$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft File: XmtaBob1a6DA93-zvzGzhWMiCCQ.mft (raw, json) Hash identifier: cKndyEqrfJkV74QqxkPBGxG+2KF9OxT+MZtkUtpY59E= Subject key identifier: D3:15:E2:35:1A:2C:89:B8:B8:07:59:06:1A:5D:29:91:9C:E4:DC:50 Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24 Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824 Certificate serial: 23C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft Manifest number: 23A9 Signing time: Fri 24 Jul 2026 15:55:35 +0000 Manifest this update: Fri 24 Jul 2026 15:55:34 +0000 Manifest next update: Fri 31 Jul 2026 15:55:34 +0000 Files and hashes: 1: XmtaBob1a6DA93-zvzGzhWMiCCQ.crl (hash: 2U0JQwF/n0Byehf5EsrXl68PCAKiKGPRmEfIQw69/HA=) 2: 9A74033486EF11F19E006003A7EE528E.roa (hash: nM6DOGTCq1XiY4QFr/gSv6xfQY2Pps9Pkd6SvoqHBpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9158 (0x23c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824 Validity Not Before: Jul 24 15:55:34 2026 GMT Not After : Jul 31 15:55:34 2026 GMT Subject: CN=6a638af7-f92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:07:ca:67:53:55:76:c1:c2:c9:c8:b9:d3: 72:91:78:86:a9:58:e3:79:65:e6:1c:ad:2b:77:c1: ad:99:8e:ec:34:9d:2b:2d:70:1d:f7:21:13:40:e6: 02:be:12:ed:f3:93:8a:cb:22:ec:70:24:3f:70:00: 1a:cd:60:31:f4:67:bc:f2:88:c4:81:f4:48:a7:7f: f9:4d:02:a5:ed:a8:25:29:e8:14:ea:2d:26:77:4b: 99:c1:f8:5a:2f:1d:5a:9c:1d:42:bd:86:6f:f8:c5: ba:28:af:44:58:6e:4d:bc:d7:85:bb:fa:da:ac:8d: d1:01:5e:e3:9d:83:9e:fe:29:d7:56:7e:d9:ca:fe: 2d:37:ea:42:65:de:cf:d1:83:76:a7:47:3b:50:9d: 1b:1d:3f:03:8f:b5:e6:79:fb:70:a0:da:20:a8:97: 32:c2:cb:77:d9:40:13:17:e7:b2:9e:c3:e1:3c:fc: 7e:71:ac:d7:8c:f6:9e:f7:67:9e:e9:7b:0f:c5:81: b8:a2:33:af:4c:39:af:47:30:07:1a:a6:85:25:8d: ac:f5:01:01:ef:33:50:52:65:56:bd:23:c5:58:17: 92:9e:76:1b:57:ec:5c:46:bc:f2:00:50:6b:7a:54: ed:49:08:d4:33:1c:3a:63:f5:3d:3f:54:d3:58:62: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:15:E2:35:1A:2C:89:B8:B8:07:59:06:1A:5D:29:91:9C:E4:DC:50 X509v3 Authority Key Identifier: keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:17:fa:0c:bb:6f:1a:9e:9a:b7:a5:2f:b7:89:5f:6c:75:56: 77:dc:59:fc:a7:ae:9a:89:11:b7:e8:40:ba:6c:16:03:39:05: eb:ae:93:82:26:11:ce:9a:57:b9:89:3a:ea:f2:5a:76:dd:22: ce:db:72:6e:50:89:9a:e4:2b:92:c5:ea:01:83:a4:22:7a:a1: f1:22:82:a3:c7:5f:6f:0e:5b:63:70:b2:0e:23:77:9b:0f:47: 5c:6b:5c:66:98:ad:1a:0f:59:e9:b0:f7:e9:3c:8e:74:d5:32: 4b:74:8b:a3:61:6a:70:e8:d1:11:7a:c1:bc:96:dd:95:cc:13: 8a:5c:52:e5:80:25:61:70:1c:2f:0a:42:f3:33:73:34:fd:34: 87:1c:00:bd:72:7c:72:17:0f:8c:32:fa:11:41:d3:87:e2:07: 9f:73:dc:39:e1:07:1d:b9:81:fe:8c:58:cf:36:55:33:fb:35: 0f:85:f8:e0:43:d3:58:86:7b:a2:e3:0c:9a:d5:7c:55:09:ec: 4d:bd:01:ed:64:8b:b7:f3:81:d7:d1:50:b6:7c:9b:ac:93:3b: 2a:50:af:dd:7d:a4:3a:95:58:a3:42:80:b7:61:c5:36:ba:7d: 91:7f:ca:9b:39:0c:f3:fa:ba:9f:b6:48:b2:b2:87:a0:7b:e9: 58:07:d7:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUxMDcxMTAvBgNVBAUTKDVFNkI1QTA2ODZGNTZCQTBDMEY3N0ZCM0JGMzFCMzg1 NjMyMjA4MjQwHhcNMjYwNzI0MTU1NTM0WhcNMjYwNzMxMTU1NTM0WjAYMRYwFAYD VQQDEw02YTYzOGFmNy1mOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzwHymdTVXbBwsnIudNykXiGqVjjeWXmHK0rd8GtmY7sNJ0rLXAd9yETQOYC vhLt85OKyyLscCQ/cAAazWAx9Ge88ojEgfRIp3/5TQKl7aglKegU6i0md0uZwfha Lx1anB1CvYZv+MW6KK9EWG5NvNeFu/rarI3RAV7jnYOe/inXVn7Zyv4tN+pCZd7P 0YN2p0c7UJ0bHT8Dj7XmeftwoNogqJcywst32UATF+eynsPhPPx+cazXjPae92ee 6XsPxYG4ojOvTDmvRzAHGqaFJY2s9QEB7zNQUmVWvSPFWBeSnnYbV+xcRrzyAFBr elTtSQjUMxw6Y/U9P1TTWGI7hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMV4jUa LIm4uAdZBhpdKZGc5NxQMB8GA1UdIwQYMBaAFF5rWgaG9WugwPd/s78xs4VjIggk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTEwNy9FRTM1QzQ0NjlF NjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2REE5My16dnpHemhXTWlD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1htdGFCb2IxYTZEQTkzLXp2ekd6aFdNaUNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTEwNy9FRTM1QzQ0NjlFNjQxMUU1OUQ0OEZCNjBDNEY5QUUwMi9YbXRhQm9iMWE2 REE5My16dnpHemhXTWlDQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAShf6DLtvGp6at6Uvt4lfbHVWd9xZ/KeumokRt+hAumwWAzkF666TgiYRzppX uYk66vJadt0izttyblCJmuQrksXqAYOkInqh8SKCo8dfbw5bY3CyDiN3mw9HXGtc ZpitGg9Z6bD36TyOdNUyS3SLo2FqcOjREXrBvJbdlcwTilxS5YAlYXAcLwpC8zNz NP00hxwAvXJ8chcPjDL6EUHTh+IHn3PcOeEHHbmB/oxYzzZVM/s1D4X44EPTWIZ7 ouMMmtV8VQnsTb0B7WSLt/OB19FQtnybrJM7KlCv3X2kOpVYo0KAt2HFNrp9kX/K mzkM8/q6n7ZIsrKHoHvpWAfXJg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:48:52 2026 by rpki-client