$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: kSZdSICEOl1Y1C7CqkCnYXEqS1jXCp9/75Aju2WiYa0= Subject key identifier: C5:6E:CF:D3:87:5F:CD:1F:0A:6F:A0:D5:59:4C:0E:61:7A:DE:1D:07 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0CEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0B95 Signing time: Tue 28 Jul 2026 20:00:01 +0000 Manifest this update: Tue 28 Jul 2026 20:00:00 +0000 Manifest next update: Tue 04 Aug 2026 20:00:00 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: Y75IbQqbgTJpiIY/M74KcEwr8kd4zW3533MLOQAFtLQ=) 2: 7E4EFF5473E611F1BA32CE558DA30FBC.roa (hash: iWTTS4IDR+HUhOdGPI78d/5YB8edbsgZvg0Sd4nkNyU=) 3: 89135068FD2911F09BBA873E426F56BC.roa (hash: k6L2RtaPfs9iJDZ6OaWxGKY/ymoQfy3jPyd5OxyAkZs=) 4: A4890D6473E511F185E76C018DA30FBC.roa (hash: ceMs0ZWVV6AYuiMcgooM25QQZcYhNLkc9LYFIIi0V2o=) 5: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: 6WjdsXo2+LZgxWiVDy4rRpY13i0Lx3BV3M/QLcdy5a8=) 6: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: 70UT6YcmvBlzj1xKlGcaUiyXDKtBEdfDGecHQzUFaBA=) 7: FA6E449673E611F1867DB2D08DA30FBC.roa (hash: rKz8pZzI0+qvXmq1gvSTQ2lUF+eFULCXrlhyw1hDxQg=) 8: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: Hx4jtOuJzXTTc5VHMURxCz4V4clqTWRLtCDPvPlgRLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3307 (0xceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Jul 28 20:00:00 2026 GMT Not After : Aug 4 20:00:00 2026 GMT Subject: CN=6a690a40-09b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:ff:9c:3e:7a:b5:81:a1:aa:15:ec:90:ea: ff:f3:83:e1:b6:5c:c7:da:85:60:66:63:d2:db:4f: 38:10:6c:5b:5b:7b:80:50:0a:97:92:49:ec:84:94: e5:2d:7c:89:c3:18:ae:90:58:15:9e:06:fc:80:e2: 6f:34:9d:12:7f:78:5e:01:7e:21:5e:61:59:87:57: e0:a2:fc:f3:db:65:48:05:01:38:6f:8b:57:18:94: 06:64:59:99:ac:2d:43:46:40:d6:3a:96:ed:db:94: fa:87:52:9f:fb:21:26:5f:f9:1c:c1:42:32:42:4b: 45:1e:a6:0f:b8:c8:32:52:cd:3f:69:e2:f8:02:d7: 4e:0f:9c:eb:ad:d3:bf:8b:ec:95:49:15:a7:e2:2f: e2:b0:dd:27:e1:8c:a9:6b:23:11:e3:45:6f:ac:01: 37:cb:1a:e2:94:98:92:86:06:61:86:ff:21:5c:f4: b3:e6:58:10:b5:ed:4b:6b:40:a3:14:6d:4b:1e:a9: 94:99:72:50:6f:2c:9a:fa:56:e0:8f:11:9e:8c:af: 34:8c:53:ea:20:55:1d:a6:d9:1d:d6:4a:a3:37:b3: 0b:b9:b7:a8:99:84:dc:8b:49:15:70:63:5f:29:b0: f8:ca:ee:9e:2d:d2:22:15:ad:7b:18:6c:35:18:7c: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6E:CF:D3:87:5F:CD:1F:0A:6F:A0:D5:59:4C:0E:61:7A:DE:1D:07 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d8:87:a3:4c:b3:40:ad:c4:00:2d:b1:dd:4c:ea:74:ae:fe: 5b:70:e1:5a:e9:1d:3f:d8:9c:ca:a2:6f:88:83:03:12:79:cb: 8f:97:e6:97:13:cf:f6:76:56:00:0d:e1:1f:39:04:a6:5e:f6: 36:62:92:8d:d1:2c:15:0f:70:48:a1:9c:32:ee:66:1f:94:06: 0e:f2:12:80:e0:91:c7:66:9c:31:ba:4b:c7:4e:19:44:d3:a0: 3c:dc:4d:ce:23:aa:fe:42:fe:ab:a8:da:40:a2:a4:f7:7c:e9: 16:1b:16:9c:f2:f7:1f:88:fd:1b:0f:07:b4:dd:f8:2f:f0:27: f3:9e:a4:21:19:29:68:90:27:fd:bf:30:43:08:4a:13:c8:7b: 0e:21:3b:47:0b:bb:b8:59:5e:f4:fc:b7:59:31:83:e8:eb:a3: 75:af:9c:17:49:dd:e9:ec:4b:32:dc:3f:a3:06:05:59:9f:4e: e0:98:c9:09:0c:7c:ff:2c:b4:32:67:87:a8:56:5b:48:7c:b9: 0f:a9:a5:b9:9b:f5:5b:72:0b:8c:22:74:31:14:f6:72:1d:60: 37:66:a3:cf:0c:7a:e5:be:12:25:4d:7e:bd:26:92:da:44:b1: f3:26:25:66:0b:3d:2a:b5:23:c8:34:db:e1:d9:d6:b1:7a:a6: cc:3b:eb:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYwNzI4MjAwMDAwWhcNMjYwODA0MjAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MGE0MC0wOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz47/nD56tYGhqhXskOr/84PhtlzH2oVgZmPS2084EGxbW3uAUAqXkknshJTl LXyJwxiukFgVngb8gOJvNJ0Sf3heAX4hXmFZh1fgovzz22VIBQE4b4tXGJQGZFmZ rC1DRkDWOpbt25T6h1Kf+yEmX/kcwUIyQktFHqYPuMgyUs0/aeL4AtdOD5zrrdO/ i+yVSRWn4i/isN0n4YypayMR40VvrAE3yxrilJiShgZhhv8hXPSz5lgQte1La0Cj FG1LHqmUmXJQbyya+lbgjxGejK80jFPqIFUdptkd1kqjN7MLubeomYTci0kVcGNf KbD4yu6eLdIiFa17GGw1GHybLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVuz9OH X80fCm+g1VlMDmF63h0HMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQtiHo0yzQK3EAC2x3UzqdK7+W3DhWukdP9icyqJviIMDEnnLj5fmlxPP9nZW AA3hHzkEpl72NmKSjdEsFQ9wSKGcMu5mH5QGDvISgOCRx2acMbpLx04ZRNOgPNxN ziOq/kL+q6jaQKKk93zpFhsWnPL3H4j9Gw8HtN34L/An856kIRkpaJAn/b8wQwhK E8h7DiE7Rwu7uFle9Py3WTGD6Oujda+cF0nd6exLMtw/owYFWZ9O4JjJCQx8/yy0 MmeHqFZbSHy5D6mluZv1W3ILjCJ0MRT2ch1gN2ajzwx65b4SJU1+vSaS2kSx8yYl Zgs9KrUjyDTb4dnWsXqmzDvrHQ== -----END CERTIFICATE-----Generated at Wed Jul 29 05:56:13 2026 by rpki-client