$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft File: CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft (raw, json) Hash identifier: z6tVJhYPwDTN7tpTxiENSSaIclyh3xfaZ5D9Un8q9CE= Subject key identifier: 72:0A:D8:AE:93:F8:D6:8D:35:6C:66:CA:24:6B:9A:E7:E4:C7:BC:64 Authority key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F Certificate issuer: /CN=A91EA23A/serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft Manifest number: 26 Signing time: Mon 27 Jul 2026 11:16:04 +0000 Manifest this update: Mon 27 Jul 2026 11:16:03 +0000 Manifest next update: Mon 03 Aug 2026 11:16:03 +0000 Files and hashes: 1: CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl (hash: hx7b5OjX3ERHRWnjB27WJ2gy03v2OmmpDjOtoR9FOGk=) 2: A08CACAC631411F19BD88A887D47A888.roa (hash: cui5kt/ao4ZSMnSmpM+vFQ/6IaNn7ud21wvDYaj2E2c=) 3: 65735378631411F1A1ABE5607D47A888.roa (hash: mA7bAbno8eCxBFSHk2mZ7wRMpGBwQ5uNOFxGCcgIxe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Validity Not Before: Jul 27 11:16:03 2026 GMT Not After : Aug 3 11:16:03 2026 GMT Subject: CN=6a673df4-990d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:78:a7:14:27:f1:04:d0:ed:76:3a:eb:bd: d0:c4:4f:78:be:35:cf:52:bd:a8:b2:3e:53:9e:65: a6:18:f2:00:f6:b4:f8:4e:95:48:02:8b:72:e8:1c: 4a:c1:0f:1e:d9:13:ba:9d:08:07:00:62:04:69:d4: 7e:69:a1:d0:2d:6b:7a:76:a3:9a:48:99:8b:ee:6b: 15:53:0d:3c:f9:3f:33:45:07:e4:40:61:46:5f:2c: fa:89:42:dc:0b:98:97:b8:38:a9:4e:b0:55:f5:ff: 01:c9:45:3d:05:9c:7c:6b:90:a1:f1:77:16:e7:c3: e8:ac:db:3d:95:94:f5:72:58:cf:ed:5b:fe:cd:c6: dd:4c:35:1e:bc:fc:7b:66:9e:1d:ad:f5:aa:0a:a2: 81:23:72:3d:92:a9:a9:6f:44:70:fc:61:a2:89:72: 50:f4:03:46:dd:d0:f3:be:fa:6e:7c:d0:39:e6:06: 10:7c:08:bb:bf:5d:3d:26:24:ad:3b:29:30:e5:ff: 9e:b4:54:68:74:9a:38:21:f4:6c:b2:42:ca:15:ea: 6d:aa:9b:52:21:9d:f6:ad:cf:9a:d4:74:a9:a2:b4: 77:da:dc:d6:64:ee:20:32:0e:b4:73:9e:08:07:b7: e1:b2:1b:1c:ea:cf:fc:3f:40:51:43:f7:f3:a9:6c: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0A:D8:AE:93:F8:D6:8D:35:6C:66:CA:24:6B:9A:E7:E4:C7:BC:64 X509v3 Authority Key Identifier: keyid:0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:42:30:ae:bc:71:97:a1:47:33:d6:49:35:49:12:c5:ef:fd: 5f:91:86:95:f7:a5:a3:9f:87:c0:47:d9:db:8b:ad:da:f7:45: ac:42:61:a3:04:b9:2b:93:cd:fd:dd:c9:1e:2d:aa:9f:be:75: 9a:65:bf:5c:ee:55:54:ba:e3:91:99:aa:3b:53:85:1c:73:8e: 84:21:a2:3f:b7:fb:aa:c2:64:ab:d5:a3:e9:ba:4e:79:30:6d: ec:ee:62:d7:89:11:fd:21:e2:e4:4b:a1:d1:10:b2:4d:a7:02: c6:a9:18:bf:cc:98:e5:77:b0:4f:a0:a8:1a:84:5a:8a:2d:80: 6c:0a:33:87:91:7e:c5:a7:b6:fe:d3:7c:1b:e3:a0:f2:98:97: 7d:e9:29:9f:84:24:c7:2c:0f:44:dc:fa:28:6e:db:d6:f3:25: d8:07:ca:56:e8:e4:7e:86:58:8c:07:98:99:87:23:72:bb:ba: 0a:8f:d9:4e:9d:ee:18:46:d2:a0:85:31:86:76:b7:9e:c6:88: 8f:ce:3d:42:3f:e7:90:a6:f6:c1:d8:79:9e:a1:03:b2:c2:d3: ab:47:68:27:9e:a3:c5:9a:cb:24:f5:05:8f:0c:1e:b0:07:43: 27:f7:4a:5b:46:6b:ee:60:eb:8e:f2:fd:44:c1:29:5f:6d:61: b4:6e:47:2b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTIzQTExMC8GA1UEBRMoMEEyNUQxRjMyMUU1MEEwQkNBQzdDMUQwN0YzMTkzOTdB MzkxMDEzRjAeFw0yNjA3MjcxMTE2MDNaFw0yNjA4MDMxMTE2MDNaMBgxFjAUBgNV BAMTDTZhNjczZGY0LTk5MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt6HinFCfxBNDtdjrrvdDET3i+Nc9SvaiyPlOeZaYY8gD2tPhOlUgCi3LoHErB Dx7ZE7qdCAcAYgRp1H5podAta3p2o5pImYvuaxVTDTz5PzNFB+RAYUZfLPqJQtwL mJe4OKlOsFX1/wHJRT0FnHxrkKHxdxbnw+is2z2VlPVyWM/tW/7Nxt1MNR68/Htm nh2t9aoKooEjcj2SqalvRHD8YaKJclD0A0bd0PO++m580DnmBhB8CLu/XT0mJK07 KTDl/560VGh0mjgh9GyyQsoV6m2qm1Ihnfatz5rUdKmitHfa3NZk7iAyDrRznggH t+GyGxzqz/w/QFFD9/OpbJH5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcgrYrpP4 1o01bGbKJGua5+THvGQwHwYDVR0jBBgwFoAUCiXR8yHlCgvKx8HQfzGTl6ORAT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMjNBLzhENTlBMkU0NTgy MzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2S3g4SFFmekdUbDZPUkFU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lYUjh5SGxDZ3ZLeDhIUWZ6R1RsNk9SQVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MjNBLzhENTlBMkU0NTgyMzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2 S3g4SFFmekdUbDZPUkFUOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBqQjCuvHGXoUcz1kk1SRLF7/1fkYaV96Wjn4fAR9nbi63a90WsQmGjBLkrk839 3ckeLaqfvnWaZb9c7lVUuuORmao7U4Ucc46EIaI/t/uqwmSr1aPpuk55MG3s7mLX iRH9IeLkS6HRELJNpwLGqRi/zJjld7BPoKgahFqKLYBsCjOHkX7Fp7b+03wb46Dy mJd96SmfhCTHLA9E3PoobtvW8yXYB8pW6OR+hliMB5iZhyNyu7oKj9lOne4YRtKg hTGGdreexoiPzj1CP+eQpvbB2HmeoQOywtOrR2gnnqPFmssk9QWPDB6wB0Mn90pb RmvuYOuO8v1EwSlfbWG0bkcr -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:52 2026 by rpki-client