE:FC:38:6D:24:5A:4F:5B:5D:E0:14:16:90:17:B2:1D:F1 Authority key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F Certificate issuer: /CN=A91EA23A/serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft Manifest number: 24 Signing time: Thu 23 Jul 2026 10:59:01 +0000 Manifest this update: Thu 23 Jul 2026 10:59:00 +0000 Manifest next update: Thu 30 Jul 2026 10:59:00 +0000 Files and hashes: 1: CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl (hash: UH80C2M24szmb5CxkXZBVBkuli54xwGCqhFQZtM2UTA=) 2: 65735378631411F1A1ABE5607D47A888.roa (hash: mA7bAbno8eCxBFSHk2mZ7wRMpGBwQ5uNOFxGCcgIxe4=) 3: A08CACAC631411F19BD88A887D47A888.roa (hash: cui5kt/ao4ZSMnSmpM+vFQ/6IaNn7ud21wvDYaj2E2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Validity Not Before: Jul 23 10:59:00 2026 GMT Not After : Jul 30 10:59:00 2026 GMT Subject: CN=6a61f3f5-e2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:f9:28:2e:da:55:f4:93:8d:9d:eb:c7:9b: 17:e5:52:a3:79:0c:a1:d5:aa:7d:a6:68:d0:ba:01: 42:53:54:fd:96:a3:29:fe:3e:32:e1:52:3e:e3:36: 71:32:28:bb:cb:12:58:2b:8c:9d:ec:4d:4f:b4:e3: 4c:67:06:39:a2:36:be:33:79:a7:86:79:b5:b5:ed: 29:e1:50:f3:a3:7c:9e:6a:01:e2:a1:75:e9:3c:71: b1:06:7a:21:59:47:db:ce:33:ad:dc:6d:c3:50:27: 87:9b:7b:80:e2:30:fe:22:35:88:e4:73:2e:7c:40: e4:5d:46:9a:63:d3:81:0e:9f:ce:78:b4:5e:64:af: 4f:cd:91:f3:e4:7b:1a:bd:56:84:77:ac:67:7c:97: a1:63:03:90:da:96:59:df:e5:b4:c5:a3:1c:3e:d9: cc:b1:91:76:19:69:2f:e9:9d:1e:8d:e3:ea:a5:3a: b1:97:cb:f2:ec:e0:50:60:fe:97:1d:28:83:da:d0: 81:21:39:e8:fa:21:da:19:4f:a1:72:bf:72:4d:1c: 44:0c:05:db:0f:82:1a:a9:9e:ef:d6:5a:8c:de:de: a9:cc:4e:fc:68:49:dd:ca:73:63:fc:23:c0:81:22: 34:6f:9f:fc:70:fa:59:19:e2:fb:bb:99:3e:e0:dc: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E8:1F:CE:FC:38:6D:24:5A:4F:5B:5D:E0:14:16:90:17:B2:1D:F1 X509v3 Authority Key Identifier: keyid:0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:db:4e:eb:bb:34:cc:18:61:61:80:3e:59:8a:f8:5c:8a:69: d6:ba:62:19:bb:56:e2:7c:07:56:a4:6b:2c:f6:10:b2:65:9a: 5b:20:40:e6:ef:23:b6:a5:c7:41:78:96:6f:76:6c:ac:6b:7d: 7d:72:18:6f:58:2d:e1:87:3c:b8:ce:ea:8b:ad:62:95:2d:b5: 5f:34:35:f3:0a:d0:d5:6d:34:5d:a1:89:02:99:87:12:3b:56: d1:51:6e:90:f3:a1:6a:cd:17:68:7d:3d:77:bf:0f:4c:43:a9: 69:d1:95:bb:97:de:c9:91:c3:dc:f9:4a:d2:f2:5d:1f:38:1a: 90:4a:ab:6c:c1:6e:5e:93:7e:b3:dc:70:a0:e9:09:d1:ac:da: f7:3a:db:cf:66:5e:86:91:80:e7:6b:a2:54:eb:aa:78:02:76: 97:f1:c1:84:3a:74:6b:dc:63:ac:e8:89:a7:44:24:10:a3:e0: 6f:7d:d8:78:27:aa:70:94:ac:69:17:45:ca:3b:06:ec:bf:61: 6b:74:71:7c:df:95:23:0f:9b:b5:a4:ac:67:c0:f0:b3:68:b5: 0c:0f:89:dd:9f:2c:af:aa:b5:a5:1e:31:39:ce:e4:67:4e:d9: ca:ed:22:ea:be:32:49:63:92:24:43:7f:75:80:b9:e5:19:45: 68:5b:44:0c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTIzQTExMC8GA1UEBRMoMEEyNUQxRjMyMUU1MEEwQkNBQzdDMUQwN0YzMTkzOTdB MzkxMDEzRjAeFw0yNjA3MjMxMDU5MDBaFw0yNjA3MzAxMDU5MDBaMBgxFjAUBgNV BAMTDTZhNjFmM2Y1LWUyYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrqfkoLtpV9JONnevHmxflUqN5DKHVqn2maNC6AUJTVP2Woyn+PjLhUj7jNnEy KLvLElgrjJ3sTU+040xnBjmiNr4zeaeGebW17SnhUPOjfJ5qAeKhdek8cbEGeiFZ R9vOM63cbcNQJ4ebe4DiMP4iNYjkcy58QORdRppj04EOn854tF5kr0/NkfPkexq9 VoR3rGd8l6FjA5Dallnf5bTFoxw+2cyxkXYZaS/pnR6N4+qlOrGXy/Ls4FBg/pcd KIPa0IEhOej6IdoZT6Fyv3JNHEQMBdsPghqpnu/WWoze3qnMTvxoSd3Kc2P8I8CB IjRvn/xw+lkZ4vu7mT7g3IBpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO+gfzvw4 bSRaT1td4BQWkBeyHfEwHwYDVR0jBBgwFoAUCiXR8yHlCgvKx8HQfzGTl6ORAT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMjNBLzhENTlBMkU0NTgy MzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2S3g4SFFmekdUbDZPUkFU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lYUjh5SGxDZ3ZLeDhIUWZ6R1RsNk9SQVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MjNBLzhENTlBMkU0NTgyMzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2 S3g4SFFmekdUbDZPUkFUOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCV207ruzTMGGFhgD5ZivhcimnWumIZu1bifAdWpGss9hCyZZpbIEDm7yO2pcdB eJZvdmysa319chhvWC3hhzy4zuqLrWKVLbVfNDXzCtDVbTRdoYkCmYcSO1bRUW6Q 86FqzRdofT13vw9MQ6lp0ZW7l97JkcPc+UrS8l0fOBqQSqtswW5ek36z3HCg6QnR rNr3OtvPZl6GkYDna6JU66p4AnaX8cGEOnRr3GOs6ImnRCQQo+Bvfdh4J6pwlKxp F0XKOwbsv2FrdHF835UjD5u1pKxnwPCzaLUMD4ndnyyvqrWlHjE5zuRnTtnK7SLq vjJJY5IkQ391gLnlGUVoW0QM -----END CERTIFICATE-----Generated at Fri Jul 24 00:55:00 2026 by rpki-client