$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: WueBspnsEAFZxUKyHjxJOqqiPQx64112mEgu/VDoupg= Subject key identifier: 58:CF:3C:D0:B4:9E:D5:6F:3D:D3:8B:35:1B:50:57:B0:DE:41:FB:F2 Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 0A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 0A63 Signing time: Sat 04 Jul 2026 19:47:58 +0000 Manifest this update: Sat 04 Jul 2026 19:47:58 +0000 Manifest next update: Sat 11 Jul 2026 19:47:58 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: J6E6clzq9ZU1ZZTQDbhvXgnPoaIuAwaeg54iKgqqfsw=) 2: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: WPLajparplJU8xXoLqj3sJQqQv2qTK7SmIP3Bri0gcA=) 3: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 72DcOTbzZF7+TCywcpXepZonikbAwf9INnwgkXqBzAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 19:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: Jul 4 19:47:58 2026 GMT Not After : Jul 11 19:47:58 2026 GMT Subject: CN=6a49636e-3a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:2f:f7:ae:db:46:c2:e6:45:4c:88:e9:c3: 46:53:38:68:ae:39:74:83:62:f3:3a:fc:90:5c:93: 88:bc:35:6c:90:17:86:13:a5:5a:8d:34:a0:79:28: 95:bf:d4:ab:55:72:13:29:57:8a:65:f9:0b:f2:59: 86:b6:82:43:7b:59:6d:05:0b:1b:3e:ac:06:26:79: d5:ef:33:15:7d:86:4b:78:3d:86:01:3c:c7:56:9e: b8:34:31:43:f0:c3:f0:72:68:db:4f:9e:be:40:3c: 2c:9b:8b:a4:64:15:8a:55:a1:91:ea:6d:df:ad:14: 81:75:c6:1f:01:ab:8a:74:eb:2c:7f:b9:b4:34:89: 34:99:91:5d:67:c2:2d:1b:c8:cd:76:18:45:08:de: 80:cf:36:44:60:0c:cd:45:42:04:3f:fa:9e:bb:ad: 81:ac:08:cf:a7:0b:b4:c1:20:fd:9e:36:7e:ba:6d: 5b:d2:5a:07:f7:7f:ee:98:be:42:da:05:86:74:9a: d8:82:aa:1e:03:47:96:f3:7c:fd:c6:48:44:8b:6b: a4:e3:a0:6d:44:10:63:eb:bd:0d:bf:1c:cc:98:c4: c6:ab:70:54:17:af:fd:fd:f6:ba:f3:b2:5a:a0:34: 3d:f4:88:e3:b1:94:eb:15:c7:a9:1b:ba:41:2c:52: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CF:3C:D0:B4:9E:D5:6F:3D:D3:8B:35:1B:50:57:B0:DE:41:FB:F2 X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b0:da:8b:ab:3f:d1:4e:17:c9:52:74:97:0e:9b:b4:2e:41: fe:ea:55:8c:a7:65:0e:80:ce:d9:d2:45:4b:6a:c9:d1:fd:1b: ad:d7:8c:99:25:e2:44:d1:05:71:ac:78:6f:79:97:11:dc:5c: 15:a4:65:8e:3a:07:71:67:c3:08:00:d8:6a:b5:39:12:ab:90: 7d:70:80:4d:d0:9c:3c:ce:1e:3b:16:db:16:43:95:4f:2a:c8: 62:72:f8:78:0a:cf:d1:2d:39:ba:fe:b3:9f:fd:0c:12:84:16: 5d:46:c6:d2:06:42:8a:f0:9e:3c:7f:f1:59:ce:2c:7f:4c:17: c8:42:28:ac:e2:11:46:09:ab:eb:60:52:94:74:20:3b:2a:86: 6e:8c:ed:3b:b5:47:c2:09:6b:b9:71:f1:62:c8:3f:1b:92:e2: b9:72:85:da:03:8f:14:d8:ab:9b:bb:1a:ae:93:fb:96:f1:37: 75:09:db:33:8b:7a:8f:a9:a3:ba:9b:24:db:c3:36:12:67:a7: d9:71:fd:73:a1:7d:3e:bc:31:aa:5b:5d:00:43:80:5e:fb:f3: 0d:80:c7:c5:e1:bd:33:14:29:4b:25:df:79:f7:22:04:be:97: e4:f8:91:8e:7b:fd:f5:12:e7:38:e6:80:b1:08:06:dc:86:ad: 93:c2:3f:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjYwNzA0MTk0NzU4WhcNMjYwNzExMTk0NzU4WjAYMRYwFAYD VQQDEw02YTQ5NjM2ZS0zYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7Iv967bRsLmRUyI6cNGUzhorjl0g2LzOvyQXJOIvDVskBeGE6VajTSgeSiV v9SrVXITKVeKZfkL8lmGtoJDe1ltBQsbPqwGJnnV7zMVfYZLeD2GATzHVp64NDFD 8MPwcmjbT56+QDwsm4ukZBWKVaGR6m3frRSBdcYfAauKdOssf7m0NIk0mZFdZ8It G8jNdhhFCN6AzzZEYAzNRUIEP/qeu62BrAjPpwu0wSD9njZ+um1b0loH93/umL5C 2gWGdJrYgqoeA0eW83z9xkhEi2uk46BtRBBj670NvxzMmMTGq3BUF6/9/fa687Ja oDQ99IjjsZTrFcepG7pBLFLhjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjPPNC0 ntVvPdOLNRtQV7DeQfvyMB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJLDai6s/0U4XyVJ0lw6btC5B/upVjKdlDoDO2dJFS2rJ0f0brdeMmSXiRNEF cax4b3mXEdxcFaRljjoHcWfDCADYarU5EquQfXCATdCcPM4eOxbbFkOVTyrIYnL4 eArP0S05uv6zn/0MEoQWXUbG0gZCivCePH/xWc4sf0wXyEIorOIRRgmr62BSlHQg OyqGboztO7VHwglruXHxYsg/G5LiuXKF2gOPFNirm7sarpP7lvE3dQnbM4t6j6mj upsk28M2Emen2XH9c6F9PrwxqltdAEOAXvvzDYDHxeG9MxQpSyXfefciBL6X5PiR jnv99RLnOOaAsQgG3Iatk8I/qQ== -----END CERTIFICATE-----Generated at Sun Jul 5 12:35:48 2026 by rpki-client