$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: ZsFb19+6IfDVbl+zXD1lSjKphvM9MMfMJRGs3DQvvBs= Subject key identifier: 9B:38:87:18:9D:91:27:F7:E1:5F:01:70:DD:E8:D8:B3:A7:17:69:F5 Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 95 Signing time: Mon 27 Jul 2026 09:37:31 +0000 Manifest this update: Mon 27 Jul 2026 09:37:30 +0000 Manifest next update: Mon 03 Aug 2026 09:37:30 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: 6aa51nyuaXXexz/lj8nzrddWbLKesTDp6hygqywqWBw=) 2: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: 9hr6Mrcekj4wBtLXcM+jj6TwfopvR4qZFirKjaGVgSI=) 3: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: /VVN1pVbvBgJGM41ZpQK+E66Yb+yIlM6xDFzrudcVdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Jul 27 09:37:30 2026 GMT Not After : Aug 3 09:37:30 2026 GMT Subject: CN=6a6726db-2961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:83:83:91:2d:8c:e4:d9:b7:54:c9:d3:f6: 5c:95:8a:a1:07:4e:22:c4:2d:49:05:3d:4c:3c:7b: a5:8b:6a:d7:8f:e5:21:17:d9:81:52:2e:ce:6a:a7: 81:70:70:5c:2a:40:f8:59:bc:dd:39:9e:df:a4:2e: fd:1e:53:40:2e:97:51:48:da:c7:9b:0a:fc:4b:6d: 22:b9:bc:e0:53:bc:c7:a2:25:1d:ae:90:c8:93:08: b3:e8:74:0b:ba:06:63:4d:b6:04:9f:c9:92:d7:9c: 06:f4:73:7d:9f:30:dd:d5:ee:69:15:3d:9e:78:6e: c4:61:fc:49:bb:6e:0c:84:cf:41:fb:6e:74:cb:54: ad:7b:6e:0f:81:9e:86:e5:b1:8d:64:98:a5:8d:11: f2:06:05:70:2a:6e:75:00:35:9e:5b:f9:3b:47:ed: 3e:31:34:32:ed:d4:ad:df:51:a7:a3:e6:70:fd:30: 8d:df:09:f9:9c:d7:24:db:cd:89:f1:38:e3:2a:96: c6:09:0e:da:f2:e4:50:70:d6:26:85:88:af:ec:3f: da:b6:06:ad:db:16:07:29:b3:54:fe:c8:99:ac:db: df:42:f1:e1:2b:b8:56:82:e3:c0:ee:47:b1:f0:e1: 09:cd:6e:b1:57:8e:5e:9d:88:c3:ff:76:f6:0e:d9: 2d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:38:87:18:9D:91:27:F7:E1:5F:01:70:DD:E8:D8:B3:A7:17:69:F5 X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9a:0e:a2:87:81:40:66:1c:d3:d5:ac:63:1b:82:12:0d:4e: de:b2:7f:08:1b:4f:b4:a9:10:d4:4a:79:4f:d9:44:36:7d:68: a1:50:b2:59:42:10:dc:3e:6e:71:6f:6e:60:d2:b4:b9:91:d6: 04:88:24:b7:0d:13:f7:8f:f7:7d:a2:7a:69:35:1b:7f:ef:29: 30:0d:7c:06:d5:34:14:c4:e0:9a:d4:d7:9f:86:fe:cc:64:9c: 58:97:3b:8f:bc:cc:1c:be:75:df:6e:12:c3:fe:a9:82:70:d8: 5b:e5:77:1c:43:17:26:a3:7e:f9:5c:40:8c:fa:68:23:5a:5b: 4c:58:9f:29:5f:46:41:26:d4:63:7a:12:eb:4d:86:5b:e1:95: 03:ab:a4:07:27:95:a9:92:e1:1b:5c:d2:44:38:a4:c9:8f:23: d9:50:fa:2a:2b:11:d3:3b:d6:25:47:ed:18:85:34:0d:89:aa: f5:06:4b:15:f2:41:80:50:c1:cd:4c:66:78:a2:a7:7b:3a:69: b3:8d:04:83:c2:0e:13:1d:0d:a3:a3:66:42:28:ba:03:ff:be: d0:9b:55:cc:1d:2a:84:96:27:86:88:d7:57:23:47:2d:02:85: 61:de:22:b8:ba:dd:62:49:e5:30:c8:e5:45:75:a3:4c:68:8b: a3:98:7a:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I2RTgxMTAvBgNVBAUTKDVEREZERDM4MzE1NkZBNUI2NTM0MTEyRTlDOEUxNTNC QjIwMDU3QzYwHhcNMjYwNzI3MDkzNzMwWhcNMjYwODAzMDkzNzMwWjAYMRYwFAYD VQQDEw02YTY3MjZkYi0yOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4iDg5EtjOTZt1TJ0/ZclYqhB04ixC1JBT1MPHuli2rXj+UhF9mBUi7OaqeB cHBcKkD4WbzdOZ7fpC79HlNALpdRSNrHmwr8S20iubzgU7zHoiUdrpDIkwiz6HQL ugZjTbYEn8mS15wG9HN9nzDd1e5pFT2eeG7EYfxJu24MhM9B+250y1Ste24PgZ6G 5bGNZJiljRHyBgVwKm51ADWeW/k7R+0+MTQy7dSt31Gno+Zw/TCN3wn5nNck282J 8TjjKpbGCQ7a8uRQcNYmhYiv7D/atgat2xYHKbNU/siZrNvfQvHhK7hWguPA7kex 8OEJzW6xV45enYjD/3b2DtktcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJs4hxid kSf34V8BcN3o2LOnF2n1MB8GA1UdIwQYMBaAFF3f3TgxVvpbZTQRLpyOFTuyAFfG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjZFOC9GOUIwMjg4OEFF RkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1sdGxOQkV1bkk0Vk83SUFW OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjZFOC9GOUIwMjg4OEFFRkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1s dGxOQkV1bkk0Vk83SUFWOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfpoOooeBQGYc09WsYxuCEg1O3rJ/CBtPtKkQ1Ep5T9lENn1ooVCyWUIQ3D5u cW9uYNK0uZHWBIgktw0T94/3faJ6aTUbf+8pMA18BtU0FMTgmtTXn4b+zGScWJc7 j7zMHL51324Sw/6pgnDYW+V3HEMXJqN++VxAjPpoI1pbTFifKV9GQSbUY3oS602G W+GVA6ukByeVqZLhG1zSRDikyY8j2VD6KisR0zvWJUftGIU0DYmq9QZLFfJBgFDB zUxmeKKnezpps40Eg8IOEx0No6NmQii6A/++0JtVzB0qhJYnhojXVyNHLQKFYd4i uLrdYknlMMjlRXWjTGiLo5h69w== -----END CERTIFICATE-----Generated at Tue Jul 28 17:19:36 2026 by rpki-client