$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: EL7Md+8/d0WQTC0vzYMJumkb4cZ8D/OgqxK7JDOi4x0= Subject key identifier: D6:57:56:ED:BC:B1:AE:E7:CF:32:A6:61:D9:A6:07:71:AB:F1:1E:11 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 0788 Signing time: Mon 06 Jul 2026 22:08:10 +0000 Manifest this update: Mon 06 Jul 2026 22:08:10 +0000 Manifest next update: Mon 13 Jul 2026 22:08:10 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: cdxA/A242yx9bBO0H8SysZ2HAPNu46mB7wIKUg9FJEI=) 2: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0=) 3: 79520888650611EBA9BB2882C4F9AE02.roa (hash: /W4EDzCJO28OAsl3pdvhn80k2j9lIQ5KcY8vtvKyWxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 22:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Jul 6 22:08:10 2026 GMT Not After : Jul 13 22:08:10 2026 GMT Subject: CN=6a4c274a-d62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:62:06:4b:32:d1:78:6c:97:67:63:26:e8:f8: 35:09:c0:09:38:3c:78:5e:60:c6:13:be:ac:1d:59: 15:4e:7e:a7:4d:00:6a:ee:6d:79:2b:b2:4a:f0:94: 15:b6:a0:21:9d:98:2b:bf:ce:98:85:26:1a:f5:7e: 49:b2:15:7d:8b:eb:ca:50:c5:af:59:63:46:22:4a: 2a:d5:34:bc:9f:f5:cf:ea:f7:d5:e0:0a:21:bb:50: 1a:43:16:95:dd:7d:5e:c4:89:c7:03:aa:ea:92:60: ea:af:84:dd:ba:c8:65:8a:78:de:11:03:5f:ee:43: 86:45:d5:5c:26:0d:f2:f3:18:ef:f6:43:b9:43:db: 25:2d:08:95:76:e2:28:9d:64:a3:23:da:0f:4d:2a: bc:a6:32:19:c6:50:6a:40:c9:af:f7:b3:e6:fb:d5: c8:fa:14:6a:f6:8e:c9:01:4a:7d:1c:e4:ba:63:9f: f8:6a:61:b0:2e:86:d7:51:55:a3:b6:94:15:a4:5a: 1d:c3:c6:8c:c6:f2:1d:57:05:c1:d6:7f:5b:90:e8: 2d:5f:03:70:b9:35:90:3d:fc:ba:51:d7:57:f1:6b: 8e:43:0d:73:86:30:f9:c9:32:93:cb:a0:b9:ea:7e: 6f:1b:20:2d:f2:9d:49:0e:c9:4d:19:21:6c:b4:79: 4f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:57:56:ED:BC:B1:AE:E7:CF:32:A6:61:D9:A6:07:71:AB:F1:1E:11 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f5:1a:4d:6d:86:ad:b0:10:0e:78:08:12:e4:c9:1a:fd:bc: ee:ab:42:62:c4:cd:36:3e:95:57:e3:5f:2b:ff:44:7a:b4:75: cc:da:7b:c8:2f:50:3c:28:b7:71:93:63:04:84:c8:97:78:dd: dd:98:84:b6:38:3d:45:cb:20:16:eb:0e:b4:c7:fc:0a:d1:4c: 7c:8a:29:52:18:db:18:28:5f:82:c4:e9:13:99:4e:df:e3:9d: 31:c4:61:c8:d3:56:f7:1b:70:52:11:b4:60:f9:39:83:84:7e: 47:79:da:67:05:70:6e:30:77:52:95:2b:75:cc:09:f8:27:44: 88:ff:d8:e1:bc:cb:77:ec:3c:d9:7b:ca:a7:c7:20:cf:78:f7: 65:b3:21:9b:2d:4a:a3:7d:bb:af:e5:a6:84:e8:5e:5e:db:68: d1:fc:76:e0:c1:03:68:e2:33:12:f8:a1:09:5f:7e:05:32:26: 76:05:28:ab:02:d6:df:e8:8c:4f:5d:83:12:e4:45:84:d9:fe: 7d:d6:f2:a8:22:82:e1:fa:58:9b:2b:75:c8:02:d8:00:a1:10: bf:2f:3e:da:27:f6:de:b6:1c:b6:3b:4e:69:f6:6f:0a:57:97: a0:2e:06:9a:fc:9c:40:17:d2:24:9c:c0:27:46:f4:e2:9b:df: f0:29:6f:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjYwNzA2MjIwODEwWhcNMjYwNzEzMjIwODEwWjAYMRYwFAYD VQQDEw02YTRjMjc0YS1kNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42IGSzLReGyXZ2Mm6Pg1CcAJODx4XmDGE76sHVkVTn6nTQBq7m15K7JK8JQV tqAhnZgrv86YhSYa9X5JshV9i+vKUMWvWWNGIkoq1TS8n/XP6vfV4Aohu1AaQxaV 3X1exInHA6rqkmDqr4TdushlinjeEQNf7kOGRdVcJg3y8xjv9kO5Q9slLQiVduIo nWSjI9oPTSq8pjIZxlBqQMmv97Pm+9XI+hRq9o7JAUp9HOS6Y5/4amGwLobXUVWj tpQVpFodw8aMxvIdVwXB1n9bkOgtXwNwuTWQPfy6UddX8WuOQw1zhjD5yTKTy6C5 6n5vGyAt8p1JDslNGSFstHlPgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZXVu28 sa7nzzKmYdmmB3Gr8R4RMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA/UaTW2GrbAQDngIEuTJGv287qtCYsTNNj6VV+NfK/9EerR1zNp7yC9QPCi3 cZNjBITIl3jd3ZiEtjg9RcsgFusOtMf8CtFMfIopUhjbGChfgsTpE5lO3+OdMcRh yNNW9xtwUhG0YPk5g4R+R3naZwVwbjB3UpUrdcwJ+CdEiP/Y4bzLd+w82XvKp8cg z3j3ZbMhmy1Ko327r+WmhOheXtto0fx24MEDaOIzEvihCV9+BTImdgUoqwLW3+iM T12DEuRFhNn+fdbyqCKC4fpYmyt1yALYAKEQvy8+2if23rYctjtOafZvCleXoC4G mvycQBfSJJzAJ0b04pvf8Clv3g== -----END CERTIFICATE-----Generated at Wed Jul 8 16:42:25 2026 by rpki-client