$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft File: XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft (raw, json) Hash identifier: RIbtRybNrRlcseZq96FLHI5ugf8k9M1eRi3wViJMf7M= Subject key identifier: B2:76:C6:39:25:1D:C2:32:6E:EE:2E:E8:AF:DA:AC:15:F6:20:E4:03 Authority key identifier: 5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 Certificate issuer: /CN=A91E7B89/serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft Manifest number: 76 Signing time: Mon 27 Jul 2026 10:04:54 +0000 Manifest this update: Mon 27 Jul 2026 10:04:53 +0000 Manifest next update: Mon 03 Aug 2026 10:04:53 +0000 Files and hashes: 1: XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl (hash: zeig5sg4BUp3mSwmkInO3BqDY1s33fUiE7usVxDBWqs=) 2: 72480DC0D9A111F0989DD75268D3641D.roa (hash: 254YjhyMn8TcecNMQW2J/rfKDC3ffHZAOD2O4s1Qu3A=) 3: 1C61CBFA1D1A11F1B8E79D60103D8C67.roa (hash: a189GeZn/qoKIWbLCd3ZJZBVaZ36ji3gpESDwYzEX9s=) 4: 1BD6E18E1D1A11F1B8E79D60103D8C67.roa (hash: rrytxPSd1VoT8yzZHF5nlkUhFP1WWEaU2+XamxIi/z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7B89, serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Validity Not Before: Jul 27 10:04:53 2026 GMT Not After : Aug 3 10:04:53 2026 GMT Subject: CN=6a672d46-ad49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:2b:fa:eb:c5:d6:21:7b:66:25:e7:e3:4b: 2f:bd:c5:65:27:1e:f0:07:c1:6f:63:d3:e1:60:2d: 4e:0e:9b:cd:5d:8b:0e:af:31:68:cd:11:10:71:1e: 9a:00:92:98:7c:ae:b2:81:e1:a9:32:d6:a2:8d:7a: 1b:15:5b:86:76:8a:cc:27:88:41:50:61:cf:4f:93: 8b:49:3d:5a:a8:38:b9:87:28:f2:13:3e:d1:d6:70: 0b:9d:26:43:8c:bf:b9:67:f2:1b:92:52:ab:8b:c2: cf:9c:b7:3e:b4:95:c5:ca:42:ce:38:cc:3e:f4:41: ee:d1:89:d5:04:65:e6:bf:6b:44:ae:98:e2:8c:19: 45:b2:c4:dd:e3:40:84:1d:2c:8b:18:7b:2a:27:c1: b9:6e:0d:38:fd:f0:4e:cc:a6:15:a5:f6:69:17:f0: 55:02:ab:a4:85:2b:bc:ec:67:e7:77:22:b9:96:6a: 94:ee:1a:95:87:f8:ed:0b:b0:19:8f:25:62:53:49: 4d:1f:34:20:d2:cb:42:6f:8e:b2:30:d5:12:0f:94: af:64:43:af:3f:d2:01:41:a5:fe:2b:d0:5c:1d:05: 3f:81:b6:e6:da:3b:1b:47:dc:fe:75:e0:3e:9f:06: e4:de:bf:3e:cb:c9:1c:5f:6e:bd:8f:3b:e1:5c:1b: 95:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:76:C6:39:25:1D:C2:32:6E:EE:2E:E8:AF:DA:AC:15:F6:20:E4:03 X509v3 Authority Key Identifier: keyid:5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:eb:6d:da:71:b8:88:7f:66:a0:d1:eb:d0:35:69:38:fb:a2: 26:a5:1d:af:49:db:0f:e7:df:64:1a:33:55:9f:d8:ed:26:e1: 79:62:b9:0f:d7:1c:ce:70:28:98:d5:19:2c:3d:a7:ca:ec:ce: 23:07:ab:73:3b:b5:d8:8b:55:40:76:e3:98:23:9a:38:d5:e4: 1e:10:2d:31:c5:98:7f:d7:8e:1e:01:e0:32:2c:18:c8:e0:a2: 0c:b4:ec:bd:46:e3:ac:3f:e7:7b:79:9a:b3:8e:22:67:cd:63: 0c:87:b3:17:28:1a:73:52:2b:d3:5e:49:d7:34:93:ff:6a:9e: cc:63:4b:95:4d:95:88:b3:c1:9b:45:c2:38:fb:aa:59:41:fb: 60:c3:a3:43:9d:97:47:13:68:b9:a7:a6:cb:ec:59:93:5b:6e: be:49:59:36:d8:b9:24:58:ab:c0:62:ec:c7:06:6b:ef:bf:3a: 90:5a:10:c8:d5:82:aa:7a:24:b1:81:c1:e9:bf:1a:9b:36:a6: 8e:8d:eb:de:a9:a0:e9:bb:d9:f7:e1:d8:91:eb:f7:59:48:ac: b7:bb:d9:31:13:f2:94:56:7a:b9:07:4f:9f:fc:55:9f:e5:73: a6:03:39:be:31:bb:d7:71:76:88:eb:4c:32:bc:6a:6d:92:3e: 2a:4e:bc:78 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0I4OTExMC8GA1UEBRMoNUU3ODY0MkIwM0NDMzdFMjZGRDQxNUU3RDc2MUJFNDg0 NzM2QzU2NjAeFw0yNjA3MjcxMDA0NTNaFw0yNjA4MDMxMDA0NTNaMBgxFjAUBgNV BAMTDTZhNjcyZDQ2LWFkNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoVyv668XWIXtmJefjSy+9xWUnHvAHwW9j0+FgLU4Om81diw6vMWjNERBxHpoA kph8rrKB4aky1qKNehsVW4Z2iswniEFQYc9Pk4tJPVqoOLmHKPITPtHWcAudJkOM v7ln8huSUquLws+ctz60lcXKQs44zD70Qe7RidUEZea/a0SumOKMGUWyxN3jQIQd LIsYeyonwbluDTj98E7MphWl9mkX8FUCq6SFK7zsZ+d3IrmWapTuGpWH+O0LsBmP JWJTSU0fNCDSy0JvjrIw1RIPlK9kQ68/0gFBpf4r0FwdBT+BtubaOxtH3P514D6f BuTevz7LyRxfbr2PO+FcG5V3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsnbGOSUd wjJu7i7or9qsFfYg5AMwHwYDVR0jBBgwFoAUXnhkKwPMN+Jv1BXn12G+SEc2xWYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3Qjg5LzQxQkU0RjQ0RDlB MDExRjA5MzEzMEUwNzY4RDM2NDFEL1huaGtLd1BNTi1KdjFCWG4xMkctU0VjMnhX WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWG5oa0t3UE1OLUp2MUJYbjEyRy1TRWMyeFdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 Qjg5LzQxQkU0RjQ0RDlBMDExRjA5MzEzMEUwNzY4RDM2NDFEL1huaGtLd1BNTi1K djFCWG4xMkctU0VjMnhXWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC9623acbiIf2ag0evQNWk4+6ImpR2vSdsP599kGjNVn9jtJuF5YrkP1xzOcCiY 1RksPafK7M4jB6tzO7XYi1VAduOYI5o41eQeEC0xxZh/144eAeAyLBjI4KIMtOy9 RuOsP+d7eZqzjiJnzWMMh7MXKBpzUivTXknXNJP/ap7MY0uVTZWIs8GbRcI4+6pZ Qftgw6NDnZdHE2i5p6bL7FmTW26+SVk22LkkWKvAYuzHBmvvvzqQWhDI1YKqeiSx gcHpvxqbNqaOjeveqaDpu9n34diR6/dZSKy3u9kxE/KUVnq5B0+f/FWf5XOmAzm+ MbvXcXaI60wyvGptkj4qTrx4 -----END CERTIFICATE-----Generated at Wed Jul 29 08:01:06 2026 by rpki-client