$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: acHgW/2OvCyHZJND7nBI7eYYYEKt3ZKXnpxAloRqaZA= Subject key identifier: FE:3A:C3:A5:6E:CA:6D:3F:AA:2C:AF:B2:38:5D:CA:71:5E:CB:1A:F7 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: D8 Signing time: Fri 17 Jul 2026 07:52:50 +0000 Manifest this update: Fri 17 Jul 2026 07:52:49 +0000 Manifest next update: Fri 24 Jul 2026 07:52:49 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: WTJ1PIwtSYP6hCBQuZcYuEKsRnTJuEclUTkWZ4VXFx4=) 2: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) 3: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 07:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Jul 17 07:52:49 2026 GMT Not After : Jul 24 07:52:49 2026 GMT Subject: CN=6a59df51-7e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:6d:b4:f0:6f:63:83:72:61:05:2e:b8:11: 6c:da:f9:1c:c0:16:93:47:4d:6b:f5:90:5a:71:23: 97:ac:08:f8:b6:f9:fe:4b:17:f8:3e:69:42:b1:26: 5e:e6:74:42:f6:a5:ba:fb:fe:5e:0c:8a:c6:b3:b9: e4:38:fb:98:e8:99:5a:42:a5:0f:3d:e5:bc:3f:38: cd:01:31:35:d5:da:29:3d:71:82:5d:90:04:ca:85: f5:91:98:c9:2e:02:27:42:3d:15:65:8c:83:1a:6f: a6:65:d2:94:9c:51:29:f5:f0:99:b7:58:d9:91:9c: 22:bd:8a:ae:81:a6:fe:6e:f3:3e:36:5e:89:8c:15: d1:d7:fb:0f:c6:2c:9c:d0:46:aa:8d:11:98:1e:34: 5a:69:b1:86:98:5f:ba:1b:34:a8:f2:c0:78:93:dc: 10:2e:8f:ab:fb:df:49:87:55:8c:92:4c:c0:6a:df: c2:87:79:5e:07:75:3b:6a:92:d5:c0:17:77:a8:f6: f1:25:a3:d0:77:2c:4b:9b:95:f1:ac:2d:1a:a4:f6: 70:ac:f1:d6:7a:9f:72:70:d2:53:6d:fa:ab:12:cb: 82:aa:4a:b1:c5:fa:19:fc:dc:a3:c4:1a:05:c5:54: 0b:2f:58:da:16:56:74:2f:2c:17:a3:ff:25:66:e9: 57:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3A:C3:A5:6E:CA:6D:3F:AA:2C:AF:B2:38:5D:CA:71:5E:CB:1A:F7 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f6:d0:19:14:44:84:4e:f6:de:bf:ca:3a:9a:6b:b4:1c:7f: c0:6a:ed:06:e2:5d:a6:8b:38:eb:de:d5:6d:b7:37:18:2f:1d: c0:ec:a1:00:09:12:ae:36:76:cb:6a:33:d5:35:97:36:76:22: 2c:ec:e3:0b:52:f5:bf:dd:fa:f9:85:11:cc:db:8b:fc:f1:35: e2:bb:43:b0:2c:49:5d:0e:8e:62:fa:f8:82:f2:2d:6f:6e:36: 9a:d4:29:43:e8:61:76:41:c4:a6:27:77:fc:46:3d:8c:13:48: 72:ef:2d:51:93:56:2b:c8:06:e6:f7:f1:97:7b:d8:84:7e:17: 04:e7:a4:56:7e:4a:60:38:8a:48:af:a4:91:2c:5c:d6:27:06: 1d:60:60:0d:e0:f0:28:e7:94:11:ae:6b:af:d8:7e:d3:e5:a3: c2:2a:99:b1:84:ee:5a:d6:c1:78:cf:73:b6:f3:53:eb:92:5c: 2a:a5:74:a0:cd:3b:2d:2f:09:a4:1e:a7:84:e2:f5:47:7e:d0: b1:26:8e:92:51:45:04:f6:56:04:32:2d:db:d0:36:5b:7d:10: 51:47:49:e5:33:28:f3:3c:cd:cd:a0:d8:29:b8:83:f9:71:6c: 70:71:a2:59:6d:c0:85:bc:da:10:0d:2d:ae:26:d5:a6:74:bb: d1:f2:b0:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwNzE3MDc1MjQ5WhcNMjYwNzI0MDc1MjQ5WjAYMRYwFAYD VQQDEw02YTU5ZGY1MS03ZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjupttPBvY4NyYQUuuBFs2vkcwBaTR01r9ZBacSOXrAj4tvn+Sxf4PmlCsSZe 5nRC9qW6+/5eDIrGs7nkOPuY6JlaQqUPPeW8PzjNATE11dopPXGCXZAEyoX1kZjJ LgInQj0VZYyDGm+mZdKUnFEp9fCZt1jZkZwivYqugab+bvM+Nl6JjBXR1/sPxiyc 0EaqjRGYHjRaabGGmF+6GzSo8sB4k9wQLo+r+99Jh1WMkkzAat/Ch3leB3U7apLV wBd3qPbxJaPQdyxLm5XxrC0apPZwrPHWep9ycNJTbfqrEsuCqkqxxfoZ/NyjxBoF xVQLL1jaFlZ0LywXo/8lZulXRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP46w6Vu ym0/qiyvsjhdynFeyxr3MB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZPbQGRREhE723r/KOpprtBx/wGrtBuJdpos4697Vbbc3GC8dwOyhAAkSrjZ2 y2oz1TWXNnYiLOzjC1L1v936+YURzNuL/PE14rtDsCxJXQ6OYvr4gvItb242mtQp Q+hhdkHEpid3/EY9jBNIcu8tUZNWK8gG5vfxl3vYhH4XBOekVn5KYDiKSK+kkSxc 1icGHWBgDeDwKOeUEa5rr9h+0+WjwiqZsYTuWtbBeM9ztvNT65JcKqV0oM07LS8J pB6nhOL1R37QsSaOklFFBPZWBDIt29A2W30QUUdJ5TMo8zzNzaDYKbiD+XFscHGi WW3AhbzaEA0tribVpnS70fKwQQ== -----END CERTIFICATE-----Generated at Sat Jul 18 03:30:00 2026 by rpki-client