$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft File: XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json) Hash identifier: QQ2JsY1ERZF8CnQsxSRsDZVDCEdUBN0R9845F6FETAM= Subject key identifier: 99:58:44:FD:19:5C:AC:60:BB:D9:EA:97:83:8D:72:67:4D:0D:44:D5 Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft Manifest number: 0736 Signing time: Sun 26 Jul 2026 22:39:55 +0000 Manifest this update: Sun 26 Jul 2026 22:39:55 +0000 Manifest next update: Sun 02 Aug 2026 22:39:55 +0000 Files and hashes: 1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: bmiHiU7tuoyL7rvWezktdwDszO5xqCCiqNrMuEuqHXo=) 2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: Pg8G/Pvu/vL6s07U9VvSZMPJr+p68tGkbJJnBYeyeQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Validity Not Before: Jul 26 22:39:55 2026 GMT Not After : Aug 2 22:39:55 2026 GMT Subject: CN=6a668cbb-cf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:8d:21:54:d3:56:78:33:a5:a3:2c:da:ea: 16:aa:2f:cc:3f:54:e8:b8:c7:50:17:15:ee:42:75: 2e:ad:5c:c9:ff:f5:f4:01:61:c1:d7:a1:02:81:34: b7:64:81:f0:e0:a9:47:09:b6:a5:90:6e:4d:9f:0e: 2e:6a:a4:63:6c:b7:98:1b:67:a3:74:1a:ae:a7:6d: 9c:be:39:7f:5a:e5:84:d2:2b:61:6c:f0:d4:59:45: 9b:94:0d:bb:88:60:ab:22:c9:a7:1d:b8:9b:5d:ee: c8:b5:02:ce:35:f9:5a:4e:50:5c:70:05:e6:0c:f0: 35:a1:91:af:42:55:00:2d:ed:d2:d5:02:12:97:18: 6a:ae:05:0d:d4:dc:1b:85:7f:a4:f3:f5:bc:3e:5e: 41:76:5e:b0:e0:0a:a8:8d:d0:63:74:56:ea:64:20: 03:f2:04:3c:3c:32:ec:13:cd:74:a9:ad:f3:73:79: e5:b8:d4:92:50:91:dc:24:83:cd:66:1d:d6:1d:28: e5:1f:a1:a7:d7:3c:8f:e7:ad:e6:44:e8:c4:c7:9b: 95:96:f1:be:36:a2:9b:57:20:d7:14:e9:e6:e5:98: a1:9f:e4:7e:40:d5:dc:16:67:6f:96:6d:4a:99:8c: f8:13:ce:ee:af:e1:b0:62:f9:0c:e0:39:77:fa:e9: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:58:44:FD:19:5C:AC:60:BB:D9:EA:97:83:8D:72:67:4D:0D:44:D5 X509v3 Authority Key Identifier: keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:75:23:b7:fe:76:30:ed:7e:61:cc:9c:da:03:f5:82:26:69: ff:01:bc:98:c1:1e:43:6f:ba:e1:18:83:bb:58:d9:fe:52:b9: 0d:86:a6:a9:ae:1e:e1:78:ea:ba:57:d2:85:88:1b:50:11:3a: fe:3e:ae:87:c6:c0:82:c6:9f:9f:15:e5:c2:37:44:38:80:5e: 3c:aa:e3:d6:10:8e:2d:83:4f:61:e3:61:3c:67:3a:ab:d1:83: ed:1d:48:45:d8:6b:24:49:bb:0d:9d:44:da:0e:34:cd:ca:4b: 12:12:90:8b:5d:6e:7a:09:0f:b3:2d:69:36:39:a5:2e:bc:18: ed:a0:7c:70:f5:27:82:8f:95:21:1c:2c:6a:98:a9:a6:b4:e8: 36:19:15:98:e8:aa:a7:f2:d5:9d:d4:6a:20:da:27:c1:b6:a0: 90:e5:be:19:a4:aa:87:fd:b6:5c:67:a4:17:1c:da:79:41:2b: f8:d7:be:8e:e6:e4:fc:3e:d6:fb:0e:4f:ae:fd:cc:a1:cb:49: 0a:3c:11:aa:cc:35:9a:90:3d:76:53:6d:3e:2f:ed:17:89:17: 43:8a:69:86:b0:31:78:02:45:94:99:16:f2:ea:a1:d5:cb:d8: 82:f6:ec:80:57:99:15:da:a1:c7:44:81:c6:c9:53:bb:8b:9b: 23:df:ec:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCRDQxMTAvBgNVBAUTKDVEQzAzMDMzMzE4OThBRUZEQjg1RTREOTE0MDA2Qjg5 Mzc2QkVGRTEwHhcNMjYwNzI2MjIzOTU1WhcNMjYwODAyMjIzOTU1WjAYMRYwFAYD VQQDEw02YTY2OGNiYi1jZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0CNIVTTVngzpaMs2uoWqi/MP1TouMdQFxXuQnUurVzJ//X0AWHB16ECgTS3 ZIHw4KlHCbalkG5Nnw4uaqRjbLeYG2ejdBqup22cvjl/WuWE0ithbPDUWUWblA27 iGCrIsmnHbibXe7ItQLONflaTlBccAXmDPA1oZGvQlUALe3S1QISlxhqrgUN1Nwb hX+k8/W8Pl5Bdl6w4AqojdBjdFbqZCAD8gQ8PDLsE810qa3zc3nluNSSUJHcJIPN Zh3WHSjlH6Gn1zyP563mROjEx5uVlvG+NqKbVyDXFOnm5Zihn+R+QNXcFmdvlm1K mYz4E87ur+GwYvkM4Dl3+ukK8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlYRP0Z XKxgu9nql4ONcmdNDUTVMB8GA1UdIwQYMBaAFF3AMDMxiYrv24Xk2RQAa4k3a+/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENC80RTg3QTQ2QTg2 QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1X2JoZVRaRkFCcmlUZHI3 LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjQXdNekdKaXVfYmhlVFpGQUJyaVRkcjctRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JENC80RTg3QTQ2QTg2QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1 X2JoZVRaRkFCcmlUZHI3LUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApnUjt/52MO1+Ycyc2gP1giZp/wG8mMEeQ2+64RiDu1jZ/lK5DYamqa4e4Xjq ulfShYgbUBE6/j6uh8bAgsafnxXlwjdEOIBePKrj1hCOLYNPYeNhPGc6q9GD7R1I RdhrJEm7DZ1E2g40zcpLEhKQi11uegkPsy1pNjmlLrwY7aB8cPUngo+VIRwsapip prToNhkVmOiqp/LVndRqINonwbagkOW+GaSqh/22XGekFxzaeUEr+Ne+jubk/D7W +w5Prv3MoctJCjwRqsw1mpA9dlNtPi/tF4kXQ4pphrAxeAJFlJkW8uqh1cvYgvbs gFeZFdqhx0SBxslTu4ubI9/stg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:53 2026 by rpki-client