$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: /MpiWtYdhmDXch4D4dMW7W2ArMtIT6Rwqhh2mtLT/yA= Subject key identifier: 60:BC:1F:7F:DE:F2:79:E4:A9:FA:F9:82:05:A3:CF:AB:DD:A4:04:22 Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 118B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 116A Signing time: Tue 18 Aug 2026 17:24:30 +0000 Manifest this update: Tue 18 Aug 2026 17:24:29 +0000 Manifest next update: Tue 25 Aug 2026 17:24:29 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: uDBHbgig2zQtrocQFfOMPS4yabdMz1UON6ryJdUjZpI=) 2: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (hash: ssMQ43fjcNDdMMcxP4Zyw/zUAL+E/8FkY3VJGMomUwo=) 3: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: dYx5rg+ikh6rVRuWFPmqQgmz1ejCnGZL23u6GCNg5Bw=) 4: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: iceccqvc3kg29socz/RRWvyJpHDglBn90E6v9vB2qCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4491 (0x118b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: Aug 18 17:24:29 2026 GMT Not After : Aug 25 17:24:29 2026 GMT Subject: CN=6a84954e-7b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:5c:9d:5e:5c:0a:08:da:c7:21:c1:41:ff: 1b:f9:56:c4:02:32:92:44:08:c7:da:77:00:c3:50: 10:81:b5:0d:a4:05:d1:9f:16:86:32:53:0c:fd:db: 9c:36:27:df:69:58:d8:95:9f:68:f0:62:58:e6:24: f3:52:cb:a8:08:6b:fc:57:34:90:1d:51:cf:f4:22: 0f:cf:7d:7c:b6:d1:00:91:17:04:af:97:14:70:d2: 08:55:5a:0e:7e:39:e4:b4:c9:c4:74:9c:0c:1e:48: a3:3b:a5:f0:9d:e5:5f:24:77:2a:dc:fc:11:7e:47: e1:6e:0b:50:24:1f:cd:f5:38:7f:ef:cd:03:71:4e: de:0c:69:10:5f:e1:f9:a4:2a:39:cb:7a:16:cd:ef: b4:a7:dd:7f:3d:5f:37:ea:5e:d7:0b:b7:9f:0d:00: 69:74:88:90:4f:72:13:5e:48:63:69:db:ea:d5:a3: 3b:12:c1:e2:d4:5f:87:ac:06:9a:0d:6c:89:d0:9f: 8e:cc:10:bd:0d:a6:3a:69:b0:ef:db:45:84:9f:06: 16:06:db:5b:a0:4e:4b:72:ad:a9:42:7e:eb:cf:ba: 30:b9:2d:00:a1:15:b5:a5:13:46:d0:91:22:16:c6: 46:b7:03:7a:e4:10:a9:5f:ef:d1:67:50:48:23:b9: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BC:1F:7F:DE:F2:79:E4:A9:FA:F9:82:05:A3:CF:AB:DD:A4:04:22 X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a5:c9:39:ee:7b:bb:63:f4:4d:ea:b8:3a:e6:64:83:45:f4: 40:4c:db:ef:2c:d0:e8:bc:6e:f7:43:c9:48:16:a7:21:47:2e: a7:4f:04:91:68:83:80:82:cc:51:db:56:dd:8f:6d:16:44:c8: 3a:ea:17:3b:1f:5e:29:0b:86:3c:e5:39:30:19:78:be:c1:3c: 31:91:26:85:1e:2e:18:4f:46:b4:92:a5:29:bc:d3:7b:1c:ff: b0:65:fa:79:ca:cf:4b:06:da:23:eb:e7:4a:d4:7b:88:c1:38: 24:50:b0:9f:ee:cb:cc:a2:6f:0f:61:0b:cf:cc:3f:10:d6:8f: aa:e9:ff:56:da:11:db:93:ca:43:83:a3:0a:3e:04:0c:a2:0d: e1:b8:bf:11:7a:6d:26:eb:ad:af:62:13:f7:a9:3c:cc:14:d1: 21:25:91:08:0c:88:5d:4e:fa:15:e3:7f:df:7c:04:6f:7d:55: 96:cb:4c:53:b7:65:89:12:d3:51:41:1e:b5:4a:8b:18:ff:49: 8f:72:fb:ac:d0:05:ee:65:5d:f2:d9:d9:51:5a:e6:b7:c2:51: 51:f4:7f:ef:75:4e:e7:33:58:87:6b:03:ec:26:6e:c3:a8:f2: a6:2a:49:62:bc:f3:6a:33:f3:e1:d7:6e:f4:28:89:8d:94:fb: 57:19:25:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjYwODE4MTcyNDI5WhcNMjYwODI1MTcyNDI5WjAYMRYwFAYD VQQDEw02YTg0OTU0ZS03Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc9cnV5cCgjaxyHBQf8b+VbEAjKSRAjH2ncAw1AQgbUNpAXRnxaGMlMM/duc NiffaVjYlZ9o8GJY5iTzUsuoCGv8VzSQHVHP9CIPz318ttEAkRcEr5cUcNIIVVoO fjnktMnEdJwMHkijO6XwneVfJHcq3PwRfkfhbgtQJB/N9Th/780DcU7eDGkQX+H5 pCo5y3oWze+0p91/PV836l7XC7efDQBpdIiQT3ITXkhjadvq1aM7EsHi1F+HrAaa DWyJ0J+OzBC9DaY6abDv20WEnwYWBttboE5Lcq2pQn7rz7owuS0AoRW1pRNG0JEi FsZGtwN65BCpX+/RZ1BII7nIZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGC8H3/e 8nnkqfr5ggWjz6vdpAQiMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmKXJOe57u2P0Teq4OuZkg0X0QEzb7yzQ6Lxu90PJSBanIUcup08EkWiDgILM UdtW3Y9tFkTIOuoXOx9eKQuGPOU5MBl4vsE8MZEmhR4uGE9GtJKlKbzTexz/sGX6 ecrPSwbaI+vnStR7iME4JFCwn+7LzKJvD2ELz8w/ENaPqun/VtoR25PKQ4OjCj4E DKIN4bi/EXptJuutr2IT96k8zBTRISWRCAyIXU76FeN/33wEb31VlstMU7dliRLT UUEetUqLGP9Jj3L7rNAF7mVd8tnZUVrmt8JRUfR/73VO5zNYh2sD7CZuw6jypipJ YrzzajPz4ddu9CiJjZT7Vxklig== -----END CERTIFICATE-----Generated at Wed Aug 19 12:48:21 2026 by rpki-client