$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft File: XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json) Hash identifier: lFHh4NhyELVZlRdkOGgzCXXzqBkaAZze3IDnsbiZSEE= Subject key identifier: FF:E5:08:D2:DF:53:E2:BF:C7:31:11:E8:75:8B:0F:6B:F1:72:8F:9F Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE Certificate issuer: /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft Manifest number: 011A Signing time: Mon 27 Jul 2026 08:03:38 +0000 Manifest this update: Mon 27 Jul 2026 08:03:37 +0000 Manifest next update: Mon 03 Aug 2026 08:03:37 +0000 Files and hashes: 1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: QcWeswq4MQzldQKOYVqvYl93bkrdwWq6cyvcbZ1k3U4=) 2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: 72tND6FYfSKJu0sQNqpeEtwTYhVCnqpq4nZnR1IjkYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE Validity Not Before: Jul 27 08:03:37 2026 GMT Not After : Aug 3 08:03:37 2026 GMT Subject: CN=6a6710da-9cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:65:b3:09:92:76:93:24:db:c2:a3:ac:4b:cf: 2b:5a:d6:b7:bd:c9:e3:cb:99:22:f6:a2:3f:a7:04: cf:54:d1:a9:12:95:b9:0d:99:19:dd:bf:c0:12:16: 40:9b:b9:ee:6f:a2:e9:de:77:b9:28:2b:50:8b:fc: 7c:21:15:0f:25:ae:09:8f:7a:20:69:56:1d:b8:c5: 41:3b:b3:19:5b:87:70:fd:2d:0d:37:de:7e:26:be: 68:69:bf:07:ae:88:25:5a:4f:4c:d3:78:ba:bc:e0: 04:05:5c:0f:5b:70:65:a0:76:d7:2c:c1:68:c7:15: 7f:0f:7e:77:8f:c3:76:16:e0:1b:d5:4f:88:87:8b: 29:30:da:cb:3a:c9:cf:1a:72:94:8d:2d:c1:81:ac: 16:fc:61:dd:35:85:7d:5b:a3:6a:1c:c9:24:49:52: 2b:2f:12:89:9e:27:d1:eb:4b:33:18:3c:39:bb:59: 1b:b2:f4:04:10:dd:5a:8c:83:a5:b2:0c:69:07:71: f1:1f:3c:4f:bb:56:ce:5a:a4:69:af:e4:3d:ce:0a: 03:7f:f0:80:e6:73:66:33:27:19:e8:56:45:8f:48: dd:56:81:d5:8d:a7:80:80:a9:2f:43:a1:fd:03:dd: 1e:f0:ff:25:bf:3d:be:f7:bd:a3:28:50:86:2c:4b: 54:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E5:08:D2:DF:53:E2:BF:C7:31:11:E8:75:8B:0F:6B:F1:72:8F:9F X509v3 Authority Key Identifier: keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:60:eb:08:34:13:25:c2:c7:09:7f:73:6f:0f:8f:42:83:f2: 27:fa:df:fb:42:a0:e5:18:95:85:8c:2c:85:46:b5:95:c5:f3: d2:65:22:29:c3:fa:cc:91:eb:71:0d:fb:a1:b8:c2:3b:b8:60: a4:84:87:b4:8e:50:df:a7:97:83:34:78:42:77:4a:9a:05:39: 6c:3d:54:92:1a:ff:6f:ff:de:0e:73:4a:99:2b:23:8f:03:93: c7:30:b7:94:d8:0c:3b:1d:c4:f1:d5:16:dc:be:44:e9:1b:e3: 6d:17:34:61:ee:51:c6:0f:17:fe:05:c6:77:37:2a:0f:42:ae: 65:43:6d:68:83:89:bd:d4:0a:ce:e8:99:de:f5:91:e1:17:70: 2a:88:0e:ff:c1:e7:b5:1b:23:4c:f9:79:46:82:51:f4:9b:c9: cb:41:2d:f3:e3:5b:f0:1a:4a:a7:f1:75:32:7b:e4:8f:3e:70: 9d:15:b0:34:e2:a7:9d:1b:de:c7:b7:67:0e:19:d2:bc:85:da: 3f:d3:e5:5e:1a:78:03:30:40:0c:c5:2e:71:99:6d:af:a5:ca: 3a:8a:c0:c3:9c:0a:76:ec:11:8d:ee:15:d3:96:56:07:2a:26: 8f:3d:ff:14:69:2a:b0:1d:0a:df:dd:25:89:44:88:76:66:fd: 12:22:66:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGOTAxMTAvBgNVBAUTKDVDMEEzNTIzRkQzNjQ1QTc2MzVBRjI1MTlBRENEMDAy RTEzMkZCQ0UwHhcNMjYwNzI3MDgwMzM3WhcNMjYwODAzMDgwMzM3WjAYMRYwFAYD VQQDEw02YTY3MTBkYS05Y2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WWzCZJ2kyTbwqOsS88rWta3vcnjy5ki9qI/pwTPVNGpEpW5DZkZ3b/AEhZA m7nub6Lp3ne5KCtQi/x8IRUPJa4Jj3ogaVYduMVBO7MZW4dw/S0NN95+Jr5oab8H roglWk9M03i6vOAEBVwPW3BloHbXLMFoxxV/D353j8N2FuAb1U+Ih4spMNrLOsnP GnKUjS3BgawW/GHdNYV9W6NqHMkkSVIrLxKJnifR60szGDw5u1kbsvQEEN1ajIOl sgxpB3HxHzxPu1bOWqRpr+Q9zgoDf/CA5nNmMycZ6FZFj0jdVoHVjaeAgKkvQ6H9 A90e8P8lvz2+972jKFCGLEtUWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/lCNLf U+K/xzER6HWLD2vxco+fMB8GA1UdIwQYMBaAFFwKNSP9NkWnY1ryUZrc0ALhMvvO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEY5MC8wNDc3OUI5Q0VE ODExMUVGQTAwMzY2MTZDNEY5QUUwMi9YQW8xSV8wMlJhZGpXdkpSbXR6UUF1RXkt ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBbzFJXzAyUmFkald2SlJtdHpRQXVFeS04NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEY5MC8wNDc3OUI5Q0VEODExMUVGQTAwMzY2MTZDNEY5QUUwMi9YQW8xSV8wMlJh ZGpXdkpSbXR6UUF1RXktODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh2DrCDQTJcLHCX9zbw+PQoPyJ/rf+0Kg5RiVhYwshUa1lcXz0mUiKcP6zJHr cQ37objCO7hgpISHtI5Q36eXgzR4QndKmgU5bD1Ukhr/b//eDnNKmSsjjwOTxzC3 lNgMOx3E8dUW3L5E6RvjbRc0Ye5Rxg8X/gXGdzcqD0KuZUNtaIOJvdQKzuiZ3vWR 4RdwKogO/8HntRsjTPl5RoJR9JvJy0Et8+Nb8BpKp/F1Mnvkjz5wnRWwNOKnnRve x7dnDhnSvIXaP9PlXhp4AzBADMUucZltr6XKOorAw5wKduwRje4V05ZWByomjz3/ FGkqsB0K390liUSIdmb9EiJmFg== -----END CERTIFICATE-----Generated at Wed Jul 29 05:50:18 2026 by rpki-client