$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: qQm0uXgfJnBDAWhUDvKDA8XMd1vljQ4E9SSyxuurmbE= Subject key identifier: 0A:E0:30:D9:27:EE:06:1E:C2:6E:AD:94:B5:03:E2:B2:59:00:EF:01 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0D32 Signing time: Sun 26 Jul 2026 18:23:35 +0000 Manifest this update: Sun 26 Jul 2026 18:23:35 +0000 Manifest next update: Sun 02 Aug 2026 18:23:35 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: pNU2ia/H3+NMDg4PCatGH9EQpMu2gQP1834TLLKY100=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: 3w1ZCU5DBe8qob2yfo+1JFPIsMpuEFgSBiA3mSkvjmQ=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: UvXINsVdmgJ+8axZ9DhL372u1E0J1vH5XbDCRfLraeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Jul 26 18:23:35 2026 GMT Not After : Aug 2 18:23:35 2026 GMT Subject: CN=6a6650a7-d8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:df:5a:64:c0:52:a5:d3:4a:3b:65:0c:b8: d3:ae:53:4d:c4:9f:11:ec:7c:9f:3e:7d:39:27:16: a9:d2:86:8f:ef:ac:fe:d5:6a:6f:68:e9:74:8d:76: 85:d8:ea:6e:51:22:ac:49:40:64:5b:8c:0f:96:fd: a9:68:e1:2b:54:f7:d3:ad:af:c6:46:0a:31:81:84: b0:e1:7d:62:0f:2e:f8:8f:78:1d:8d:17:62:c7:13: c4:d9:80:23:14:c9:b7:ca:66:35:b1:99:63:ef:68: f2:12:d8:4f:8c:61:5d:cc:d3:71:a4:2b:1d:04:c8: a9:18:68:d4:b0:73:58:d3:40:45:4e:f0:1b:13:50: b0:15:d0:4b:31:74:5d:25:4c:d6:49:ee:39:de:1d: d1:d5:a8:96:10:1f:83:38:96:34:ec:41:6a:2f:3f: 79:7b:60:21:34:15:fc:b4:a5:a4:26:07:1e:8a:24: 0a:fa:e9:fc:de:7e:66:e7:45:f5:43:fd:6e:ff:2a: f1:03:ec:f0:ee:2c:79:87:dd:d2:75:a9:08:f9:bf: bd:7e:b7:c9:18:8e:42:4e:8e:c2:2c:f3:30:fd:e0: fe:29:9f:9b:24:59:75:4d:85:2f:b9:dc:5e:e6:46: 9c:a2:15:88:d7:02:1e:09:1d:7d:c7:d5:3d:ba:d4: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E0:30:D9:27:EE:06:1E:C2:6E:AD:94:B5:03:E2:B2:59:00:EF:01 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:6a:9b:7f:c8:16:66:ad:9b:b5:8f:3e:0c:9e:df:6b:1d:aa: 67:37:fd:a7:d2:4c:4e:9f:b5:06:0d:9c:0f:27:71:97:29:fc: 0b:26:bb:8a:e5:57:0f:bb:b8:37:bc:b4:65:e1:e7:86:9d:eb: 38:2d:0b:ff:20:47:40:f0:e3:ad:82:d1:3e:8c:8a:64:ac:03: 51:11:64:e6:06:9b:9b:96:6d:0b:36:72:8f:a1:a4:47:ef:b1: 5a:40:40:40:49:15:17:e3:db:e6:03:3f:a6:0d:0a:b0:9f:cb: f1:07:2f:05:4e:c8:30:0e:6a:a2:3f:69:32:e3:74:f5:97:da: 12:e8:e5:13:b5:71:ca:06:d9:02:33:8f:5b:96:fe:d1:c2:e1: e0:bf:89:a9:64:fd:f8:93:5a:96:ae:0f:e5:2a:0d:de:40:8b: da:eb:67:9b:42:d7:22:28:ed:c7:ff:c1:e1:af:c3:a8:fb:d8: 5a:d4:53:72:ad:14:eb:c8:e0:ae:ae:9b:f3:5e:3e:8f:6f:22: 7d:95:12:1d:1b:70:b1:9e:1a:9b:88:1e:c7:91:10:ed:66:9f: 5f:36:43:15:9d:1e:ac:c6:bc:87:5c:10:52:fa:b5:0c:d3:b8: af:c8:7a:36:01:3e:1b:1f:33:23:21:f2:0d:2e:47:57:47:8b: 6f:f2:c0:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjYwNzI2MTgyMzM1WhcNMjYwODAyMTgyMzM1WjAYMRYwFAYD VQQDEw02YTY2NTBhNy1kOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk3fWmTAUqXTSjtlDLjTrlNNxJ8R7HyfPn05Jxap0oaP76z+1WpvaOl0jXaF 2OpuUSKsSUBkW4wPlv2paOErVPfTra/GRgoxgYSw4X1iDy74j3gdjRdixxPE2YAj FMm3ymY1sZlj72jyEthPjGFdzNNxpCsdBMipGGjUsHNY00BFTvAbE1CwFdBLMXRd JUzWSe453h3R1aiWEB+DOJY07EFqLz95e2AhNBX8tKWkJgceiiQK+un83n5m50X1 Q/1u/yrxA+zw7ix5h93SdakI+b+9frfJGI5CTo7CLPMw/eD+KZ+bJFl1TYUvudxe 5kacohWI1wIeCR19x9U9utQ+pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArgMNkn 7gYewm6tlLUD4rJZAO8BMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYGqbf8gWZq2btY8+DJ7fax2qZzf9p9JMTp+1Bg2cDydxlyn8Cya7iuVXD7u4 N7y0ZeHnhp3rOC0L/yBHQPDjrYLRPoyKZKwDURFk5gabm5ZtCzZyj6GkR++xWkBA QEkVF+Pb5gM/pg0KsJ/L8QcvBU7IMA5qoj9pMuN09ZfaEujlE7VxygbZAjOPW5b+ 0cLh4L+JqWT9+JNalq4P5SoN3kCL2utnm0LXIijtx//B4a/DqPvYWtRTcq0U68jg rq6b814+j28ifZUSHRtwsZ4am4gex5EQ7WafXzZDFZ0erMa8h1wQUvq1DNO4r8h6 NgE+Gx8zIyHyDS5HV0eLb/LAcA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:40 2026 by rpki-client