$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft File: XsGmrXajq_3B4TKesmN8AYZLSAg.mft (raw, json) Hash identifier: te57WNHr75BTmjaX9IO+wyeP6krvzbbyvtuIjtk55Ec= Subject key identifier: 97:D3:9E:51:DD:96:EA:79:24:78:1C:87:D8:61:37:65:A4:EF:CA:1E Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft Manifest number: 088B Signing time: Sun 26 Jul 2026 21:31:31 +0000 Manifest this update: Sun 26 Jul 2026 21:31:30 +0000 Manifest next update: Sun 02 Aug 2026 21:31:30 +0000 Files and hashes: 1: XsGmrXajq_3B4TKesmN8AYZLSAg.crl (hash: R2jHSqdI89JReKvVzHuuzJ0s8hIOUDWPCIRqZyEnWuM=) 2: 46D6261876A511EB82E04A2FC4F9AE02.roa (hash: +cRs2PboXe8g3+V+AJzpQpdTweZR3TGc016yIhZSQMI=) 3: 82BB885E4B9811EB85F74960C4F9AE02.roa (hash: +r+gvF4pkq6hFHbY+ZoaIiUoalmLLSMykW5BxcQDeFU=) 4: B512A570109211ECA693D74EC4F9AE02.roa (hash: L7d1U3gGL3grFk1wnPeyJKdZ3FejFM4vvmLKY3IRi5A=) 5: E3AAE94243B511EB8DA3F473C4F9AE02.roa (hash: i7X6zewMmXOfmuZsHLNceM/lQghxWwQZ7AxU0vSWV0M=) 6: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (hash: 2mIyjIYN6IO7ZQ4FUwscfGnk78kTtsjolDojwIN0av0=) 7: 046130D225FC11EC9D57EA7CC4F9AE02.roa (hash: ESImnuHKksdWJK2TDU4E1UVvcvoZ37KeHVw4wPPeVXE=) 8: CF41132A1DE811EB9DE34963C4F9AE02.roa (hash: JkwlB4IFE4Dgm1EcLQn9CRo6PclYWkjqCYFJJbMHsj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Jul 26 21:31:30 2026 GMT Not After : Aug 2 21:31:30 2026 GMT Subject: CN=6a667cb2-8dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:f5:1a:1c:b0:ea:ca:82:6c:5a:8d:23:09: ce:ac:1f:8a:b0:ad:50:53:91:86:1d:5d:1e:1f:74: 2a:1c:78:e4:5c:77:ac:b6:17:52:4c:53:08:c1:f4: 90:26:c5:eb:a0:e1:36:84:6c:af:a4:61:ab:3c:54: c7:72:3a:e4:f2:e1:cb:44:a9:30:b4:a5:72:84:c6: 64:d2:2e:4a:7e:ea:d7:c0:f6:26:a9:fe:99:5b:29: 28:ba:a7:eb:a8:44:4b:20:86:0a:c6:49:0f:15:7d: c6:8b:36:e8:29:2c:b5:e3:54:f7:75:ef:d1:bd:9c: 0c:80:71:73:81:61:17:7d:de:f9:97:4c:7e:32:dd: 5e:d9:60:08:13:0d:d7:77:8b:21:95:3e:2e:68:46: 69:de:d4:c1:98:12:54:52:c4:68:1e:25:6d:53:dd: 23:8a:8a:12:f0:d1:63:ee:72:ac:63:aa:f3:29:bb: 90:04:de:22:0a:db:74:b6:59:fd:37:8c:bb:ae:91: 9f:cd:73:c9:85:43:67:15:b0:a5:af:0a:da:20:61: 92:12:63:54:5b:4e:61:ae:f0:0e:23:b9:a1:62:ca: c6:4c:06:2a:a3:87:bb:66:f2:fb:cc:35:6c:5c:53: 41:92:48:99:84:0a:d8:34:0c:88:f0:91:47:76:d0: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:9E:51:DD:96:EA:79:24:78:1C:87:D8:61:37:65:A4:EF:CA:1E X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8a:55:b0:27:56:69:9b:9c:14:c1:3c:f2:50:61:cd:2a:bd: ba:58:c4:77:32:de:fb:35:e9:f4:64:a3:6c:51:4b:1e:99:b9: 79:b0:d1:f8:42:82:1c:3a:52:4b:ad:24:d5:43:5d:8c:80:72: cb:e2:a8:de:90:f6:ee:8d:d4:8a:c3:54:c2:94:a8:37:67:d1: 4d:30:05:66:4a:06:84:01:ad:8a:d3:35:2c:aa:ce:fc:69:48: e3:f5:57:c2:c4:cb:08:23:b8:b9:c1:e9:11:d6:44:50:f8:f7: 00:ba:9d:1d:a4:fe:29:ef:2a:a9:f4:1f:5a:36:45:93:5e:bf: 9b:64:30:59:3c:d4:f7:86:73:2a:0a:e4:c4:8a:31:d4:19:e0: 5e:30:10:28:8d:21:09:d6:68:71:55:e9:00:44:38:d5:c3:a0: d7:d4:f1:f0:79:e8:97:41:81:1f:10:42:6f:97:27:90:47:5b: 72:3d:1c:f2:8b:d4:4a:38:9c:65:6a:35:5e:16:15:dc:c9:34: 13:e1:73:6d:7f:80:6d:46:10:e1:2e:28:26:db:96:c7:67:e6: d7:4e:2d:a7:95:53:62:fb:7d:16:71:05:d0:8c:be:a2:fc:3a: a1:d5:78:64:17:d8:fb:80:75:f0:4d:44:59:24:f0:eb:40:01: f1:e4:2f:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjYwNzI2MjEzMTMwWhcNMjYwODAyMjEzMTMwWjAYMRYwFAYD VQQDEw02YTY2N2NiMi04ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqz1Ghyw6sqCbFqNIwnOrB+KsK1QU5GGHV0eH3QqHHjkXHesthdSTFMIwfSQ JsXroOE2hGyvpGGrPFTHcjrk8uHLRKkwtKVyhMZk0i5KfurXwPYmqf6ZWykouqfr qERLIIYKxkkPFX3GizboKSy141T3de/RvZwMgHFzgWEXfd75l0x+Mt1e2WAIEw3X d4shlT4uaEZp3tTBmBJUUsRoHiVtU90jiooS8NFj7nKsY6rzKbuQBN4iCtt0tln9 N4y7rpGfzXPJhUNnFbClrwraIGGSEmNUW05hrvAOI7mhYsrGTAYqo4e7ZvL7zDVs XFNBkkiZhArYNAyI8JFHdtBP4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfTnlHd lup5JHgch9hhN2Wk78oeMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIwQi9CQTcxQjY0ODEyMDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFf M0I0VEtlc21OOEFZWkxTQWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkopVsCdWaZucFME88lBhzSq9uljEdzLe+zXp9GSjbFFLHpm5ebDR+EKCHDpS S60k1UNdjIByy+Ko3pD27o3UisNUwpSoN2fRTTAFZkoGhAGtitM1LKrO/GlI4/VX wsTLCCO4ucHpEdZEUPj3ALqdHaT+Ke8qqfQfWjZFk16/m2QwWTzU94ZzKgrkxIox 1BngXjAQKI0hCdZocVXpAEQ41cOg19Tx8Hnol0GBHxBCb5cnkEdbcj0c8ovUSjic ZWo1XhYV3Mk0E+FzbX+AbUYQ4S4oJtuWx2fm104tp5VTYvt9FnEF0Iy+ovw6odV4 ZBfY+4B18E1EWSTw60AB8eQvxw== -----END CERTIFICATE-----Generated at Tue Jul 28 03:18:10 2026 by rpki-client