$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json) Hash identifier: qYr3Cd3HlBvCoTf7worpy3+EDRODvyTG3u95voTtPPA= Subject key identifier: 03:C2:D6:30:ED:16:87:B1:D8:0B:69:4C:28:B8:20:09:E3:87:8D:37 Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft Manifest number: 01A6 Signing time: Mon 27 Jul 2026 05:52:23 +0000 Manifest this update: Mon 27 Jul 2026 05:52:23 +0000 Manifest next update: Mon 03 Aug 2026 05:52:23 +0000 Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: 4JsyIQaWao0yAzQamyxKfo1XrRtXLUyw3jKizDH9gWA=) 2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: 3K3ILgZCY+aW8Uz31syQLaXzVT7Ru8BASPjTSZG08co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Validity Not Before: Jul 27 05:52:23 2026 GMT Not After : Aug 3 05:52:23 2026 GMT Subject: CN=6a66f217-5c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:e0:2d:b2:5b:59:0d:f6:48:11:08:0b:35: 41:a4:6d:53:22:e4:ab:bf:8f:d7:70:1b:18:b5:47: bd:0c:c1:63:15:59:8f:6b:d6:6c:44:83:ff:3a:0a: c8:32:69:24:58:09:65:7e:d2:30:1c:80:5e:a0:52: 8d:4d:e7:7b:1a:7f:1d:0a:ae:c4:90:a4:8d:ab:0c: c5:5b:65:e6:8e:fb:19:ff:fa:83:02:74:ee:1d:c5: d4:da:14:ae:54:7e:ce:aa:bf:69:16:e1:3b:4c:a5: 9a:57:b2:9a:16:d0:7b:ff:f5:70:b5:3d:c2:5d:53: 43:c3:82:c1:1c:d1:c8:db:1c:8b:40:64:dc:64:4c: 0c:52:30:c7:e8:4b:a0:8b:99:8d:c9:72:9e:df:5b: 83:39:35:33:60:1b:2a:19:11:10:17:2c:65:ab:5d: 31:d6:10:91:86:76:67:aa:5f:d1:66:87:5a:1b:99: 3a:af:62:a7:ae:a6:85:6e:29:8f:80:3d:cb:34:4f: 8a:fb:1d:ab:a2:93:7f:cd:f4:c0:8d:8f:dc:79:f3: d5:55:63:a3:83:c8:ae:e6:24:45:47:99:59:e1:dc: 67:5f:4e:2f:dd:a5:4f:41:0b:87:df:e8:df:bf:8b: 8d:af:9b:0f:60:2c:5d:a0:80:8d:4b:2f:73:08:89: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C2:D6:30:ED:16:87:B1:D8:0B:69:4C:28:B8:20:09:E3:87:8D:37 X509v3 Authority Key Identifier: keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:db:ed:06:bd:df:c4:5a:03:7a:22:fe:3b:c7:3b:3f:85:fb: 73:2c:6d:e1:84:19:ed:7d:b1:0f:ce:29:9b:c6:b4:fa:7f:54: 89:db:79:19:10:37:e2:d0:11:12:9e:0e:7b:55:bb:c6:eb:0a: 17:30:e5:e4:a0:22:9d:10:57:74:03:f1:b8:44:f8:1c:f2:8f: b4:f9:e0:a1:cd:a6:76:e8:df:f2:ec:c9:b1:cf:6b:a9:29:72: fa:4d:ff:ea:30:f9:bf:e7:6f:85:54:8b:6e:4b:30:96:a3:a0: d2:ee:07:3e:17:65:ff:31:6d:cb:49:95:b0:ec:30:3e:df:ba: fd:7a:7a:7f:e4:d3:17:1b:b5:8c:a3:31:be:e3:75:11:7f:6b: 6e:ee:09:21:f6:a6:42:a9:02:c3:3b:3f:43:65:14:fd:c5:42: b5:e4:f5:a0:26:a5:2e:45:2a:71:7a:fd:51:3c:c6:5f:c8:a2: 72:16:3b:73:a5:47:cd:43:e7:88:b8:a8:ba:69:82:c7:11:ff: 60:96:81:a3:cd:da:a8:80:79:01:af:a5:c2:dc:3c:c8:d8:a3: 78:01:c5:44:8d:df:81:2b:82:4b:d3:98:c3:71:aa:d6:bd:bd: da:b4:04:af:28:8e:b3:72:c2:36:c5:20:99:4e:20:89:56:1c: b9:fb:8f:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0ODExMTAvBgNVBAUTKDVERUFFMzg1MzBGODE1RkJGMEI5QjNGOEVGNjM3NTA3 ODZDOEFDMEEwHhcNMjYwNzI3MDU1MjIzWhcNMjYwODAzMDU1MjIzWjAYMRYwFAYD VQQDEw02YTY2ZjIxNy01YzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoDgLbJbWQ32SBEICzVBpG1TIuSrv4/XcBsYtUe9DMFjFVmPa9ZsRIP/OgrI MmkkWAllftIwHIBeoFKNTed7Gn8dCq7EkKSNqwzFW2XmjvsZ//qDAnTuHcXU2hSu VH7Oqr9pFuE7TKWaV7KaFtB7//VwtT3CXVNDw4LBHNHI2xyLQGTcZEwMUjDH6Eug i5mNyXKe31uDOTUzYBsqGREQFyxlq10x1hCRhnZnql/RZodaG5k6r2KnrqaFbimP gD3LNE+K+x2ropN/zfTAjY/cefPVVWOjg8iu5iRFR5lZ4dxnX04v3aVPQQuH3+jf v4uNr5sPYCxdoICNSy9zCIl98QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPC1jDt Foex2AtpTCi4IAnjh403MB8GA1UdIwQYMBaAFF3q44Uw+BX78Lmz+O9jdQeGyKwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ4MS9CQzg0MEY0NjAy QzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZmdnd1YlA0NzJOMUI0Ykly QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlcmpoVEQ0RmZ2d3ViUDQ3Mk4xQjRiSXJBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ4MS9CQzg0MEY0NjAyQzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZm dnd1YlA0NzJOMUI0YklyQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANdvtBr3fxFoDeiL+O8c7P4X7cyxt4YQZ7X2xD84pm8a0+n9Uidt5GRA34tAR Ep4Oe1W7xusKFzDl5KAinRBXdAPxuET4HPKPtPngoc2mdujf8uzJsc9rqSly+k3/ 6jD5v+dvhVSLbkswlqOg0u4HPhdl/zFty0mVsOwwPt+6/Xp6f+TTFxu1jKMxvuN1 EX9rbu4JIfamQqkCwzs/Q2UU/cVCteT1oCalLkUqcXr9UTzGX8iichY7c6VHzUPn iLioummCxxH/YJaBo83aqIB5Aa+lwtw8yNijeAHFRI3fgSuCS9OYw3Gq1r292rQE ryiOs3LCNsUgmU4giVYcufuP5A== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:45 2026 by rpki-client