$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: yLuYKR9LA1ZdMnpYUZG2ksp0sOjcLi+11ED4bjliXmU= Subject key identifier: 2D:6D:AB:69:46:B7:D9:CE:BE:7B:F8:86:CB:BA:A1:E2:64:1E:F4:44 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 01FB Signing time: Mon 27 Jul 2026 04:58:59 +0000 Manifest this update: Mon 27 Jul 2026 04:58:59 +0000 Manifest next update: Mon 03 Aug 2026 04:58:59 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: TKHE8pm/rhBX6/3UEHdL9xc2zb8h+B39FRPleKznPDc=) 2: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=) 3: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Jul 27 04:58:59 2026 GMT Not After : Aug 3 04:58:59 2026 GMT Subject: CN=6a66e593-c081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:a5:d5:ff:c5:2f:80:63:1f:4f:18:90:cd: 3f:f8:ea:ad:ee:d9:8d:a7:34:be:e2:ce:5e:c0:2b: 28:d6:44:15:97:d1:5d:32:2c:cd:a6:5f:c8:d7:84: 57:7e:a2:49:22:e2:9b:6a:4c:50:e5:cf:ce:d6:ce: 79:71:29:c9:c2:23:89:ec:09:cc:7f:0e:46:e7:9d: de:f6:00:53:24:8a:f7:5c:1b:5f:13:9b:b6:63:cc: 05:20:90:60:82:7d:c7:7f:f1:b6:b8:a5:2b:f0:c4: 85:31:44:fd:6c:de:6e:77:d8:c5:eb:06:9a:d4:b0: be:e5:4f:6e:4e:9e:e0:86:b2:b9:a1:ed:7e:51:54: b4:98:67:82:ee:13:e8:59:d9:12:05:96:38:7e:28: 36:08:81:94:82:13:94:bc:f4:8d:df:aa:4a:88:cf: 0e:f8:b2:76:88:86:e7:74:04:64:75:fb:dd:43:6c: 2c:4c:a4:9d:a3:30:7c:b9:91:a6:4d:6f:5e:8d:b3: ba:9a:8a:46:47:ea:c3:2a:30:b7:56:e8:e7:42:09: 90:ae:a8:3f:73:00:30:0e:57:8e:1b:f3:22:42:33: 37:96:a5:89:27:9a:66:77:84:90:ce:f7:11:64:a5: 24:ad:6a:43:13:91:d8:8c:97:6c:50:63:c8:93:8e: 4e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6D:AB:69:46:B7:D9:CE:BE:7B:F8:86:CB:BA:A1:E2:64:1E:F4:44 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cd:4a:a6:b0:1e:ee:2c:bf:9b:94:aa:50:6a:57:e2:ef:95: 8f:ac:27:fe:1b:d7:05:7f:c6:b6:76:05:cc:56:cc:d0:97:a9: 6c:74:a9:53:01:c7:d9:37:0d:fe:42:28:0a:de:c4:e2:07:49: 39:eb:b7:50:62:d2:8f:ec:49:e1:6c:06:d7:39:32:d2:12:28: 34:5d:3a:7a:d5:d9:10:f6:86:b9:e4:f8:db:ca:50:d9:e2:49: a9:7e:d4:80:86:c0:2d:32:8f:97:43:fe:f5:6b:90:79:02:0c: ac:af:3a:12:80:e8:55:09:7e:0b:d1:8a:df:25:e2:9d:1e:7b: 51:30:a5:73:1d:b3:5f:fd:e0:d3:3f:e3:3c:1e:0a:c1:16:8f: 57:26:ed:a7:2b:0f:ab:31:1d:10:d4:56:44:bb:86:21:a0:53: e7:e4:51:b1:5a:c5:b2:d9:61:bd:9c:dc:4c:9b:b9:0b:e1:f1: b0:67:73:ea:94:65:da:6d:d3:f8:a6:7a:52:7e:89:b3:a5:d2: a0:ca:c5:7e:78:5a:ec:de:a6:43:cc:a5:75:ed:8c:f0:6f:62: ce:f3:fb:3a:11:bf:e1:f3:bf:fd:18:bf:1c:5f:b9:b4:c4:d5: fe:f8:60:4e:8c:de:dd:da:8e:14:cd:ef:04:a6:e4:e1:de:cb: 12:bc:aa:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjYwNzI3MDQ1ODU5WhcNMjYwODAzMDQ1ODU5WjAYMRYwFAYD VQQDEw02YTY2ZTU5My1jMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6il1f/FL4BjH08YkM0/+Oqt7tmNpzS+4s5ewCso1kQVl9FdMizNpl/I14RX fqJJIuKbakxQ5c/O1s55cSnJwiOJ7AnMfw5G553e9gBTJIr3XBtfE5u2Y8wFIJBg gn3Hf/G2uKUr8MSFMUT9bN5ud9jF6waa1LC+5U9uTp7ghrK5oe1+UVS0mGeC7hPo WdkSBZY4fig2CIGUghOUvPSN36pKiM8O+LJ2iIbndARkdfvdQ2wsTKSdozB8uZGm TW9ejbO6mopGR+rDKjC3VujnQgmQrqg/cwAwDleOG/MiQjM3lqWJJ5pmd4SQzvcR ZKUkrWpDE5HYjJdsUGPIk45OawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1tq2lG t9nOvnv4hsu6oeJkHvREMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO81KprAe7iy/m5SqUGpX4u+Vj6wn/hvXBX/GtnYFzFbM0JepbHSpUwHH2TcN /kIoCt7E4gdJOeu3UGLSj+xJ4WwG1zky0hIoNF06etXZEPaGueT428pQ2eJJqX7U gIbALTKPl0P+9WuQeQIMrK86EoDoVQl+C9GK3yXinR57UTClcx2zX/3g0z/jPB4K wRaPVybtpysPqzEdENRWRLuGIaBT5+RRsVrFstlhvZzcTJu5C+HxsGdz6pRl2m3T +KZ6Un6Js6XSoMrFfnha7N6mQ8ylde2M8G9izvP7OhG/4fO//Ri/HF+5tMTV/vhg Toze3dqOFM3vBKbk4d7LEryqgQ== -----END CERTIFICATE-----Generated at Tue Jul 28 02:28:36 2026 by rpki-client