$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: hka9Unm57RBFcr5najYHQEP7m2Mu1pZHAS8tZd50vxg= Subject key identifier: 22:51:E7:68:B4:C3:4F:D1:BA:C8:D4:9A:11:4D:FC:AC:51:C7:86:65 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 026B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 025E Signing time: Mon 27 Jul 2026 03:45:47 +0000 Manifest this update: Mon 27 Jul 2026 03:45:47 +0000 Manifest next update: Mon 03 Aug 2026 03:45:47 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: fVHfmqSUgefZjFaqam/e0rbHxZQgk3boxEsa7YC54Ug=) 2: 297CAAF2600F11F19DD612FE8747A888.roa (hash: 3caSMOx+p5Jr6uBlGiryWygb4IBsCl4CdewfhyZYMAk=) 3: 4C1DFC6E600F11F1B719D3058847A888.roa (hash: XI/6ywdBOKZJkA6ntRfKeh+vbgYn6sdPFXnFJIGb2HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Jul 27 03:45:47 2026 GMT Not After : Aug 3 03:45:47 2026 GMT Subject: CN=6a66d46b-8ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:86:7c:3d:bf:77:66:dc:d9:70:ed:46:11:f5: e8:5b:fd:e9:99:54:9d:71:64:67:4a:0d:36:d0:b6: 37:a1:80:e6:57:74:e9:77:3b:40:c9:a9:51:4d:9b: b4:e9:c2:e5:6f:56:e8:84:3c:33:34:cf:26:ea:dc: 33:87:e9:68:c3:2e:95:44:ce:fc:c9:be:91:b9:26: 48:13:3c:1f:d2:f3:c5:73:7a:e2:e5:9a:40:eb:34: 38:fe:86:ab:6a:e3:84:10:a4:62:6f:53:19:90:53: c9:c9:ba:05:76:bc:fb:9b:31:c4:fa:4b:16:9a:10: 0b:17:c0:43:75:8d:63:0e:d9:63:da:3b:b7:d5:61: f9:f3:da:1d:f6:4c:c0:02:2f:54:80:fd:33:59:0b: fc:3f:97:ff:7a:0c:df:40:b8:70:05:41:7a:c3:a3: 70:ed:86:46:69:2c:5d:25:1d:02:67:75:1f:1f:27: e9:81:eb:a2:fb:f0:70:43:3d:e3:d7:3d:56:d7:06: 49:28:59:70:95:c2:0f:f7:e9:92:a5:31:fb:81:75: 99:f0:a2:2f:45:b5:40:ca:06:b0:4c:50:51:f6:49: 0a:6f:55:33:b8:0b:c0:da:db:79:93:62:e7:45:8a: b7:4f:28:a4:1e:a9:c7:48:02:a3:b2:56:7c:3e:cb: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:51:E7:68:B4:C3:4F:D1:BA:C8:D4:9A:11:4D:FC:AC:51:C7:86:65 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1f:7c:6a:21:62:a6:52:db:20:ae:bb:2e:f7:d1:92:2c:c6: cd:ad:41:87:e7:e7:91:e0:68:e5:c7:6e:9e:b1:8d:7f:3d:fa: 7c:57:fb:ef:f7:89:f2:62:c2:1d:29:73:bb:76:c5:52:8a:22: 80:55:36:5b:9a:1b:5c:f1:0b:aa:3a:48:80:84:60:75:ae:30: 4e:98:dc:0a:e7:96:0d:f8:c6:50:39:fc:7f:4c:10:ec:97:b6: d1:09:46:dd:ee:f5:ec:1d:0f:76:fe:20:22:d4:2f:a0:3d:27: e2:3c:1c:d8:0f:25:6a:3a:59:30:f2:50:84:6a:1c:da:4c:8b: 36:1c:38:39:05:4a:d2:b8:f5:da:14:bd:45:be:ea:bd:53:c8: c8:a6:5f:f0:77:0b:dc:e6:54:d6:1a:ab:53:05:1b:f4:31:9c: 74:ec:6a:2e:4c:42:7d:7f:ef:b4:7a:1f:e5:ac:1f:aa:8b:83: 41:80:e3:45:76:ff:e5:87:73:3e:e8:c7:f6:30:8c:c1:90:b3: 71:95:a2:4c:9f:d9:50:c6:0b:f4:cc:72:cf:87:1f:91:79:2a: e3:de:94:12:a5:d2:0e:e4:8e:44:f2:99:cf:07:7f:78:59:0f: 33:2c:8d:d4:24:c0:bf:7f:b4:db:90:fa:6a:bb:5e:46:eb:ea: e2:b0:bc:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjYwNzI3MDM0NTQ3WhcNMjYwODAzMDM0NTQ3WjAYMRYwFAYD VQQDEw02YTY2ZDQ2Yi04ZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34Z8Pb93ZtzZcO1GEfXoW/3pmVSdcWRnSg020LY3oYDmV3TpdztAyalRTZu0 6cLlb1bohDwzNM8m6twzh+lowy6VRM78yb6RuSZIEzwf0vPFc3ri5ZpA6zQ4/oar auOEEKRib1MZkFPJyboFdrz7mzHE+ksWmhALF8BDdY1jDtlj2ju31WH589od9kzA Ai9UgP0zWQv8P5f/egzfQLhwBUF6w6Nw7YZGaSxdJR0CZ3UfHyfpgeui+/BwQz3j 1z1W1wZJKFlwlcIP9+mSpTH7gXWZ8KIvRbVAygawTFBR9kkKb1UzuAvA2tt5k2Ln RYq3TyikHqnHSAKjslZ8PssOoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJR52i0 w0/RusjUmhFN/KxRx4ZlMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnh98aiFiplLbIK67LvfRkizGza1Bh+fnkeBo5cdunrGNfz36fFf77/eJ8mLC HSlzu3bFUooigFU2W5obXPELqjpIgIRgda4wTpjcCueWDfjGUDn8f0wQ7Je20QlG 3e717B0Pdv4gItQvoD0n4jwc2A8lajpZMPJQhGoc2kyLNhw4OQVK0rj12hS9Rb7q vVPIyKZf8HcL3OZU1hqrUwUb9DGcdOxqLkxCfX/vtHof5awfqouDQYDjRXb/5Ydz PujH9jCMwZCzcZWiTJ/ZUMYL9Mxyz4cfkXkq496UEqXSDuSORPKZzwd/eFkPMyyN 1CTAv3+025D6arteRuvq4rC8Lg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:55:55 2026 by rpki-client