$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft File: XsGmrXajq_3B4TKesmN8AYZLSAg.mft (raw, json) Hash identifier: kn2gjjH5m9NeokruxHBWqqYXdwz++u3DyNTK1EbdjWE= Subject key identifier: ED:37:CC:B1:84:9C:C8:90:2C:81:6C:19:61:7A:ED:42:E6:41:C5:7E Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft Manifest number: 088C Signing time: Tue 28 Jul 2026 21:17:58 +0000 Manifest this update: Tue 28 Jul 2026 21:17:57 +0000 Manifest next update: Tue 04 Aug 2026 21:17:57 +0000 Files and hashes: 1: XsGmrXajq_3B4TKesmN8AYZLSAg.crl (hash: 5Hdb3dkTPUbM4+0fMaNQzyVPzgDTC94P5MRHpnnuzJk=) 2: 82BB885E4B9811EB85F74960C4F9AE02.roa (hash: +r+gvF4pkq6hFHbY+ZoaIiUoalmLLSMykW5BxcQDeFU=) 3: B512A570109211ECA693D74EC4F9AE02.roa (hash: L7d1U3gGL3grFk1wnPeyJKdZ3FejFM4vvmLKY3IRi5A=) 4: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (hash: 2mIyjIYN6IO7ZQ4FUwscfGnk78kTtsjolDojwIN0av0=) 5: CF41132A1DE811EB9DE34963C4F9AE02.roa (hash: JkwlB4IFE4Dgm1EcLQn9CRo6PclYWkjqCYFJJbMHsj0=) 6: 046130D225FC11EC9D57EA7CC4F9AE02.roa (hash: ESImnuHKksdWJK2TDU4E1UVvcvoZ37KeHVw4wPPeVXE=) 7: 46D6261876A511EB82E04A2FC4F9AE02.roa (hash: +cRs2PboXe8g3+V+AJzpQpdTweZR3TGc016yIhZSQMI=) 8: E3AAE94243B511EB8DA3F473C4F9AE02.roa (hash: i7X6zewMmXOfmuZsHLNceM/lQghxWwQZ7AxU0vSWV0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Jul 28 21:17:57 2026 GMT Not After : Aug 4 21:17:57 2026 GMT Subject: CN=6a691c86-9655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:9e:3d:87:21:d6:e3:85:1c:04:c8:1c:2f: dc:be:b6:73:82:b4:b9:4f:38:67:8b:56:ec:d2:b9: de:7d:92:ff:4f:fe:4a:71:7e:88:dc:20:b4:99:ca: 5e:af:f3:58:87:97:a6:a6:9e:06:e8:44:2c:d2:d0: ce:74:d3:1c:e1:d5:46:a0:81:0f:24:24:8e:d2:0b: 17:ba:12:8d:74:1c:2e:a8:72:fa:74:34:d6:5e:08: bc:2c:5f:a9:b9:c9:cd:47:4c:fa:ee:df:b8:9c:de: 37:98:c4:6e:16:f3:0f:7a:d6:e9:e6:ff:66:27:76: c1:fc:2f:ad:d2:a4:b5:a1:cc:fb:cf:6f:6f:c0:21: b6:a7:03:ba:77:61:c9:45:50:31:ce:c7:c5:8b:f9: a4:79:35:93:ab:79:1d:4e:3e:a8:26:61:ed:dc:34: 14:df:33:a2:82:79:95:95:96:fa:2c:77:28:ef:68: fe:40:8c:bc:c7:c7:39:4a:a1:3b:09:ed:3b:7e:91: 85:ba:61:72:7d:69:a6:13:75:26:3f:bd:19:59:be: eb:fc:75:66:26:5c:66:8c:73:70:c5:0d:c1:fd:c7: a6:11:9b:a8:aa:06:43:a4:32:0c:6b:ff:5f:a8:20: 4b:4c:57:8e:6f:5e:d8:f3:d2:1f:22:5d:f7:59:81: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:37:CC:B1:84:9C:C8:90:2C:81:6C:19:61:7A:ED:42:E6:41:C5:7E X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ed:9e:c6:35:14:f8:61:92:fb:80:96:59:25:16:28:63:1a: fc:65:3a:58:11:7d:14:27:4a:1a:07:59:47:c3:19:04:2e:4a: e7:15:0b:58:65:25:25:82:80:ee:2a:ad:81:4a:b3:af:0c:c0: df:4c:ea:7e:53:a5:d4:83:ef:98:bd:a5:7c:26:c3:de:58:aa: de:ed:4b:e4:71:5e:04:20:42:dd:47:84:19:59:90:9a:d4:3f: 69:5e:66:cb:c4:64:7f:ea:5d:77:94:46:57:df:02:81:44:6f: 6e:89:d1:1f:1c:8a:24:75:7d:98:09:0f:30:a1:a0:66:6c:7f: b6:d3:b8:6c:1f:f5:d2:8e:a5:05:b0:5a:e9:1c:53:f5:1b:b2: d6:80:f4:79:0a:5e:1e:0d:45:44:19:f0:b5:43:57:6e:81:dc: bc:cf:61:82:b3:42:73:f1:de:d6:15:7b:39:42:82:76:92:0e: bb:68:b2:3f:3e:3c:e3:cc:f8:76:27:14:66:2b:90:50:46:5c: 4f:5c:d8:ce:9a:93:01:7b:06:89:fd:f9:df:ae:53:a2:fd:94: 66:23:4f:1d:86:23:44:27:ed:65:3f:9c:a2:8d:34:38:ea:3b: d5:13:07:05:a6:0e:6c:7b:63:62:99:7d:c7:b9:6f:34:05:a3: e1:76:88:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjYwNzI4MjExNzU3WhcNMjYwODA0MjExNzU3WjAYMRYwFAYD VQQDEw02YTY5MWM4Ni05NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkgiePYch1uOFHATIHC/cvrZzgrS5Tzhni1bs0rnefZL/T/5KcX6I3CC0mcpe r/NYh5empp4G6EQs0tDOdNMc4dVGoIEPJCSO0gsXuhKNdBwuqHL6dDTWXgi8LF+p ucnNR0z67t+4nN43mMRuFvMPetbp5v9mJ3bB/C+t0qS1ocz7z29vwCG2pwO6d2HJ RVAxzsfFi/mkeTWTq3kdTj6oJmHt3DQU3zOignmVlZb6LHco72j+QIy8x8c5SqE7 Ce07fpGFumFyfWmmE3UmP70ZWb7r/HVmJlxmjHNwxQ3B/cemEZuoqgZDpDIMa/9f qCBLTFeOb17Y89IfIl33WYHHuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO03zLGE nMiQLIFsGWF67ULmQcV+MB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIwQi9CQTcxQjY0ODEyMDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFf M0I0VEtlc21OOEFZWkxTQWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGu2exjUU+GGS+4CWWSUWKGMa/GU6WBF9FCdKGgdZR8MZBC5K5xULWGUlJYKA 7iqtgUqzrwzA30zqflOl1IPvmL2lfCbD3liq3u1L5HFeBCBC3UeEGVmQmtQ/aV5m y8Rkf+pdd5RGV98CgURvbonRHxyKJHV9mAkPMKGgZmx/ttO4bB/10o6lBbBa6RxT 9Ruy1oD0eQpeHg1FRBnwtUNXboHcvM9hgrNCc/He1hV7OUKCdpIOu2iyPz4848z4 dicUZiuQUEZcT1zYzpqTAXsGif35365Tov2UZiNPHYYjRCftZT+coo00OOo71RMH BaYObHtjYpl9x7lvNAWj4XaI6Q== -----END CERTIFICATE-----Generated at Wed Jul 29 03:18:49 2026 by rpki-client