$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft File: CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft (raw, json) Hash identifier: pM/1atb61c9jrA9SNhA3O0xXEFUcc0KR9amr0ltA/BE= Subject key identifier: 2E:45:B8:6F:0F:26:7D:E3:C4:D0:85:65:A0:44:4D:AC:EB:B8:B5:4E Authority key identifier: 09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E Certificate issuer: /CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Certificate serial: 35AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft Manifest number: 3587 Signing time: Tue 28 Jul 2026 14:19:38 +0000 Manifest this update: Tue 28 Jul 2026 14:19:37 +0000 Manifest next update: Tue 04 Aug 2026 14:19:37 +0000 Files and hashes: 1: CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl (hash: py0fhaNWTz94760+iu0Z4B3NW+38Bs+xVyOSsJQffuI=) 2: Hc9HIXtMSG_5N_vBQ1tiTJyx4Uc.asa (hash: Hn+LrBWls+8N6/ROjuDSjCe4xS9yFFqp8inB56Ippe4=) 3: 81C9B5A4BBFA11ED99272016C4F9AE02.roa (hash: XQiiRoZi6pRqCcdlCvd3IdGsHWdpm/jnCGN7DrFAwWE=) 4: 77WwVdlWOllQ_9nqw0OJxL5S230.asa (hash: 4G+8eHZ/yV9ZB1VW22OiyhYdNPjveNdtUIFCgVDff7Y=) 5: E404430CB0F811E595E0F761C4F9AE02.roa (hash: dh5lUduMwHSl3wThPTXL9P/yi+GXIfLIHScJbSj8Rp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13741 (0x35ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D1A, serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Validity Not Before: Jul 28 14:19:37 2026 GMT Not After : Aug 4 14:19:37 2026 GMT Subject: CN=6a68ba7a-b4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:8e:1d:2b:32:16:b8:b7:af:b3:e6:c7:43: f8:e7:e1:28:51:47:a8:37:e4:48:0a:32:b9:02:35: 0d:e8:97:9a:5f:3a:9a:d2:b2:db:6d:b2:8f:da:05: e0:73:c5:91:d0:f9:06:45:8a:40:41:4d:e2:c2:51: 50:cd:2f:c6:32:be:92:69:30:ef:e6:38:ae:95:33: 70:ed:f1:3a:46:ea:f8:6b:77:63:e7:e8:5d:a5:ed: 28:6a:81:93:1f:74:9d:f6:62:85:26:9a:41:da:1d: 7b:4d:f6:2f:39:fc:de:dc:0f:38:35:f1:86:49:cb: b7:d9:f5:35:99:25:48:14:22:3e:6d:11:db:04:12: 7a:71:cd:3d:df:c4:c5:53:18:91:13:57:5b:02:22: c2:82:9b:7a:67:82:c5:7a:1c:c0:7f:50:6e:a9:01: 9b:44:42:7e:71:ca:f0:68:af:ce:34:04:03:b8:a5: 51:db:c6:c0:07:0b:b2:85:38:86:a5:0b:ac:73:3f: c7:ca:e9:11:c9:87:d0:5e:fe:c3:82:b2:02:a0:8a: 63:3e:1b:e5:4d:23:99:41:ee:8f:95:67:b8:1b:d2: 5a:c5:40:ca:e3:2d:45:e7:54:e8:7c:6c:36:7c:d7: a7:71:e7:42:c4:ef:09:4a:c5:1d:21:66:bf:9e:ea: 6b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:45:B8:6F:0F:26:7D:E3:C4:D0:85:65:A0:44:4D:AC:EB:B8:B5:4E X509v3 Authority Key Identifier: keyid:09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ef:2e:06:70:34:f5:29:2c:be:96:ba:a4:3c:06:bc:ef:6d: ff:de:64:52:5f:95:18:f4:3e:a5:e5:87:8b:c1:24:01:b1:f8: 6e:73:d7:b6:2f:2f:b7:7e:4a:8a:3c:e6:04:c8:39:7f:b1:ff: a9:a9:cd:a4:3e:8d:31:db:a3:98:13:c9:94:f8:f5:42:84:c9: fa:04:a1:5d:d5:b0:e3:a2:c9:26:6b:ec:7a:18:29:3e:36:36: bf:db:5d:47:a5:f9:74:f4:f2:3c:d1:4a:41:f1:54:f8:1e:39: 28:ed:f5:cf:c8:2a:2f:31:04:d3:07:db:7e:9a:9a:9c:be:95: 41:85:42:57:5c:84:7a:70:c2:a3:9c:e6:2e:f3:47:45:91:fe: f1:1c:98:c4:65:da:10:d0:c5:d1:73:44:54:2c:a2:62:02:fe: c4:94:2d:79:a5:f5:6a:05:e7:e8:12:df:b7:d1:83:7f:c1:67: 20:19:41:ca:f2:5e:60:2b:1f:fc:29:ce:53:1d:f5:e6:0d:51: 97:43:37:b2:28:49:b7:84:cd:70:65:b4:23:cd:fb:ad:2b:63: 60:96:11:86:bc:e4:14:65:4b:29:94:75:63:02:6e:e5:24:f2: 59:a1:63:8f:eb:61:31:87:c0:13:6d:5a:35:6b:d0:c3:40:65: 96:6c:9e:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMUExMTAvBgNVBAUTKDA5NzZGQzNEMjMxODZENDhDNjcxNzczNzQwODkxQ0Y1 NEUzMUI4MEUwHhcNMjYwNzI4MTQxOTM3WhcNMjYwODA0MTQxOTM3WjAYMRYwFAYD VQQDEw02YTY4YmE3YS1iNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2KOHSsyFri3r7Pmx0P45+EoUUeoN+RICjK5AjUN6JeaXzqa0rLbbbKP2gXg c8WR0PkGRYpAQU3iwlFQzS/GMr6SaTDv5jiulTNw7fE6Rur4a3dj5+hdpe0oaoGT H3Sd9mKFJppB2h17TfYvOfze3A84NfGGScu32fU1mSVIFCI+bRHbBBJ6cc0938TF UxiRE1dbAiLCgpt6Z4LFehzAf1BuqQGbREJ+ccrwaK/ONAQDuKVR28bABwuyhTiG pQuscz/HyukRyYfQXv7DgrICoIpjPhvlTSOZQe6PlWe4G9JaxUDK4y1F51TofGw2 fNencedCxO8JSsUdIWa/nuprZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5FuG8P Jn3jxNCFZaBETazruLVOMB8GA1UdIwQYMBaAFAl2/D0jGG1IxnF3N0CJHPVOMbgO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQxQS9DNTlCMDJEQTFE NzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJVakdjWGMzUUlrYzlVNHh1 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NYYjhQU01ZYlVqR2NYYzNRSWtjOVU0eHVBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQxQS9DNTlCMDJEQTFENzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJV akdjWGMzUUlrYzlVNHh1QTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGu8uBnA09Sksvpa6pDwGvO9t/95kUl+VGPQ+peWHi8EkAbH4bnPXti8vt35K ijzmBMg5f7H/qanNpD6NMdujmBPJlPj1QoTJ+gShXdWw46LJJmvsehgpPjY2v9td R6X5dPTyPNFKQfFU+B45KO31z8gqLzEE0wfbfpqanL6VQYVCV1yEenDCo5zmLvNH RZH+8RyYxGXaENDF0XNEVCyiYgL+xJQteaX1agXn6BLft9GDf8FnIBlByvJeYCsf /CnOUx315g1Rl0M3sihJt4TNcGW0I837rStjYJYRhrzkFGVLKZR1YwJu5STyWaFj j+thMYfAE21aNWvQw0BllmyeNQ== -----END CERTIFICATE-----Generated at Tue Jul 28 17:17:54 2026 by rpki-client