$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: yttNHVKnKUn4pFBtScGf9j3oAqzdVt6u2NdAvE6LslY= Subject key identifier: DB:DD:54:FE:20:A9:A0:27:E6:7A:61:6B:43:62:3A:8B:39:1C:3E:AF Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 0541 Signing time: Mon 27 Jul 2026 00:26:05 +0000 Manifest this update: Mon 27 Jul 2026 00:26:05 +0000 Manifest next update: Mon 03 Aug 2026 00:26:05 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: PdxX/VEnIpopwd28NaIdwGtY/tI+XbLEcb3kt0taWe0=) 2: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: kY65kJ7Z3Mu7QEVILrGdTmAvqTkSFv9BjhpNLh4YUPY=) 3: 11330A4663F611ECB344F979C4F9AE02.roa (hash: 3M+74bn/sA2p4TiZmfBp8pwqRm0NY6QA2mPOgZx57gA=) 4: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: SmcwGq0dD9iTZhV8jdPLgAp8Fs3hII4+H1WFKJpXd7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Jul 27 00:26:05 2026 GMT Not After : Aug 3 00:26:05 2026 GMT Subject: CN=6a66a59d-8ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:94:a7:8b:64:1a:65:b5:95:5c:bf:ef:27: 8a:f4:5f:1d:fc:d2:a6:ae:8e:5b:08:d3:c0:c1:b0: 43:07:38:a2:56:e1:6f:1b:9f:0b:ff:58:02:36:48: 98:c6:14:98:94:06:5e:dc:c3:a3:f7:74:ce:16:61: 8d:73:32:8f:f7:0c:7f:71:6c:70:1e:d9:5c:3b:69: ab:f1:38:01:5c:fa:1a:33:6c:74:31:a2:d8:62:44: 7f:ec:3d:d6:7c:01:3a:43:23:04:85:be:ec:ab:ca: bb:16:24:a1:66:b5:48:8f:42:28:d4:cd:61:8f:4c: 72:32:08:c6:3d:df:4e:99:e4:9d:50:91:41:d2:f5: 54:09:38:89:f5:ec:c2:a2:9d:e0:6f:c2:be:ad:b4: 8d:75:e1:08:cb:fa:a0:5a:2c:b5:0f:db:2f:17:e9: eb:e4:0f:8c:84:8a:38:cd:ef:ba:2d:5a:7a:78:1d: f5:c3:eb:c7:76:a5:90:9b:08:86:09:a5:68:a2:fc: 0c:ce:37:b7:93:2d:c6:99:98:85:37:11:2e:aa:d3: b0:9a:0b:ae:c4:42:a2:c4:1c:c6:c3:c1:fc:b4:e8: 51:f3:37:13:8a:4f:69:cd:3b:ca:2b:df:e2:49:15: a7:ac:d1:62:fb:01:7b:cd:cd:8a:fc:42:a3:c2:d0: b0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DD:54:FE:20:A9:A0:27:E6:7A:61:6B:43:62:3A:8B:39:1C:3E:AF X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ea:e7:a4:d0:9c:1e:39:a2:a3:7d:84:6f:fd:9a:86:7f:6a: 8b:58:a4:d3:31:6b:80:7c:b3:b1:fe:c7:68:4b:cf:43:13:ea: 15:bf:84:17:a5:a0:70:92:df:76:ef:b9:70:95:47:74:5f:97: e8:55:d2:73:5e:9e:eb:ee:62:c9:ab:a2:f0:9c:1f:e2:aa:75: a2:45:96:2b:2c:db:92:8b:79:e3:03:2a:5e:02:17:d6:aa:95: df:74:9b:69:20:33:4b:09:c3:7f:83:de:ad:40:eb:88:48:c0: 8f:e6:16:f4:3e:62:63:61:9a:b2:9e:b4:52:4d:88:52:47:47: ca:25:e6:75:87:ee:4e:4b:ea:72:94:1f:94:85:b5:50:37:6a: e2:df:4a:c4:97:fb:a5:ef:1c:86:8b:d7:5d:8e:ef:21:b8:f8: 12:2e:8e:be:b0:b5:98:e0:4f:e2:0f:f9:45:12:9f:00:20:bf: 9a:62:37:21:16:b3:1b:c0:ed:ab:6e:77:e7:3a:85:d0:8d:fe: 77:68:43:4e:3e:6f:54:98:3c:a7:17:f9:93:a1:8f:d6:a4:ae: bc:36:2b:c2:92:54:95:31:79:b0:b5:39:09:ce:62:93:90:36: 99:01:bf:81:1d:b0:4c:90:a0:38:51:bf:5c:91:0e:1c:5d:2d: 69:99:4b:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjYwNzI3MDAyNjA1WhcNMjYwODAzMDAyNjA1WjAYMRYwFAYD VQQDEw02YTY2YTU5ZC04Y2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr82Up4tkGmW1lVy/7yeK9F8d/NKmro5bCNPAwbBDBziiVuFvG58L/1gCNkiY xhSYlAZe3MOj93TOFmGNczKP9wx/cWxwHtlcO2mr8TgBXPoaM2x0MaLYYkR/7D3W fAE6QyMEhb7sq8q7FiShZrVIj0Io1M1hj0xyMgjGPd9OmeSdUJFB0vVUCTiJ9ezC op3gb8K+rbSNdeEIy/qgWiy1D9svF+nr5A+MhIo4ze+6LVp6eB31w+vHdqWQmwiG CaVoovwMzje3ky3GmZiFNxEuqtOwmguuxEKixBzGw8H8tOhR8zcTik9pzTvKK9/i SRWnrNFi+wF7zc2K/EKjwtCwlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvdVP4g qaAn5npha0NiOos5HD6vMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGernpNCcHjmio32Eb/2ahn9qi1ik0zFrgHyzsf7HaEvPQxPqFb+EF6WgcJLf du+5cJVHdF+X6FXSc16e6+5iyaui8Jwf4qp1okWWKyzbkot54wMqXgIX1qqV33Sb aSAzSwnDf4PerUDriEjAj+YW9D5iY2Gasp60Uk2IUkdHyiXmdYfuTkvqcpQflIW1 UDdq4t9KxJf7pe8chovXXY7vIbj4Ei6OvrC1mOBP4g/5RRKfACC/mmI3IRazG8Dt q2535zqF0I3+d2hDTj5vVJg8pxf5k6GP1qSuvDYrwpJUlTF5sLU5Cc5ik5A2mQG/ gR2wTJCgOFG/XJEOHF0taZlL0A== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:00 2026 by rpki-client