$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json) Hash identifier: 2t6UERxHikrp4iyrDnAkf4YOvASvPQcZ5wZredKdfEs= Subject key identifier: 48:58:92:DD:C3:4B:EE:AC:86:6F:FE:65:90:0C:B7:AB:C4:9D:37:B8 Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft Manifest number: 0637 Signing time: Sun 26 Jul 2026 23:35:49 +0000 Manifest this update: Sun 26 Jul 2026 23:35:48 +0000 Manifest next update: Sun 02 Aug 2026 23:35:48 +0000 Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: RqdiEjx9uBkxjLkDFc17ojuaw0Iqxzumi2Zu6jRJd/M=) 2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: Atm+YjJWu/U6U/w3n/CtX93wrO07yuhb/OEeKyPt76Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Validity Not Before: Jul 26 23:35:48 2026 GMT Not After : Aug 2 23:35:48 2026 GMT Subject: CN=6a6699d4-b25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:c3:20:5a:d1:af:47:3b:61:62:f3:8b:5a: 93:aa:d0:bf:93:dd:b4:5d:73:d0:63:9a:95:3a:7d: 56:d8:20:3f:2a:15:9e:63:af:9a:52:db:9e:4b:a7: 1b:8d:6b:9d:cb:47:0d:81:e7:3c:5c:76:f9:0a:fd: cf:2c:4d:8a:29:dc:bb:b5:47:d7:6d:23:d5:dc:17: 43:f6:94:14:20:08:73:96:69:f1:a2:db:9b:47:37: 44:6b:46:03:99:8e:c5:a2:4f:1f:c6:ef:27:56:d9: 2e:a9:a3:b2:31:d1:93:4b:23:3d:38:23:a9:d5:e1: 65:ef:14:9b:30:f5:f1:41:de:5b:16:76:b1:e9:21: b4:99:b5:97:d7:3b:4d:f2:11:67:ab:a5:11:40:64: d1:ec:80:8f:99:00:a1:d4:56:da:da:74:ae:7a:94: 66:5f:bc:e9:66:d1:bf:7e:9a:70:bc:b6:d0:07:2c: 41:44:ed:3f:10:ee:81:38:d9:81:f5:84:cf:2e:7b: 27:34:ec:c3:d4:7f:dc:d2:bb:b6:93:f1:40:94:07: 21:62:69:a4:ee:32:b9:d0:09:1c:09:c3:ed:9b:1b: 14:fb:ba:91:ee:2d:1b:d4:34:10:ae:51:4a:f6:bb: cd:26:fb:80:4f:4e:46:f5:d7:a4:ac:1c:e4:6d:0e: d2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:58:92:DD:C3:4B:EE:AC:86:6F:FE:65:90:0C:B7:AB:C4:9D:37:B8 X509v3 Authority Key Identifier: keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f0:3b:d8:b2:c8:07:df:3e:2b:db:b5:26:e2:71:48:14:2d: 1f:04:65:85:ae:b1:dc:5c:81:0e:4d:04:f9:c6:9c:48:d8:8d: 93:30:eb:88:23:95:07:99:c6:ef:20:ac:06:b0:91:e8:cc:30: 35:08:6f:96:e5:65:66:a5:3a:69:6d:5d:71:14:23:2e:76:8d: ec:ce:6c:0b:b7:4b:de:ad:c0:70:c7:fc:98:1b:38:da:06:27: bd:0b:6e:18:43:b6:17:3b:40:98:e9:f1:e4:a3:38:78:b9:ac: cd:b0:21:c1:99:0f:48:cf:a6:d2:16:96:48:0c:bb:a3:8a:bf: 9a:41:b9:c9:39:df:34:28:f9:4c:50:ef:11:c3:ab:30:fd:7a: 85:b5:ee:30:b2:10:47:ea:ad:cd:f2:41:51:4a:bb:b8:18:50: c5:3a:c3:5f:3d:04:26:a6:8c:ee:24:ce:8d:c9:d3:d8:f9:93: 27:2c:07:19:64:8b:a1:4e:3d:4f:18:81:55:b5:2a:59:6b:63: 13:25:fe:45:c7:d0:c8:25:60:02:1c:2d:04:61:57:ab:03:cb: 0b:b7:82:ef:ea:14:a5:29:08:23:cb:0d:9d:d1:56:8b:dd:38: b1:9f:10:bc:49:73:c7:99:f9:fa:9b:9c:29:b6:9f:24:60:60: f4:ba:3d:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RUIxMTAvBgNVBAUTKDVDMzY1QjE3MzFDQTdDRTdEQjgxREQ1NzEzMEJENEQ2 NDMwMTlCNUUwHhcNMjYwNzI2MjMzNTQ4WhcNMjYwODAyMjMzNTQ4WjAYMRYwFAYD VQQDEw02YTY2OTlkNC1iMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJ/DIFrRr0c7YWLzi1qTqtC/k920XXPQY5qVOn1W2CA/KhWeY6+aUtueS6cb jWudy0cNgec8XHb5Cv3PLE2KKdy7tUfXbSPV3BdD9pQUIAhzlmnxotubRzdEa0YD mY7Fok8fxu8nVtkuqaOyMdGTSyM9OCOp1eFl7xSbMPXxQd5bFnax6SG0mbWX1ztN 8hFnq6URQGTR7ICPmQCh1Fba2nSuepRmX7zpZtG/fppwvLbQByxBRO0/EO6BONmB 9YTPLnsnNOzD1H/c0ru2k/FAlAchYmmk7jK50AkcCcPtmxsU+7qR7i0b1DQQrlFK 9rvNJvuAT05G9dekrBzkbQ7S/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhYkt3D S+6shm/+ZZAMt6vEnTe4MB8GA1UdIwQYMBaAFFw2Wxcxynzn24HdVxML1NZDAZte MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFQi83NzE0OEFDNkVC MDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZPZmJnZDFYRXd2VTFrTUJt MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEWmJGekhLZk9mYmdkMVhFd3ZVMWtNQm0xNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFQi83NzE0OEFDNkVCMDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZP ZmJnZDFYRXd2VTFrTUJtMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVPA72LLIB98+K9u1JuJxSBQtHwRlha6x3FyBDk0E+cacSNiNkzDriCOVB5nG 7yCsBrCR6MwwNQhvluVlZqU6aW1dcRQjLnaN7M5sC7dL3q3AcMf8mBs42gYnvQtu GEO2FztAmOnx5KM4eLmszbAhwZkPSM+m0haWSAy7o4q/mkG5yTnfNCj5TFDvEcOr MP16hbXuMLIQR+qtzfJBUUq7uBhQxTrDXz0EJqaM7iTOjcnT2PmTJywHGWSLoU49 TxiBVbUqWWtjEyX+RcfQyCVgAhwtBGFXqwPLC7eC7+oUpSkII8sNndFWi904sZ8Q vElzx5n5+pucKbafJGBg9Lo99w== -----END CERTIFICATE-----Generated at Tue Jul 28 18:34:59 2026 by rpki-client