$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json) Hash identifier: JzYXfmypgovJL+NuiLMfVB5tLPCI2+rjWcL8tVeptMM= Subject key identifier: 3E:10:34:28:51:91:50:EA:5D:92:CC:13:DE:54:3E:EA:46:D9:51:5F Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft Manifest number: 37 Signing time: Tue 21 Jul 2026 10:29:37 +0000 Manifest this update: Tue 21 Jul 2026 10:29:37 +0000 Manifest next update: Tue 28 Jul 2026 10:29:37 +0000 Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: DNDtGF96wkV4OfrfHSuFD0OHxu3+lB/pE2K3y34iFho=) 2: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=) 3: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53 Validity Not Before: Jul 21 10:29:37 2026 GMT Not After : Jul 28 10:29:37 2026 GMT Subject: CN=6a5f4a11-9276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:9e:ac:dd:ae:46:b1:a2:b1:af:59:ed:37: 6d:2d:0d:81:80:42:48:27:8c:ae:1a:88:bd:1e:57: 17:45:f4:ae:43:f2:e9:f9:49:e9:5a:15:25:9b:05: 32:e7:95:d3:e1:d6:78:e9:ae:bc:d0:0b:47:ee:37: 06:13:82:45:79:c6:f7:2c:a8:84:8d:04:67:7d:a8: 6f:13:ec:b2:ba:42:84:7c:22:cb:77:6b:2f:c8:3c: 61:79:b9:86:51:a3:fb:af:d9:cb:d1:4c:0c:6d:ec: 4c:fd:8a:48:17:7b:63:45:44:d5:c9:29:a4:a6:16: d2:87:81:de:d3:ae:03:82:8b:56:4d:eb:0e:a1:b6: 3d:02:89:53:fe:82:ae:18:e7:26:af:7a:a7:bf:75: 68:8d:47:ea:6b:24:cf:0a:c4:b6:07:d1:d4:98:85: 18:5d:74:e7:b7:c7:0e:7f:27:b4:11:80:66:16:e2: 63:8a:05:10:54:f1:a8:56:98:33:42:24:2d:1a:75: 90:5f:13:41:f7:1a:8f:54:0c:07:3c:6f:a9:bc:b3: 55:63:c4:8d:0f:d4:09:d9:00:41:dc:da:90:be:44: 7e:22:4a:72:ac:3a:46:69:c9:d7:d9:8e:d6:3d:ca: cc:71:9e:f0:8e:bc:42:10:e3:ee:c4:13:6a:f0:11: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:10:34:28:51:91:50:EA:5D:92:CC:13:DE:54:3E:EA:46:D9:51:5F X509v3 Authority Key Identifier: keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:80:86:92:da:e7:9e:63:4c:9a:37:b8:c0:87:64:00:01:9e: 60:8b:47:af:3d:30:d4:d9:63:91:a9:ef:64:78:f8:6e:f4:33: 93:1b:80:03:83:75:d0:06:15:0f:7f:38:eb:c4:7e:a2:45:cb: 59:3f:19:40:cd:aa:b9:08:05:0f:e5:e2:58:05:ab:f1:44:d2: cc:6e:c7:fd:82:0b:f9:84:1b:de:ef:d1:e3:e9:b1:7c:f4:f5: 19:d5:33:63:04:d3:e6:8e:57:de:a5:aa:ce:6d:dd:48:53:f8: 5a:eb:83:48:1e:e3:cd:49:34:d9:51:3b:bd:30:61:fb:42:ac: a5:4c:3a:4b:49:48:93:0b:56:8b:d9:6a:7d:34:ed:bf:17:6a: 22:45:67:da:e3:52:c3:1a:e5:2a:b9:f1:4a:a4:74:68:8a:18: 4a:ea:07:0b:7c:51:04:4e:e9:c6:6d:9d:40:9d:cd:b9:e2:a5: 79:2b:f7:3a:6d:70:a0:9a:5d:d0:e3:dd:90:7b:f7:b7:98:62: a2:ca:1f:39:a4:16:68:f5:6f:73:04:19:72:f8:2a:00:76:88: 2c:c9:aa:1d:b3:52:8d:1a:29:87:5a:a2:5f:bc:6f:b2:f5:56: 49:42:be:ac:47:07:ec:4e:cd:b3:9e:a8:1e:a3:04:39:33:a3: aa:ad:44:61 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0Y3RTExMC8GA1UEBRMoNURGNDdFMjkyQUQ0QkFCOTREMzg2OUZBMkZDNjBBQTBF NkFFMkE1MzAeFw0yNjA3MjExMDI5MzdaFw0yNjA3MjgxMDI5MzdaMBgxFjAUBgNV BAMTDTZhNWY0YTExLTkyNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJe56s3a5GsaKxr1ntN20tDYGAQkgnjK4aiL0eVxdF9K5D8un5SelaFSWbBTLn ldPh1njprrzQC0fuNwYTgkV5xvcsqISNBGd9qG8T7LK6QoR8Ist3ay/IPGF5uYZR o/uv2cvRTAxt7Ez9ikgXe2NFRNXJKaSmFtKHgd7TrgOCi1ZN6w6htj0CiVP+gq4Y 5yaveqe/dWiNR+prJM8KxLYH0dSYhRhddOe3xw5/J7QRgGYW4mOKBRBU8ahWmDNC JC0adZBfE0H3Go9UDAc8b6m8s1VjxI0P1AnZAEHc2pC+RH4iSnKsOkZpydfZjtY9 ysxxnvCOvEIQ4+7EE2rwEWpBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPhA0KFGR UOpdkswT3lQ+6kbZUV8wHwYDVR0jBBgwFoAUXfR+KSrUurlNOGn6L8YKoOauKlMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRjdFLzVBMTI0NTM4MzY2 MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJsTk9HbjZMOFlLb09hdUts TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWGZSLUtTclV1cmxOT0duNkw4WUtvT2F1S2xNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz RjdFLzVBMTI0NTM4MzY2MDExRjFCMEQzMEExNkNBODMzNzczL1hmUi1LU3JVdXJs Tk9HbjZMOFlLb09hdUtsTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7gIaS2ueeY0yaN7jAh2QAAZ5gi0evPTDU2WORqe9kePhu9DOTG4ADg3XQBhUP fzjrxH6iRctZPxlAzaq5CAUP5eJYBavxRNLMbsf9ggv5hBve79Hj6bF89PUZ1TNj BNPmjlfeparObd1IU/ha64NIHuPNSTTZUTu9MGH7QqylTDpLSUiTC1aL2Wp9NO2/ F2oiRWfa41LDGuUqufFKpHRoihhK6gcLfFEETunGbZ1Anc254qV5K/c6bXCgml3Q 492Qe/e3mGKiyh85pBZo9W9zBBly+CoAdogsyaods1KNGimHWqJfvG+y9VZJQr6s RwfsTs2znqgeowQ5M6OqrURh -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:54 2026 by rpki-client