$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json) Hash identifier: rX4T+Aqdb0oeCcd8og+osfWRnk+K+gpNJ5ItOdMYLBQ= Subject key identifier: B5:AC:80:12:48:82:D1:C9:B2:44:C9:3C:7B:27:0C:34:D0:A8:C6:B1 Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft Manifest number: AB Signing time: Wed 29 Jul 2026 04:03:05 +0000 Manifest this update: Wed 29 Jul 2026 04:03:03 +0000 Manifest next update: Wed 05 Aug 2026 04:03:03 +0000 Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: VSlal1vznPrHrVuNob3PjtjdDrK+1hUEUOur+dG8Xi8=) 2: 29A5EF72783B11F18CDDD63D68A30FBC.roa (hash: ybtdLJt/2lB1NKc0oqy7/uP14/hx1uHMXiIUakfOVVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 04:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Jul 29 04:03:03 2026 GMT Not After : Aug 5 04:03:03 2026 GMT Subject: CN=6a697b78-5d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:33:00:7a:83:27:6c:83:25:b9:e4:37:99: 53:9f:a6:a0:b1:3b:3f:1a:c8:92:ff:4c:90:b3:e6: 33:86:49:28:b1:94:37:fc:9d:2a:ad:0f:20:c3:7c: 37:e7:fc:c5:ef:e2:97:fa:01:84:ab:fb:2d:da:41: 32:82:e9:9e:78:23:92:b8:f3:94:dc:61:ab:56:7d: a4:2d:a4:e2:97:7a:89:ab:2c:32:75:e9:66:fa:80: 10:ea:1c:48:3a:fb:26:ea:2c:6c:56:0a:b1:59:51: bc:73:cd:56:1f:4c:c8:78:43:45:08:53:59:ed:75: 8b:09:44:c3:9d:0c:be:f2:c1:86:e6:e0:2f:fb:c1: 63:8b:6b:50:19:91:cd:b3:c7:65:21:35:85:94:d3: fd:43:59:db:4a:4c:81:aa:71:37:ee:e5:f3:6f:2f: 84:85:4c:7c:f3:26:2d:3b:32:f3:da:a5:85:fa:91: 80:1e:32:21:d3:f4:b2:13:2b:de:3f:de:79:5b:b5: e1:0d:fc:b3:73:45:13:1c:6b:8e:ce:a8:7c:47:6e: f6:53:a7:c8:59:fb:11:30:bd:31:50:d3:b1:33:10: 63:95:fe:92:df:76:af:12:cc:64:39:ae:99:8d:6e: 5c:70:28:8d:c8:3b:92:1c:88:9d:03:97:4c:45:11: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AC:80:12:48:82:D1:C9:B2:44:C9:3C:7B:27:0C:34:D0:A8:C6:B1 X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fb:95:42:28:10:b6:7a:26:89:5e:0d:e6:d7:3b:8e:86:b3: 8f:c9:c0:0c:ba:f3:6d:fa:81:55:53:b9:32:94:3a:d2:d1:49: 1a:11:19:16:d2:f1:28:36:7d:63:94:22:af:7e:f3:8b:54:9c: 04:0f:ed:cb:73:c2:8b:47:c5:4c:90:f9:ef:d3:8d:9e:f8:ab: c9:9a:bf:d7:f4:f9:34:56:fd:d2:60:90:40:1c:53:c6:b0:57: 28:b5:70:12:17:a6:c6:91:d0:57:9c:73:65:6e:5d:5e:29:3f: e4:e7:76:d2:86:97:d1:61:57:1c:b7:87:74:e4:af:cf:03:d1: ae:ae:76:8f:c2:99:0c:87:36:d8:e7:0f:0e:fa:07:2f:92:49: b1:3b:57:b4:21:9a:89:ca:0c:f9:e8:3f:01:42:3d:d4:2e:2e: b2:42:16:e3:56:c6:51:4a:2f:4d:0d:0f:b2:1d:b2:3e:cd:a8: 49:07:d7:42:39:5a:54:85:ff:a8:b8:c7:c3:e4:eb:d8:7d:17: 69:c0:57:b2:5e:57:af:8d:4c:b7:22:22:f4:53:35:07:50:f1: 96:9f:d9:e4:0d:87:69:54:fe:f5:5d:32:b7:89:e0:b5:b6:a4: 1d:88:fd:38:24:3d:6f:53:14:c3:55:f3:bd:45:82:82:73:d0: f2:73:f6:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDA5NzEwQjVCNjY3NDlFMzM5RDEyNENERTZENjZDRTM2 NkFDQ0FCQjAwHhcNMjYwNzI5MDQwMzAzWhcNMjYwODA1MDQwMzAzWjAYMRYwFAYD VQQDEw02YTY5N2I3OC01ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDkzAHqDJ2yDJbnkN5lTn6agsTs/GsiS/0yQs+YzhkkosZQ3/J0qrQ8gw3w3 5/zF7+KX+gGEq/st2kEygumeeCOSuPOU3GGrVn2kLaTil3qJqywydelm+oAQ6hxI Ovsm6ixsVgqxWVG8c81WH0zIeENFCFNZ7XWLCUTDnQy+8sGG5uAv+8Fji2tQGZHN s8dlITWFlNP9Q1nbSkyBqnE37uXzby+EhUx88yYtOzLz2qWF+pGAHjIh0/SyEyve P955W7XhDfyzc0UTHGuOzqh8R272U6fIWfsRML0xUNOxMxBjlf6S33avEsxkOa6Z jW5ccCiNyDuSHIidA5dMRRGw7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWsgBJI gtHJskTJPHsnDDTQqMaxMB8GA1UdIwQYMBaAFAlxC1tmdJ4znRJM3m1mzjZqzKuw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy9BMEQ0OUNDODlF OUUxMUYwOTBGRjBENEZDNEY5QUUwMi9DWEVMVzJaMG5qT2RFa3plYldiT05tck1x N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0YzQy9BMEQ0OUNDODlFOUUxMUYwOTBGRjBENEZDNEY5QUUwMi9DWEVMVzJaMG5q T2RFa3plYldiT05tck1xN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmvuVQigQtnomiV4N5tc7joazj8nADLrzbfqBVVO5MpQ60tFJGhEZFtLxKDZ9 Y5Qir37zi1ScBA/ty3PCi0fFTJD579ONnviryZq/1/T5NFb90mCQQBxTxrBXKLVw EhemxpHQV5xzZW5dXik/5Od20oaX0WFXHLeHdOSvzwPRrq52j8KZDIc22OcPDvoH L5JJsTtXtCGaicoM+eg/AUI91C4uskIW41bGUUovTQ0Psh2yPs2oSQfXQjlaVIX/ qLjHw+Tr2H0XacBXsl5Xr41MtyIi9FM1B1Dxlp/Z5A2HaVT+9V0yt4ngtbakHYj9 OCQ9b1MUw1XzvUWCgnPQ8nP2iA== -----END CERTIFICATE-----Generated at Wed Jul 29 13:29:06 2026 by rpki-client