$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft File: XTDuvxHkF41iO-G95Nu0y1nMhDc.mft (raw, json) Hash identifier: GBTfCDg18prYgIoMaogZwy0T5PmWHDn0/Ioyq4fbEp8= Subject key identifier: 46:E5:7B:D4:29:9E:E4:5B:B6:F7:EA:A2:D7:15:82:D1:7C:7B:A1:47 Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft Manifest number: 77 Signing time: Mon 27 Jul 2026 10:07:28 +0000 Manifest this update: Mon 27 Jul 2026 10:07:27 +0000 Manifest next update: Mon 03 Aug 2026 10:07:27 +0000 Files and hashes: 1: XTDuvxHkF41iO-G95Nu0y1nMhDc.crl (hash: i5hMp8qfnFmFV8qc0XNay9Kv2tT/qBA7u+BUFjuJIYk=) 2: 253978EAE0FC11F0B50D6A7D5F6F56BC.roa (hash: 6RxldyO2/Y3wToEhzB/mHNRPtNgIGcUmqFl9NgQBrdA=) 3: 24992E62E0FC11F0B50D6A7D5F6F56BC.roa (hash: eAx7dd7W8IzFugozPftJzHrtY4Ej4f42CnK31HLLaRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Validity Not Before: Jul 27 10:07:27 2026 GMT Not After : Aug 3 10:07:27 2026 GMT Subject: CN=6a672ddf-1669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:81:18:83:34:b6:a3:4f:b5:e2:bb:ff:23: 1e:e2:f6:07:55:11:c0:15:c1:f2:de:22:a3:0c:58: 6d:d1:77:ab:ee:df:85:11:05:72:50:43:6e:b9:e7: 5b:80:f1:dc:e5:a5:9d:4b:be:e1:b7:0a:dd:d0:06: 2a:9d:cf:53:61:49:68:03:2b:2a:19:80:90:ce:62: 31:93:d3:57:4a:78:a6:1f:8e:4f:c3:ce:04:26:19: 92:5a:ea:aa:44:07:36:cc:24:c1:ca:1a:0a:86:45: 82:4c:06:cc:06:25:6d:b4:b7:6d:8f:a2:bc:2f:1e: 7e:38:92:1b:8b:e6:e2:a7:30:67:53:a3:d1:bc:e1: d5:aa:9a:38:b1:09:0c:83:d8:e4:39:77:cc:93:06: 6e:de:db:91:ca:80:19:f9:3e:97:c9:79:b3:84:55: be:ba:9a:6d:75:8a:be:cf:5e:31:e6:77:89:19:0a: fd:11:9f:dc:6a:e6:35:84:5f:26:a2:22:77:9d:47: 6a:d6:3b:b8:cb:b8:e3:34:46:e3:4b:a1:6d:cb:5c: 75:68:b1:09:92:c5:5d:b3:c0:7a:04:2c:a6:ba:c5: d8:fe:9d:fe:7c:24:4b:13:ff:ef:fd:46:0f:26:76: d4:66:d8:f9:a8:84:4a:6d:10:3f:6f:97:04:b9:d4: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E5:7B:D4:29:9E:E4:5B:B6:F7:EA:A2:D7:15:82:D1:7C:7B:A1:47 X509v3 Authority Key Identifier: keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a2:be:74:d9:ad:cd:52:51:a4:ad:ff:5f:5c:d1:8e:7a:28: 16:f0:fe:ab:cb:ca:4a:fe:20:4d:ac:85:e3:62:1d:21:9f:2d: 5b:49:15:20:d4:d7:7c:a2:f4:c8:db:bd:a7:7b:4d:15:e8:c1: 23:c2:50:31:a6:11:5a:48:cd:f9:fc:54:fb:19:c9:1b:18:04: 02:d0:18:1d:75:38:e1:da:0c:39:bd:64:fe:42:cb:9b:0d:8d: 7a:e5:e3:ad:bb:db:76:a5:43:db:22:3c:14:0a:31:50:60:47: 31:e0:a5:8b:ec:5a:26:37:c1:86:57:e1:cc:36:bf:07:3d:ea: ab:d9:33:a8:b0:a3:a7:5d:27:9f:19:84:11:2b:22:79:40:66: 8b:cb:42:0b:82:5b:e8:bf:55:98:fa:58:01:c1:c1:f4:0f:c3: 20:7a:30:b4:59:6e:8f:a2:39:5d:2c:f1:29:e7:b1:90:94:3d: 02:00:04:72:c1:c8:82:b0:15:4c:77:b7:fe:76:b0:c8:c5:9d: 55:ca:f6:e9:29:12:59:83:1b:1f:07:ae:5c:b4:a5:f0:04:f4: 0c:30:66:3f:25:69:ac:43:02:61:36:8a:45:a0:70:74:91:7b: 12:b1:e7:a4:d3:e3:2e:5b:11:f6:12:69:41:8c:30:1f:8d:72: 94:21:e4:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjFDMjExMC8GA1UEBRMoNUQzMEVFQkYxMUU0MTc4RDYyM0JFMUJERTREQkI0Q0I1 OUNDODQzNzAeFw0yNjA3MjcxMDA3MjdaFw0yNjA4MDMxMDA3MjdaMBgxFjAUBgNV BAMTDTZhNjcyZGRmLTE2NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD8oEYgzS2o0+14rv/Ix7i9gdVEcAVwfLeIqMMWG3Rd6vu34URBXJQQ26551uA 8dzlpZ1LvuG3Ct3QBiqdz1NhSWgDKyoZgJDOYjGT01dKeKYfjk/DzgQmGZJa6qpE BzbMJMHKGgqGRYJMBswGJW20t22PorwvHn44khuL5uKnMGdTo9G84dWqmjixCQyD 2OQ5d8yTBm7e25HKgBn5PpfJebOEVb66mm11ir7PXjHmd4kZCv0Rn9xq5jWEXyai InedR2rWO7jLuOM0RuNLoW3LXHVosQmSxV2zwHoELKa6xdj+nf58JEsT/+/9Rg8m dtRm2PmohEptED9vlwS51J1BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURuV71Cme 5Fu29+qi1xWC0Xx7oUcwHwYDVR0jBBgwFoAUXTDuvxHkF41iO+G95Nu0y1nMhDcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzBGOTEwNzU0RENB MzExRjA4NUQ2RjE1QjQzNkY1NkJDL1hURHV2eEhrRjQxaU8tRzk1TnUweTFuTWhE Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWFREdXZ4SGtGNDFpTy1HOTVOdTB5MW5NaERjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzBGOTEwNzU0RENBMzExRjA4NUQ2RjE1QjQzNkY1NkJDL1hURHV2eEhrRjQx aU8tRzk1TnUweTFuTWhEYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBFor502a3NUlGkrf9fXNGOeigW8P6ry8pK/iBNrIXjYh0hny1bSRUg1Nd8ovTI 272ne00V6MEjwlAxphFaSM35/FT7GckbGAQC0BgddTjh2gw5vWT+QsubDY165eOt u9t2pUPbIjwUCjFQYEcx4KWL7FomN8GGV+HMNr8HPeqr2TOosKOnXSefGYQRKyJ5 QGaLy0ILglvov1WY+lgBwcH0D8MgejC0WW6PojldLPEp57GQlD0CAARywciCsBVM d7f+drDIxZ1VyvbpKRJZgxsfB65ctKXwBPQMMGY/JWmsQwJhNopFoHB0kXsSseek 0+MuWxH2EmlBjDAfjXKUIeS5 -----END CERTIFICATE-----Generated at Wed Jul 29 07:39:36 2026 by rpki-client