$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft File: xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft (raw, json) Hash identifier: sMA8hfB2KHMuearuuEBLlAyXW+3lFz7X+kCIhTutWjM= Subject key identifier: B6:B9:F5:48:12:3A:4F:D8:A7:36:9E:F9:03:B9:10:44:46:9D:33:A3 Authority key identifier: C6:53:EF:77:B1:9D:10:8C:F5:C5:9A:E1:80:1F:02:00:3A:B5:5E:ED Certificate issuer: /CN=A91EBFAE/serialNumber=C653EF77B19D108CF5C59AE1801F02003AB55EED Certificate serial: 25E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft Manifest number: 25E2 Signing time: Wed 22 Jul 2026 14:33:43 +0000 Manifest this update: Wed 22 Jul 2026 14:33:42 +0000 Manifest next update: Wed 29 Jul 2026 14:33:42 +0000 Files and hashes: 1: xlPvd7GdEIz1xZrhgB8CADq1Xu0.crl (hash: fIKl3GZ5lZcaFM8NAca6maccYcwjSz5+hdcUu6dTPUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9698 (0x25e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=C653EF77B19D108CF5C59AE1801F02003AB55EED Validity Not Before: Jul 22 14:33:42 2026 GMT Not After : Jul 29 14:33:42 2026 GMT Subject: CN=6a60d4c6-2e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:09:1d:25:60:f3:c7:f6:01:24:a5:2c:8c: 1f:e9:d8:9a:e2:97:66:79:fa:97:d8:fb:a8:0d:9c: fc:7d:bb:95:3b:e7:35:5d:d6:76:99:87:eb:37:c8: 4c:f7:ae:cd:6c:e0:20:6d:f4:33:0f:8b:97:f2:99: 1a:25:5a:7b:70:84:12:aa:18:e4:8e:55:5c:6c:99: 04:b4:f7:75:61:25:59:e2:f6:64:20:d4:18:3f:b4: e3:01:27:1f:01:f3:ae:85:3e:ec:a2:f8:00:09:5d: 48:48:0c:a5:5f:09:77:92:f0:c8:44:d4:9f:3f:14: 3d:2e:61:7d:cc:92:e6:e2:41:d6:56:83:71:b5:44: 60:72:ff:ed:7e:6a:14:e6:6a:1f:9b:33:10:55:d0: 3b:25:b9:f9:90:37:5c:2d:48:1b:3f:21:fb:12:ec: 91:33:47:7b:c5:ed:4b:b0:dd:fd:ce:a3:03:18:5b: 1d:69:8c:9d:70:c0:50:3c:d7:f9:8e:7c:a6:47:31: 48:a1:72:d8:8a:9c:80:94:75:e4:32:4a:bb:64:cf: 47:94:44:19:06:53:fc:6d:da:85:48:51:7f:da:e8: 85:fe:84:e4:59:39:05:91:9d:7a:c1:b0:1d:b2:80: 3b:e8:ea:1a:6d:3d:4d:ce:8a:05:2b:71:cf:0a:10: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B9:F5:48:12:3A:4F:D8:A7:36:9E:F9:03:B9:10:44:46:9D:33:A3 X509v3 Authority Key Identifier: keyid:C6:53:EF:77:B1:9D:10:8C:F5:C5:9A:E1:80:1F:02:00:3A:B5:5E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:eb:a4:fd:e7:6c:bc:19:83:d5:b4:4b:27:e0:05:76:67:48: 1f:a0:80:38:6e:e0:fa:0b:87:3c:c1:38:07:35:39:53:93:7d: 2c:a9:63:0c:52:5c:f5:c2:bf:6b:2a:29:cc:32:8b:da:34:7c: fe:82:84:04:c2:39:fd:77:bc:61:0d:a4:13:b9:8c:a0:98:23: 1e:d9:18:1f:3f:9d:4d:aa:33:0e:2f:18:5b:cb:ea:93:13:09: 29:9d:d5:50:f7:d0:a8:d2:02:cb:ef:49:44:28:90:9b:e5:ab: 72:7b:81:24:cd:75:54:00:2f:9f:71:3a:f3:5e:b2:a9:69:82: 48:bb:6e:bd:fb:a4:7b:36:e3:a6:e6:d5:44:fc:08:2a:9e:d2: 69:76:c6:b4:9e:ad:70:4e:4e:55:0f:ae:94:b5:a4:8c:16:e3: 14:1f:18:99:76:bc:4c:02:91:05:3d:34:6c:a2:cd:42:f7:74: e5:fa:0a:23:23:31:7c:02:87:ee:46:72:8f:31:cc:be:ba:9e: f5:ca:d9:55:db:7e:71:1f:cf:24:c6:a4:c0:c3:c9:0f:59:5d: 06:61:d2:40:a9:13:4e:79:68:0e:c6:34:9f:9f:4f:ce:2e:06: eb:95:b4:8c:d6:7a:08:c2:1e:1e:af:3f:47:39:42:ab:e3:7a: cc:77:32:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKEM2NTNFRjc3QjE5RDEwOENGNUM1OUFFMTgwMUYwMjAw M0FCNTVFRUQwHhcNMjYwNzIyMTQzMzQyWhcNMjYwNzI5MTQzMzQyWjAYMRYwFAYD VQQDEw02YTYwZDRjNi0yZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz78JHSVg88f2ASSlLIwf6dia4pdmefqX2PuoDZz8fbuVO+c1XdZ2mYfrN8hM 967NbOAgbfQzD4uX8pkaJVp7cIQSqhjkjlVcbJkEtPd1YSVZ4vZkINQYP7TjAScf AfOuhT7sovgACV1ISAylXwl3kvDIRNSfPxQ9LmF9zJLm4kHWVoNxtURgcv/tfmoU 5mofmzMQVdA7Jbn5kDdcLUgbPyH7EuyRM0d7xe1LsN39zqMDGFsdaYydcMBQPNf5 jnymRzFIoXLYipyAlHXkMkq7ZM9HlEQZBlP8bdqFSFF/2uiF/oTkWTkFkZ16wbAd soA76OoabT1NzooFK3HPChDDRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLa59UgS Ok/Ypzae+QO5EERGnTOjMB8GA1UdIwQYMBaAFMZT73exnRCM9cWa4YAfAgA6tV7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS9FRDMyNDQwQTI5 MDkxMUU1OTNCRkM2MjZDNEY5QUUwMi94bFB2ZDdHZEVJejF4WnJoZ0I4Q0FEcTFY dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hsUHZkN0dkRUl6MXhacmhnQjhDQURxMVh1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS9FRDMyNDQwQTI5MDkxMUU1OTNCRkM2MjZDNEY5QUUwMi94bFB2ZDdHZEVJ ejF4WnJoZ0I4Q0FEcTFYdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATeuk/edsvBmD1bRLJ+AFdmdIH6CAOG7g+guHPME4BzU5U5N9LKljDFJc9cK/ ayopzDKL2jR8/oKEBMI5/Xe8YQ2kE7mMoJgjHtkYHz+dTaozDi8YW8vqkxMJKZ3V UPfQqNICy+9JRCiQm+WrcnuBJM11VAAvn3E6816yqWmCSLtuvfukezbjpubVRPwI Kp7SaXbGtJ6tcE5OVQ+ulLWkjBbjFB8YmXa8TAKRBT00bKLNQvd05foKIyMxfAKH 7kZyjzHMvrqe9crZVdt+cR/PJMakwMPJD1ldBmHSQKkTTnloDsY0n59Pzi4G65W0 jNZ6CMIeHq8/RzlCq+N6zHcywQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:29:48 2026 by rpki-client