$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: 7LLUv2USUZVsdpHkZ00W+ySyOF94thq3CmTDUMmKrSE= Subject key identifier: D3:CD:38:B3:90:76:6F:53:1A:B0:B1:DF:A9:2B:C0:1F:0E:D8:14:91 Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 0718 Signing time: Sun 26 Jul 2026 22:49:19 +0000 Manifest this update: Sun 26 Jul 2026 22:49:18 +0000 Manifest next update: Sun 02 Aug 2026 22:49:18 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: ZN8tYeB3A/myvBQXmsu6U9N+GeD/USVfCjf9EiO8SrI=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: ya+5X2X8zd4MO/3KegCTLB9V6NcmJXOYCWI69T9MPig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Jul 26 22:49:18 2026 GMT Not After : Aug 2 22:49:18 2026 GMT Subject: CN=6a668eef-5718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:5c:a6:21:01:40:52:a5:d7:b1:75:54:96: 50:0b:6a:f3:64:c6:4e:ff:f3:18:7f:b9:2f:0b:28: ce:70:26:5c:6e:f4:64:57:cb:67:d4:95:fb:6f:ed: c4:58:d2:bb:eb:4e:83:42:75:dc:c9:0f:a3:2f:50: 62:b0:6e:aa:dc:37:62:ca:05:5d:ab:71:32:a5:38: dc:ef:61:dd:f7:63:ad:a4:5b:40:02:a0:1a:79:2a: ee:ad:9a:29:a2:51:13:c6:85:c8:63:25:0e:5a:73: 2c:3d:b9:9e:ca:33:fe:29:3d:2b:49:b7:09:6a:16: df:43:a2:ea:5b:b3:78:cb:20:89:8d:5f:c1:69:97: d1:59:79:6a:48:10:b7:d3:6f:2a:58:20:1a:c1:2b: 66:6e:a9:fc:e6:68:b0:43:7e:fb:37:e5:d5:a1:62: 72:69:7b:ae:72:6c:ae:84:31:5a:62:c7:73:1f:6f: 27:eb:34:1c:f9:11:e4:22:6c:6b:40:7f:56:03:25: 4e:21:65:c9:1d:33:72:84:2b:e2:f3:2f:d1:47:6c: 1d:e0:3b:7a:6d:4c:de:0f:4c:4a:d7:56:4e:4b:3e: 91:f6:13:9e:fa:c2:18:56:85:a9:37:93:f7:3f:5d: 4a:cb:ef:94:15:2d:31:43:8f:6f:3d:70:bc:79:45: 6a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CD:38:B3:90:76:6F:53:1A:B0:B1:DF:A9:2B:C0:1F:0E:D8:14:91 X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:f9:c8:35:5d:6b:cf:3a:33:49:d9:01:90:e5:f7:0f:2b:bd: d4:c6:1b:b1:89:f6:f5:14:83:df:3a:8f:e4:c4:04:8a:ef:2b: c4:fa:40:8c:70:14:d9:13:63:f7:79:bd:af:8f:02:a0:01:b2: 54:ab:ba:b4:3e:25:fc:c9:98:a0:5a:f6:b0:93:76:c8:25:6f: e5:a0:7f:e1:0a:dc:24:01:12:a8:ba:57:a0:e5:99:b0:46:bd: b4:71:43:f1:4f:9c:64:01:30:e3:8d:40:4e:5c:5e:53:00:d3: 0a:6c:52:09:09:74:a2:b0:7c:67:cd:c4:79:60:db:7b:2e:f4: 45:4e:4d:d8:c1:60:06:d6:b8:4c:79:62:04:b0:f2:ae:47:95: 1f:9b:54:e6:3d:55:da:7a:cf:00:1e:7a:9d:95:59:6c:91:c7: 8e:a3:cb:2e:32:44:e0:28:64:ed:e1:fa:a0:2a:2d:bc:8d:ea: 78:e6:13:77:57:a7:94:99:1f:b8:6f:7a:db:dc:30:d8:18:ce: f7:0d:6f:30:d3:cb:41:bd:78:51:6c:cc:20:db:3a:94:b9:4c: 47:ce:b8:fd:21:4a:6e:ce:10:61:14:24:d4:3d:f6:5f:aa:9b: 1d:97:03:46:53:0f:d7:9e:7e:77:54:c1:a7:ff:16:bf:5a:4b: e6:86:f5:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjYwNzI2MjI0OTE4WhcNMjYwODAyMjI0OTE4WjAYMRYwFAYD VQQDEw02YTY2OGVlZi01NzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApi5cpiEBQFKl17F1VJZQC2rzZMZO//MYf7kvCyjOcCZcbvRkV8tn1JX7b+3E WNK7606DQnXcyQ+jL1BisG6q3DdiygVdq3EypTjc72Hd92OtpFtAAqAaeSrurZop olETxoXIYyUOWnMsPbmeyjP+KT0rSbcJahbfQ6LqW7N4yyCJjV/BaZfRWXlqSBC3 028qWCAawStmbqn85miwQ377N+XVoWJyaXuucmyuhDFaYsdzH28n6zQc+RHkImxr QH9WAyVOIWXJHTNyhCvi8y/RR2wd4Dt6bUzeD0xK11ZOSz6R9hOe+sIYVoWpN5P3 P11Ky++UFS0xQ49vPXC8eUVqbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPNOLOQ dm9TGrCx36krwB8O2BSRMB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACfnINV1rzzozSdkBkOX3Dyu91MYbsYn29RSD3zqP5MQEiu8rxPpAjHAU2RNj 93m9r48CoAGyVKu6tD4l/MmYoFr2sJN2yCVv5aB/4QrcJAESqLpXoOWZsEa9tHFD 8U+cZAEw441ATlxeUwDTCmxSCQl0orB8Z83EeWDbey70RU5N2MFgBta4THliBLDy rkeVH5tU5j1V2nrPAB56nZVZbJHHjqPLLjJE4Chk7eH6oCotvI3qeOYTd1enlJkf uG9629ww2BjO9w1vMNPLQb14UWzMINs6lLlMR864/SFKbs4QYRQk1D32X6qbHZcD RlMP155+d1TBp/8Wv1pL5ob1KA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:31 2026 by rpki-client