$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: 8PO0ZFM+xq6PY/od3S1a23j8qeEkFKcZtkX+xL4nnXQ= Subject key identifier: B4:C3:AD:DC:FC:D6:55:D5:F4:96:CB:A4:90:37:5E:03:BF:84:E5:79 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 35A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 3585 Signing time: Tue 28 Jul 2026 14:49:34 +0000 Manifest this update: Tue 28 Jul 2026 14:49:34 +0000 Manifest next update: Tue 04 Aug 2026 14:49:34 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: pgG1KCLryBq07pmvi9spiP+N1dlsaVMxA8eoTpc1KbA=) 2: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: INnaV0pNcRBw1wlHuRp8r9xMtrJx1g7hzwjOKtk2crw=) 3: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: u0liUKUx/5cqgAqMwjK3Jr9++ba1PKf6CQYNnuhwu/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13730 (0x35a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Jul 28 14:49:34 2026 GMT Not After : Aug 4 14:49:34 2026 GMT Subject: CN=6a68c17e-557e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:b1:12:e4:08:66:a4:ce:c3:b8:96:fd:d0: 91:62:71:c4:ab:dd:fe:ff:6d:40:09:92:a7:3a:f2: 7d:72:09:bd:c3:5e:51:b9:52:e9:39:70:58:95:15: 07:91:59:90:ac:89:cd:e9:d5:60:9a:3f:f5:93:e5: 77:18:45:3d:81:74:bc:50:cd:61:7f:89:2f:36:3d: b7:53:1d:33:20:99:a2:a1:81:d2:4e:73:2f:f9:f8: 53:e2:0f:f8:01:36:39:0d:b8:3f:a0:67:37:d4:2a: 7c:fb:b4:9a:fc:2a:78:ac:70:4d:e5:e1:50:a0:a0: cf:a4:00:df:1b:33:4d:54:a6:68:49:70:c6:20:d9: e1:7d:66:d1:e1:06:7e:9f:9e:84:12:b7:42:9f:b1: 0e:e4:91:ea:a5:00:27:bf:5f:f3:5d:9c:f7:c3:14: f3:2b:88:d0:a5:ad:03:4c:cc:98:4b:6e:de:62:a8: 5e:5e:bf:7b:47:c0:88:da:5a:c6:4a:ab:ff:43:7c: ee:f0:6d:ff:e5:98:63:1d:98:8b:84:8e:ea:6c:f0: 0b:23:65:91:5a:98:a2:24:6b:ec:3c:ee:76:b9:80: 46:3e:82:7e:99:66:a9:62:b6:b8:07:fb:17:b6:82: a5:02:fe:31:51:df:19:56:15:9d:fe:07:83:2b:f8: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C3:AD:DC:FC:D6:55:D5:F4:96:CB:A4:90:37:5E:03:BF:84:E5:79 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:46:72:56:73:fc:79:59:dc:8a:3e:4c:3b:58:a2:b5:05:c8: 79:86:f1:c4:3f:a4:55:91:bd:d4:a5:be:81:6f:29:05:af:6a: 32:56:de:1c:89:f5:47:96:f3:55:35:54:15:03:4b:68:f9:38: c3:2c:cc:48:b4:ee:39:36:c4:78:cb:f3:05:4b:26:ac:a0:af: be:3b:7d:6d:fc:1c:f2:59:96:0c:7a:fb:52:34:de:44:1b:69: 54:8c:43:ce:68:f2:0f:ab:22:01:19:fd:a0:be:dd:5b:ce:6a: 73:88:28:32:81:0c:92:2a:33:e2:7a:df:91:07:9a:0c:34:60: 71:6c:87:d1:88:a6:4e:6b:de:42:af:2e:06:4a:5e:0b:62:b3: 3a:2c:6a:98:d1:07:24:fd:0e:a5:41:c0:17:61:bb:f0:f9:00: 8d:2d:e8:40:9b:e7:47:31:ba:7f:cf:35:7a:c7:42:3f:9f:49: 50:72:c4:e3:31:a4:be:39:b3:1e:ae:eb:0f:7e:0d:65:10:57: 86:d1:88:e4:22:cd:01:40:4e:11:3e:cb:8e:8d:61:86:55:7a: f8:6d:b4:dc:bd:4f:45:62:e1:cd:73:b8:97:f1:05:4b:ae:b4: e5:59:8f:b5:51:cc:72:3e:ec:a0:7d:38:ef:a8:b6:e9:aa:0d: 68:59:5e:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjYwNzI4MTQ0OTM0WhcNMjYwODA0MTQ0OTM0WjAYMRYwFAYD VQQDEw02YTY4YzE3ZS01NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmi6xEuQIZqTOw7iW/dCRYnHEq93+/21ACZKnOvJ9cgm9w15RuVLpOXBYlRUH kVmQrInN6dVgmj/1k+V3GEU9gXS8UM1hf4kvNj23Ux0zIJmioYHSTnMv+fhT4g/4 ATY5Dbg/oGc31Cp8+7Sa/Cp4rHBN5eFQoKDPpADfGzNNVKZoSXDGINnhfWbR4QZ+ n56EErdCn7EO5JHqpQAnv1/zXZz3wxTzK4jQpa0DTMyYS27eYqheXr97R8CI2lrG Sqv/Q3zu8G3/5ZhjHZiLhI7qbPALI2WRWpiiJGvsPO52uYBGPoJ+mWapYra4B/sX toKlAv4xUd8ZVhWd/geDK/jcRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTDrdz8 1lXV9JbLpJA3XgO/hOV5MB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkZyVnP8eVncij5MO1iitQXIeYbxxD+kVZG91KW+gW8pBa9qMlbeHIn1R5bz VTVUFQNLaPk4wyzMSLTuOTbEeMvzBUsmrKCvvjt9bfwc8lmWDHr7UjTeRBtpVIxD zmjyD6siARn9oL7dW85qc4goMoEMkioz4nrfkQeaDDRgcWyH0YimTmveQq8uBkpe C2KzOixqmNEHJP0OpUHAF2G78PkAjS3oQJvnRzG6f881esdCP59JUHLE4zGkvjmz Hq7rD34NZRBXhtGI5CLNAUBOET7Ljo1hhlV6+G203L1PRWLhzXO4l/EFS6605VmP tVHMcj7soH0476i26aoNaFleEw== -----END CERTIFICATE-----Generated at Wed Jul 29 12:28:48 2026 by rpki-client