$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: i7XvfjFPzyRrPqJahKsB+kB7iO3BiSxu+eEVvCX6XDk= Subject key identifier: 79:9C:EE:DB:59:4C:E2:C5:31:9C:BD:1E:BA:08:CC:73:C0:92:49:77 Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 3A Signing time: Mon 27 Jul 2026 10:55:39 +0000 Manifest this update: Mon 27 Jul 2026 10:55:39 +0000 Manifest next update: Mon 03 Aug 2026 10:55:39 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: zcutvCPmL348Dz6njvfQLK1T6zXqhQ7HNZm1lh90xVc=) 2: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) 3: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: Jul 27 10:55:39 2026 GMT Not After : Aug 3 10:55:39 2026 GMT Subject: CN=6a67392b-77c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:60:71:23:ca:70:e6:8e:7e:7a:76:a7:7f: 04:39:ea:42:aa:97:de:0b:8f:5e:20:b1:10:e8:e9: 8c:cd:f0:69:c2:ac:d6:7b:d0:ed:b7:e9:8c:f3:b1: 36:3c:1d:64:26:70:7d:a5:58:87:fc:ab:2e:8c:fb: 13:b0:40:27:eb:99:87:03:a9:e8:f0:a8:dc:1a:7e: 5a:bb:ea:a7:4e:05:87:b2:5c:d5:99:e1:ee:ad:43: 3b:55:cd:d7:73:f0:75:8c:19:55:5f:ca:b1:86:99: f2:f6:8e:5b:39:74:ef:c4:0d:0b:b5:48:c6:37:83: 50:a9:93:c8:81:0c:ab:e4:19:f9:af:aa:7c:8d:61: f1:f3:e2:9c:5a:01:37:c6:8f:3c:b9:14:b6:64:c9: 00:40:ef:94:a5:6b:ce:4d:e9:1a:7b:f7:92:d0:ad: 1c:67:5b:04:42:25:fd:69:09:a3:90:8d:47:8b:43: 58:e9:56:1e:f5:23:a6:a1:98:d8:39:cc:f8:d6:b0: 4b:8f:d9:08:06:a9:fe:cf:e9:01:56:2a:f4:57:01: 0b:3f:3a:24:3c:b2:d5:3c:b5:9e:b6:41:cb:87:f8: 36:bb:20:12:72:87:af:68:70:d7:64:28:b5:fb:11: 4e:50:86:46:6b:9d:02:cb:05:0f:ac:f6:c7:89:09: fe:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9C:EE:DB:59:4C:E2:C5:31:9C:BD:1E:BA:08:CC:73:C0:92:49:77 X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ac:c8:a5:e0:74:13:4c:93:99:aa:20:df:9e:fa:d9:8d:06: d2:c6:6d:86:e6:91:e0:46:cf:3a:7e:ed:f6:90:f2:a8:96:86: d7:e3:34:72:47:3e:2a:02:c8:4c:c3:35:07:73:72:e8:f4:fc: b5:4b:80:76:dd:f1:3e:98:87:3a:7e:fd:86:4c:f3:fd:52:82: 10:3c:21:76:a7:f7:be:99:53:5c:65:a1:b2:a0:dc:a1:c3:f8: 22:b9:ae:e1:d4:70:33:10:2b:0c:28:66:9b:6d:ac:68:7d:1a: 67:fe:a4:88:87:d6:66:d6:55:77:a7:77:db:65:bf:9b:54:15: bb:6c:c2:aa:f2:2b:2d:48:08:8a:77:be:e5:ae:0b:97:c3:a0: 9b:d4:db:44:c8:2a:96:9c:b7:e2:87:52:72:1d:26:78:d3:54: 7c:0e:f1:6b:76:10:1d:2a:08:1d:62:64:eb:49:26:8b:46:57: 29:cc:6f:23:7c:ef:66:f2:b7:c0:b1:70:b8:bc:ab:30:58:de: bb:e8:53:bd:f9:7f:95:3b:2d:0c:95:f1:24:de:cc:d1:cf:58: b3:55:39:8e:49:a6:99:2d:4c:df:ec:f5:cc:9d:79:d1:d7:6f: a5:e5:72:d6:27:22:0e:51:39:c5:37:e0:62:67:4b:60:05:3b: f8:f6:e6:06 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjA3MjcxMDU1MzlaFw0yNjA4MDMxMDU1MzlaMBgxFjAUBgNV BAMTDTZhNjczOTJiLTc3YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF/2BxI8pw5o5+enanfwQ56kKql94Lj14gsRDo6YzN8GnCrNZ70O236YzzsTY8 HWQmcH2lWIf8qy6M+xOwQCfrmYcDqejwqNwaflq76qdOBYeyXNWZ4e6tQztVzddz 8HWMGVVfyrGGmfL2jls5dO/EDQu1SMY3g1Cpk8iBDKvkGfmvqnyNYfHz4pxaATfG jzy5FLZkyQBA75Sla85N6Rp795LQrRxnWwRCJf1pCaOQjUeLQ1jpVh71I6ahmNg5 zPjWsEuP2QgGqf7P6QFWKvRXAQs/OiQ8stU8tZ62QcuH+Da7IBJyh69ocNdkKLX7 EU5QhkZrnQLLBQ+s9seJCf53AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeZzu21lM 4sUxnL0eugjMc8CSSXcwHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPrMil4HQTTJOZqiDfnvrZjQbSxm2G5pHgRs86fu32kPKolobX4zRyRz4qAshM wzUHc3Lo9Py1S4B23fE+mIc6fv2GTPP9UoIQPCF2p/e+mVNcZaGyoNyhw/giua7h 1HAzECsMKGabbaxofRpn/qSIh9Zm1lV3p3fbZb+bVBW7bMKq8istSAiKd77lrguX w6Cb1NtEyCqWnLfih1JyHSZ401R8DvFrdhAdKggdYmTrSSaLRlcpzG8jfO9m8rfA sXC4vKswWN676FO9+X+VOy0MlfEk3szRz1izVTmOSaaZLUzf7PXMnXnR12+l5XLW JyIOUTnFN+BiZ0tgBTv49uYG -----END CERTIFICATE-----Generated at Wed Jul 29 10:13:42 2026 by rpki-client