$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: 1fWybD7m2qwZ+cHiH2y4x5uM/a5NQ8HWtPihatbciq4= Subject key identifier: 6B:3D:9D:4F:B5:6A:44:A5:DE:FC:C6:DA:2A:2E:03:5E:B4:55:D6:B0 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 0252 Signing time: Fri 03 Jul 2026 02:59:03 +0000 Manifest this update: Fri 03 Jul 2026 02:59:02 +0000 Manifest next update: Fri 10 Jul 2026 02:59:02 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: Q4XjlyHOs+HdrH3kjaBdl65nIawWXVeXMCT4eUh1rxo=) 2: 297CAAF2600F11F19DD612FE8747A888.roa (hash: 3caSMOx+p5Jr6uBlGiryWygb4IBsCl4CdewfhyZYMAk=) 3: 4C1DFC6E600F11F1B719D3058847A888.roa (hash: XI/6ywdBOKZJkA6ntRfKeh+vbgYn6sdPFXnFJIGb2HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Jul 2026 02:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Jul 3 02:59:02 2026 GMT Not After : Jul 10 02:59:02 2026 GMT Subject: CN=6a472576-605d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:6e:4f:a5:90:d7:dc:b9:18:33:d5:21:e1: d9:b1:55:1d:39:fd:9d:51:40:db:a7:d0:c1:48:b2: b0:7c:7c:88:40:e0:d3:1d:13:bb:9a:24:e1:cd:49: 19:a8:eb:ab:5d:f9:67:61:c3:0b:0e:ff:61:ba:1d: a0:d0:33:1b:05:65:ce:96:96:d5:89:77:d6:43:3a: 9e:8c:a4:a6:e5:5e:23:7b:b2:a3:51:52:03:e4:4e: 8f:3a:99:cb:dd:a5:05:2a:56:23:a5:35:5a:f4:f7: 8e:69:5f:e4:77:a8:1e:f5:a8:84:ff:f7:af:b0:f5: e7:de:9d:c1:c5:6a:4b:d1:33:55:09:77:50:bf:f5: 93:4a:c4:b7:d3:f1:6c:4b:6a:df:00:05:47:a8:9a: 67:4c:89:93:fe:15:5b:1b:c1:96:d4:37:db:8c:c6: d8:2a:2b:b7:19:a7:99:91:ca:18:aa:08:d0:36:2e: 05:82:1b:c1:23:70:ac:69:c1:bc:39:32:f2:3e:ee: 08:ab:25:10:c0:83:ab:c0:75:38:b9:82:ee:23:4c: 23:6d:86:18:80:6c:e6:04:0c:d3:88:3f:39:2a:ff: 65:eb:39:27:64:53:34:17:b4:6c:6a:7c:b6:41:48: b1:68:11:99:71:68:9a:b3:0b:27:86:bd:d9:f0:a7: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3D:9D:4F:B5:6A:44:A5:DE:FC:C6:DA:2A:2E:03:5E:B4:55:D6:B0 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:74:4e:ca:4b:cb:b9:49:18:4b:41:13:44:e7:dc:87:e3:36: 65:53:52:75:a0:e9:f2:8c:8d:f2:44:d1:a9:1d:b9:4e:24:4d: c1:29:08:80:4c:8b:e3:76:69:40:ea:a4:e2:a2:b9:bf:7a:e3: e3:8a:96:ba:f8:21:47:7e:9e:02:2e:e0:6d:ce:2e:cf:27:b9: ec:6d:1e:20:72:18:b4:f7:ae:da:8e:e3:40:dc:df:4f:95:d6: 4d:f7:98:ff:67:29:3b:47:6d:6d:90:4e:c8:65:3e:b8:d7:fa: 7b:ba:ea:31:94:d9:4e:0e:2a:9c:91:e7:e7:95:c9:b2:11:42: 89:8c:d4:69:5e:60:0d:8c:b7:45:74:7a:9b:dc:12:15:1a:ef: ec:60:27:5b:d2:e1:ee:4b:26:73:40:56:c9:ec:ed:d3:5c:ca: b6:24:d9:6f:58:7c:bd:c7:72:7b:8d:01:95:24:47:4f:4e:7c: cd:b6:19:01:4c:85:8d:b7:43:14:bc:cc:9d:7f:d8:19:31:24: d9:3f:87:c8:b0:34:71:28:29:4b:fa:25:a2:55:9e:91:78:50: d7:a5:62:c9:d4:0d:ba:71:b5:ff:5d:c0:41:73:6a:cf:a9:56: 42:f5:fe:0a:a9:e6:ba:b7:a1:84:d3:e8:c2:01:83:2b:10:d3: 92:2d:d7:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjYwNzAzMDI1OTAyWhcNMjYwNzEwMDI1OTAyWjAYMRYwFAYD VQQDEw02YTQ3MjU3Ni02MDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArptuT6WQ19y5GDPVIeHZsVUdOf2dUUDbp9DBSLKwfHyIQODTHRO7miThzUkZ qOurXflnYcMLDv9huh2g0DMbBWXOlpbViXfWQzqejKSm5V4je7KjUVID5E6POpnL 3aUFKlYjpTVa9PeOaV/kd6ge9aiE//evsPXn3p3BxWpL0TNVCXdQv/WTSsS30/Fs S2rfAAVHqJpnTImT/hVbG8GW1DfbjMbYKiu3GaeZkcoYqgjQNi4FghvBI3CsacG8 OTLyPu4IqyUQwIOrwHU4uYLuI0wjbYYYgGzmBAzTiD85Kv9l6zknZFM0F7Rsany2 QUixaBGZcWiaswsnhr3Z8KethQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGs9nU+1 akSl3vzG2iouA160VdawMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkXROykvLuUkYS0ETROfch+M2ZVNSdaDp8oyN8kTRqR25TiRNwSkIgEyL43Zp QOqk4qK5v3rj44qWuvghR36eAi7gbc4uzye57G0eIHIYtPeu2o7jQNzfT5XWTfeY /2cpO0dtbZBOyGU+uNf6e7rqMZTZTg4qnJHn55XJshFCiYzUaV5gDYy3RXR6m9wS FRrv7GAnW9Lh7ksmc0BWyezt01zKtiTZb1h8vcdye40BlSRHT058zbYZAUyFjbdD FLzMnX/YGTEk2T+HyLA0cSgpS/ololWekXhQ16ViydQNunG1/13AQXNqz6lWQvX+ CqnmurehhNPowgGDKxDTki3Xcw== -----END CERTIFICATE-----Generated at Sat Jul 4 05:24:17 2026 by rpki-client