$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft File: XiBrZUYXUm6oHe9p1A3KkMONpJM.mft (raw, json) Hash identifier: m0n7ZPvZhhxQN9RlC/YfpESVuTFnqygnW5+H/XJRZ94= Subject key identifier: F0:FC:DE:FB:8A:15:D8:21:C1:A6:DB:8B:D9:84:9A:D3:A8:F0:10:E9 Authority key identifier: 5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 Certificate issuer: /CN=A91C7106/serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft Manifest number: 02 Signing time: Tue 07 Jul 2026 02:33:43 +0000 Manifest this update: Tue 07 Jul 2026 02:33:42 +0000 Manifest next update: Tue 14 Jul 2026 02:33:42 +0000 Files and hashes: 1: XiBrZUYXUm6oHe9p1A3KkMONpJM.crl (hash: n2CGLgS83l6qSuH7EvlWguHBVkcNI4dXR5YjXfiH0I0=) 2: 403D780079AC11F1A4BD68E295A30FBC.roa (hash: PX6Hn6xK6Ug95lfOomfVfmyROaB7znZe36dnapQD0gE=) 3: 40CA1FF879AC11F1A4BD68E295A30FBC.roa (hash: dxvzMh7pViI4BlQNkWmxdOF/VYXouPMtNS8/qBafvbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 02:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7106, serialNumber=5E206B654617526EA81DEF69D40DCA90C38DA493 Validity Not Before: Jul 7 02:33:42 2026 GMT Not After : Jul 14 02:33:42 2026 GMT Subject: CN=6a4c6587-f998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:08:1a:6e:9b:71:07:70:17:31:8f:02:ae:87: 62:9e:d6:83:63:bc:1f:49:25:e2:91:91:2d:e5:b9: 58:d6:ec:3d:6d:47:72:95:c9:9a:fd:72:4b:fa:4b: 26:34:c3:d4:c1:6d:8f:9c:ce:87:3c:16:15:96:bd: 59:78:b6:05:a8:b1:00:53:f5:64:77:83:9d:13:da: 72:74:a5:af:2d:6a:85:a0:ea:97:38:10:7d:7d:e3: 87:b4:d7:6f:0b:4f:14:be:66:eb:5f:b0:da:b3:20: 75:33:5c:6c:01:cb:7c:0b:31:d7:60:3d:5c:b3:45: 1a:77:05:2f:dd:5e:ab:47:9f:4b:f1:c5:aa:2e:53: 98:8c:30:77:f6:c3:14:8f:06:52:ef:21:d5:46:0a: 60:bc:89:fd:be:25:15:dd:e7:40:3f:36:04:59:5f: 84:c9:ed:25:b5:2b:3a:9c:8d:27:79:ab:99:4a:69: 64:c8:8c:0f:7e:11:2a:6b:78:82:0a:82:0d:02:56: 2c:63:3c:7b:45:65:90:57:69:a5:97:c2:fd:ab:cf: a9:f0:39:16:c4:32:95:fb:4b:c1:cf:b1:7f:b0:be: 76:ab:8e:b3:25:01:32:af:63:d6:57:13:ec:34:78: 6f:f8:ee:f7:14:96:db:c5:ac:a1:ca:f4:1b:83:d9: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FC:DE:FB:8A:15:D8:21:C1:A6:DB:8B:D9:84:9A:D3:A8:F0:10:E9 X509v3 Authority Key Identifier: keyid:5E:20:6B:65:46:17:52:6E:A8:1D:EF:69:D4:0D:CA:90:C3:8D:A4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiBrZUYXUm6oHe9p1A3KkMONpJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7106/7CF15D8079AB11F19431028A95A30FBC/XiBrZUYXUm6oHe9p1A3KkMONpJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:53:6f:76:cc:19:0f:ca:9d:57:6f:69:be:a9:6b:38:d9:bb: 4b:c1:38:ea:99:6e:c5:53:6e:75:c0:a5:48:b7:6a:92:8f:ee: c0:6f:7f:e7:bc:6d:49:33:22:9c:03:b3:09:a9:5f:f3:d8:22: 8e:cc:5e:22:47:e4:37:5e:34:18:e7:c6:1f:3f:63:f8:2f:38: 4f:19:b3:6f:05:ef:7c:bf:4b:f2:21:3c:41:07:73:4c:6f:3a: 72:66:37:4e:39:fd:30:cd:99:ee:c3:b4:22:2d:f8:db:70:41: dd:03:a5:2b:a4:a3:aa:eb:ed:76:cc:4d:9c:4e:c3:a3:16:db: dc:fe:0f:bc:16:fa:2b:c6:f7:28:16:52:41:02:9a:46:95:9e: 66:dd:12:84:64:cc:49:7b:ca:2c:ad:bb:42:9f:7f:f4:44:49: 67:75:17:bd:10:d0:7e:0f:ab:38:bc:fb:68:21:4f:83:d3:56: a4:16:f3:aa:bb:4c:65:36:c2:76:06:60:b6:96:c2:a5:a6:a3: 10:2b:d2:43:1e:ba:59:87:9e:de:3c:7f:a3:47:be:3b:11:94: e6:8c:66:36:fb:8c:cc:59:82:2d:3c:72:af:5b:59:63:75:49: bf:b1:1b:36:32:b6:3a:b7:06:81:f6:05:7b:36:d6:b2:f7:3d: 49:76:06:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzEwNjExMC8GA1UEBRMoNUUyMDZCNjU0NjE3NTI2RUE4MURFRjY5RDQwRENBOTBD MzhEQTQ5MzAeFw0yNjA3MDcwMjMzNDJaFw0yNjA3MTQwMjMzNDJaMBgxFjAUBgNV BAMTDTZhNGM2NTg3LWY5OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeCBpum3EHcBcxjwKuh2Ke1oNjvB9JJeKRkS3luVjW7D1tR3KVyZr9ckv6SyY0 w9TBbY+czoc8FhWWvVl4tgWosQBT9WR3g50T2nJ0pa8taoWg6pc4EH1944e0128L TxS+ZutfsNqzIHUzXGwBy3wLMddgPVyzRRp3BS/dXqtHn0vxxaouU5iMMHf2wxSP BlLvIdVGCmC8if2+JRXd50A/NgRZX4TJ7SW1KzqcjSd5q5lKaWTIjA9+ESpreIIK gg0CVixjPHtFZZBXaaWXwv2rz6nwORbEMpX7S8HPsX+wvnarjrMlATKvY9ZXE+w0 eG/47vcUltvFrKHK9BuD2QhNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8Pze+4oV 2CHBptuL2YSa06jwEOkwHwYDVR0jBBgwFoAUXiBrZUYXUm6oHe9p1A3KkMONpJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3MTA2LzdDRjE1RDgwNzlB QjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02b0hlOXAxQTNLa01PTnBK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlCclpVWVhVbTZvSGU5cDFBM0trTU9OcEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 MTA2LzdDRjE1RDgwNzlBQjExRjE5NDMxMDI4QTk1QTMwRkJDL1hpQnJaVVlYVW02 b0hlOXAxQTNLa01PTnBKTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxU292zBkPyp1Xb2m+qWs42btLwTjqmW7FU251wKVIt2qSj+7Ab3/nvG1JMyKc A7MJqV/z2CKOzF4iR+Q3XjQY58YfP2P4LzhPGbNvBe98v0vyITxBB3NMbzpyZjdO Of0wzZnuw7QiLfjbcEHdA6UrpKOq6+12zE2cTsOjFtvc/g+8FvorxvcoFlJBAppG lZ5m3RKEZMxJe8osrbtCn3/0RElndRe9ENB+D6s4vPtoIU+D01akFvOqu0xlNsJ2 BmC2lsKlpqMQK9JDHrpZh57ePH+jR747EZTmjGY2+4zMWYItPHKvW1ljdUm/sRs2 MrY6twaB9gV7Ntay9z1JdgZp -----END CERTIFICATE-----Generated at Thu Jul 9 11:01:55 2026 by rpki-client