$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: ISMsSEhCMgIcd4heRMmXXJ76aeK1scXTI3eKOmumx1Q= Subject key identifier: 48:E6:4F:C3:9B:DA:BF:51:C1:31:1F:41:F2:A0:48:D9:F3:D6:68:C9 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 31AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 3120 Signing time: Mon 20 Jul 2026 15:31:13 +0000 Manifest this update: Mon 20 Jul 2026 15:31:12 +0000 Manifest next update: Mon 27 Jul 2026 15:31:12 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: mPFtZidwFOK/nyK+eKNzxcZ053EdsyfvxrjaB+o5NVI=) 2: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=) 3: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=) 4: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=) 5: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=) 6: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=) 7: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=) 8: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=) 9: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=) 10: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=) 11: F1A29F32843111F18303D56C65A30FBC.roa (hash: 5a8O9Z1V3ja/5ztqSfJLuOOFIOZvUJHqD1otnk0gm90=) 12: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=) 13: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=) 14: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=) 15: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=) 16: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=) 17: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12717 (0x31ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Jul 20 15:31:12 2026 GMT Not After : Jul 27 15:31:12 2026 GMT Subject: CN=6a5e3f41-1fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:7f:6c:c4:ad:2a:1a:35:b7:a4:93:a6:c9: 87:bb:24:ba:15:07:66:ed:26:84:2b:55:45:71:47: cd:ea:10:1e:f1:36:1a:f2:ea:e7:9e:63:fb:60:8b: e1:aa:0a:b4:aa:09:eb:44:4d:9d:01:33:3b:91:3e: 1f:00:ed:3a:e3:fe:15:94:42:ff:fe:32:6b:8d:ac: 08:37:3e:0a:88:1a:45:32:dd:cc:ab:4f:c0:e1:21: be:b5:7f:3a:86:9e:61:c2:77:bf:c4:bf:5d:f6:01: 7c:1f:a9:af:3c:b7:cc:5e:5c:94:33:8a:8b:6c:c4: 4b:57:88:2f:1a:5a:99:47:06:4e:5a:b9:1d:a6:56: 0c:a6:36:ec:15:95:0e:06:bc:e5:71:9a:4e:09:5b: 5f:cd:1c:c8:a0:4b:95:53:9a:9c:d5:3c:29:62:01: ce:41:18:93:a6:5e:69:30:71:0a:36:86:11:f4:8c: 49:e2:bd:8b:a6:52:1f:e8:7a:e2:77:36:a8:ab:0e: 92:68:bc:ff:46:28:80:d0:1a:42:e5:bb:ab:e7:d1: 16:e2:92:0a:81:d2:eb:b7:83:bf:54:92:08:a7:a3: 36:de:1e:2f:a3:18:2e:fe:56:15:2a:ef:bb:2f:aa: 7c:5b:f4:8a:8c:e0:a2:8b:b0:a0:90:c8:52:e2:0a: d7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E6:4F:C3:9B:DA:BF:51:C1:31:1F:41:F2:A0:48:D9:F3:D6:68:C9 X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:25:08:bc:ba:44:b0:70:e5:12:cb:99:d9:a3:30:c9:52:a7: 8e:ee:d9:04:38:ec:28:f0:fc:70:15:aa:0b:af:76:d6:df:07: 0a:2c:a1:51:8e:a6:e6:5f:14:c8:76:33:79:a9:65:be:d4:f1: f6:67:54:fe:11:b3:36:3d:e3:87:86:a0:6c:ba:c5:8b:e4:a3: 93:39:ff:b0:10:06:42:71:7a:20:aa:f8:af:01:29:ab:cb:44: e4:7f:39:c9:92:8f:89:98:6a:b8:da:1a:0f:d9:4e:d4:00:1e: dc:78:d8:08:cd:cf:de:ae:19:8d:fa:42:a1:6a:e3:20:17:ff: ae:35:9a:dd:94:90:c6:db:62:10:7c:21:76:52:20:de:5b:e2: 45:d6:dc:59:2c:ad:59:a5:3a:14:ce:7a:ad:92:4d:d8:c4:84: 85:d7:7f:ea:3c:4a:09:62:39:65:b7:24:11:cb:66:36:5c:45: e0:45:fe:f7:2a:1d:5a:5a:d7:30:f8:54:6b:e3:d1:05:25:ad: e4:bd:53:04:e0:71:16:1b:25:6e:5f:3f:07:a5:c7:8a:64:c3: 74:1f:b5:fa:71:e0:2f:07:22:17:6f:98:11:fe:7f:39:d9:16: 01:44:fa:6a:46:11:69:d1:5b:9c:e3:1c:5d:e5:f3:85:4c:94: 3e:b6:99:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjYwNzIwMTUzMTEyWhcNMjYwNzI3MTUzMTEyWjAYMRYwFAYD VQQDEw02YTVlM2Y0MS0xZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuot/bMStKho1t6STpsmHuyS6FQdm7SaEK1VFcUfN6hAe8TYa8urnnmP7YIvh qgq0qgnrRE2dATM7kT4fAO064/4VlEL//jJrjawINz4KiBpFMt3Mq0/A4SG+tX86 hp5hwne/xL9d9gF8H6mvPLfMXlyUM4qLbMRLV4gvGlqZRwZOWrkdplYMpjbsFZUO BrzlcZpOCVtfzRzIoEuVU5qc1TwpYgHOQRiTpl5pMHEKNoYR9IxJ4r2LplIf6Hri dzaoqw6SaLz/RiiA0BpC5bur59EW4pIKgdLrt4O/VJIIp6M23h4voxgu/lYVKu+7 L6p8W/SKjOCii7CgkMhS4grX0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjmT8Ob 2r9RwTEfQfKgSNnz1mjJMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIyUIvLpEsHDlEsuZ2aMwyVKnju7ZBDjsKPD8cBWqC6921t8HCiyhUY6m5l8U yHYzeallvtTx9mdU/hGzNj3jh4agbLrFi+Sjkzn/sBAGQnF6IKr4rwEpq8tE5H85 yZKPiZhquNoaD9lO1AAe3HjYCM3P3q4ZjfpCoWrjIBf/rjWa3ZSQxttiEHwhdlIg 3lviRdbcWSytWaU6FM56rZJN2MSEhdd/6jxKCWI5ZbckEctmNlxF4EX+9yodWlrX MPhUa+PRBSWt5L1TBOBxFhslbl8/B6XHimTDdB+1+nHgLwciF2+YEf5/OdkWAUT6 akYRadFbnOMcXeXzhUyUPraZ8A== -----END CERTIFICATE-----Generated at Tue Jul 21 20:34:26 2026 by rpki-client