$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft File: XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json) Hash identifier: 5fp7TL/sfRpzpGtWRKLHMhAse0S9Q8+ph3i1hypi+3c= Subject key identifier: DD:4C:D1:58:B2:2B:7B:1F:31:EF:2E:40:1F:DE:F5:CB:A0:8C:5B:18 Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft Manifest number: 8A Signing time: Mon 27 Jul 2026 09:46:55 +0000 Manifest this update: Mon 27 Jul 2026 09:46:54 +0000 Manifest next update: Mon 03 Aug 2026 09:46:54 +0000 Files and hashes: 1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: efg+CzMPsPs90t4uyHhQbLDT6DBfjJN1W9q87QDO+Js=) 2: 6273B5964F6411F1B5990A8BC5833773.roa (hash: y3V7Ac3VRTVKkf/zwxo2Yj3w4U6T8D7jfnzMbqhRIFA=) 3: 40506BD64F6311F1B33586E9C4833773.roa (hash: /xujX/eflt5wRcWaBi7MbQ6JbnMkzZt1Nfl3vZK9gwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Validity Not Before: Jul 27 09:46:54 2026 GMT Not After : Aug 3 09:46:54 2026 GMT Subject: CN=6a67290e-06d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:8a:f4:fe:da:81:71:cc:de:6e:ad:d8:b7: 48:90:de:17:90:0b:b0:28:bd:84:85:96:fb:14:a6: d1:a6:c9:9b:44:3b:01:bf:08:ca:4d:39:7e:5f:bb: c3:a8:18:95:0d:9a:8c:2a:d5:8c:8f:5c:c7:94:3f: ea:e3:0e:d9:b3:f1:c3:e9:90:b9:4b:c0:cf:52:2b: 0f:01:aa:77:66:ff:70:ca:5b:b3:24:38:99:ba:7a: c0:33:65:ae:8c:d2:d5:87:4e:91:3e:e7:11:cf:9e: f5:31:64:11:8a:8d:87:cb:41:d6:e4:56:23:4f:15: 25:dc:30:d9:4b:24:19:c3:f2:b3:32:7c:90:14:0f: 04:d5:68:cf:52:e2:7f:4f:ad:a0:8e:fa:f7:67:64: b1:1c:78:d2:3b:68:45:90:29:08:52:46:43:20:c1: 20:4a:d5:42:9a:ec:a5:fa:e7:c1:7e:69:5e:af:cd: 7e:75:d1:95:7c:df:67:20:66:4b:2a:e7:14:c9:ba: 52:53:55:41:70:7e:f7:68:a2:1b:5f:d5:c6:cc:09: 47:49:e5:1e:98:f4:f3:73:12:2d:0a:b4:95:52:21: db:89:60:39:a8:ef:05:5e:f8:61:fc:e1:ca:db:a6: 3f:46:af:01:1f:4b:01:60:72:4a:e9:fe:ef:2d:d6: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4C:D1:58:B2:2B:7B:1F:31:EF:2E:40:1F:DE:F5:CB:A0:8C:5B:18 X509v3 Authority Key Identifier: keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:27:7b:81:a1:7f:8f:5d:17:f9:c1:7a:3d:29:c5:b5:13:a9: 3d:c8:7c:47:cd:59:28:25:7c:3c:e8:4b:5d:30:33:d4:fa:a2: 8c:e1:f0:42:f7:f7:35:12:ea:c7:55:50:69:48:59:ec:b7:ce: d0:b9:8b:1f:66:a2:e5:9d:c6:d5:a8:7e:ca:2f:f9:4f:11:97: 3d:50:c6:72:b6:93:94:51:95:35:e9:4d:3b:c6:85:29:8f:f6: 6d:81:11:d5:03:3b:d7:c3:3b:c5:41:8f:24:73:30:70:b2:56: 74:6b:b1:e5:b5:58:b7:87:00:09:7c:3d:06:21:87:dc:9d:94: 3b:1f:1c:c5:36:34:93:f6:cb:62:cb:61:a1:bd:fb:d0:66:cd: 30:c1:81:ed:62:f1:ee:95:4a:a4:89:3c:3d:c9:f5:35:18:8b: 8c:d9:e3:3c:9f:bb:15:20:5a:77:27:dc:3f:40:f3:75:12:69: 02:8f:89:68:22:71:11:d9:36:2a:b7:08:fc:2e:ba:4b:32:f5: c7:19:fb:48:4e:75:56:e1:dc:e3:17:e7:75:2e:5e:01:00:04: 2c:f9:74:b8:67:98:4b:b9:cc:7e:e4:5b:50:62:ec:0d:9a:b4: 2b:0f:dd:7f:c8:6b:61:b8:13:ff:1d:b0:55:fc:df:66:96:83: 20:f3:5d:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNBNUIxMTAvBgNVBAUTKDVENEY0MTJBRTQ4MDEwRkU1NDg3RjAxOEYxNzFBOUM2 NDY5RDlBQzUwHhcNMjYwNzI3MDk0NjU0WhcNMjYwODAzMDk0NjU0WjAYMRYwFAYD VQQDEw02YTY3MjkwZS0wNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DKK9P7agXHM3m6t2LdIkN4XkAuwKL2EhZb7FKbRpsmbRDsBvwjKTTl+X7vD qBiVDZqMKtWMj1zHlD/q4w7Zs/HD6ZC5S8DPUisPAap3Zv9wyluzJDiZunrAM2Wu jNLVh06RPucRz571MWQRio2Hy0HW5FYjTxUl3DDZSyQZw/KzMnyQFA8E1WjPUuJ/ T62gjvr3Z2SxHHjSO2hFkCkIUkZDIMEgStVCmuyl+ufBfmler81+ddGVfN9nIGZL KucUybpSU1VBcH73aKIbX9XGzAlHSeUemPTzcxItCrSVUiHbiWA5qO8FXvhh/OHK 26Y/Rq8BH0sBYHJK6f7vLdYCAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1M0Viy K3sfMe8uQB/e9cugjFsYMB8GA1UdIwQYMBaAFF1PQSrkgBD+VIfwGPFxqcZGnZrF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0E1Qi9EMjVEODY4RUMw M0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQNVVoX0FZOFhHcHhrYWRt c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1zVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0E1Qi9EMjVEODY4RUMwM0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQ NVVoX0FZOFhHcHhrYWRtc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuCd7gaF/j10X+cF6PSnFtROpPch8R81ZKCV8POhLXTAz1PqijOHwQvf3NRLq x1VQaUhZ7LfO0LmLH2ai5Z3G1ah+yi/5TxGXPVDGcraTlFGVNelNO8aFKY/2bYER 1QM718M7xUGPJHMwcLJWdGux5bVYt4cACXw9BiGH3J2UOx8cxTY0k/bLYsthob37 0GbNMMGB7WLx7pVKpIk8Pcn1NRiLjNnjPJ+7FSBadyfcP0DzdRJpAo+JaCJxEdk2 KrcI/C66SzL1xxn7SE51VuHc4xfndS5eAQAELPl0uGeYS7nMfuRbUGLsDZq0Kw/d f8hrYbgT/x2wVfzfZpaDIPNdPg== -----END CERTIFICATE-----Generated at Tue Jul 28 17:17:01 2026 by rpki-client