$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: WOMJTk0+zRlGJfCrzhCC3yIuVKrjcbqTtzspim/BPG0= Subject key identifier: A5:C9:D2:C8:F7:C5:40:7B:DF:F4:0F:0A:FF:F6:E3:D7:E7:02:E5:FF Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0AB2 Signing time: Tue 28 Jul 2026 19:51:32 +0000 Manifest this update: Tue 28 Jul 2026 19:51:32 +0000 Manifest next update: Tue 04 Aug 2026 19:51:32 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: R50PPDa8t7H8Uc5WAszz5nyV7euG5y8t5HAO3mSIKvI=) 2: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=) 3: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=) 4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=) 5: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=) 6: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Jul 28 19:51:32 2026 GMT Not After : Aug 4 19:51:32 2026 GMT Subject: CN=6a690844-d428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:97:32:38:46:2b:f3:99:c9:82:2a:ee:c4:a7: b8:7e:ec:a8:50:ac:36:39:cf:9d:09:7c:4f:be:99: 36:00:a3:dd:3c:d1:39:4f:78:fe:d4:04:29:d3:fc: d9:81:4a:c5:b6:b4:d0:33:af:b3:60:9a:01:83:45: f1:3d:c5:99:76:f1:f5:a9:22:11:13:1c:c9:87:8c: 11:ce:a5:35:59:03:bf:50:38:27:da:32:16:92:15: 98:10:3c:88:1d:df:e7:ee:03:a5:84:10:8f:f5:77: f3:b8:26:94:e7:f7:61:d6:58:69:73:55:82:2f:1e: b1:39:df:f6:3e:69:2d:45:e0:2b:87:75:28:55:27: bf:3f:23:24:d0:c9:18:9e:60:38:be:c8:5e:76:7f: 62:16:55:6a:17:55:11:d3:39:ae:84:8d:b0:7b:28: 55:cc:09:72:aa:7c:6f:22:34:28:a9:82:13:da:9e: 22:07:1e:e7:d6:f9:48:c0:e2:8b:b1:66:b3:67:a6: b6:61:2d:67:4f:fb:04:8a:c2:42:3e:25:38:6e:e6: 4c:4a:bd:41:d9:47:1e:13:46:68:30:56:c8:8c:b7: e8:c7:3d:d7:3b:17:a4:f3:cc:4d:1a:a2:1c:19:a7: 18:ed:0b:3f:f2:35:11:4c:e7:bd:bf:23:ee:70:48: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C9:D2:C8:F7:C5:40:7B:DF:F4:0F:0A:FF:F6:E3:D7:E7:02:E5:FF X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b4:96:94:a5:e8:09:ab:b7:46:8e:73:e9:6a:c5:8e:d7:b8: d1:53:ed:95:b0:55:1b:d0:b2:7f:31:46:a0:64:80:9e:af:59: 61:05:d7:33:a8:38:2c:fc:d5:26:29:ae:98:5f:37:34:8b:2c: 89:38:16:43:4e:6f:40:46:76:ab:6e:4b:30:39:86:83:ba:a3: ae:2f:e6:80:35:ce:9e:d2:39:ef:30:11:dc:c0:4d:42:84:56: d2:13:dd:72:c8:fe:3a:62:fb:42:25:57:0d:1a:67:30:25:e3: 9a:2a:ae:89:4d:a9:f6:41:ca:68:81:36:b0:4b:9b:ee:f4:ff: be:14:9b:65:7b:63:6d:15:d1:d5:55:9d:d7:d4:09:22:60:12: 07:a2:54:fe:49:07:a5:ae:0f:7b:1d:59:0e:1d:7e:cd:67:ee: 42:2d:a0:fb:a9:4f:f5:af:82:c6:30:c9:09:ba:3d:bb:56:a4: 7b:50:7d:08:31:ad:69:18:70:01:8c:55:8a:ee:da:47:44:86: 55:0b:32:cc:0c:0a:d1:ad:e6:53:34:9d:f9:99:03:ff:90:d6: 98:68:c3:a8:82:87:85:e7:1c:69:57:c8:3e:32:24:91:fa:e6: 91:01:b1:0f:cd:63:d5:a3:4f:49:84:2c:fb:06:01:6b:eb:5c: 22:be:8c:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjYwNzI4MTk1MTMyWhcNMjYwODA0MTk1MTMyWjAYMRYwFAYD VQQDEw02YTY5MDg0NC1kNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25cyOEYr85nJgiruxKe4fuyoUKw2Oc+dCXxPvpk2AKPdPNE5T3j+1AQp0/zZ gUrFtrTQM6+zYJoBg0XxPcWZdvH1qSIRExzJh4wRzqU1WQO/UDgn2jIWkhWYEDyI Hd/n7gOlhBCP9XfzuCaU5/dh1lhpc1WCLx6xOd/2PmktReArh3UoVSe/PyMk0MkY nmA4vshedn9iFlVqF1UR0zmuhI2weyhVzAlyqnxvIjQoqYIT2p4iBx7n1vlIwOKL sWazZ6a2YS1nT/sEisJCPiU4buZMSr1B2UceE0ZoMFbIjLfoxz3XOxek88xNGqIc GacY7Qs/8jURTOe9vyPucEiheQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXJ0sj3 xUB73/QPCv/249fnAuX/MB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAirSWlKXoCau3Ro5z6WrFjte40VPtlbBVG9CyfzFGoGSAnq9ZYQXXM6g4LPzV JimumF83NIssiTgWQ05vQEZ2q25LMDmGg7qjri/mgDXOntI57zAR3MBNQoRW0hPd csj+OmL7QiVXDRpnMCXjmiquiU2p9kHKaIE2sEub7vT/vhSbZXtjbRXR1VWd19QJ ImASB6JU/kkHpa4Pex1ZDh1+zWfuQi2g+6lP9a+CxjDJCbo9u1ake1B9CDGtaRhw AYxViu7aR0SGVQsyzAwK0a3mUzSd+ZkD/5DWmGjDqIKHheccaVfIPjIkkfrmkQGx D81j1aNPSYQs+wYBa+tcIr6MXQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:57:52 2026 by rpki-client