$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: EmqbftSMHFyI1x+P0/hVmCNWjwK40rcG1FwtHxWZQHQ= Subject key identifier: C4:9B:79:E7:8D:AE:B3:FA:E6:E1:79:70:10:76:26:B7:25:F9:E7:8A Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 021D Signing time: Mon 27 Jul 2026 04:21:20 +0000 Manifest this update: Mon 27 Jul 2026 04:21:20 +0000 Manifest next update: Mon 03 Aug 2026 04:21:20 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: VxQjigoQsCGsMpcu8EPfT7RHTexhkJ0wrZyPP9kOWfY=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: XYht5ZQ/KAnp+RFAT2TWXGSNLAgSyYgAZ+uFeNVyc8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: Jul 27 04:21:20 2026 GMT Not After : Aug 3 04:21:20 2026 GMT Subject: CN=6a66dcc0-89f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:4f:08:63:ac:28:93:6a:22:b9:5b:a2:37: d1:42:ac:62:41:39:67:0c:bc:b5:0a:2e:b6:e4:4d: ac:ce:b8:a5:8f:ad:af:f4:02:23:d5:1a:d8:2b:7f: 2c:23:9a:7c:70:10:1d:c5:17:21:1e:4a:76:9f:e3: 2e:69:89:2d:9f:1a:82:99:39:e2:b1:e8:7c:79:85: 89:d9:10:e2:d0:b4:c9:92:d7:1a:26:d7:2b:93:9b: de:82:2d:49:31:61:ea:e8:83:ab:42:5e:dc:57:a0: 99:17:bc:7f:95:05:bd:be:c2:42:ef:4c:4d:41:77: 3e:d9:0a:26:39:a7:7c:34:5f:a1:b4:4f:03:bc:63: 13:5d:a8:15:cb:36:5b:b9:4e:fc:fb:6d:cc:fa:f9: a4:c3:89:c7:6b:37:e2:10:2f:17:67:a2:b5:d1:41: a0:90:f9:06:c5:f4:1a:d2:da:1a:d3:7f:cd:e3:0c: f3:d2:20:b5:4c:af:30:96:bd:ae:47:ac:21:57:8d: 00:4d:83:22:3c:90:3b:5d:f0:b1:7a:f3:80:d2:39: cf:bb:2e:4f:62:a0:3f:30:f6:77:c7:fb:d5:78:b0: f7:38:66:4f:a1:45:3f:cb:34:70:52:30:98:3a:bc: 51:86:1f:e1:36:4f:14:21:a3:fe:7a:cb:b7:57:08: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9B:79:E7:8D:AE:B3:FA:E6:E1:79:70:10:76:26:B7:25:F9:E7:8A X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:22:dd:a3:c4:58:6a:2f:3e:36:4a:e8:35:c3:fb:6c:de:d1: 10:0c:80:35:dc:7c:c7:ed:b0:fe:ec:65:ae:76:9d:20:08:55: 1c:e2:6e:d5:89:ea:c0:15:1d:fb:ce:fb:14:b7:3c:98:3d:53: 26:1e:08:89:df:16:35:b1:f1:e8:92:eb:bf:5d:bb:ff:e5:d3: f7:ba:f8:46:2e:9a:1a:79:88:5e:93:da:bd:76:2e:13:35:0c: 59:29:73:22:64:51:05:fd:43:30:ee:36:90:d0:c2:f3:4d:f1: 4f:6a:f4:d9:5d:2b:8b:46:6d:fe:e4:79:84:8d:83:5d:fb:eb: f8:14:cb:1e:43:05:26:9c:2e:1b:15:28:77:45:7a:4d:12:2b: 1a:d1:e3:d3:e3:42:b8:64:90:4e:a7:07:c5:de:0a:9b:51:03: d2:6d:a2:61:b0:46:52:e9:7e:da:c3:29:ee:fa:77:15:5a:e0: fc:8d:f1:12:4e:57:04:77:81:ad:82:19:00:bc:a6:29:fb:42: 92:45:be:f8:48:97:34:8a:72:00:e5:15:fe:6c:f4:be:fa:4c: 38:66:48:68:82:d6:c3:a6:09:41:d7:e7:98:fe:4b:aa:fb:bf: 17:2a:22:47:26:7b:40:04:af:dd:54:69:39:03:67:d5:b3:6e: e2:f1:70:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjYwNzI3MDQyMTIwWhcNMjYwODAzMDQyMTIwWjAYMRYwFAYD VQQDEw02YTY2ZGNjMC04OWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAof9PCGOsKJNqIrlbojfRQqxiQTlnDLy1Ci625E2szrilj62v9AIj1RrYK38s I5p8cBAdxRchHkp2n+MuaYktnxqCmTniseh8eYWJ2RDi0LTJktcaJtcrk5vegi1J MWHq6IOrQl7cV6CZF7x/lQW9vsJC70xNQXc+2QomOad8NF+htE8DvGMTXagVyzZb uU78+23M+vmkw4nHazfiEC8XZ6K10UGgkPkGxfQa0toa03/N4wzz0iC1TK8wlr2u R6whV40ATYMiPJA7XfCxevOA0jnPuy5PYqA/MPZ3x/vVeLD3OGZPoUU/yzRwUjCY OrxRhh/hNk8UIaP+esu3Vwg3KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSbeeeN rrP65uF5cBB2Jrcl+eeKMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoCLdo8RYai8+NkroNcP7bN7REAyANdx8x+2w/uxlrnadIAhVHOJu1YnqwBUd +877FLc8mD1TJh4Iid8WNbHx6JLrv127/+XT97r4Ri6aGnmIXpPavXYuEzUMWSlz ImRRBf1DMO42kNDC803xT2r02V0ri0Zt/uR5hI2DXfvr+BTLHkMFJpwuGxUod0V6 TRIrGtHj0+NCuGSQTqcHxd4Km1ED0m2iYbBGUul+2sMp7vp3FVrg/I3xEk5XBHeB rYIZALymKftCkkW++EiXNIpyAOUV/mz0vvpMOGZIaILWw6YJQdfnmP5Lqvu/Fyoi RyZ7QASv3VRpOQNn1bNu4vFw8Q== -----END CERTIFICATE-----Generated at Tue Jul 28 22:26:30 2026 by rpki-client