$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: r1moh0NFvFS4rCR4bcysqS+O3s3tIv9UQzJ9T2Hq7UI= Subject key identifier: C7:8B:7D:CB:3C:E7:9E:88:D3:90:C4:7A:F0:DB:AF:08:85:C7:E0:70 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 159B Signing time: Wed 22 Jul 2026 19:20:45 +0000 Manifest this update: Wed 22 Jul 2026 19:20:44 +0000 Manifest next update: Wed 29 Jul 2026 19:20:44 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: k7F9sl7Fg9tPkWyY9FY364iP7BR2Mi1fnJQAB1pYrwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Jul 22 19:20:44 2026 GMT Not After : Jul 29 19:20:44 2026 GMT Subject: CN=6a61180d-9f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f0:1b:9f:97:6d:77:46:26:7a:b4:62:93:55: 74:22:47:ea:db:d6:38:73:79:ee:a9:73:9e:1f:b7: c8:de:a4:b9:bb:9c:83:bb:75:74:86:34:a8:53:75: 1e:e1:dd:5b:ad:73:74:8a:97:6b:ee:5a:74:1e:18: 79:3f:8a:71:ce:a5:f2:92:71:5b:27:2a:b3:d8:68: 3d:04:ea:f6:56:d8:8e:17:e8:41:68:ae:98:4f:21: ba:61:f6:b1:ef:e0:ea:f2:4a:37:1d:3c:6d:00:88: 84:1e:84:57:f5:92:d4:8b:6d:21:5e:b1:77:2f:2e: 05:3f:b0:b2:91:13:83:21:1a:b1:bf:69:c9:06:bf: cf:75:a8:58:68:d5:01:a2:06:dc:77:b1:52:53:45: c4:83:2e:b2:96:20:73:09:88:05:94:92:4e:53:db: b6:4c:4f:3e:76:77:9b:11:59:bf:e3:a8:59:f9:f1: 71:5d:5f:d0:03:7c:30:ff:8b:4d:db:2b:96:40:01: be:6c:f5:ae:c9:20:cf:44:02:ae:89:c3:5b:f3:45: c1:63:31:ec:eb:cb:ee:6a:a5:e2:d4:c2:e1:85:c5: b1:62:a8:7a:47:40:3d:6d:a0:43:9f:33:5f:26:f6: 85:ed:0d:e0:49:29:b1:49:5d:92:9b:cb:b8:97:b2: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8B:7D:CB:3C:E7:9E:88:D3:90:C4:7A:F0:DB:AF:08:85:C7:E0:70 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:16:a4:a0:a5:c3:9c:b8:08:f1:e4:6a:be:c2:9e:72:47:6a: 9c:04:fd:6c:6e:63:fe:d5:31:c7:6f:61:0b:2d:6e:cb:df:58: b6:fb:6e:77:60:d3:07:c3:d6:9b:4d:ba:a7:d0:27:98:28:ae: 53:10:62:2f:ff:ec:b9:7d:dc:c6:70:af:01:30:20:4a:a8:93: 1a:e3:bb:d1:55:f8:7a:47:f7:05:f3:da:a9:22:29:da:2e:df: 77:9f:41:e2:c4:9a:b1:c5:31:78:b8:1f:2e:e1:b2:31:2f:cb: 78:0d:e9:e2:f8:72:7b:3d:b5:0d:15:ef:bd:e6:ac:2b:89:5a: 78:f7:9c:8e:9b:67:1b:71:8b:7f:82:86:0f:57:54:8c:a6:f0: 84:a9:d8:42:f1:ec:5b:1d:1d:60:f1:38:37:c3:38:f2:b6:65: c0:35:09:bc:36:fb:ed:4c:2a:2d:98:ae:04:7f:6e:57:98:8b: 0c:c7:f0:19:cc:b7:8c:47:a9:fb:39:89:35:2d:34:a2:13:eb: 6f:fa:09:97:05:e0:16:cd:16:77:75:3c:84:4d:5c:57:4f:2e: 95:cd:c4:4f:1b:16:00:24:be:e9:f3:c8:98:55:7a:92:84:c0: 22:09:07:4c:7d:48:bc:64:67:2d:8c:e9:88:99:e9:5b:67:3b: 22:59:e2:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjYwNzIyMTkyMDQ0WhcNMjYwNzI5MTkyMDQ0WjAYMRYwFAYD VQQDEw02YTYxMTgwZC05ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjfAbn5dtd0YmerRik1V0Ikfq29Y4c3nuqXOeH7fI3qS5u5yDu3V0hjSoU3Ue 4d1brXN0ipdr7lp0Hhh5P4pxzqXyknFbJyqz2Gg9BOr2VtiOF+hBaK6YTyG6Yfax 7+Dq8ko3HTxtAIiEHoRX9ZLUi20hXrF3Ly4FP7CykRODIRqxv2nJBr/PdahYaNUB ogbcd7FSU0XEgy6yliBzCYgFlJJOU9u2TE8+dnebEVm/46hZ+fFxXV/QA3ww/4tN 2yuWQAG+bPWuySDPRAKuicNb80XBYzHs68vuaqXi1MLhhcWxYqh6R0A9baBDnzNf JvaF7Q3gSSmxSV2Sm8u4l7I6dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMeLfcs8 556I05DEevDbrwiFx+BwMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHBakoKXDnLgI8eRqvsKeckdqnAT9bG5j/tUxx29hCy1uy99Ytvtud2DTB8PW m026p9AnmCiuUxBiL//suX3cxnCvATAgSqiTGuO70VX4ekf3BfPaqSIp2i7fd59B 4sSascUxeLgfLuGyMS/LeA3p4vhyez21DRXvveasK4laePecjptnG3GLf4KGD1dU jKbwhKnYQvHsWx0dYPE4N8M48rZlwDUJvDb77UwqLZiuBH9uV5iLDMfwGcy3jEep +zmJNS00ohPrb/oJlwXgFs0Wd3U8hE1cV08ulc3ETxsWACS+6fPImFV6koTAIgkH TH1IvGRnLYzpiJnpW2c7IlniPg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:11:56 2026 by rpki-client