$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json) Hash identifier: 6D5YLY3iumnqCaUvdkeAnIfHL15apzWfiOCI5Akegjc= Subject key identifier: A8:3F:45:CA:D9:4C:85:E6:2E:24:97:1B:2D:ED:17:39:14:05:10:84 Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft Manifest number: 0DA4 Signing time: Tue 28 Jul 2026 19:15:11 +0000 Manifest this update: Tue 28 Jul 2026 19:15:11 +0000 Manifest next update: Tue 04 Aug 2026 19:15:11 +0000 Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: 0uube3XaXHiqJhg4f9g+7CZu2AtGjOCqpubKqv8O0cc=) 2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: HcqMW++sZJHjGMxO2JSw3bS/+sZh101Hrd0Zjhq70t8=) 3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: wkggX/6qysF9Egk0xQyYTUInBulm7AKxdFFCyBP8GUk=) 4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: ls1HDtDX8ZrpUxCkm4TRRKjqrY+zASGFi8PHUEE3XHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Validity Not Before: Jul 28 19:15:11 2026 GMT Not After : Aug 4 19:15:11 2026 GMT Subject: CN=6a68ffbf-1d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:c8:dc:b0:7e:be:32:2e:5e:09:17:3b:ce: 56:ae:e3:17:fa:07:52:63:95:5e:14:09:cb:ef:1b: 7e:43:65:10:b9:e4:78:db:ca:27:67:ce:97:c3:b1: 4b:f4:a4:ad:72:00:a2:86:48:f6:aa:d6:ae:48:63: 1b:e8:ca:28:77:c2:75:4a:e9:94:cb:2a:65:90:ea: 81:8a:ff:ef:fe:a5:9a:fd:3a:6d:c3:32:ac:10:48: 5b:9c:63:5b:66:3e:80:bc:4d:18:41:78:09:3a:11: 63:73:e0:4d:d5:3e:f5:d4:d5:13:57:95:ba:c9:e6: f1:7f:c6:1c:bb:eb:06:ee:05:e4:30:98:22:5a:72: bf:84:00:61:8b:3e:b1:ff:76:b3:5f:19:61:75:bc: 72:d1:a7:9c:74:5e:51:45:bd:ac:81:24:94:00:7e: 1a:2b:32:a9:6c:06:98:c0:6c:81:09:33:92:07:9a: f7:07:e9:7a:97:44:ac:5e:78:e5:36:9a:8f:f9:8e: d3:f9:c1:b7:c5:ef:06:18:cb:e7:c8:3b:57:00:49: ea:58:7c:c4:45:3d:7c:f5:7b:35:de:45:ac:28:3e: da:5c:35:08:5e:9c:70:e3:1e:98:e5:10:b7:a6:6f: b5:2f:30:95:cc:68:57:50:26:2b:79:8f:e7:23:cc: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3F:45:CA:D9:4C:85:E6:2E:24:97:1B:2D:ED:17:39:14:05:10:84 X509v3 Authority Key Identifier: keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:df:bf:6b:1b:6d:0a:6b:18:ec:30:43:42:3f:ef:20:bb:c8: e8:97:d5:42:6e:41:72:de:3a:39:a3:96:7b:b8:c3:da:6c:e9: 39:7f:a3:24:6a:b9:0d:b3:69:28:7e:8d:f8:61:24:c3:0f:5b: 84:9b:a8:e2:f4:ad:d2:8b:47:62:2b:a0:fe:a2:8f:63:ce:33: 37:7d:f2:0b:4d:fd:6d:b8:42:56:54:98:cf:ca:b5:ff:f0:47: 44:1c:d6:f5:56:ec:8b:25:ec:68:5f:e6:51:09:cd:cf:63:8f: c2:a6:9a:18:6e:7d:f5:32:bd:49:c6:17:db:21:e9:fb:85:08: c0:3e:bf:46:7e:d7:b6:02:8e:88:c6:70:0a:11:09:e8:03:af: 05:30:d7:26:d9:68:11:94:71:c9:b0:dd:31:e0:fb:a4:82:99: 82:93:20:d5:41:5c:af:cf:86:30:21:5b:2d:c5:d5:72:96:70: 8f:10:59:bf:67:bb:6a:83:df:e4:a4:d8:81:f3:b9:85:a9:74: 0a:1d:36:5e:0c:87:42:20:41:1e:41:3d:2a:b5:c5:f3:14:38: a0:95:44:dd:78:01:e6:de:5c:ee:ff:cb:2d:c6:cd:92:ca:be: 2f:a3:9d:78:37:76:a7:b8:04:9a:fc:47:54:fc:49:3d:4f:95: bb:3b:36:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC RTJDQUIxRTYwHhcNMjYwNzI4MTkxNTExWhcNMjYwODA0MTkxNTExWjAYMRYwFAYD VQQDEw02YTY4ZmZiZi0xZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudTI3LB+vjIuXgkXO85WruMX+gdSY5VeFAnL7xt+Q2UQueR428onZ86Xw7FL 9KStcgCihkj2qtauSGMb6Mood8J1SumUyyplkOqBiv/v/qWa/TptwzKsEEhbnGNb Zj6AvE0YQXgJOhFjc+BN1T711NUTV5W6yebxf8Ycu+sG7gXkMJgiWnK/hABhiz6x /3azXxlhdbxy0aecdF5RRb2sgSSUAH4aKzKpbAaYwGyBCTOSB5r3B+l6l0SsXnjl NpqP+Y7T+cG3xe8GGMvnyDtXAEnqWHzERT189Xs13kWsKD7aXDUIXpxw4x6Y5RC3 pm+1LzCVzGhXUCYreY/nI8wCrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKg/RcrZ TIXmLiSXGy3tFzkUBRCEMB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3 MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZL QVNBQkIybVI5WnEtTEtzZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjN+/axttCmsY7DBDQj/vILvI6JfVQm5Bct46OaOWe7jD2mzpOX+jJGq5DbNp KH6N+GEkww9bhJuo4vSt0otHYiug/qKPY84zN33yC039bbhCVlSYz8q1//BHRBzW 9VbsiyXsaF/mUQnNz2OPwqaaGG599TK9ScYX2yHp+4UIwD6/Rn7XtgKOiMZwChEJ 6AOvBTDXJtloEZRxybDdMeD7pIKZgpMg1UFcr8+GMCFbLcXVcpZwjxBZv2e7aoPf 5KTYgfO5hal0Ch02XgyHQiBBHkE9KrXF8xQ4oJVE3XgB5t5c7v/LLcbNksq+L6Od eDd2p7gEmvxHVPxJPU+Vuzs2Dg== -----END CERTIFICATE-----Generated at Wed Jul 29 13:11:38 2026 by rpki-client