$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: szLNiaj/chnMkg4XXRRCL7bFjCT6J3gpAgpZ5nWsSYs= Subject key identifier: F6:C6:80:CA:D0:94:AC:F3:67:57:C3:C9:B8:EE:34:76:F6:28:7D:21 Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 01ED Signing time: Mon 27 Jul 2026 05:01:20 +0000 Manifest this update: Mon 27 Jul 2026 05:01:20 +0000 Manifest next update: Mon 03 Aug 2026 05:01:20 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: H0XxXLiUhAmCROS09C0f25vQwspt0dn8HsnYgQ1Ufyo=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: alib+UnyJdcp5QK+xSWFYIjYS/kjVCRiqsWyoxYGVsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: Jul 27 05:01:20 2026 GMT Not After : Aug 3 05:01:20 2026 GMT Subject: CN=6a66e620-667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:74:88:17:d5:26:6a:cd:62:87:58:ab:1d: 8f:a3:bc:0b:16:23:23:85:dc:43:f9:39:90:5b:30: 28:da:79:d3:0c:70:3d:af:f0:8d:ce:7f:08:91:fc: 4c:da:99:9d:6f:28:66:87:8e:c2:77:0e:cd:1d:b9: 70:e9:98:49:78:4e:07:16:fa:34:ba:45:13:13:e9: b8:64:cc:e4:58:0c:1e:69:c1:02:5f:32:e1:40:4c: 99:4e:15:f1:dd:54:73:cf:a7:fe:87:52:02:ae:08: 51:b5:0a:cf:4c:e6:b8:0f:ad:4b:dd:6d:3b:95:7f: 9f:25:85:0b:64:9b:28:f5:ed:ab:2c:03:04:74:8d: 93:6d:07:b7:9a:28:cd:17:1c:42:ad:c8:2a:ae:09: 9d:7a:95:01:bd:d2:fe:ab:d6:12:b1:24:9d:da:2e: 7c:e1:7a:c7:8b:51:a2:bb:9e:b2:1d:a2:2d:2f:5d: 7e:40:d8:dc:09:da:32:d2:1c:1c:af:88:01:82:49: 22:54:3e:1d:15:ad:fc:2a:d5:17:08:63:15:29:88: 3f:b7:db:43:bb:5b:7d:7e:5f:06:be:8b:70:41:4a: 6e:57:06:9d:bf:6a:13:ef:d1:84:cc:60:5d:ca:73: 04:79:d7:d8:c6:0e:f5:87:7c:e2:35:5a:b5:32:de: ea:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C6:80:CA:D0:94:AC:F3:67:57:C3:C9:B8:EE:34:76:F6:28:7D:21 X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4d:d0:2b:12:62:7d:e3:09:3d:b7:7b:91:10:34:8f:ee:cf: ec:2c:ef:cc:31:9a:23:f0:48:b8:6f:a7:a7:bd:65:78:af:25: 6b:89:7d:fc:43:73:b2:7f:1f:42:a7:14:06:c8:5d:46:f2:f0: ee:e2:d7:20:af:74:55:2b:3c:17:23:43:dd:b8:07:e3:8a:5a: 4b:87:8c:04:3d:2a:1a:9f:92:9b:61:e3:9b:37:7e:cb:24:df: f5:8d:e7:ed:67:70:f3:09:71:00:f4:ba:a7:cd:06:ba:1d:94: dc:4a:70:ea:31:89:82:68:54:46:84:33:5c:47:34:12:f2:d1: bc:c7:99:fa:76:06:ac:cc:e4:ab:17:45:10:89:54:6a:5a:08: 8f:e8:9a:0b:3c:a3:4c:19:7d:a8:3e:75:ca:f2:c3:0e:70:a8: f2:a5:bb:6f:10:3e:e9:f1:91:d2:72:b8:f9:5e:06:c7:a1:ff: 6b:76:b6:c8:e4:62:18:ea:e9:06:06:dd:06:b7:1d:7d:1c:6f: 0e:ab:32:bf:34:c4:ec:55:a4:39:81:45:3d:c4:ec:d1:3e:12: 23:a4:8e:8f:6a:05:e0:30:f9:4a:c8:8d:80:10:19:1a:91:a8: 8e:59:71:7c:e6:da:bb:19:84:c1:48:ed:36:06:a3:bb:11:0a: 4e:cc:e8:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjYwNzI3MDUwMTIwWhcNMjYwODAzMDUwMTIwWjAYMRYwFAYD VQQDEw02YTY2ZTYyMC02NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPV0iBfVJmrNYodYqx2Po7wLFiMjhdxD+TmQWzAo2nnTDHA9r/CNzn8IkfxM 2pmdbyhmh47Cdw7NHblw6ZhJeE4HFvo0ukUTE+m4ZMzkWAweacECXzLhQEyZThXx 3VRzz6f+h1ICrghRtQrPTOa4D61L3W07lX+fJYULZJso9e2rLAMEdI2TbQe3mijN FxxCrcgqrgmdepUBvdL+q9YSsSSd2i584XrHi1Giu56yHaItL11+QNjcCdoy0hwc r4gBgkkiVD4dFa38KtUXCGMVKYg/t9tDu1t9fl8GvotwQUpuVwadv2oT79GEzGBd ynMEedfYxg71h3ziNVq1Mt7qWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbGgMrQ lKzzZ1fDybjuNHb2KH0hMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW03QKxJifeMJPbd7kRA0j+7P7CzvzDGaI/BIuG+np71leK8la4l9/ENzsn8f QqcUBshdRvLw7uLXIK90VSs8FyND3bgH44paS4eMBD0qGp+Sm2Hjmzd+yyTf9Y3n 7Wdw8wlxAPS6p80Guh2U3Epw6jGJgmhURoQzXEc0EvLRvMeZ+nYGrMzkqxdFEIlU aloIj+iaCzyjTBl9qD51yvLDDnCo8qW7bxA+6fGR0nK4+V4Gx6H/a3a2yORiGOrp BgbdBrcdfRxvDqsyvzTE7FWkOYFFPcTs0T4SI6SOj2oF4DD5SsiNgBAZGpGojllx fObauxmEwUjtNgajuxEKTszoGw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:57:50 2026 by rpki-client