$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json) Hash identifier: taVHYvhf+jm/i14I9eXJA6PtInQwhqtcETgIJHS+v+U= Subject key identifier: CA:9A:82:A4:8D:0E:E1:37:BA:22:D5:A2:CA:80:FE:F5:00:03:C3:EA Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Certificate serial: 0841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft Manifest number: 0800 Signing time: Tue 28 Jul 2026 21:47:31 +0000 Manifest this update: Tue 28 Jul 2026 21:47:31 +0000 Manifest next update: Tue 04 Aug 2026 21:47:31 +0000 Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: dDUJALISrMxvPpnaYxPknsf5v1Wj9rEiXjdaQP5Dhjg=) 2: 9507206A63A111F092E32646C4F9AE02.roa (hash: zbwsIMflxwphg5gU9UqOZAbwNHUfzLTXefSGHx8E9Ms=) 3: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: 07OvimTtnDe97y43gOmhP2mYLb6FKJ2TL30DbKiYSdk=) 4: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: fd8kDW52Sq9cJKEJvqYfssXk1O68wOynpHR8qW9FwDo=) 5: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: 2PM2q9cUg2P0NzsrCEQgTadgMBgcus+n4gLLyMzQ2+A=) 6: 66FC64186D0711F0AC1BE951C4F9AE02.roa (hash: gVwWJAGwFMN8FtAbSFBX/YkFLx2iObisxi/ECzC4Gms=) 7: 94A5320663A111F092E32646C4F9AE02.roa (hash: sIgCJcq0Zl47ilkYoj6SY92FU+t+igEFIIfzQQa1AGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Validity Not Before: Jul 28 21:47:31 2026 GMT Not After : Aug 4 21:47:31 2026 GMT Subject: CN=6a692373-fac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cd:c0:8a:00:bb:ee:3c:93:73:2d:c2:8c:8b: 5f:5e:9f:ec:cf:b0:38:3a:dd:bc:d8:80:45:d0:2d: 46:e7:0c:89:83:16:66:e9:ba:f4:9c:2e:e8:a1:b0: 5c:03:47:a5:68:6d:8d:6e:f6:0e:ed:98:01:42:a0: 21:15:1b:50:b6:c2:81:ee:fa:85:8b:64:d0:a1:77: bc:53:36:6f:87:07:6d:64:09:94:1c:c4:79:22:0f: 14:ab:e8:aa:39:c9:2e:4d:cf:80:6f:c5:0f:f7:93: 1f:04:82:38:30:7f:1d:29:74:ce:6b:61:63:7d:1f: 34:70:99:12:1c:23:a7:ae:4b:04:b9:b3:9c:c5:56: 92:aa:2c:e8:0a:ef:ca:82:d0:5b:5b:4b:54:ee:e2: e1:ab:03:35:8e:6f:6d:38:48:fb:60:81:50:a5:ed: 7e:36:0b:7f:a3:f3:dc:f6:a7:01:b2:19:df:9c:ef: cf:04:ef:8b:1a:36:da:f3:a8:93:5a:22:d0:f2:5e: c6:38:8f:c3:7b:45:68:e1:24:38:ba:17:3e:1b:0a: 89:26:4e:27:07:fd:76:b0:88:55:de:fd:0f:85:cb: 0a:11:92:34:d8:8f:88:04:cd:2d:a0:e9:04:a0:d1: a3:0f:64:d7:47:42:bf:d4:e5:2a:e4:c4:8f:10:39: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:82:A4:8D:0E:E1:37:BA:22:D5:A2:CA:80:FE:F5:00:03:C3:EA X509v3 Authority Key Identifier: keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b0:20:f8:cf:b2:a5:a6:d1:7a:b2:a9:3e:1c:7c:15:03:aa: e1:ee:45:78:57:9d:6d:98:1e:f6:a4:1f:2f:13:08:41:4f:d8: c4:39:ca:66:61:38:02:f6:52:c0:c6:f0:68:e2:e3:a7:ae:bf: 94:46:e5:38:31:86:21:83:c8:1d:e3:0e:a9:fb:63:2d:b9:2c: 10:39:8d:f9:b7:6e:21:58:c0:93:80:a5:03:1f:d1:cf:d4:50: c3:b2:1c:fd:4b:91:8d:4d:1e:36:7a:5d:27:32:a5:16:ff:ea: b1:dd:d7:32:d6:da:c2:8d:ae:63:1e:3a:64:dc:55:4f:4d:05: 68:98:5e:9b:ae:4c:c4:9f:1d:67:42:64:81:dd:29:e3:ea:af: 4b:c4:b9:ec:25:11:74:1d:1a:be:e0:cd:3a:96:39:98:68:a1: 02:c3:4a:97:ac:9b:1d:22:08:8b:99:ca:8f:85:3f:2e:bd:56: e0:cf:76:7d:c6:ef:fd:08:91:08:13:df:f0:a8:ad:97:4e:1a: 3b:5c:fd:43:35:27:39:a8:99:1c:b9:37:c1:64:bc:dd:57:e0: 22:6d:bc:f3:f9:90:db:0b:9f:c1:4c:33:a5:3d:31:e1:0f:90: 4a:ac:db:c8:3c:8e:76:48:21:b5:17:8e:5b:17:64:c1:79:1b: ce:eb:40:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NEMxMTAvBgNVBAUTKDVFQTExQzhBM0EyOUUwNjk3M0MxRjEyMTYxMUQ1QTVD MkExQjA2OUQwHhcNMjYwNzI4MjE0NzMxWhcNMjYwODA0MjE0NzMxWjAYMRYwFAYD VQQDEw02YTY5MjM3My1mYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8c3AigC77jyTcy3CjItfXp/sz7A4Ot282IBF0C1G5wyJgxZm6br0nC7oobBc A0elaG2NbvYO7ZgBQqAhFRtQtsKB7vqFi2TQoXe8UzZvhwdtZAmUHMR5Ig8Uq+iq OckuTc+Ab8UP95MfBII4MH8dKXTOa2FjfR80cJkSHCOnrksEubOcxVaSqizoCu/K gtBbW0tU7uLhqwM1jm9tOEj7YIFQpe1+Ngt/o/Pc9qcBshnfnO/PBO+LGjba86iT WiLQ8l7GOI/De0Vo4SQ4uhc+GwqJJk4nB/12sIhV3v0PhcsKEZI02I+IBM0toOkE oNGjD2TXR0K/1OUq5MSPEDl1FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqagqSN DuE3uiLVosqA/vUAA8PqMB8GA1UdIwQYMBaAFF6hHIo6KeBpc8HxIWEdWlwqGwad MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0Qy81MUE5RUFDQzQx NjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRHbHp3ZkVoWVIxYVhDb2JC cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxRWNpam9wNEdsendmRWhZUjFhWENvYkJwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0Qy81MUE5RUFDQzQxNjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRH bHp3ZkVoWVIxYVhDb2JCcDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV7Ag+M+ypabRerKpPhx8FQOq4e5FeFedbZge9qQfLxMIQU/YxDnKZmE4AvZS wMbwaOLjp66/lEblODGGIYPIHeMOqftjLbksEDmN+bduIVjAk4ClAx/Rz9RQw7Ic /UuRjU0eNnpdJzKlFv/qsd3XMtbawo2uYx46ZNxVT00FaJhem65MxJ8dZ0Jkgd0p 4+qvS8S57CURdB0avuDNOpY5mGihAsNKl6ybHSIIi5nKj4U/Lr1W4M92fcbv/QiR CBPf8Kitl04aO1z9QzUnOaiZHLk3wWS83VfgIm288/mQ2wufwUwzpT0x4Q+QSqzb yDyOdkghtReOWxdkwXkbzutAXQ== -----END CERTIFICATE-----Generated at Wed Jul 29 14:35:12 2026 by rpki-client