$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft File: XiBrZUYXUm6oHe9p1A3KkMONpJM.mft (raw, json) Hash identifier: IBwtU+RrA9L/I+of6E/2gcz7KG3ws3kjAGZROVi9TQw= Subject key identifier: 0C:54:7E:2E:FC:C2:78:97:65:14:3F:41:13:28:DB:83:5D:B4:6E:0B Authority key identifier: 5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 Certificate issuer: /CN=A91C7106/serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft Manifest number: 0C Signing time: Mon 27 Jul 2026 11:32:13 +0000 Manifest this update: Mon 27 Jul 2026 11:32:13 +0000 Manifest next update: Mon 03 Aug 2026 11:32:13 +0000 Files and hashes: 1: XiBrZUYXUm6oHe9p1A3KkMONpJM.crl (hash: hFlt1ZfutOzIVL0tMmBjz+Y0zUAm8YCgaZrPB4mAoC4=) 2: 403D780079AC11F1A4BD68E295A30FBC.roa (hash: PX6Hn6xK6Ug95lfOomfVfmyROaB7znZe36dnapQD0gE=) 3: 40CA1FF879AC11F1A4BD68E295A30FBC.roa (hash: dxvzMh7pViI4BlQNkWmxdOF/VYXouPMtNS8/qBafvbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7106, serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Validity Not Before: Jul 27 11:32:13 2026 GMT Not After : Aug 3 11:32:13 2026 GMT Subject: CN=6a6741bd-a5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d4:2b:29:32:5d:aa:de:6b:5a:cd:b8:78:03: 83:38:59:1d:dd:00:c3:15:d6:d3:a0:4c:63:63:c6: ef:92:f3:12:22:cf:41:27:94:dc:71:e5:cc:90:9b: 84:9c:47:51:b7:43:38:28:61:51:02:3e:6a:0e:99: 8c:d9:85:1f:2f:ea:44:38:a8:bc:3e:96:cc:3a:02: d1:1d:2f:33:f7:f7:8f:56:de:36:21:9b:ff:5e:fc: 8b:39:79:ed:96:b4:d8:fe:9b:e6:73:4d:0e:21:ee: 70:a5:f7:fb:df:5a:82:3e:48:3e:a2:c2:f9:42:55: 37:ec:c1:fd:16:b9:54:4a:94:1d:84:ea:04:ce:79: 7f:da:96:61:a4:9d:55:33:fb:c6:71:e1:f9:60:f2: 7c:79:dd:29:f6:06:4c:b3:a4:b3:50:16:48:c0:a6: 26:dc:48:e3:98:71:69:bb:c3:0f:98:3a:17:cf:7f: fd:89:bb:ee:dd:30:78:59:2f:ef:3b:ed:10:14:a6: 3c:c0:ee:c6:eb:51:b2:c5:33:c8:1b:d3:de:a9:9b: f2:3a:a0:b2:dd:17:d0:89:76:2a:7b:4a:5e:0f:36: be:99:42:2b:9d:22:5d:0c:ad:55:ef:38:1b:37:65: 30:06:a8:3b:10:18:2b:66:37:7d:ef:e7:0b:1a:75: 2f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:54:7E:2E:FC:C2:78:97:65:14:3F:41:13:28:DB:83:5D:B4:6E:0B X509v3 Authority Key Identifier: keyid:5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2a:53:6c:73:68:ad:77:be:05:37:8b:e0:0a:88:50:5c:80: 47:2c:95:7b:1c:03:49:59:1c:48:6e:02:21:76:e9:1d:31:b4: 62:d8:86:2b:c4:a4:16:a7:64:4a:bd:bf:4d:39:b5:fb:70:b5: 38:a2:50:81:b6:01:16:80:2e:b3:36:1b:0c:9c:24:32:c8:bb: 20:3d:7d:d7:0a:ac:e8:d2:96:5f:8d:cd:d1:83:01:b7:e5:e9: b2:dd:a4:09:64:f2:dd:1d:ea:ab:63:42:70:db:93:40:c2:e7: 71:87:a2:2f:a8:10:99:88:54:f5:26:cd:ae:4c:55:3a:62:26: 48:6f:bc:79:d3:ad:6e:d1:74:74:1a:88:8f:aa:63:23:d7:26: 38:34:dc:9c:c1:ac:4e:fe:96:54:69:5f:dc:89:a6:5c:12:7d: 9b:b4:4d:a1:08:97:8e:8c:6c:17:47:32:83:49:8d:a8:2f:0f: 9a:b5:84:26:56:13:e4:4a:2b:35:f4:da:90:cb:38:5c:6c:b8: e5:79:e8:45:65:16:f0:90:05:40:67:b6:2c:53:7d:eb:74:70: 64:b3:58:67:fe:da:78:e9:a3:38:fa:2f:76:43:de:02:5a:ef: 72:b1:ca:7a:9c:07:21:51:e8:f2:20:aa:f1:2f:dc:a1:00:6a: fa:89:1c:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzEwNjExMC8GA1UEBRMoNUUyMDZCNjU0NjE3NTI2RUE4MURFRjY5RDQwRENBOTBD MzhEQTQ5MzAeFw0yNjA3MjcxMTMyMTNaFw0yNjA4MDMxMTMyMTNaMBgxFjAUBgNV BAMTDTZhNjc0MWJkLWE1ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe1CspMl2q3mtazbh4A4M4WR3dAMMV1tOgTGNjxu+S8xIiz0EnlNxx5cyQm4Sc R1G3QzgoYVECPmoOmYzZhR8v6kQ4qLw+lsw6AtEdLzP3949W3jYhm/9e/Is5ee2W tNj+m+ZzTQ4h7nCl9/vfWoI+SD6iwvlCVTfswf0WuVRKlB2E6gTOeX/almGknVUz +8Zx4flg8nx53Sn2BkyzpLNQFkjApibcSOOYcWm7ww+YOhfPf/2Ju+7dMHhZL+87 7RAUpjzA7sbrUbLFM8gb096pm/I6oLLdF9CJdip7Sl4PNr6ZQiudIl0MrVXvOBs3 ZTAGqDsQGCtmN33v5wsadS/FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDFR+LvzC eJdlFD9BEyjbg120bgswHwYDVR0jBBgwFoAUXiBrZUYXUm6oHe9p1A3KkMONpJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTA2LzdDRjE1RDgwNzlB QjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02b0hlOXAxQTNLa01PTnBK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlCclpVWVhVbTZvSGU5cDFBM0trTU9OcEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTA2LzdDRjE1RDgwNzlBQjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02 b0hlOXAxQTNLa01PTnBKTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjKlNsc2itd74FN4vgCohQXIBHLJV7HANJWRxIbgIhdukdMbRi2IYrxKQWp2RK vb9NObX7cLU4olCBtgEWgC6zNhsMnCQyyLsgPX3XCqzo0pZfjc3RgwG35emy3aQJ ZPLdHeqrY0Jw25NAwudxh6IvqBCZiFT1Js2uTFU6YiZIb7x5061u0XR0GoiPqmMj 1yY4NNycwaxO/pZUaV/ciaZcEn2btE2hCJeOjGwXRzKDSY2oLw+atYQmVhPkSis1 9NqQyzhcbLjleehFZRbwkAVAZ7YsU33rdHBks1hn/tp46aM4+i92Q94CWu9yscp6 nAchUejyIKrxL9yhAGr6iRyP -----END CERTIFICATE-----Generated at Tue Jul 28 19:01:00 2026 by rpki-client