$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft File: XYnzqvmxOgelsmTy3rpk1cUAZRw.mft (raw, json) Hash identifier: dtfWIHxxjVrGWH+th06qkRTWJJrgZw2dcdaZe6akKIo= Subject key identifier: 03:99:8E:3F:D9:55:B1:93:2B:6E:EB:51:0E:17:98:BB:B0:73:05:0C Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft Manifest number: 0296 Signing time: Mon 27 Jul 2026 03:05:06 +0000 Manifest this update: Mon 27 Jul 2026 03:05:05 +0000 Manifest next update: Mon 03 Aug 2026 03:05:05 +0000 Files and hashes: 1: XYnzqvmxOgelsmTy3rpk1cUAZRw.crl (hash: j4DgRWPx9XXbsSw996ag4v9vKlqq2bq+AnzE6cL7w04=) 2: 5DCE1A1AA63C11ED9306165AC4F9AE02.roa (hash: ry8gAyMl/oF2tDrb6QBcr0lUpoct2VpMmyLx0Y2gIls=) 3: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (hash: ClwvMUH1LVLekjvPCckwoGuRynW5TD4w0EqiLo6Abj0=) 4: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (hash: DHZLT6kRWzcG3+2PiBnd4pNnMfMfwzitkH/VyFmiyhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240, serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Validity Not Before: Jul 27 03:05:05 2026 GMT Not After : Aug 3 03:05:05 2026 GMT Subject: CN=6a66cae2-ffd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:91:3a:8b:ba:f7:0b:c9:52:c1:60:7e:16: e9:f5:cc:6e:d8:ca:a6:42:c0:3d:bf:c6:30:35:9d: 62:f5:79:82:73:2e:24:0c:6b:2e:89:cc:76:4d:b3: eb:37:c9:67:92:64:40:c7:72:7c:37:1a:26:d8:98: 88:61:80:fb:18:75:40:59:f8:f0:19:ac:ba:7a:9f: 3c:b1:db:37:75:e4:92:df:c4:d5:3d:2c:ef:f8:fb: 7e:e5:8d:6b:f2:82:22:6c:47:2d:8a:94:b3:34:c8: e6:3a:bd:90:f6:c3:81:b7:c3:4e:d0:89:67:21:ec: 0d:2a:3d:b0:f9:17:75:56:8b:09:cd:66:63:3a:04: 34:a0:af:1e:6d:aa:3a:e6:27:58:ab:f6:72:5b:e9: f1:78:60:3a:ec:bb:7d:04:46:7c:c0:d5:22:d3:da: 2d:2f:a9:d9:29:35:d5:14:98:10:cd:39:b3:eb:e1: bb:b6:26:af:c5:ec:a5:f2:e3:16:a8:d2:56:85:25: e7:68:7d:41:5f:68:c7:fe:92:ae:bf:fe:be:b7:dc: bd:25:ab:08:c1:a0:da:16:1b:51:ee:3f:6c:11:a7: 93:02:ce:8c:22:93:e9:69:8c:6f:85:c5:75:ed:b0: f7:a6:ab:38:b4:07:67:82:93:ce:d2:b5:16:8e:2a: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:99:8E:3F:D9:55:B1:93:2B:6E:EB:51:0E:17:98:BB:B0:73:05:0C X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6e:f6:ca:f3:cc:28:c0:ff:1d:24:7d:93:bd:72:de:66:49: f8:37:fd:c5:58:64:34:9b:b2:a4:ae:69:e7:12:de:c9:ad:c6: 9d:42:6c:4e:01:14:f1:ed:d4:ea:8c:ba:2c:6a:d6:33:01:76: 5c:4c:3e:b5:83:36:d1:76:05:29:51:da:23:09:3c:e5:fa:2c: 1f:05:f5:44:dc:18:ee:15:ec:b9:62:95:8b:b9:09:e8:6c:cb: 1b:d8:4f:a7:2a:ad:67:7e:21:41:f2:8d:c4:d6:c6:0b:f3:69: 69:f4:f3:8d:70:87:60:a2:d1:fa:26:3a:03:3c:cc:dc:a0:4c: 3e:89:3a:66:d7:c4:46:08:4d:a2:b9:bb:32:57:23:99:b7:e1: 2b:64:85:76:fe:5c:55:da:5e:c3:42:1e:8f:61:be:76:d6:5d: 94:18:0e:63:50:d9:04:20:e6:fa:8c:3a:fb:7f:3d:f2:01:2d: e4:87:71:e3:04:18:bd:fb:d0:84:c9:4b:3f:b0:ca:8c:84:89: 8f:da:ee:b4:94:8c:e1:6d:60:b3:bd:cd:e8:6e:a5:c1:9d:ff: 22:b2:21:09:85:17:5f:43:85:14:a6:ac:4d:bd:e0:62:6b:e5: 43:16:35:6a:64:af:bc:58:a5:1d:fc:82:80:b6:85:04:a1:83: f2:24:c1:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjYwNzI3MDMwNTA1WhcNMjYwODAzMDMwNTA1WjAYMRYwFAYD VQQDEw02YTY2Y2FlMi1mZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4KROou69wvJUsFgfhbp9cxu2MqmQsA9v8YwNZ1i9XmCcy4kDGsuicx2TbPr N8lnkmRAx3J8Nxom2JiIYYD7GHVAWfjwGay6ep88sds3deSS38TVPSzv+Pt+5Y1r 8oIibEctipSzNMjmOr2Q9sOBt8NO0IlnIewNKj2w+Rd1VosJzWZjOgQ0oK8ebao6 5idYq/ZyW+nxeGA67Lt9BEZ8wNUi09otL6nZKTXVFJgQzTmz6+G7tiavxeyl8uMW qNJWhSXnaH1BX2jH/pKuv/6+t9y9JasIwaDaFhtR7j9sEaeTAs6MIpPpaYxvhcV1 7bD3pqs4tAdngpPO0rUWjipTvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOZjj/Z VbGTK27rUQ4XmLuwcwUMMB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTI0MC8yN0RERTdEODlCN0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9n ZWxzbVR5M3JwazFjVUFaUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ272yvPMKMD/HSR9k71y3mZJ+Df9xVhkNJuypK5p5xLeya3GnUJsTgEU8e3U 6oy6LGrWMwF2XEw+tYM20XYFKVHaIwk85fosHwX1RNwY7hXsuWKVi7kJ6GzLG9hP pyqtZ34hQfKNxNbGC/NpafTzjXCHYKLR+iY6AzzM3KBMPok6ZtfERghNorm7Mlcj mbfhK2SFdv5cVdpew0Iej2G+dtZdlBgOY1DZBCDm+ow6+3898gEt5Idx4wQYvfvQ hMlLP7DKjISJj9rutJSM4W1gs73N6G6lwZ3/IrIhCYUXX0OFFKasTb3gYmvlQxY1 amSvvFilHfyCgLaFBKGD8iTBdg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:48 2026 by rpki-client