$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: Kcnfyr0F/7DLESmPxSH917prcFqZvGrOLIHllDAMqOI= Subject key identifier: 08:7C:ED:2B:84:12:C8:92:08:B3:C1:73:4B:31:3A:70:EA:FB:1E:57 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: DD Signing time: Mon 27 Jul 2026 08:43:39 +0000 Manifest this update: Mon 27 Jul 2026 08:43:39 +0000 Manifest next update: Mon 03 Aug 2026 08:43:39 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: Q+QIrIIry05QeElvb+0GJMsZZcB5hx6A7cUUSnbOwnk=) 2: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) 3: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Jul 27 08:43:39 2026 GMT Not After : Aug 3 08:43:39 2026 GMT Subject: CN=6a671a3b-b49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3c:4a:a2:58:26:3f:d8:3a:5d:bf:c7:db:ba: 60:8e:f4:29:2f:f7:dd:1c:bf:25:59:f1:65:ff:94: 48:f9:a1:cb:4d:2b:f1:19:12:f9:61:0a:26:ef:56: 64:82:3a:7a:36:65:24:61:a6:a5:3b:27:b4:d1:09: f7:95:4e:7f:93:4a:14:f0:0c:9a:5e:47:19:db:a6: 68:a4:8d:b1:76:e0:32:bc:61:2c:54:2d:e2:d6:75: 2a:7d:a3:a3:c8:aa:45:99:13:fe:52:0a:ff:6b:09: 24:66:f0:b4:6d:9d:b2:79:25:f3:65:f2:5d:71:77: 52:86:e4:eb:4c:9d:28:61:40:a3:9a:bc:f0:1b:e6: bd:34:fb:73:ec:20:d3:0f:2a:b4:a9:e2:e1:77:e7: c7:eb:cf:ce:ef:86:07:1b:de:df:4b:fb:2d:18:4f: 9a:1c:e6:41:a1:43:37:8a:26:43:a4:2f:c7:70:5b: d2:bc:4b:d2:4c:32:74:e8:82:42:e9:a0:76:ee:77: 99:76:d1:7d:28:bc:6e:7d:de:9a:81:fb:d3:16:fc: 4e:52:0c:ba:e3:ea:c8:ec:02:26:9d:ed:40:61:36: 90:f2:26:70:c9:10:cb:2e:a5:f2:22:86:65:71:cf: 68:3d:1b:aa:68:d4:fc:df:70:13:32:58:b6:22:ca: 1d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7C:ED:2B:84:12:C8:92:08:B3:C1:73:4B:31:3A:70:EA:FB:1E:57 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:38:31:66:9d:62:c6:57:01:63:12:bc:dd:54:35:12:72:62: 6f:99:54:72:dd:40:ab:01:19:34:ce:6e:bf:06:c0:c0:14:1b: 71:82:09:82:ed:a3:25:a3:81:d5:29:88:4e:69:46:d5:41:49: 83:e1:ff:5a:04:6f:0a:65:7d:a4:39:46:84:7c:65:88:36:bf: 5d:db:0f:eb:58:08:d9:60:dd:b0:69:66:c0:17:b3:ae:77:5a: c4:f7:5e:67:63:5a:6a:6f:56:33:ba:2e:70:81:23:5b:24:d3: a1:4b:db:da:05:ab:77:63:ba:d0:e6:9f:b7:b8:f0:fc:46:81: 28:e8:97:42:37:52:e8:f9:2b:fd:ed:e1:34:9e:85:46:1f:ee: ac:34:1b:09:f2:73:a8:4c:ef:91:0e:4e:d7:38:1d:08:5f:03: 6f:b3:a0:dc:5a:62:6c:4e:e6:f9:d6:d7:86:a5:e9:7b:08:3a: 00:c1:d9:ba:b6:3f:0b:83:e9:b6:e7:db:56:c7:24:92:d2:a8: 53:35:7f:2e:fd:31:d6:db:af:52:77:39:52:b5:b1:63:22:f4: 54:80:61:88:f9:be:16:1e:21:99:9d:50:66:58:5e:5e:58:3a: b2:d1:4e:66:46:11:93:5c:11:df:56:18:82:81:96:36:92:c3: 0d:8c:75:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwNzI3MDg0MzM5WhcNMjYwODAzMDg0MzM5WjAYMRYwFAYD VQQDEw02YTY3MWEzYi1iNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zxKolgmP9g6Xb/H27pgjvQpL/fdHL8lWfFl/5RI+aHLTSvxGRL5YQom71Zk gjp6NmUkYaalOye00Qn3lU5/k0oU8AyaXkcZ26ZopI2xduAyvGEsVC3i1nUqfaOj yKpFmRP+Ugr/awkkZvC0bZ2yeSXzZfJdcXdShuTrTJ0oYUCjmrzwG+a9NPtz7CDT Dyq0qeLhd+fH68/O74YHG97fS/stGE+aHOZBoUM3iiZDpC/HcFvSvEvSTDJ06IJC 6aB27neZdtF9KLxufd6agfvTFvxOUgy64+rI7AImne1AYTaQ8iZwyRDLLqXyIoZl cc9oPRuqaNT833ATMli2Isod0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAh87SuE EsiSCLPBc0sxOnDq+x5XMB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAODgxZp1ixlcBYxK83VQ1EnJib5lUct1AqwEZNM5uvwbAwBQbcYIJgu2jJaOB 1SmITmlG1UFJg+H/WgRvCmV9pDlGhHxliDa/XdsP61gI2WDdsGlmwBezrndaxPde Z2Naam9WM7oucIEjWyTToUvb2gWrd2O60Oaft7jw/EaBKOiXQjdS6Pkr/e3hNJ6F Rh/urDQbCfJzqEzvkQ5O1zgdCF8Db7Og3FpibE7m+dbXhqXpewg6AMHZurY/C4Pp tufbVsckktKoUzV/Lv0x1tuvUnc5UrWxYyL0VIBhiPm+Fh4hmZ1QZlheXlg6stFO ZkYRk1wR31YYgoGWNpLDDYx1Cg== -----END CERTIFICATE-----Generated at Wed Jul 29 03:44:12 2026 by rpki-client