$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft File: xBA2pq0HEadA_q5RVOE3zud7x7E.mft (raw, json) Hash identifier: oLkGWp6CN8eMuzrfszT/HtU3Zbe3LcaDhABRAeUivxM= Subject key identifier: 6A:AC:7E:DA:3F:A9:BA:09:87:DC:BA:02:FE:2F:05:70:64:B3:F7:41 Authority key identifier: C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1 Certificate issuer: /CN=A91F7113/serialNumber=C41036A6AD0711A740FEAE5154E137CEE77BC7B1 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft Manifest number: 10 Signing time: Fri 17 Jul 2026 10:26:23 +0000 Manifest this update: Fri 17 Jul 2026 10:26:22 +0000 Manifest next update: Fri 24 Jul 2026 10:26:22 +0000 Files and hashes: 1: xBA2pq0HEadA_q5RVOE3zud7x7E.crl (hash: XVmt8w9Clv2OorcQvpbsUHBtscslTBxEfnk3fZlcEVk=) 2: CA0D122C6AD711F18FD2EC236D47A888.roa (hash: YHQct6L4pL/zTQ4jersZLzeD7JHF3Rv1GS4aJY0I1+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.crl rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7113, serialNumber=C41036A6AD0711A740FEAE5154E137CEE77BC7B1 Validity Not Before: Jul 17 10:26:22 2026 GMT Not After : Jul 24 10:26:22 2026 GMT Subject: CN=6a5a034f-63ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:95:da:3c:f8:65:94:9c:76:79:5d:7a:b6: bb:49:e7:0b:d9:d4:13:51:12:43:ce:a3:49:a4:4b: b0:36:46:3c:70:75:40:ea:9c:eb:80:26:b0:3e:77: f0:7e:b7:0d:8a:a6:88:32:c7:f3:da:00:6e:9e:b2: 0a:f7:16:97:e0:75:6b:b2:36:cc:c5:d3:63:98:45: 67:e0:42:d3:28:c1:3b:ff:14:4d:0e:d8:a9:81:01: 82:3c:0c:38:d0:1c:f0:08:09:85:f3:12:5c:59:32: eb:c7:be:6c:e4:2d:f7:e6:b4:7c:30:a2:00:c6:af: 53:ec:cc:e9:f2:c4:87:fa:33:24:04:66:f0:99:87: 63:e7:48:d9:9f:d3:59:7d:7d:e3:52:ae:7d:64:ee: cc:58:c8:61:97:6c:a4:6e:3d:e3:7a:a7:65:b2:cd: 4d:f7:bc:9e:05:21:0a:7f:e4:ad:e2:0d:c7:54:e2: 54:8f:cb:45:6d:a2:ba:98:b0:ea:2e:5f:a1:d3:98: 5e:35:99:48:5e:2e:40:da:f1:bf:63:0c:c6:44:15: 11:65:47:c2:d4:4b:14:16:e3:87:8a:bb:f1:c6:e3: 6e:d0:d4:31:4f:5c:3d:b6:2f:e2:ec:53:cb:aa:b5: 70:b3:13:39:ba:32:a4:89:ae:9f:e0:28:4a:67:21: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AC:7E:DA:3F:A9:BA:09:87:DC:BA:02:FE:2F:05:70:64:B3:F7:41 X509v3 Authority Key Identifier: keyid:C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c2:61:2d:95:0a:36:f5:ea:7b:64:f5:06:d3:c0:0c:ab:24: e0:a0:8e:83:47:eb:2e:c9:ae:15:b1:0f:a1:5d:e7:59:7d:2c: e9:0a:3e:b7:4c:35:a7:5d:d1:6c:bb:4c:8e:7d:70:46:ae:a5: dd:62:f2:52:ee:7a:4a:5e:44:23:34:da:f2:d4:fe:77:ef:0f: 43:18:f3:48:3c:15:15:4a:d3:bd:ae:dc:c4:09:b9:2b:e2:87: ad:b8:90:05:df:b1:97:7e:49:df:8b:77:3c:23:77:c9:5a:0b: d7:74:74:a2:3c:6a:de:64:d0:fe:b8:ee:8a:be:50:df:9b:76: f0:f4:d5:ed:f5:26:7b:9c:9c:bb:1a:d2:f3:db:d8:d7:83:f3: 80:92:82:b7:b5:21:4c:b0:40:76:34:85:85:e7:b4:40:ee:19: 4e:91:ee:b6:cc:42:5a:41:02:81:63:7d:d1:ff:0d:14:3b:a6: 88:fb:03:be:ff:3b:32:af:89:33:61:bd:63:94:2f:2b:30:53: 49:fa:75:46:57:8f:49:11:11:79:30:9d:f4:c8:f5:3d:be:ec: d3:41:11:a9:8f:60:8b:bb:d0:e8:5f:c2:7b:d8:73:7c:68:8f: 03:a7:e8:56:a8:71:07:3d:bf:73:1d:9a:ba:f7:43:3a:6e:c9: d1:7f:e6:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzExMzExMC8GA1UEBRMoQzQxMDM2QTZBRDA3MTFBNzQwRkVBRTUxNTRFMTM3Q0VF NzdCQzdCMTAeFw0yNjA3MTcxMDI2MjJaFw0yNjA3MjQxMDI2MjJaMBgxFjAUBgNV BAMTDTZhNWEwMzRmLTYzY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPzJXaPPhllJx2eV16trtJ5wvZ1BNREkPOo0mkS7A2RjxwdUDqnOuAJrA+d/B+ tw2Kpogyx/PaAG6esgr3FpfgdWuyNszF02OYRWfgQtMowTv/FE0O2KmBAYI8DDjQ HPAICYXzElxZMuvHvmzkLffmtHwwogDGr1PszOnyxIf6MyQEZvCZh2PnSNmf01l9 feNSrn1k7sxYyGGXbKRuPeN6p2WyzU33vJ4FIQp/5K3iDcdU4lSPy0VtorqYsOou X6HTmF41mUheLkDa8b9jDMZEFRFlR8LUSxQW44eKu/HG427Q1DFPXD22L+LsU8uq tXCzEzm6MqSJrp/gKEpnIXGzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaqx+2j+p ugmH3LoC/i8FcGSz90EwHwYDVR0jBBgwFoAUxBA2pq0HEadA/q5RVOE3zud7x7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3MTEzL0NENjdGMzI2NkFE NTExRjFBMTU1OEY5RTZDNDdBODg4L3hCQTJwcTBIRWFkQV9xNVJWT0UzenVkN3g3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveEJBMnBxMEhFYWRBX3E1UlZPRTN6dWQ3eDdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 MTEzL0NENjdGMzI2NkFENTExRjFBMTU1OEY5RTZDNDdBODg4L3hCQTJwcTBIRWFk QV9xNVJWT0UzenVkN3g3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHwmEtlQo29ep7ZPUG08AMqyTgoI6DR+suya4VsQ+hXedZfSzpCj63TDWnXdFs u0yOfXBGrqXdYvJS7npKXkQjNNry1P537w9DGPNIPBUVStO9rtzECbkr4oetuJAF 37GXfknfi3c8I3fJWgvXdHSiPGreZND+uO6KvlDfm3bw9NXt9SZ7nJy7GtLz29jX g/OAkoK3tSFMsEB2NIWF57RA7hlOke62zEJaQQKBY33R/w0UO6aI+wO+/zsyr4kz Yb1jlC8rMFNJ+nVGV49JERF5MJ30yPU9vuzTQRGpj2CLu9DoX8J72HN8aI8Dp+hW qHEHPb9zHZq690M6bsnRf+a7 -----END CERTIFICATE-----Generated at Sat Jul 18 04:28:59 2026 by rpki-client