$ rpki-client -vvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft (raw, json) Hash identifier: FbJIyntZrMjsfrBfhVGHM8H8TZyOIDKPDeV1LJKA/lg= Subject key identifier: D2:5B:6A:48:56:93:A0:33:1E:AA:74:01:E3:D2:52:ED:22:25:D1:BA Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft Manifest number: 0491 Signing time: Wed 19 Aug 2026 00:21:02 +0000 Manifest this update: Wed 19 Aug 2026 00:21:01 +0000 Manifest next update: Wed 26 Aug 2026 00:21:01 +0000 Files and hashes: 1: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl (hash: CU/neLeZe1japuvch36LH7xW30f4lIg6ViskdIZRWgc=) 2: 5ADF4C92956811EC9028F155C4F9AE02.roa (hash: oP7ajvSBOi8rYgtfwAx6v0p5MUB3I81Nl5lQOdGX7pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Validity Not Before: Aug 19 00:21:01 2026 GMT Not After : Aug 26 00:21:01 2026 GMT Subject: CN=6a84f6ee-aa89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e0:37:70:d7:be:c0:a6:fc:0a:16:08:42:34: 65:24:7d:8d:42:bc:b2:eb:7e:e5:a9:20:25:b3:7e: 82:d2:97:93:8d:5e:d0:56:3b:fb:ed:de:32:14:4b: 85:30:6f:26:e3:b2:30:e8:fc:28:50:19:fb:48:4a: cc:02:b7:d8:e3:32:6c:65:22:b2:c2:a0:91:49:6f: 16:4f:95:33:33:eb:62:9c:cc:79:67:44:bf:ca:94: 24:da:31:1c:fa:37:72:10:19:fd:79:89:72:49:49: 3b:29:7e:b0:12:aa:7f:ef:8b:67:e6:23:12:45:80: 1f:e5:81:f8:89:21:f3:04:10:03:1d:81:40:87:ce: b1:74:da:66:7c:ce:79:69:e5:fa:f3:a8:10:6e:ee: b1:f5:9a:7a:67:f7:cb:b9:ce:98:e2:4e:7c:e4:2d: 6c:2a:56:e3:82:7d:b1:c1:62:60:fc:1a:e6:3b:a3: f0:a4:af:a1:77:0e:d1:fd:9e:04:10:77:cb:cb:6a: 8f:b9:68:4d:61:df:fe:96:71:a2:a9:ab:5f:c3:25: ea:52:17:2a:f5:af:5c:84:ef:04:49:20:18:c2:8b: 11:c1:cf:ef:30:dd:0d:37:6a:f0:24:f8:72:d4:a8: b1:fd:cb:96:f7:4d:59:41:83:18:46:54:f9:b1:7c: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5B:6A:48:56:93:A0:33:1E:AA:74:01:E3:D2:52:ED:22:25:D1:BA X509v3 Authority Key Identifier: keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:96:2e:68:c5:c9:20:c9:97:e1:a9:55:70:2a:da:c7:1b:10: 6f:5e:02:b9:2e:6c:d1:8c:a0:1a:74:e1:7e:b8:df:04:40:69: f2:7d:ca:c6:9e:f9:f6:f2:48:9d:0c:8b:37:42:0e:b6:fc:3f: a9:4e:f3:fd:43:b4:5d:7d:78:87:82:89:cd:bd:d1:d9:2d:f4: 2e:c5:75:6c:20:3b:30:33:79:be:e1:61:5d:15:2c:f1:26:bc: 4c:03:37:52:fa:4f:48:df:b7:49:86:ba:7c:6c:9f:d8:7b:63: 22:0b:06:98:a3:da:9c:3c:0f:74:12:ca:b5:23:26:8d:15:f1: e4:a0:5e:6e:8c:67:3a:35:7b:43:6e:84:07:e0:9a:4e:04:2b: 82:9c:7d:5b:38:2d:42:7a:0c:99:de:aa:a1:1c:05:f9:0c:a6: 8c:d2:30:ae:33:ac:a2:cd:16:dc:e7:47:04:fd:38:13:3e:0b: 0c:74:79:40:8f:eb:9d:f8:49:92:e0:f5:01:70:cc:0d:7b:e0: 54:10:5f:7b:62:56:55:2a:bb:81:23:cd:04:7e:47:2a:27:6b: ba:3f:94:8f:b4:40:2e:14:99:70:64:3a:12:db:49:57:1a:7d: 13:21:e1:50:df:85:ce:02:ad:1f:9b:ea:39:33:b9:f6:e2:78: 66:d3:f4:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzRkUxMTAvBgNVBAUTKEM3MEJGM0RGRjQ1MDIzRDQxQUY0QzRERjVENzY1MDQw QjkyNDFBQzcwHhcNMjYwODE5MDAyMTAxWhcNMjYwODI2MDAyMTAxWjAYMRYwFAYD VQQDEw02YTg0ZjZlZS1hYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjeA3cNe+wKb8ChYIQjRlJH2NQryy637lqSAls36C0peTjV7QVjv77d4yFEuF MG8m47Iw6PwoUBn7SErMArfY4zJsZSKywqCRSW8WT5UzM+tinMx5Z0S/ypQk2jEc +jdyEBn9eYlySUk7KX6wEqp/74tn5iMSRYAf5YH4iSHzBBADHYFAh86xdNpmfM55 aeX686gQbu6x9Zp6Z/fLuc6Y4k585C1sKlbjgn2xwWJg/BrmO6PwpK+hdw7R/Z4E EHfLy2qPuWhNYd/+lnGiqatfwyXqUhcq9a9chO8ESSAYwosRwc/vMN0NN2rwJPhy 1Kix/cuW901ZQYMYRlT5sXw+fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJbakhW k6AzHqp0AePSUu0iJdG6MB8GA1UdIwQYMBaAFMcL89/0UCPUGvTE3112UEC5JBrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDNGRS85ODE0ODA2Mjk1 NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5UWE5TVRmWFhaUVFMa2tH c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3dnozX1JRSTlRYTlNVGZYWFpRUUxra0dzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDNGRS85ODE0ODA2Mjk1NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5 UWE5TVRmWFhaUVFMa2tHc2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZJYuaMXJIMmX4alVcCraxxsQb14CuS5s0YygGnThfrjfBEBp8n3Kxp759vJI nQyLN0IOtvw/qU7z/UO0XX14h4KJzb3R2S30LsV1bCA7MDN5vuFhXRUs8Sa8TAM3 UvpPSN+3SYa6fGyf2HtjIgsGmKPanDwPdBLKtSMmjRXx5KBeboxnOjV7Q26EB+Ca TgQrgpx9WzgtQnoMmd6qoRwF+QymjNIwrjOsos0W3OdHBP04Ez4LDHR5QI/rnfhJ kuD1AXDMDXvgVBBfe2JWVSq7gSPNBH5HKidruj+Uj7RALhSZcGQ6EttJVxp9EyHh UN+FzgKtH5vqOTO59uJ4ZtP0IA== -----END CERTIFICATE-----Generated at Wed Aug 19 16:48:21 2026 by rpki-client