$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: B4yF4UvldJYFe+OPcFSfYS5+weYfw7Dos32qBilYSNM= Subject key identifier: 67:B8:9F:FF:AB:22:8F:BC:22:A9:AC:27:1C:48:7B:8A:7F:74:2B:92 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 356A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 356A Signing time: Tue 18 Aug 2026 15:10:22 +0000 Manifest this update: Tue 18 Aug 2026 15:10:22 +0000 Manifest next update: Tue 25 Aug 2026 15:10:22 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: d0me/A1JPoGw9DjpDYLo+nrKMk17ZGjjO4vADHm5udo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13674 (0x356a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Aug 18 15:10:22 2026 GMT Not After : Aug 25 15:10:22 2026 GMT Subject: CN=6a8475de-cf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:8e:1d:29:d5:bc:ad:ae:38:db:46:8d:7a: f8:9d:46:80:c6:de:56:1b:cd:13:4f:55:c6:fb:0b: 10:e7:8d:16:07:84:b1:ed:10:c4:2b:9a:8d:0c:6b: e7:8d:b7:b5:aa:0b:25:da:2c:b8:a1:97:41:7f:ee: 39:7b:60:04:c0:29:f3:c6:52:6b:62:40:bb:50:8a: 33:b9:b8:4f:08:9b:91:28:c4:6c:91:f9:58:8e:68: 3d:6d:89:95:d2:ec:b0:d3:39:66:c5:9a:da:c2:a9: e6:a2:e1:d8:da:bf:cb:c9:64:85:20:61:2e:b6:a0: d0:06:af:d8:02:ed:c2:8b:3f:0d:b3:7f:eb:ff:ba: 7e:e0:af:20:2a:47:f8:a7:fd:f0:ae:e8:a4:64:c4: 9d:75:8f:4d:06:b9:3b:14:c9:7a:ce:dd:aa:82:8b: 58:24:99:2f:c8:d6:9d:71:20:11:fd:22:d9:fb:77: 03:b3:10:60:0f:ee:52:7b:91:05:45:04:c3:87:92: 0c:c3:e3:17:d8:22:73:5b:88:dc:6b:6e:5c:70:69: b8:44:93:01:0f:6a:51:e0:13:e6:6b:7d:a9:60:f1: a4:cc:dc:d6:65:a9:74:34:55:76:37:97:9b:f0:b3: f1:27:da:f4:2f:18:db:45:a7:b2:29:1a:23:69:14: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B8:9F:FF:AB:22:8F:BC:22:A9:AC:27:1C:48:7B:8A:7F:74:2B:92 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3d:9f:5a:a9:5f:24:04:ba:a2:b8:83:7e:51:dd:5e:4a:b2: 78:16:0f:8b:9c:ac:17:43:e5:d0:3e:b2:46:56:f0:fc:ca:06: d4:8e:f0:8a:bf:3f:74:24:0a:c8:dd:27:b2:c1:ea:2a:b0:b6: 95:cb:e8:d4:95:e9:62:35:40:26:f6:b9:37:59:42:ff:9b:b7: dc:72:73:e5:2b:c9:e0:a5:f9:34:1a:71:24:1b:89:bb:8a:16: 6a:87:f0:31:ea:fc:af:43:1e:82:49:4c:97:65:08:97:7b:f0: 24:0c:6e:4e:c2:1d:48:2b:45:6e:c8:4a:4c:40:2c:af:4a:77: 15:07:89:6e:17:73:8b:9d:ac:ac:f7:98:a9:48:7d:78:94:44: 74:9a:76:3c:62:71:04:74:39:e6:b5:60:8c:18:b6:6d:f3:9b: 08:82:11:6c:69:82:b3:94:45:be:62:fb:ff:82:ce:be:a1:42: 36:bc:2e:6e:a9:62:23:35:73:73:53:4d:dc:59:ba:d6:69:5f: 76:83:6a:3f:36:8c:c6:79:7f:f1:c4:0a:f6:6d:36:a6:99:7d: c8:f1:79:cb:d3:e7:4b:6a:f5:1f:fa:1e:8a:07:fd:ba:49:38: 73:3c:eb:2f:1e:95:f2:6a:99:a7:80:a6:1b:28:e7:a5:7c:97: 42:2c:c5:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjYwODE4MTUxMDIyWhcNMjYwODI1MTUxMDIyWjAYMRYwFAYD VQQDEw02YTg0NzVkZS1jZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsP+OHSnVvK2uONtGjXr4nUaAxt5WG80TT1XG+wsQ540WB4Sx7RDEK5qNDGvn jbe1qgsl2iy4oZdBf+45e2AEwCnzxlJrYkC7UIozubhPCJuRKMRskflYjmg9bYmV 0uyw0zlmxZrawqnmouHY2r/LyWSFIGEutqDQBq/YAu3Ciz8Ns3/r/7p+4K8gKkf4 p/3wruikZMSddY9NBrk7FMl6zt2qgotYJJkvyNadcSAR/SLZ+3cDsxBgD+5Se5EF RQTDh5IMw+MX2CJzW4jca25ccGm4RJMBD2pR4BPma32pYPGkzNzWZal0NFV2N5eb 8LPxJ9r0LxjbRaeyKRojaRSVFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGe4n/+r Io+8IqmsJxxIe4p/dCuSMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArT2fWqlfJAS6oriDflHdXkqyeBYPi5ysF0Pl0D6yRlbw/MoG1I7wir8/dCQK yN0nssHqKrC2lcvo1JXpYjVAJva5N1lC/5u33HJz5SvJ4KX5NBpxJBuJu4oWaofw Mer8r0MegklMl2UIl3vwJAxuTsIdSCtFbshKTEAsr0p3FQeJbhdzi52srPeYqUh9 eJREdJp2PGJxBHQ55rVgjBi2bfObCIIRbGmCs5RFvmL7/4LOvqFCNrwubqliIzVz c1NN3Fm61mlfdoNqPzaMxnl/8cQK9m02ppl9yPF5y9PnS2r1H/oeigf9ukk4czzr Lx6V8mqZp4CmGyjnpXyXQizFIw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:00 2026 by rpki-client