$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: Ifxnqqi67YcsAmKdpdM9ocLB1GJoRNG3sTJSiEKYbQw= Subject key identifier: DB:10:E8:3E:29:D3:20:48:9E:81:4E:59:AF:19:9D:6F:3F:6F:F2:6A Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0CEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0B94 Signing time: Sun 26 Jul 2026 20:10:32 +0000 Manifest this update: Sun 26 Jul 2026 20:10:31 +0000 Manifest next update: Sun 02 Aug 2026 20:10:31 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: 6BJuFzYdsJWyEsIGnJillPQeFl6ZVo+AuRYaj4AkWec=) 2: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: Hx4jtOuJzXTTc5VHMURxCz4V4clqTWRLtCDPvPlgRLQ=) 3: FA6E449673E611F1867DB2D08DA30FBC.roa (hash: rKz8pZzI0+qvXmq1gvSTQ2lUF+eFULCXrlhyw1hDxQg=) 4: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: 6WjdsXo2+LZgxWiVDy4rRpY13i0Lx3BV3M/QLcdy5a8=) 5: 89135068FD2911F09BBA873E426F56BC.roa (hash: k6L2RtaPfs9iJDZ6OaWxGKY/ymoQfy3jPyd5OxyAkZs=) 6: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: 70UT6YcmvBlzj1xKlGcaUiyXDKtBEdfDGecHQzUFaBA=) 7: 7E4EFF5473E611F1BA32CE558DA30FBC.roa (hash: iWTTS4IDR+HUhOdGPI78d/5YB8edbsgZvg0Sd4nkNyU=) 8: A4890D6473E511F185E76C018DA30FBC.roa (hash: ceMs0ZWVV6AYuiMcgooM25QQZcYhNLkc9LYFIIi0V2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3306 (0xcea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Jul 26 20:10:31 2026 GMT Not After : Aug 2 20:10:31 2026 GMT Subject: CN=6a6669b7-c4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:61:54:91:e0:36:91:75:3e:1f:fc:8e:58:03: 20:ab:0a:00:8b:34:d3:6c:b9:2d:90:7e:a2:5c:21: 1f:6d:60:95:9c:ca:e0:44:78:c6:e4:48:5f:d0:7f: 59:0f:cd:22:41:83:7f:fe:2f:91:6f:e6:42:96:9f: dc:56:df:1d:c0:ec:0e:b8:de:d1:d6:69:c2:8a:18: f0:ce:68:9d:59:ad:8e:af:21:45:46:92:66:5d:f3: ab:3c:a9:2a:b9:78:a6:3d:cf:9a:4d:43:fb:30:c3: cc:2f:bd:ea:7d:fb:34:4f:df:63:f1:c5:1b:fa:6b: 07:00:2e:fd:31:5a:21:fe:d0:c2:a7:34:e2:e6:db: b1:3c:0c:c8:ff:f2:e7:76:67:d4:69:54:b1:2a:98: 5a:df:ca:03:25:6d:ca:e6:c8:e5:9b:0d:af:ef:99: eb:d4:2b:01:ae:02:43:01:19:a9:47:9c:e5:6d:a3: 48:7a:7e:fc:96:10:c3:ae:34:f9:93:88:c6:7b:26: d5:00:cc:c7:0d:e7:90:7f:a1:50:0e:8a:48:d7:f8: eb:6a:b0:2c:33:88:7d:24:24:2f:e0:ec:bd:bb:ca: c6:83:f0:41:37:95:2c:64:f1:71:74:b8:b1:45:f7: ae:b0:0e:46:b7:ec:2d:91:fa:da:cf:31:f6:d0:7a: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:10:E8:3E:29:D3:20:48:9E:81:4E:59:AF:19:9D:6F:3F:6F:F2:6A X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:de:7b:76:c1:c3:cf:71:c6:c7:15:f5:73:de:a1:82:dc:a4: 19:b3:de:12:14:40:06:43:cc:c1:f4:58:91:1c:8d:5e:8d:35: 25:08:f5:7a:d5:01:e6:5c:86:bf:f4:71:7b:a5:30:b4:1f:c5: f6:fa:f4:6b:25:98:de:7b:fd:9d:43:f5:f0:4d:a3:10:6f:ab: 2f:e3:cf:49:db:be:03:66:70:33:0f:13:12:c4:5e:58:69:04: 9d:ce:e5:4d:54:7c:cc:b6:d8:eb:93:4c:a6:ef:15:1e:d4:98: 15:41:36:1d:45:f7:fc:83:40:c9:c2:07:7d:ae:46:fe:cc:54: 35:a9:08:0c:f5:46:de:d7:e0:d1:b6:ce:71:30:be:b8:55:a3: 32:1e:65:fd:06:69:15:2b:6e:38:b2:13:c3:cf:76:d4:f5:f5: 51:81:52:47:86:c7:6a:1a:cc:23:2f:35:2a:fb:83:c1:f6:4e: 08:07:11:78:1b:a3:cd:f4:02:27:d0:70:54:b2:4b:02:30:fd: 82:68:cd:6e:51:67:81:a3:ea:ca:19:05:ce:ff:c8:c1:c1:aa: ce:91:90:cf:f5:ff:b4:03:f7:fb:03:0b:88:6a:3b:63:14:ac: 35:62:f9:1b:c1:cf:b8:cd:32:d7:e9:12:ab:f5:ba:37:5d:bb: 75:7f:ab:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYwNzI2MjAxMDMxWhcNMjYwODAyMjAxMDMxWjAYMRYwFAYD VQQDEw02YTY2NjliNy1jNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWFUkeA2kXU+H/yOWAMgqwoAizTTbLktkH6iXCEfbWCVnMrgRHjG5Ehf0H9Z D80iQYN//i+Rb+ZClp/cVt8dwOwOuN7R1mnCihjwzmidWa2OryFFRpJmXfOrPKkq uXimPc+aTUP7MMPML73qffs0T99j8cUb+msHAC79MVoh/tDCpzTi5tuxPAzI//Ln dmfUaVSxKpha38oDJW3K5sjlmw2v75nr1CsBrgJDARmpR5zlbaNIen78lhDDrjT5 k4jGeybVAMzHDeeQf6FQDopI1/jrarAsM4h9JCQv4Oy9u8rGg/BBN5UsZPFxdLix RfeusA5Gt+wtkfrazzH20HoeLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsQ6D4p 0yBInoFOWa8ZnW8/b/JqMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOd57dsHDz3HGxxX1c96hgtykGbPeEhRABkPMwfRYkRyNXo01JQj1etUB5lyG v/Rxe6UwtB/F9vr0ayWY3nv9nUP18E2jEG+rL+PPSdu+A2ZwMw8TEsReWGkEnc7l TVR8zLbY65NMpu8VHtSYFUE2HUX3/INAycIHfa5G/sxUNakIDPVG3tfg0bbOcTC+ uFWjMh5l/QZpFStuOLITw8921PX1UYFSR4bHahrMIy81KvuDwfZOCAcReBujzfQC J9BwVLJLAjD9gmjNblFngaPqyhkFzv/IwcGqzpGQz/X/tAP3+wMLiGo7YxSsNWL5 G8HPuM0y1+kSq/W6N127dX+rrQ== -----END CERTIFICATE-----Generated at Mon Jul 27 19:34:50 2026 by rpki-client