$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: 2KGzqF/FFfrIOPZUbtiVUkHbVT70BaNWqqMCZoARdIg= Subject key identifier: 2C:C8:58:A0:20:07:83:BA:FB:F3:AD:DA:41:BD:FA:65:AB:1A:A3:C4 Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 28 Signing time: Tue 21 Jul 2026 10:44:11 +0000 Manifest this update: Tue 21 Jul 2026 10:44:10 +0000 Manifest next update: Tue 28 Jul 2026 10:44:10 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: PltsiqjN983QPMP4lnXUoUXrt8gl/XK4Ltug0FrBgHw=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: cNvYO9Mx94LSKruAtGYqSyqtbxJvaQBMA0ykxsLIG5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: Jul 21 10:44:10 2026 GMT Not After : Jul 28 10:44:10 2026 GMT Subject: CN=6a5f4d7b-0060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:df:01:8f:2b:ff:fd:7b:82:71:95:5d:c3: 98:e9:b5:19:1c:27:fb:4d:e3:0e:49:a8:75:32:fd: e1:3a:ff:6b:f8:27:33:ea:07:97:59:ae:b2:db:fb: 0f:45:f7:38:86:64:87:83:2a:28:6f:c7:2c:40:32: 52:a4:ac:7b:df:ad:29:85:70:e3:db:d4:20:d9:33: f6:d3:85:7e:e1:e6:3a:78:ca:16:0c:34:94:88:cb: 25:90:5e:63:6e:4b:79:b1:47:20:38:33:6e:19:99: e7:54:d2:86:4d:61:bf:cd:06:7d:dd:73:eb:6e:48: 23:77:a5:23:43:14:df:99:27:a2:96:2c:05:a9:23: 5a:86:65:d5:59:7d:e4:60:5b:c2:16:50:af:88:d0: af:2a:90:2e:7d:3a:73:ec:00:9c:2d:6e:ae:d7:30: f9:da:e3:34:60:e0:db:7f:6c:06:36:5e:d6:1e:71: 3f:c2:1b:52:5d:22:65:a6:74:44:7b:38:68:9c:01: 46:8e:7b:b9:e6:20:9a:a7:5a:ea:ed:7f:5a:5b:20: 61:2f:2b:c8:88:e1:27:75:84:8b:db:21:df:f2:2d: 01:2a:d6:75:c2:c9:17:e4:d6:53:82:99:49:d9:33: 1a:4c:e6:86:f1:6f:38:18:97:ce:70:5e:e5:00:bf: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C8:58:A0:20:07:83:BA:FB:F3:AD:DA:41:BD:FA:65:AB:1A:A3:C4 X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c3:18:5a:af:1f:85:3c:5c:80:4f:64:8e:b6:ba:28:3a:2e: 4a:f0:fc:4b:85:c2:dc:da:cb:d2:a2:a6:c9:c4:a4:2b:a9:d6: 73:c2:79:9f:c8:e8:f9:c5:8b:0d:c3:bf:0d:df:b8:96:a1:45: 38:d9:75:b2:ef:ea:a7:64:74:2b:07:05:7f:a3:1b:c6:86:1f: fc:00:9c:45:1c:94:17:cd:65:7f:f4:ad:0d:70:5b:a8:be:2c: 29:cf:94:e2:39:ef:8b:d7:05:62:ca:0b:a2:6f:a6:ae:2c:ff: 42:a4:d6:8e:57:d5:57:38:26:f4:1c:19:46:73:5d:d5:f9:fa: 2c:34:49:fd:fe:fc:6a:f4:93:22:97:7f:c5:69:14:96:14:4b: ae:35:42:59:97:3d:e6:df:ed:b8:4d:d9:41:7c:75:52:75:d4: 45:c7:40:1f:07:de:28:41:c0:53:a4:c0:7e:5c:84:75:e2:5b: f8:64:b4:b1:5c:b8:1b:7b:34:64:e1:5f:66:13:ba:84:0a:de: b8:38:70:ce:89:74:6a:73:eb:1a:8a:fa:6f:d1:e2:fa:40:d4: e0:a8:99:a8:5c:5d:76:1a:7a:55:bb:11:d2:86:ff:fa:91:ab: 5e:94:1c:5d:03:fc:cc:fe:58:23:9a:0b:c0:61:b1:31:6d:3b: b0:ba:e1:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjA3MjExMDQ0MTBaFw0yNjA3MjgxMDQ0MTBaMBgxFjAUBgNV BAMTDTZhNWY0ZDdiLTAwNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8LN8Bjyv//XuCcZVdw5jptRkcJ/tN4w5JqHUy/eE6/2v4JzPqB5dZrrLb+w9F 9ziGZIeDKihvxyxAMlKkrHvfrSmFcOPb1CDZM/bThX7h5jp4yhYMNJSIyyWQXmNu S3mxRyA4M24ZmedU0oZNYb/NBn3dc+tuSCN3pSNDFN+ZJ6KWLAWpI1qGZdVZfeRg W8IWUK+I0K8qkC59OnPsAJwtbq7XMPna4zRg4Nt/bAY2XtYecT/CG1JdImWmdER7 OGicAUaOe7nmIJqnWurtf1pbIGEvK8iI4Sd1hIvbId/yLQEq1nXCyRfk1lOCmUnZ MxpM5obxbzgYl85wXuUAv8kPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULMhYoCAH g7r7863aQb36Zasao8QwHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAiwxharx+FPFyAT2SOtrooOi5K8PxLhcLc2svSoqbJxKQrqdZzwnmfyOj5xYsN w78N37iWoUU42XWy7+qnZHQrBwV/oxvGhh/8AJxFHJQXzWV/9K0NcFuoviwpz5Ti Oe+L1wViyguib6auLP9CpNaOV9VXOCb0HBlGc13V+fosNEn9/vxq9JMil3/FaRSW FEuuNUJZlz3m3+24TdlBfHVSddRFx0AfB94oQcBTpMB+XIR14lv4ZLSxXLgbezRk 4V9mE7qECt64OHDOiXRqc+saivpv0eL6QNTgqJmoXF12GnpVuxHShv/6katelBxd A/zM/lgjmgvAYbExbTuwuuGB -----END CERTIFICATE-----Generated at Tue Jul 21 17:58:24 2026 by rpki-client