$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json) Hash identifier: 2CI/eMwR3K3AT3rJbDwiQVlSJEB/MEcjZ7x246XUoHA= Subject key identifier: 26:B8:D5:DF:04:58:CE:28:F5:4F:99:93:1D:D1:4D:32:C5:15:76:E3 Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Certificate serial: 0840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft Manifest number: 07FF Signing time: Sun 26 Jul 2026 22:01:49 +0000 Manifest this update: Sun 26 Jul 2026 22:01:49 +0000 Manifest next update: Sun 02 Aug 2026 22:01:49 +0000 Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: AIos9XXuo2UMY65Uhy8SSRWPvX8kMGYncwiw2jIPevk=) 2: 9507206A63A111F092E32646C4F9AE02.roa (hash: zbwsIMflxwphg5gU9UqOZAbwNHUfzLTXefSGHx8E9Ms=) 3: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: fd8kDW52Sq9cJKEJvqYfssXk1O68wOynpHR8qW9FwDo=) 4: 66FC64186D0711F0AC1BE951C4F9AE02.roa (hash: gVwWJAGwFMN8FtAbSFBX/YkFLx2iObisxi/ECzC4Gms=) 5: 94A5320663A111F092E32646C4F9AE02.roa (hash: sIgCJcq0Zl47ilkYoj6SY92FU+t+igEFIIfzQQa1AGM=) 6: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: 2PM2q9cUg2P0NzsrCEQgTadgMBgcus+n4gLLyMzQ2+A=) 7: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: 07OvimTtnDe97y43gOmhP2mYLb6FKJ2TL30DbKiYSdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Validity Not Before: Jul 26 22:01:49 2026 GMT Not After : Aug 2 22:01:49 2026 GMT Subject: CN=6a6683cd-462f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:6d:38:a9:d1:94:f6:94:c7:25:a1:4c:d8: 3c:e2:40:99:d4:f7:b0:07:2f:c5:97:f0:94:b6:ff: 7e:a0:13:16:ff:27:d5:07:97:21:71:dd:17:11:f3: 8c:10:d5:b6:d8:fe:91:22:99:c6:b5:26:b4:2a:54: 5c:ed:8a:55:59:39:39:c6:09:fe:4d:86:2e:3e:a6: 92:1e:5d:33:2b:b1:a2:3f:a0:ce:c1:5a:a3:89:cf: e3:2e:66:16:27:06:80:20:9b:ed:89:0a:76:0b:44: 3f:fd:7f:f7:f9:ff:ed:f5:02:ae:65:54:67:4d:ec: 13:ae:a2:b2:d2:17:7d:66:d3:c5:4d:5d:2d:fd:72: 37:6a:f0:f6:21:81:2f:bb:08:16:8b:64:b3:ab:66: 0f:92:ad:7a:a0:8f:d4:26:55:12:c1:d3:81:b9:78: 39:97:d1:ab:78:27:76:86:c5:a7:67:ec:c5:ae:be: 1a:85:ec:58:cd:44:cf:0d:0f:6b:6a:10:cc:9b:e0: 41:35:67:b6:ed:a6:52:9a:ab:d4:b0:d8:2a:2f:73: 76:40:75:be:a4:8f:1f:7b:22:bb:dd:17:2d:2f:4c: b5:c9:b8:2e:1b:ae:02:31:60:c1:ac:54:9f:20:1d: 96:71:aa:8f:e6:27:90:9f:eb:1f:f3:d3:89:90:94: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B8:D5:DF:04:58:CE:28:F5:4F:99:93:1D:D1:4D:32:C5:15:76:E3 X509v3 Authority Key Identifier: keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:34:23:19:15:7f:03:0f:e7:64:7f:13:2e:be:6c:33:c1:b0: db:fb:f2:b6:17:12:bb:0d:3a:e9:e0:09:83:fe:3a:d5:04:60: e8:cf:ad:bc:ae:d5:fe:87:28:83:39:a0:3e:d9:52:e8:2c:83: 55:c2:0c:1c:e6:49:e2:e1:2c:7f:5d:f0:b1:93:e5:6d:65:f8: 5d:e9:e0:20:c6:5a:7f:aa:9c:75:7a:82:94:47:fa:6c:93:74: 69:ee:93:59:1d:de:81:6a:42:a6:50:52:a7:c6:19:1f:90:38: e1:7d:cb:01:e2:f8:9b:69:9c:16:41:32:27:79:24:fb:21:4c: fa:14:45:e8:54:c6:da:18:49:2d:bd:30:7b:85:28:26:6b:7b: 37:76:49:8b:35:6c:58:15:7f:93:99:83:a3:7d:91:27:f1:9c: 75:29:80:a6:98:dd:c6:a3:76:24:99:d9:f3:72:40:aa:bf:5b: ca:8e:db:d8:d3:70:f8:6e:d6:0b:be:72:86:e1:6c:88:d2:c4: 1f:b6:ed:e6:71:75:64:78:e0:0d:4e:74:cf:97:8e:d4:33:64: 48:d1:38:33:fb:f3:40:97:d1:a4:9f:59:08:03:c5:0d:a7:8d: c4:36:e2:6b:2a:a6:eb:6e:c7:3e:98:13:63:38:dc:f3:78:7a: 86:89:d3:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NEMxMTAvBgNVBAUTKDVFQTExQzhBM0EyOUUwNjk3M0MxRjEyMTYxMUQ1QTVD MkExQjA2OUQwHhcNMjYwNzI2MjIwMTQ5WhcNMjYwODAyMjIwMTQ5WjAYMRYwFAYD VQQDEw02YTY2ODNjZC00NjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHxtOKnRlPaUxyWhTNg84kCZ1PewBy/Fl/CUtv9+oBMW/yfVB5chcd0XEfOM ENW22P6RIpnGtSa0KlRc7YpVWTk5xgn+TYYuPqaSHl0zK7GiP6DOwVqjic/jLmYW JwaAIJvtiQp2C0Q//X/3+f/t9QKuZVRnTewTrqKy0hd9ZtPFTV0t/XI3avD2IYEv uwgWi2Szq2YPkq16oI/UJlUSwdOBuXg5l9GreCd2hsWnZ+zFrr4ahexYzUTPDQ9r ahDMm+BBNWe27aZSmqvUsNgqL3N2QHW+pI8feyK73RctL0y1ybguG64CMWDBrFSf IB2WcaqP5ieQn+sf89OJkJSn8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCa41d8E WM4o9U+Zkx3RTTLFFXbjMB8GA1UdIwQYMBaAFF6hHIo6KeBpc8HxIWEdWlwqGwad MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0Qy81MUE5RUFDQzQx NjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRHbHp3ZkVoWVIxYVhDb2JC cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxRWNpam9wNEdsendmRWhZUjFhWENvYkJwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0Qy81MUE5RUFDQzQxNjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRH bHp3ZkVoWVIxYVhDb2JCcDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALTQjGRV/Aw/nZH8TLr5sM8Gw2/vythcSuw066eAJg/461QRg6M+tvK7V/oco gzmgPtlS6CyDVcIMHOZJ4uEsf13wsZPlbWX4XengIMZaf6qcdXqClEf6bJN0ae6T WR3egWpCplBSp8YZH5A44X3LAeL4m2mcFkEyJ3kk+yFM+hRF6FTG2hhJLb0we4Uo Jmt7N3ZJizVsWBV/k5mDo32RJ/GcdSmAppjdxqN2JJnZ83JAqr9byo7b2NNw+G7W C75yhuFsiNLEH7bt5nF1ZHjgDU50z5eO1DNkSNE4M/vzQJfRpJ9ZCAPFDaeNxDbi ayqm627HPpgTYzjc83h6honTng== -----END CERTIFICATE-----Generated at Tue Jul 28 02:28:03 2026 by rpki-client