$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: yf4wC32SPEfeX5/XwX8CZN57DHKukg/75LfPjfQXoIE= Subject key identifier: BB:B5:52:F4:28:6E:29:09:5E:2C:3C:DF:0C:93:62:33:2F:7F:C3:CE Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 03E9 Signing time: Sun 05 Jul 2026 00:57:25 +0000 Manifest this update: Sun 05 Jul 2026 00:57:24 +0000 Manifest next update: Sun 12 Jul 2026 00:57:24 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: D9v2/l7RIxfT5BRF/W1EP05Sk79V+jyhT1HkLHwQY8o=) 2: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: MYhon/bKVvfbESU7PH3/suSb5/+YVeHAdnZ0m09ZYpE=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 4Abgy+X2ZW9Ha0ytPuEUdXVUheE/F+OPg09zPVRwTxg=) 4: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: VLoma/afTmz4hnI0EdqXpLXgczEhizYxmaDG9CyhcCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 00:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Jul 5 00:57:24 2026 GMT Not After : Jul 12 00:57:24 2026 GMT Subject: CN=6a49abf5-5af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:24:b6:52:8a:af:eb:35:6a:c9:23:78:87: 21:19:56:c5:ba:28:d3:fc:89:ac:1e:a2:fe:00:d3: 12:28:0a:f9:43:e7:7f:a7:d7:31:7f:b1:dd:2a:55: 76:ca:e4:ab:9a:a1:a0:57:03:0d:40:a3:26:d8:6a: b2:91:3e:55:e9:4a:f0:ce:f2:53:1b:ee:b3:02:be: 49:55:5f:0a:66:c9:47:60:2d:1f:85:06:a5:9d:ff: 02:da:5e:56:0f:c7:74:50:39:c5:a7:f2:89:bc:a3: 44:5a:28:72:37:9d:5a:52:02:f6:43:a7:cc:71:78: 0d:88:27:26:04:b8:b2:b8:3c:b8:65:4a:bb:ba:dc: 44:d7:fc:2d:85:5a:02:52:65:0b:91:5d:ec:60:cc: bd:95:83:2d:7d:03:6b:ff:fd:ad:68:c6:81:9c:5a: ac:e4:d7:03:ff:73:0e:af:08:65:e5:d3:b5:99:c3: 75:a5:89:58:38:73:b5:a9:63:51:cf:32:74:c0:c5: 2b:43:d3:ac:36:8f:58:0c:ff:6c:5a:21:10:81:2b: 8b:ae:71:f3:88:f5:ee:aa:0b:08:f0:f8:c0:37:4e: 61:62:01:4e:0e:01:c5:8a:fb:95:80:fe:9e:80:ff: ff:86:1f:3e:36:44:b6:d5:1f:d6:3a:45:35:1b:ec: 55:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B5:52:F4:28:6E:29:09:5E:2C:3C:DF:0C:93:62:33:2F:7F:C3:CE X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:7f:ca:76:f0:04:87:f7:d2:69:53:3c:69:a9:c1:95:cd:38: 96:71:1c:c9:f8:b2:79:66:ff:f4:96:f3:db:da:32:84:20:f1: 1b:54:41:8f:e9:0c:67:6f:9b:07:5c:4b:74:e5:87:55:bc:d0: 37:4f:33:87:57:b5:8f:46:25:72:73:e3:7a:10:21:c3:f1:1d: e0:2b:c5:85:36:c4:93:4d:e4:5f:dc:d1:42:cb:75:56:79:02: d3:2d:3d:b2:02:eb:74:9b:24:fc:a4:1a:38:7f:97:51:d5:82: 90:a7:c2:50:9c:d3:b6:6b:73:90:b0:5a:20:74:da:65:27:ee: 30:49:d0:58:29:d6:c7:77:07:ad:35:77:ef:bc:53:b2:95:fc: db:81:e2:95:54:42:eb:b3:4b:e0:41:cb:f6:34:a0:8b:79:47: 53:83:e3:f8:41:9a:59:4e:4a:11:44:18:ce:e0:13:78:80:f0: 8c:7c:17:d0:50:6f:f0:76:93:30:a2:c8:4c:0a:3e:89:8c:26: f8:44:66:cf:a2:09:34:24:84:9a:5e:a7:3e:b3:af:2b:0e:02: 5e:dc:0c:85:63:f1:8b:42:32:9e:ff:2d:b0:d1:36:1b:68:51: 3b:fe:a3:69:64:98:20:4c:9b:cf:f0:36:81:43:9a:63:25:d2: 83:61:24:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwNzA1MDA1NzI0WhcNMjYwNzEyMDA1NzI0WjAYMRYwFAYD VQQDEw02YTQ5YWJmNS01YWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3N4ktlKKr+s1askjeIchGVbFuijT/ImsHqL+ANMSKAr5Q+d/p9cxf7HdKlV2 yuSrmqGgVwMNQKMm2GqykT5V6UrwzvJTG+6zAr5JVV8KZslHYC0fhQalnf8C2l5W D8d0UDnFp/KJvKNEWihyN51aUgL2Q6fMcXgNiCcmBLiyuDy4ZUq7utxE1/wthVoC UmULkV3sYMy9lYMtfQNr//2taMaBnFqs5NcD/3MOrwhl5dO1mcN1pYlYOHO1qWNR zzJ0wMUrQ9OsNo9YDP9sWiEQgSuLrnHziPXuqgsI8PjAN05hYgFODgHFivuVgP6e gP//hh8+NkS21R/WOkU1G+xVcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLu1UvQo bikJXiw83wyTYjMvf8POMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvn/KdvAEh/fSaVM8aanBlc04lnEcyfiyeWb/9Jbz29oyhCDxG1RBj+kMZ2+b B1xLdOWHVbzQN08zh1e1j0YlcnPjehAhw/Ed4CvFhTbEk03kX9zRQst1VnkC0y09 sgLrdJsk/KQaOH+XUdWCkKfCUJzTtmtzkLBaIHTaZSfuMEnQWCnWx3cHrTV377xT spX824HilVRC67NL4EHL9jSgi3lHU4Pj+EGaWU5KEUQYzuATeIDwjHwX0FBv8HaT MKLITAo+iYwm+ERmz6IJNCSEml6nPrOvKw4CXtwMhWPxi0Iynv8tsNE2G2hRO/6j aWSYIEybz/A2gUOaYyXSg2EkfA== -----END CERTIFICATE-----Generated at Tue Jul 7 00:07:10 2026 by rpki-client