$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: 1o0XOj8ons1ZWddakE14QIk5v4H8/enPMV18ygCTdX4= Subject key identifier: 28:AD:C3:B5:94:A7:47:B3:06:9E:4E:D3:BA:CB:51:76:C2:47:36:F8 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0CE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0B92 Signing time: Wed 22 Jul 2026 20:05:36 +0000 Manifest this update: Wed 22 Jul 2026 20:05:36 +0000 Manifest next update: Wed 29 Jul 2026 20:05:36 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: tPC5bkP1SmgJQMM8c/6fRkKj+MaMwb3bnCQ4VoMhrSo=) 2: A4890D6473E511F185E76C018DA30FBC.roa (hash: ceMs0ZWVV6AYuiMcgooM25QQZcYhNLkc9LYFIIi0V2o=) 3: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: Hx4jtOuJzXTTc5VHMURxCz4V4clqTWRLtCDPvPlgRLQ=) 4: FA6E449673E611F1867DB2D08DA30FBC.roa (hash: rKz8pZzI0+qvXmq1gvSTQ2lUF+eFULCXrlhyw1hDxQg=) 5: 7E4EFF5473E611F1BA32CE558DA30FBC.roa (hash: iWTTS4IDR+HUhOdGPI78d/5YB8edbsgZvg0Sd4nkNyU=) 6: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: 6WjdsXo2+LZgxWiVDy4rRpY13i0Lx3BV3M/QLcdy5a8=) 7: 89135068FD2911F09BBA873E426F56BC.roa (hash: k6L2RtaPfs9iJDZ6OaWxGKY/ymoQfy3jPyd5OxyAkZs=) 8: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: 70UT6YcmvBlzj1xKlGcaUiyXDKtBEdfDGecHQzUFaBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Jul 22 20:05:36 2026 GMT Not After : Jul 29 20:05:36 2026 GMT Subject: CN=6a612290-ab6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:f1:ab:7f:7b:f5:55:53:37:6c:45:b1:84: 6c:a1:bb:8a:8c:98:f0:25:d8:5b:ad:17:36:ba:e7: d3:2f:42:c8:ab:24:ce:62:3e:6e:a9:44:c0:2a:f6: 65:97:8a:44:3d:ee:5d:f4:5e:53:3c:c5:a2:b4:69: 5d:33:da:f7:22:5c:f6:64:67:e7:ec:2f:c9:40:fb: 02:40:16:f2:53:8d:d6:04:73:71:8c:b4:2c:de:01: a5:37:76:4c:a3:12:46:b6:73:7d:c7:52:a3:cf:8d: 25:e2:51:c9:fc:ca:86:74:0d:61:cf:23:39:97:76: 98:5e:db:77:3d:4c:dd:40:19:0d:98:86:36:5e:9d: f4:3d:cc:fa:da:b2:94:ab:0a:66:29:d1:89:e8:24: 98:7a:64:98:77:58:26:0f:b2:09:d7:1c:a9:c7:bb: 7c:89:b2:df:7c:cc:4e:fd:1e:c7:04:8e:bb:a2:84: b0:87:43:e8:de:bd:13:5c:b2:58:5b:a8:03:05:fb: 24:79:ea:c4:bb:e3:66:2f:9d:e8:03:ea:b6:60:bb: 43:ca:c6:39:10:1d:a3:66:32:f5:dd:3d:ab:ea:63: ef:2f:53:dc:96:db:e9:ba:5d:5d:82:a7:33:a7:ab: 6d:d6:c9:19:b8:00:2d:c1:0f:08:86:8c:c6:17:fb: 62:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AD:C3:B5:94:A7:47:B3:06:9E:4E:D3:BA:CB:51:76:C2:47:36:F8 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:14:66:d2:f0:0b:aa:6f:13:f0:5d:03:67:43:e4:c7:f6:c9: 85:d3:d5:6e:bc:93:0f:be:05:c2:0c:4b:4d:95:4f:7c:d4:0d: 27:a9:23:55:c5:9d:c9:b2:54:ff:92:61:f8:40:fa:8f:fe:4d: 02:31:8c:ad:25:8d:18:e1:88:6b:b1:73:9a:fc:8a:e5:3b:c7: fc:79:cc:ec:cf:55:ba:fc:c9:fc:87:6a:f5:19:40:fc:85:52: ab:cb:dc:94:59:39:5a:e3:60:dc:17:39:be:09:44:da:d4:6a: a4:74:75:3d:58:f1:17:5d:3f:d9:e7:b1:f6:92:f4:88:27:e0: 99:16:19:b1:85:6e:7d:95:5a:b9:d3:7b:02:10:66:54:33:c0: 8f:a3:a8:d8:1a:4a:96:d9:ca:82:8e:01:1a:49:3e:3a:23:5f: 1d:82:9b:08:26:15:aa:ff:6b:57:df:fa:a1:25:51:3c:33:6c: 3e:53:82:99:24:5f:a6:5b:76:75:32:49:c7:68:80:dd:a8:db: 85:4f:79:ef:b5:c9:ae:c8:6c:14:6d:4c:f2:60:62:31:0a:fb: b6:69:47:7a:92:81:2b:bc:67:7c:b3:3f:a3:37:14:a5:f9:5c: 1c:56:5c:1d:d6:4e:02:96:4f:24:28:0f:3f:d7:4b:a3:af:02: bc:5d:49:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYwNzIyMjAwNTM2WhcNMjYwNzI5MjAwNTM2WjAYMRYwFAYD VQQDEw02YTYxMjI5MC1hYjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsx7xq3979VVTN2xFsYRsobuKjJjwJdhbrRc2uufTL0LIqyTOYj5uqUTAKvZl l4pEPe5d9F5TPMWitGldM9r3Ilz2ZGfn7C/JQPsCQBbyU43WBHNxjLQs3gGlN3ZM oxJGtnN9x1Kjz40l4lHJ/MqGdA1hzyM5l3aYXtt3PUzdQBkNmIY2Xp30Pcz62rKU qwpmKdGJ6CSYemSYd1gmD7IJ1xypx7t8ibLffMxO/R7HBI67ooSwh0Po3r0TXLJY W6gDBfskeerEu+NmL53oA+q2YLtDysY5EB2jZjL13T2r6mPvL1Pcltvpul1dgqcz p6tt1skZuAAtwQ8IhozGF/tiGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCitw7WU p0ezBp5O07rLUXbCRzb4MB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJxRm0vALqm8T8F0DZ0Pkx/bJhdPVbryTD74FwgxLTZVPfNQNJ6kjVcWdybJU /5Jh+ED6j/5NAjGMrSWNGOGIa7FzmvyK5TvH/HnM7M9VuvzJ/Idq9RlA/IVSq8vc lFk5WuNg3Bc5vglE2tRqpHR1PVjxF10/2eex9pL0iCfgmRYZsYVufZVaudN7AhBm VDPAj6Oo2BpKltnKgo4BGkk+OiNfHYKbCCYVqv9rV9/6oSVRPDNsPlOCmSRfplt2 dTJJx2iA3ajbhU9577XJrshsFG1M8mBiMQr7tmlHepKBK7xnfLM/ozcUpflcHFZc HdZOApZPJCgPP9dLo68CvF1JUg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:14 2026 by rpki-client