$ rpki-client -vvf rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft File: XHIqJhQciPfNQPObN0raf7wfmx8.mft (raw, json) Hash identifier: 7WexMZHGIQvUE+/bCp3s8GQ0qxudjXyVUgV8wN1tfHs= Subject key identifier: 13:27:AA:76:AF:30:0B:04:BB:73:97:10:B5:19:08:F8:46:30:9D:A1 Authority key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F Certificate issuer: /CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft Manifest number: 0176 Signing time: Mon 27 Jul 2026 06:38:00 +0000 Manifest this update: Mon 27 Jul 2026 06:38:00 +0000 Manifest next update: Mon 03 Aug 2026 06:38:00 +0000 Files and hashes: 1: XHIqJhQciPfNQPObN0raf7wfmx8.crl (hash: pP9PnCMV9GfrM4Pot2du8MC8xHllgdWV56/XYBkiaf0=) 2: D956F03AAB0211F083CD7E11C4F9AE02.roa (hash: rrKRhHeiohcyIqeCIJv+44R0SbRHPDcNTcaSyqFnNBQ=) 3: F0FCC9ECABF411F0B9E4F837C4F9AE02.roa (hash: yjLxdwzIuckVEpvjPtBFZMr56OhqZEN8C8fQw3Xhxos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D824A, serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Validity Not Before: Jul 27 06:38:00 2026 GMT Not After : Aug 3 06:38:00 2026 GMT Subject: CN=6a66fcc8-9551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:06:dc:57:f9:3c:56:13:5e:c0:25:27:68: eb:83:69:01:4d:5b:6f:3f:ca:fc:7f:7e:7e:67:c8: f5:c6:8f:c9:7c:c4:97:f6:78:b7:55:86:c8:a5:78: 1d:c2:4f:cd:af:a6:d8:12:bb:21:ff:76:06:99:b8: 3a:35:c8:81:1d:48:a3:0d:bd:ee:e2:f5:9a:92:f2: 7e:84:6b:62:e3:30:50:f1:90:c0:fa:b4:29:6a:f5: 24:5c:04:f4:2d:20:58:bc:75:60:e4:a7:a3:7d:be: b8:f6:f9:70:98:25:dc:57:f2:28:8b:cc:be:d7:27: 0a:d0:2c:75:ce:e7:39:21:29:6f:ca:45:7a:94:2b: 36:75:15:2b:9f:77:a9:f9:5f:97:1a:12:e0:ea:30: 4d:d3:83:0f:53:1e:d9:fd:7a:d5:65:33:67:35:6e: 0e:ee:02:d7:4f:c7:08:3b:12:4e:60:5b:42:7d:a8: da:6f:b6:ae:e5:50:e3:ba:a1:1c:1d:95:4f:33:72: b2:b8:0e:c7:f7:87:20:78:bc:db:31:b0:4d:47:98: b0:33:1d:c5:97:6e:97:37:9c:03:9c:0f:1f:a9:32: 97:c9:f8:88:b5:87:2a:e0:e8:28:a7:34:fa:7c:fe: b7:3b:9d:9c:75:fe:37:e5:59:9e:a4:23:4a:7a:e9: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:27:AA:76:AF:30:0B:04:BB:73:97:10:B5:19:08:F8:46:30:9D:A1 X509v3 Authority Key Identifier: keyid:5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5b:4c:94:cf:c7:07:f0:97:c9:5c:2c:92:04:25:17:56:23: 5f:6b:09:85:cd:48:18:d6:a8:65:5a:ed:ff:ab:41:75:7e:0c: 3c:54:41:54:67:4b:98:9c:b2:e5:80:4b:9d:3f:87:17:ad:bd: 89:fe:b9:34:82:03:83:21:5e:48:63:42:4b:88:cb:b5:ce:87: 10:75:57:f1:96:16:75:65:99:9a:18:2f:a7:3f:fe:fb:ad:fa: 37:2c:2c:41:c2:1c:45:26:65:24:3f:cd:a9:ee:3a:12:67:60: 53:00:6c:05:7b:62:ef:62:bf:2d:26:15:76:30:20:ed:bf:45: d4:ed:60:4b:67:6d:8b:41:ef:d1:99:92:bb:79:67:ab:61:5b: 22:fa:62:d9:1e:58:eb:99:32:2c:35:0d:de:79:5d:e1:d9:71: 95:6f:11:88:06:bc:a3:3c:dd:95:85:c7:42:ca:c0:4c:95:08: 02:24:51:ff:81:21:a7:52:0f:51:53:27:4a:50:5f:b5:2e:e0: 0f:7a:3c:66:3a:54:f4:c5:cd:00:44:66:4a:08:2e:68:08:5a: 5f:42:80:31:e9:ca:8d:71:04:3a:b5:58:c9:fb:d9:b1:c2:b0: 61:02:2e:38:3c:5c:7d:b5:37:be:bc:55:6d:1a:b0:26:5c:08: 27:42:d6:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyNEExMTAvBgNVBAUTKDVDNzIyQTI2MTQxQzg4RjdDRDQwRjM5QjM3NEFEQTdG QkMxRjlCMUYwHhcNMjYwNzI3MDYzODAwWhcNMjYwODAzMDYzODAwWjAYMRYwFAYD VQQDEw02YTY2ZmNjOC05NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHcG3Ff5PFYTXsAlJ2jrg2kBTVtvP8r8f35+Z8j1xo/JfMSX9ni3VYbIpXgd wk/Nr6bYErsh/3YGmbg6NciBHUijDb3u4vWakvJ+hGti4zBQ8ZDA+rQpavUkXAT0 LSBYvHVg5Kejfb649vlwmCXcV/Ioi8y+1ycK0Cx1zuc5ISlvykV6lCs2dRUrn3ep +V+XGhLg6jBN04MPUx7Z/XrVZTNnNW4O7gLXT8cIOxJOYFtCfajab7au5VDjuqEc HZVPM3KyuA7H94cgeLzbMbBNR5iwMx3Fl26XN5wDnA8fqTKXyfiItYcq4OgopzT6 fP63O52cdf435VmepCNKeukOcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMnqnav MAsEu3OXELUZCPhGMJ2hMB8GA1UdIwQYMBaAFFxyKiYUHIj3zUDzmzdK2n+8H5sf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODI0QS80QURGMzNGQzVC OUExMUVGODMwN0Y1NDBDNEY5QUUwMi9YSElxSmhRY2lQZk5RUE9iTjByYWY3d2Zt eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hISXFKaFFjaVBmTlFQT2JOMHJhZjd3Zm14OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODI0QS80QURGMzNGQzVCOUExMUVGODMwN0Y1NDBDNEY5QUUwMi9YSElxSmhRY2lQ Zk5RUE9iTjByYWY3d2ZteDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM1tMlM/HB/CXyVwskgQlF1YjX2sJhc1IGNaoZVrt/6tBdX4MPFRBVGdLmJyy 5YBLnT+HF629if65NIIDgyFeSGNCS4jLtc6HEHVX8ZYWdWWZmhgvpz/++636Nyws QcIcRSZlJD/Nqe46EmdgUwBsBXti72K/LSYVdjAg7b9F1O1gS2dti0Hv0ZmSu3ln q2FbIvpi2R5Y65kyLDUN3nld4dlxlW8RiAa8ozzdlYXHQsrATJUIAiRR/4Ehp1IP UVMnSlBftS7gD3o8ZjpU9MXNAERmSgguaAhaX0KAMenKjXEEOrVYyfvZscKwYQIu ODxcfbU3vrxVbRqwJlwIJ0LWFQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:36:45 2026 by rpki-client