$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: evHDGNAURjlRjAfYuQ8wukQi2ywdu7OfrD0rIA9XRJk= Subject key identifier: 59:F5:86:85:0B:74:16:58:5D:34:8D:AA:FF:30:20:FC:C8:1A:0F:9E Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0AAE Signing time: Mon 20 Jul 2026 19:57:09 +0000 Manifest this update: Mon 20 Jul 2026 19:57:08 +0000 Manifest next update: Mon 27 Jul 2026 19:57:08 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: 56jw8MMOc3q0Jve7AY+wOY2NW5cggGCa7fvd6nOQODM=) 2: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=) 3: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=) 4: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=) 5: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=) 6: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Jul 20 19:57:08 2026 GMT Not After : Jul 27 19:57:08 2026 GMT Subject: CN=6a5e7d94-e078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:49:97:99:95:c2:a5:f9:18:a8:1e:2e:74: dd:59:ad:ca:bd:86:63:53:78:aa:cb:7d:f9:50:89: f3:16:c1:bd:e5:17:28:d5:f0:e7:e7:92:41:f8:ab: c4:14:86:c4:f5:88:6a:96:7f:6c:16:b1:dd:7e:fa: 34:82:81:0c:d0:b2:71:dc:9c:72:5b:45:fd:87:b2: 00:88:e4:8d:0a:0c:be:9c:dd:ae:92:9c:24:a7:7b: 46:3c:50:c4:56:89:17:e9:8f:e6:75:17:d3:43:0d: 6e:61:91:6d:5d:ae:8b:14:e0:6f:dc:cb:37:53:62: da:c3:ed:3f:23:d8:1a:8f:e0:47:c2:3e:c4:12:e7: ab:72:9a:40:51:28:c1:d6:86:6c:af:58:7a:71:ca: 82:9f:c8:4e:ab:f2:6a:0c:3d:41:7c:f2:94:ba:1c: 4b:27:2f:ef:36:eb:7a:d5:ad:d3:8d:c2:a7:e5:db: 7b:d7:b1:57:eb:4d:d0:5f:64:fb:98:63:15:e3:6d: aa:d1:1c:e5:6d:40:43:7f:af:20:ce:fe:87:d1:01: 43:eb:58:1b:71:2d:dd:45:26:be:19:7b:78:4e:60: b1:3d:55:64:7a:5d:b6:4b:c9:a7:19:39:2a:0f:0c: b8:28:e2:16:bb:d5:53:e2:6d:50:aa:41:b6:a4:f0: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:86:85:0B:74:16:58:5D:34:8D:AA:FF:30:20:FC:C8:1A:0F:9E X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:57:9f:9b:a1:00:49:ec:5b:88:1b:52:94:70:88:0f:86:6f: 1d:4e:49:a2:f8:1b:22:47:fc:5a:b9:0f:e4:b4:85:0a:3c:3d: fb:46:1c:96:38:e0:eb:a8:4a:3b:d7:52:19:f6:b6:0e:c0:6c: 83:2b:63:03:ad:80:1e:b4:74:f6:34:a0:15:48:41:2c:e8:f5: 39:77:4d:a5:4c:16:b1:f1:73:34:41:b7:5e:94:e3:e6:9a:6c: 14:ec:2f:59:07:14:e0:b4:6c:67:2e:96:08:fa:c5:86:36:28: ce:5f:19:05:91:e4:5f:7d:56:4a:0e:df:1f:e0:5b:ce:9f:fe: 63:06:74:fc:ec:7e:ab:0a:c1:94:b6:67:34:7b:45:b4:b1:c0: f1:e1:6e:b6:7e:06:e3:55:b2:87:15:77:62:59:8d:6c:db:a8: bd:4b:8f:bc:9b:fd:a9:bb:93:4f:46:89:5d:ad:b1:57:52:ea: cc:3a:73:0c:7e:1b:c4:24:8d:ec:e2:73:16:26:ef:08:e5:e3: 49:40:40:26:69:00:36:d0:24:7b:b8:08:9b:20:72:26:c7:7d: 0a:11:d5:4d:64:e6:1d:f5:46:a0:fe:f3:94:f9:f0:54:aa:03: cf:fa:0c:a3:78:73:34:22:09:d8:da:dc:b9:49:5c:f9:81:3c: a7:09:40:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjYwNzIwMTk1NzA4WhcNMjYwNzI3MTk1NzA4WjAYMRYwFAYD VQQDEw02YTVlN2Q5NC1lMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0JJl5mVwqX5GKgeLnTdWa3KvYZjU3iqy335UInzFsG95Rco1fDn55JB+KvE FIbE9Yhqln9sFrHdfvo0goEM0LJx3JxyW0X9h7IAiOSNCgy+nN2ukpwkp3tGPFDE VokX6Y/mdRfTQw1uYZFtXa6LFOBv3Ms3U2Law+0/I9gaj+BHwj7EEuercppAUSjB 1oZsr1h6ccqCn8hOq/JqDD1BfPKUuhxLJy/vNut61a3TjcKn5dt717FX603QX2T7 mGMV422q0RzlbUBDf68gzv6H0QFD61gbcS3dRSa+GXt4TmCxPVVkel22S8mnGTkq Dwy4KOIWu9VT4m1QqkG2pPDYmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFn1hoUL dBZYXTSNqv8wIPzIGg+eMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFFefm6EASexbiBtSlHCID4ZvHU5JovgbIkf8WrkP5LSFCjw9+0Ycljjg66hK O9dSGfa2DsBsgytjA62AHrR09jSgFUhBLOj1OXdNpUwWsfFzNEG3XpTj5ppsFOwv WQcU4LRsZy6WCPrFhjYozl8ZBZHkX31WSg7fH+Bbzp/+YwZ0/Ox+qwrBlLZnNHtF tLHA8eFutn4G41WyhxV3YlmNbNuovUuPvJv9qbuTT0aJXa2xV1LqzDpzDH4bxCSN 7OJzFibvCOXjSUBAJmkANtAke7gImyByJsd9ChHVTWTmHfVGoP7zlPnwVKoDz/oM o3hzNCIJ2NrcuUlc+YE8pwlA8A== -----END CERTIFICATE-----Generated at Tue Jul 21 16:34:35 2026 by rpki-client