$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: 92f7B7oogCVOd+IQUKYr4dgUUL9OqMmu6/oGS6RUJBo= Subject key identifier: BD:EC:8D:2F:DB:64:E6:EF:4A:F2:57:B3:09:D6:34:E5:00:A3:BF:1F Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 0126 Signing time: Mon 27 Jul 2026 07:42:22 +0000 Manifest this update: Mon 27 Jul 2026 07:42:22 +0000 Manifest next update: Mon 03 Aug 2026 07:42:22 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: Zekoo2tIf6/9hjZpwMxdStYcbU+Qja0vX/kLqeBwMak=) 2: 51AEB7D2836811F1A730906667A30FBC.roa (hash: OqhaAJ3ECSKv9M44757UyMlEksc22ddZ45TQ4k8QygY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Jul 27 07:42:22 2026 GMT Not After : Aug 3 07:42:22 2026 GMT Subject: CN=6a670bde-fa4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:8e:05:20:ee:b7:39:58:71:f1:5d:f6:ff: d6:b2:ba:8c:87:ce:ee:fe:af:3e:a4:f9:7f:ed:fd: d9:9d:0a:ad:af:5e:c1:ff:56:ed:e3:7c:75:3d:79: fe:99:8f:22:76:4c:4f:6c:bc:f4:e2:53:7f:dc:49: 36:85:2d:99:88:82:2d:6d:62:85:3a:35:8f:24:65: 59:7e:b9:53:d2:e0:7e:b1:8a:68:5d:35:13:6e:69: 8b:5a:aa:8d:c1:54:44:db:95:af:65:d3:c6:38:15: e1:c9:d7:6f:d5:43:2c:e1:06:aa:d3:75:35:fe:20: dd:07:06:80:bc:c3:f4:98:49:cd:42:c8:63:37:a4: 8d:65:d7:8e:2e:29:d1:07:37:60:b7:cd:6e:2b:58: cd:01:30:b0:ac:5d:2b:9a:b3:3b:e0:af:82:02:44: 42:4a:fe:a7:4a:3c:aa:6f:ae:7a:fe:ac:a2:01:c4: 8a:4b:e0:d7:b2:e4:31:d9:39:b4:c1:b2:67:7a:a0: bc:c7:cd:4b:f7:53:90:a9:81:46:07:2b:8a:07:3a: 4c:59:c3:6f:34:1c:92:d9:81:8f:5c:56:64:d7:6b: fd:14:b2:cc:7b:a4:4d:35:f8:38:89:cb:44:cb:82: 6e:fb:7f:f9:76:cb:9e:cb:92:57:97:1c:c7:92:89: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EC:8D:2F:DB:64:E6:EF:4A:F2:57:B3:09:D6:34:E5:00:A3:BF:1F X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e3:df:92:76:25:e4:30:16:ae:93:92:6d:d8:56:81:83:27: a2:97:75:34:fe:e9:85:ea:c4:dd:62:ee:28:14:48:34:d4:b8: d0:2c:f3:80:27:fb:e1:b9:65:7b:dc:73:c0:49:6f:fe:58:3c: 63:8a:a8:97:0c:9a:3a:66:1b:18:2d:0d:27:3d:84:1f:4a:c1: 0f:aa:ef:06:22:7d:f4:dc:a6:a5:5f:e7:cd:69:29:f5:3e:cd: cd:2c:b7:22:06:c1:64:59:9e:26:49:3f:be:b9:af:18:1d:06: d1:c0:0a:76:d5:fd:6a:ac:3a:6a:9c:00:67:2d:94:6f:d7:41: 72:b3:08:5a:df:6d:70:0c:53:f7:4b:6b:13:65:17:a9:59:f8: 3b:b1:6d:03:7c:ff:a3:bd:de:66:58:2c:30:d3:97:09:f2:35: 1e:0e:5f:cd:4a:0a:a7:83:9b:2d:56:3c:c1:8c:22:58:53:b8: c9:a8:14:25:5d:b2:a5:e9:50:29:42:02:82:54:48:ae:1d:93: 06:bb:95:2e:1a:c2:29:91:11:38:0e:53:a4:ff:ad:a2:03:da: de:cd:7b:f1:ad:91:77:c2:c7:78:c8:91:5e:f6:49:9d:a1:10: 1d:b7:2c:1c:09:81:c1:88:8b:a1:ec:9a:d4:71:a6:e7:ce:1a: 20:0c:f4:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG NUUxOUNBRTgwHhcNMjYwNzI3MDc0MjIyWhcNMjYwODAzMDc0MjIyWjAYMRYwFAYD VQQDEw02YTY3MGJkZS1mYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgiOBSDutzlYcfFd9v/WsrqMh87u/q8+pPl/7f3ZnQqtr17B/1bt43x1PXn+ mY8idkxPbLz04lN/3Ek2hS2ZiIItbWKFOjWPJGVZfrlT0uB+sYpoXTUTbmmLWqqN wVRE25WvZdPGOBXhyddv1UMs4Qaq03U1/iDdBwaAvMP0mEnNQshjN6SNZdeOLinR Bzdgt81uK1jNATCwrF0rmrM74K+CAkRCSv6nSjyqb656/qyiAcSKS+DXsuQx2Tm0 wbJneqC8x81L91OQqYFGByuKBzpMWcNvNByS2YGPXFZk12v9FLLMe6RNNfg4ictE y4Ju+3/5dsuey5JXlxzHkol1nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3sjS/b ZObvSvJXswnWNOUAo78fMB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3 Qm5HUkdUdER1YkwxNFp5dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmOPfknYl5DAWrpOSbdhWgYMnopd1NP7pherE3WLuKBRINNS40CzzgCf74bll e9xzwElv/lg8Y4qolwyaOmYbGC0NJz2EH0rBD6rvBiJ99NympV/nzWkp9T7NzSy3 IgbBZFmeJkk/vrmvGB0G0cAKdtX9aqw6apwAZy2Ub9dBcrMIWt9tcAxT90trE2UX qVn4O7FtA3z/o73eZlgsMNOXCfI1Hg5fzUoKp4ObLVY8wYwiWFO4yagUJV2ypelQ KUICglRIrh2TBruVLhrCKZEROA5TpP+togPa3s178a2Rd8LHeMiRXvZJnaEQHbcs HAmBwYiLoeya1HGm584aIAz0VQ== -----END CERTIFICATE-----Generated at Wed Jul 29 07:31:51 2026 by rpki-client