$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: IA1osLTSe9v85e+op3jVTgCf9gvXwdNi0+AsWjDWHPk= Subject key identifier: 2B:E4:B7:89:EC:49:D9:0E:87:40:3C:B4:CE:F8:EB:A6:CD:7D:E1:A9 Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 7F Signing time: Sat 13 Jun 2026 07:46:14 +0000 Manifest this update: Sat 13 Jun 2026 07:46:14 +0000 Manifest next update: Sat 20 Jun 2026 07:46:14 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: LTVn37xT0ckkIYhcOX3TMhavUvSCH3y+PHq4jrg2luQ=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: /VVN1pVbvBgJGM41ZpQK+E66Yb+yIlM6xDFzrudcVdc=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: 9hr6Mrcekj4wBtLXcM+jj6TwfopvR4qZFirKjaGVgSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Jun 13 07:46:14 2026 GMT Not After : Jun 20 07:46:14 2026 GMT Subject: CN=6a2d0ac6-3660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:ce:09:32:63:f1:ef:77:fd:19:ef:fb:02: 56:4b:c1:e1:6e:ea:72:53:cc:c1:1c:03:a6:60:06: 30:4e:d7:47:f9:0e:7c:82:82:6b:e9:42:08:74:b5: a1:ee:4d:d4:03:51:1a:26:73:b4:30:4d:f7:12:4a: 18:82:65:fc:36:bd:8b:2d:85:f3:78:66:3d:f3:1f: 27:7a:9b:05:89:13:5f:02:c4:af:59:6f:93:ea:23: 97:c8:00:f3:ce:64:40:fc:95:a2:f9:64:2d:c1:0b: 9a:d6:92:a8:2c:75:43:91:ad:aa:93:e9:d4:9a:c4: 78:fb:66:73:6f:3c:fd:08:f0:44:c6:9f:39:6a:b9: a8:79:5f:62:f9:ff:3d:ab:b3:08:53:1a:79:5f:96: 22:a5:bf:2f:68:f3:b5:fd:b2:24:32:05:6e:19:0f: 16:92:62:d8:ee:0b:b4:dc:0a:3a:97:e1:e4:18:41: fb:be:b5:44:a2:20:63:66:4a:86:e0:5b:11:71:93: 67:4a:6d:1a:f2:7a:75:c7:e9:a8:a1:6c:10:d9:ea: 47:1b:c7:e0:4a:24:5a:1f:fe:8e:1d:55:02:83:f0: 2a:b9:1c:d2:8c:1c:df:56:ef:91:53:f8:c1:0b:4f: 21:ec:78:bc:f3:32:ca:9b:4b:d0:98:e2:2c:f6:dc: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E4:B7:89:EC:49:D9:0E:87:40:3C:B4:CE:F8:EB:A6:CD:7D:E1:A9 X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:26:50:be:97:bc:49:b5:9d:4e:e5:c3:02:19:7a:1c:d6:21: 24:b2:e1:3f:66:3c:de:7b:ec:8f:d0:44:2d:5a:ea:b6:11:37: 3e:70:8b:f7:f2:02:b5:42:c8:aa:d0:f4:b3:ab:0d:51:c7:5b: ca:f3:58:43:1b:c3:7e:bc:bf:88:32:46:c7:81:a5:53:8f:09: 62:16:dc:d7:6f:d7:17:94:07:c9:0a:1d:96:80:56:7a:9e:fa: 99:c9:0b:51:d8:a1:1f:71:10:fc:c8:89:cf:1d:7a:78:0e:e3: 7b:01:b8:7f:b2:6c:09:08:95:47:9c:c5:f8:30:c3:59:7c:96: 91:85:ff:ac:dc:25:55:86:02:05:a2:98:55:47:1a:d3:df:15: 1d:a5:a8:e6:ac:16:7c:74:76:4e:e9:3f:5c:be:d9:c5:b6:c5: df:d5:8d:ac:fe:92:76:d0:1f:72:6a:a4:f0:e7:23:05:44:6b: 5b:c6:c7:82:db:a5:6a:88:13:d0:b5:da:f3:42:25:b6:d6:b9: 86:85:ea:9f:51:58:47:dd:8c:53:af:e2:9c:7f:5d:2e:53:24: ab:52:ea:65:3e:b5:1a:c0:f5:bd:51:ad:8f:5d:ed:07:07:a3: 6f:52:e0:3d:28:95:e6:80:10:7b:a2:00:33:70:79:9e:c3:b3: 0c:aa:1f:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I2RTgxMTAvBgNVBAUTKDVEREZERDM4MzE1NkZBNUI2NTM0MTEyRTlDOEUxNTNC QjIwMDU3QzYwHhcNMjYwNjEzMDc0NjE0WhcNMjYwNjIwMDc0NjE0WjAYMRYwFAYD VQQDEw02YTJkMGFjNi0zNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q3OCTJj8e93/Rnv+wJWS8HhbupyU8zBHAOmYAYwTtdH+Q58goJr6UIIdLWh 7k3UA1EaJnO0ME33EkoYgmX8Nr2LLYXzeGY98x8nepsFiRNfAsSvWW+T6iOXyADz zmRA/JWi+WQtwQua1pKoLHVDka2qk+nUmsR4+2Zzbzz9CPBExp85armoeV9i+f89 q7MIUxp5X5Yipb8vaPO1/bIkMgVuGQ8WkmLY7gu03Ao6l+HkGEH7vrVEoiBjZkqG 4FsRcZNnSm0a8np1x+mooWwQ2epHG8fgSiRaH/6OHVUCg/AquRzSjBzfVu+RU/jB C08h7Hi88zLKm0vQmOIs9tyedwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvkt4ns SdkOh0A8tM7466bNfeGpMB8GA1UdIwQYMBaAFF3f3TgxVvpbZTQRLpyOFTuyAFfG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjZFOC9GOUIwMjg4OEFF RkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1sdGxOQkV1bkk0Vk83SUFW OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjZFOC9GOUIwMjg4OEFFRkUxMUYwODhCOTlDMjdDNEY5QUUwMi9YZF9kT0RGVy1s dGxOQkV1bkk0Vk83SUFWOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXCZQvpe8SbWdTuXDAhl6HNYhJLLhP2Y83nvsj9BELVrqthE3PnCL9/ICtULI qtD0s6sNUcdbyvNYQxvDfry/iDJGx4GlU48JYhbc12/XF5QHyQodloBWep76mckL UdihH3EQ/MiJzx16eA7jewG4f7JsCQiVR5zF+DDDWXyWkYX/rNwlVYYCBaKYVUca 098VHaWo5qwWfHR2Tuk/XL7ZxbbF39WNrP6SdtAfcmqk8OcjBURrW8bHgtulaogT 0LXa80Iltta5hoXqn1FYR92MU6/inH9dLlMkq1LqZT61GsD1vVGtj13tBwejb1Lg PSiV5oAQe6IAM3B5nsOzDKofdg== -----END CERTIFICATE-----Generated at Sat Jun 13 14:28:52 2026 by rpki-client