$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: K3Hcp1xciJ4nOA07FoSbG3SQyV+futm3zKrn5Ojbwsw= Subject key identifier: A6:53:A4:BD:44:04:A7:41:47:98:30:92:85:67:7D:AD:7C:12:18:62 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 3597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 357A Signing time: Mon 06 Jul 2026 14:49:02 +0000 Manifest this update: Mon 06 Jul 2026 14:49:01 +0000 Manifest next update: Mon 13 Jul 2026 14:49:01 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: CmbYLlmCr6l2nFKRvtZrs5U0UmeKx4++5z1BhTgs1QI=) 2: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: INnaV0pNcRBw1wlHuRp8r9xMtrJx1g7hzwjOKtk2crw=) 3: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: u0liUKUx/5cqgAqMwjK3Jr9++ba1PKf6CQYNnuhwu/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 14:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13719 (0x3597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Jul 6 14:49:01 2026 GMT Not After : Jul 13 14:49:01 2026 GMT Subject: CN=6a4bc05d-3a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:fe:ca:db:5c:d3:33:7f:7d:06:fb:95:8e: 0c:e9:58:16:a3:bb:94:78:5d:51:e6:a0:a9:68:7e: 1a:7d:2f:be:de:79:95:4a:a1:e8:05:6e:c4:72:3b: 4c:38:30:1d:02:3b:c8:0e:39:e2:94:93:06:a8:ba: cb:d6:84:73:95:9e:6c:bc:d6:e7:6b:df:5e:09:6b: b3:8c:b0:0c:34:9d:23:f7:a3:43:fe:86:bd:5d:e5: 20:cb:e5:03:79:95:41:a4:bb:38:4e:e0:ce:ea:cd: b5:10:8c:80:98:b6:66:5f:48:f8:78:15:f9:66:fa: 67:24:eb:f6:03:df:a4:1c:96:9d:4d:e4:51:f4:75: c6:6d:80:a1:35:0a:3a:3a:c3:d2:74:58:38:7f:ca: 53:63:4b:62:cd:8c:23:5b:99:2c:fc:97:37:8d:ac: b6:87:18:49:82:3b:b3:ca:20:77:9e:46:0d:c4:96: 16:a8:6f:33:31:03:fd:37:e1:45:eb:46:86:e2:c2: b3:8d:84:dc:b0:ba:13:21:59:1d:4c:0b:c0:bc:5d: 7e:87:bf:cc:c5:72:1c:5d:5f:6f:ff:6b:ef:6a:a9: 54:d5:fc:92:95:07:f6:0f:99:c6:8c:62:87:38:0b: 79:4b:39:6f:c0:b4:21:4a:47:e0:8b:27:3e:c6:3f: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:53:A4:BD:44:04:A7:41:47:98:30:92:85:67:7D:AD:7C:12:18:62 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:45:03:fa:0e:27:8a:39:0c:1b:12:f0:ed:85:fb:86:87:aa: f5:0c:4b:74:1a:0f:9b:a3:b9:2c:4f:e3:b9:4d:33:6c:0b:5f: 8c:16:da:19:65:dc:2a:4b:35:9b:d4:8e:a5:4e:c8:0e:c6:91: 49:c2:01:23:c0:62:fe:de:49:7c:c5:a9:a6:8c:74:9c:ea:96: e1:7b:64:8c:bb:62:f9:d4:a4:43:af:4d:c9:55:92:6c:89:71: 80:63:4b:6f:98:5d:b6:b1:e1:56:cb:07:95:a0:b8:c2:27:77: 7e:21:a2:c0:ba:1c:c9:58:f3:be:8f:31:1a:cc:37:99:1d:b8: 1d:5c:62:64:eb:a1:ac:3c:6d:f6:25:fd:f2:f2:78:69:73:7d: 2c:02:8b:ec:e4:74:f3:c7:5c:d8:5c:8b:1f:2c:a7:69:3c:23: 9e:68:e5:14:06:97:1e:64:f6:53:5f:08:5e:00:39:83:1d:76: bb:96:3c:20:a8:04:e4:f3:95:4e:e2:06:be:0c:b2:58:62:1f: 84:3d:7b:64:d5:b2:a2:8e:55:b9:8c:73:0c:ef:81:2d:87:35: 24:8b:3c:b0:27:bc:f3:d0:de:76:69:62:65:26:af:f6:62:cc: 4d:a1:8b:a0:5e:76:e4:05:59:40:dc:f8:78:42:8f:3f:e9:db: f3:fd:bb:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjYwNzA2MTQ0OTAxWhcNMjYwNzEzMTQ0OTAxWjAYMRYwFAYD VQQDEw02YTRiYzA1ZC0zYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5/+yttc0zN/fQb7lY4M6VgWo7uUeF1R5qCpaH4afS++3nmVSqHoBW7EcjtM ODAdAjvIDjnilJMGqLrL1oRzlZ5svNbna99eCWuzjLAMNJ0j96ND/oa9XeUgy+UD eZVBpLs4TuDO6s21EIyAmLZmX0j4eBX5ZvpnJOv2A9+kHJadTeRR9HXGbYChNQo6 OsPSdFg4f8pTY0tizYwjW5ks/Jc3jay2hxhJgjuzyiB3nkYNxJYWqG8zMQP9N+FF 60aG4sKzjYTcsLoTIVkdTAvAvF1+h7/MxXIcXV9v/2vvaqlU1fySlQf2D5nGjGKH OAt5SzlvwLQhSkfgiyc+xj/HLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZTpL1E BKdBR5gwkoVnfa18EhhiMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADEUD+g4nijkMGxLw7YX7hoeq9QxLdBoPm6O5LE/juU0zbAtfjBbaGWXcKks1 m9SOpU7IDsaRScIBI8Bi/t5JfMWppox0nOqW4XtkjLti+dSkQ69NyVWSbIlxgGNL b5hdtrHhVssHlaC4wid3fiGiwLocyVjzvo8xGsw3mR24HVxiZOuhrDxt9iX98vJ4 aXN9LAKL7OR088dc2FyLHyynaTwjnmjlFAaXHmT2U18IXgA5gx12u5Y8IKgE5POV TuIGvgyyWGIfhD17ZNWyoo5VuYxzDO+BLYc1JIs8sCe889DedmliZSav9mLMTaGL oF525AVZQNz4eEKPP+nb8/27IA== -----END CERTIFICATE-----Generated at Tue Jul 7 11:53:16 2026 by rpki-client