$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json) Hash identifier: qKVUfvNQkPUiGj1QGHjhARA9oRAGkzE4oXrDf1gP4pw= Subject key identifier: 51:03:89:62:F6:A7:34:E8:CB:1E:58:10:96:1E:BA:ED:B5:86:45:E9 Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft Manifest number: 0299 Signing time: Wed 19 Aug 2026 02:15:13 +0000 Manifest this update: Wed 19 Aug 2026 02:15:12 +0000 Manifest next update: Wed 26 Aug 2026 02:15:12 +0000 Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: PoYFbx8ClAGnnFFteXWTHp7+vZYdpg04EGf4cXtnLvQ=) 2: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: wtwpRqnqeYQSTF5tuYeTMKBYPSpu+aJ0HfsSDYw4/oQ=) 3: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: vtHqwtSvpKd0UZw+IVp/WFTlhLrYLk265RmDqE6z7KQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Validity Not Before: Aug 19 02:15:12 2026 GMT Not After : Aug 26 02:15:12 2026 GMT Subject: CN=6a8511b1-513a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:68:e1:a2:49:29:98:cb:83:f4:06:78:16: bf:9f:58:83:32:23:29:bb:de:d6:ba:62:d6:68:d0: eb:04:76:8a:0a:30:95:d4:7e:de:9c:35:0a:a2:d2: 33:67:e5:b4:e3:56:c4:6e:f7:48:af:73:4a:de:39: 8d:b3:14:7c:d2:1c:23:89:27:09:ea:4c:03:81:f3: 59:6e:47:de:8c:5c:9b:6b:04:01:4b:9d:54:28:0f: 8c:9a:f7:2a:ab:60:f7:a3:39:0a:23:06:3b:f3:9f: e9:27:97:f9:4b:bb:75:8f:9c:8b:31:c5:0a:c3:2b: bf:f1:bb:e9:12:ef:2b:7b:a7:cc:85:79:6f:98:f5: 7b:74:13:8c:c4:75:b1:1e:92:96:cf:d3:70:c7:1c: b3:f3:b5:ef:a3:0a:bc:2d:92:31:36:dc:53:e3:f6: 06:9e:da:50:c4:e2:7d:14:c7:ff:06:8c:b9:8b:38: de:d4:05:97:d3:92:7e:3a:24:6f:e3:09:1d:42:3b: fb:66:82:59:19:d1:84:af:bb:4f:fb:84:89:27:78: 5a:e9:c5:f1:29:55:f5:1e:98:78:fd:81:07:60:6d: e9:8e:ee:f3:5b:4c:36:22:9c:70:94:5b:a5:f3:3d: cb:26:db:4b:dc:9a:15:86:ef:d4:15:5d:a5:0c:05: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:03:89:62:F6:A7:34:E8:CB:1E:58:10:96:1E:BA:ED:B5:86:45:E9 X509v3 Authority Key Identifier: keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:36:b7:19:84:e1:dc:0b:ec:5a:ed:5d:79:74:c1:45:b1:02: 60:0a:45:13:cc:26:59:b0:ef:4f:3d:c3:d7:32:dd:c1:4c:9f: e1:9f:26:69:75:f1:b9:f7:e8:d4:08:80:74:19:b3:8e:c0:a6: ff:b1:8a:fd:6f:d1:02:a0:8d:c3:ff:5f:bc:5f:25:87:d9:ef: d7:e7:ff:b2:db:28:ec:3a:a9:1d:a1:93:b5:50:cc:96:85:6c: 33:c2:14:e0:00:c4:cb:5b:bb:0c:2c:fe:d7:f2:7f:d8:ff:3a: 29:22:ea:21:ad:e0:e6:91:c4:a8:22:73:b7:fa:bb:32:a5:96: 2b:cc:e6:c9:81:17:ae:54:93:3b:f0:db:85:a0:ef:7d:4b:63: 29:ae:ce:0f:69:0d:cf:08:bd:4c:4b:94:f9:52:cb:e9:4a:c5: 24:5a:8a:9a:b3:2a:f3:9d:54:5d:e1:ed:df:86:a2:3c:97:86: 3f:81:8b:7b:37:78:a0:b3:a5:6f:01:b7:3d:09:58:66:b5:69: 6c:5f:d8:88:51:9d:bc:c2:61:52:fc:3b:0e:b3:fb:d5:cd:a6: 62:3b:01:c5:74:b4:4f:7e:ec:c5:7b:09:86:63:f6:97:1e:7a: ea:50:79:50:34:84:58:de:9b:4e:d3:76:ea:ae:d1:68:a4:f9: 7e:f9:79:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx RUY3MDQwREIwHhcNMjYwODE5MDIxNTEyWhcNMjYwODI2MDIxNTEyWjAYMRYwFAYD VQQDEw02YTg1MTFiMS01MTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1Vo4aJJKZjLg/QGeBa/n1iDMiMpu97WumLWaNDrBHaKCjCV1H7enDUKotIz Z+W041bEbvdIr3NK3jmNsxR80hwjiScJ6kwDgfNZbkfejFybawQBS51UKA+Mmvcq q2D3ozkKIwY785/pJ5f5S7t1j5yLMcUKwyu/8bvpEu8re6fMhXlvmPV7dBOMxHWx HpKWz9Nwxxyz87Xvowq8LZIxNtxT4/YGntpQxOJ9FMf/Boy5izje1AWX05J+OiRv 4wkdQjv7ZoJZGdGEr7tP+4SJJ3ha6cXxKVX1Hph4/YEHYG3pju7zW0w2IpxwlFul 8z3LJttL3JoVhu/UFV2lDAUqGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEDiWL2 pzToyx5YEJYeuu21hkXpMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3 Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEDa3GYTh3AvsWu1deXTBRbECYApFE8wmWbDvTz3D1zLdwUyf4Z8maXXxuffo 1AiAdBmzjsCm/7GK/W/RAqCNw/9fvF8lh9nv1+f/stso7DqpHaGTtVDMloVsM8IU 4ADEy1u7DCz+1/J/2P86KSLqIa3g5pHEqCJzt/q7MqWWK8zmyYEXrlSTO/DbhaDv fUtjKa7OD2kNzwi9TEuU+VLL6UrFJFqKmrMq851UXeHt34aiPJeGP4GLezd4oLOl bwG3PQlYZrVpbF/YiFGdvMJhUvw7DrP71c2mYjsBxXS0T37sxXsJhmP2lx566lB5 UDSEWN6bTtN26q7RaKT5fvl5Dg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:51:14 2026 by rpki-client