$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: CHexLh87mWkJdrE8mV38XIOBfvcFGr6dw/8ijm9wg1g= Subject key identifier: 90:CC:E1:F5:A4:AD:BF:48:BC:A1:BC:E1:35:6D:28:EE:7F:79:5B:A2 Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 09C9 Signing time: Tue 28 Jul 2026 20:16:47 +0000 Manifest this update: Tue 28 Jul 2026 20:16:46 +0000 Manifest next update: Tue 04 Aug 2026 20:16:46 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: 86z+WJHHZhak5UKpdH/xuj4pGnBfcWSanKXbSKZq7yw=) 2: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: soe5Moz4gQVVes64vfH27mxJAWxDV9xSP3vrYYcdBj8=) 3: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: +RYGeu7uX4uBBcHWusqQhkXqLpcB4R1AKfIKops3PNA=) 4: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: rC7/cLhAbtNiKypXkgnC2P4P5so5I+YnfNchz84YMA0=) 5: 7B3252CC014911F1B56055C9516F56BC.roa (hash: Q4zhbv5IYafCWF+cKZ+N5EqVvhygYSFdunW/fgxR9Ms=) 6: 03706138786411EC8624EB12C4F9AE02.roa (hash: BrG7Q3Tkykmo9xilseoxsNjwLBVZ7ijytYCkK61f/ms=) 7: 2BFE357EF06211F08763644E5C6F56BC.roa (hash: 7NcbnhD/HJ8NBFUu7bu5fda+cHjTW1crabfldM6QJwo=) 8: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: 95lSl7vVPRfDQ24xYlePTZRf3aCd1VmR4GdHAdsIHtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Jul 28 20:16:46 2026 GMT Not After : Aug 4 20:16:46 2026 GMT Subject: CN=6a690e2f-ee40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2e:2b:fd:47:30:10:8c:6d:72:77:09:18:ce: 7b:02:08:f8:8d:65:21:a5:7e:0c:83:9a:65:10:6e: c1:d1:e3:8a:42:f3:a1:a4:f5:11:13:ba:b3:07:2d: 02:cb:27:dd:93:70:b5:e2:fe:bb:41:c2:25:0c:46: 0b:cf:53:d1:1d:3b:c4:be:36:a2:bd:bb:dc:df:77: 7f:dd:ac:95:9c:fe:3e:8e:37:d6:55:f6:16:aa:ef: 61:d9:3b:45:b8:20:c9:16:8b:71:ec:ff:9c:1d:b9: df:22:f1:15:c0:66:88:5b:30:9a:b7:2b:d7:a5:31: db:89:04:85:e6:42:6b:13:c1:88:46:ed:e0:4c:97: 8b:e3:f5:e1:50:a2:57:de:ed:11:26:4f:90:cd:d4: 11:83:d4:5c:29:89:98:ce:bf:22:cc:b4:a6:79:7d: 3e:fa:b1:62:aa:21:93:33:9d:57:bb:a2:2f:1c:fb: 75:2d:53:00:0e:86:9b:b2:e8:63:2c:e3:be:39:d5: 9e:58:ea:d5:2a:30:64:e2:4c:8f:ee:cc:2e:de:de: 18:bf:f6:60:f1:3f:2c:a4:c5:84:5b:77:3c:9c:2d: 4a:3c:93:f0:62:08:e5:e8:d9:83:e2:0e:72:c8:3e: 99:ee:5a:af:82:f7:82:e1:89:6d:f1:f1:11:ef:ea: b9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CC:E1:F5:A4:AD:BF:48:BC:A1:BC:E1:35:6D:28:EE:7F:79:5B:A2 X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6b:7b:56:08:51:92:f4:7d:7b:8b:bc:c3:9b:df:c5:b3:bd: cc:84:9e:4d:64:93:48:0b:c6:b5:60:55:8d:d4:23:eb:aa:89: b1:c6:41:6f:74:d6:42:16:e9:1e:a5:b3:4a:fa:de:ee:78:6e: 1d:53:f4:18:c6:49:47:28:42:b0:9a:b9:f9:1b:93:b7:78:9f: c5:f1:a8:07:56:6f:0e:87:ba:5b:b4:78:e4:d7:d7:d1:cc:2c: bd:c7:70:1e:2d:b5:b2:84:9a:59:0a:02:ef:b3:39:a0:0a:7a: 43:93:13:c6:3a:d8:40:dd:da:39:e6:c5:60:7d:0b:9e:c9:4a: 29:f6:02:f9:ff:11:22:f9:14:c0:7c:4f:21:a6:49:42:6c:4c: ee:a4:61:21:bf:51:f7:fd:23:c9:0e:39:bd:41:28:f5:c9:61: 9d:c3:f4:ab:86:a8:f4:ed:e1:6d:a7:00:1f:ce:14:0d:39:fa: 3a:90:0c:6c:8f:42:f2:ae:5a:1d:a5:5c:15:fe:fa:6b:c0:bc: 98:28:c5:fa:a0:54:6c:a5:36:3a:1a:5a:8f:38:cd:5b:90:2b: ad:ab:da:13:2c:9f:53:d7:b2:23:00:17:fc:62:d5:ac:6f:ab: 2d:3c:c0:6e:fd:f6:d2:88:68:6a:99:f2:05:27:b4:43:66:25: 96:d9:fd:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjYwNzI4MjAxNjQ2WhcNMjYwODA0MjAxNjQ2WjAYMRYwFAYD VQQDEw02YTY5MGUyZi1lZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0i4r/UcwEIxtcncJGM57Agj4jWUhpX4Mg5plEG7B0eOKQvOhpPURE7qzBy0C yyfdk3C14v67QcIlDEYLz1PRHTvEvjaivbvc33d/3ayVnP4+jjfWVfYWqu9h2TtF uCDJFotx7P+cHbnfIvEVwGaIWzCatyvXpTHbiQSF5kJrE8GIRu3gTJeL4/XhUKJX 3u0RJk+QzdQRg9RcKYmYzr8izLSmeX0++rFiqiGTM51Xu6IvHPt1LVMADoabsuhj LOO+OdWeWOrVKjBk4kyP7swu3t4Yv/Zg8T8spMWEW3c8nC1KPJPwYgjl6NmD4g5y yD6Z7lqvgveC4Ylt8fER7+q5dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDM4fWk rb9IvKG84TVtKO5/eVuiMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM2t7VghRkvR9e4u8w5vfxbO9zISeTWSTSAvGtWBVjdQj66qJscZBb3TWQhbp HqWzSvre7nhuHVP0GMZJRyhCsJq5+RuTt3ifxfGoB1ZvDoe6W7R45NfX0cwsvcdw Hi21soSaWQoC77M5oAp6Q5MTxjrYQN3aOebFYH0LnslKKfYC+f8RIvkUwHxPIaZJ QmxM7qRhIb9R9/0jyQ45vUEo9clhncP0q4ao9O3hbacAH84UDTn6OpAMbI9C8q5a HaVcFf76a8C8mCjF+qBUbKU2OhpajzjNW5ArravaEyyfU9eyIwAX/GLVrG+rLTzA bv320ohoapnyBSe0Q2Ylltn9Gw== -----END CERTIFICATE-----Generated at Wed Jul 29 13:11:53 2026 by rpki-client