$ rpki-client -vvvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: OMPvL0D/pMkqVF02RhreJZMaVwCag14Ukc+dGsDugkA= Subject key identifier: 15:22:03:8F:FB:CB:9F:42:FE:E5:56:0B:3E:AF:EE:BC:FF:4E:75:CE Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 07A0 Signing time: Sat 22 Aug 2026 21:20:43 +0000 Manifest this update: Sat 22 Aug 2026 21:20:43 +0000 Manifest next update: Sat 29 Aug 2026 21:20:43 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: dzGQa1+Lh4oqpimp5ePS1lPIP/8wHjIzzae5syRuSEg=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: /W4EDzCJO28OAsl3pdvhn80k2j9lIQ5KcY8vtvKyWxM=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Aug 22 21:20:43 2026 GMT Not After : Aug 29 21:20:43 2026 GMT Subject: CN=6a8a12ab-e82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:e2:6f:60:f2:ff:56:a0:1c:9b:12:a4:1d: 63:31:0e:b2:14:d6:1b:28:9f:6b:ad:5a:0c:a7:4f: dc:8f:5b:b1:0d:8e:d6:29:bf:62:7c:7b:23:16:c1: 75:c6:e0:c8:6f:cc:9c:48:6f:b8:5c:96:2e:48:8a: 40:9b:2b:46:15:a4:cd:2f:45:fc:be:12:24:33:ae: 02:c7:94:d6:2f:0d:0f:88:9b:90:d6:5b:2f:52:95: 64:b2:8a:d3:88:00:b6:72:ab:8f:42:a3:5c:18:28: b1:f2:90:87:8b:6c:9d:56:36:05:b2:56:5e:d6:9f: 34:7d:1e:83:da:cf:17:1e:81:60:ef:4f:f9:c7:fd: 23:13:b7:a9:04:03:17:31:8f:cf:de:a3:66:19:44: 54:c7:36:23:67:b4:0d:20:e2:dd:2c:ce:93:5c:30: a7:ce:bc:dc:bc:2d:7d:1b:7d:98:78:4d:e2:48:02: cb:cd:b8:20:05:f7:cd:42:15:f9:22:6a:bc:7d:53: ae:72:9f:09:8f:15:6f:ca:c9:f0:3a:a3:ac:62:83: 2e:ea:55:28:04:84:03:8e:c4:bd:b6:c4:06:7a:7f: 02:57:e9:9b:34:01:47:c8:14:df:39:a2:72:85:31: 3a:2c:99:fe:90:b9:92:81:11:bb:5c:9a:46:14:60: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:22:03:8F:FB:CB:9F:42:FE:E5:56:0B:3E:AF:EE:BC:FF:4E:75:CE X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:46:f6:7f:49:22:d0:08:ce:ce:02:ed:05:60:d2:82:43:3c: 39:00:dc:c1:1c:83:76:75:c1:4b:d5:2b:1c:0f:e8:cc:ba:f3: 3e:e7:aa:c4:5d:52:6e:3a:24:60:0b:57:98:4f:66:61:ba:2f: d3:21:5f:45:5c:d2:ab:cf:71:d3:d2:72:72:56:5e:d4:0c:f3: 83:a9:28:83:58:71:6a:db:5a:1e:f5:be:25:1a:ae:81:59:bc: 14:c8:6b:87:58:47:3f:20:e2:6a:ed:2c:8e:6e:26:c5:82:60: ab:38:c1:80:1b:b2:35:80:17:5d:8b:10:fb:ab:c7:0a:a0:ab: 11:38:56:89:e1:d6:9f:c3:90:59:92:83:40:a2:8d:3f:52:24: 80:8a:dc:69:6f:ad:78:aa:ec:4c:de:53:cb:91:49:01:bd:51: 94:ec:0b:8a:52:76:e1:4b:e1:9d:8d:c6:23:d1:24:76:e6:e8: 52:c4:c6:37:0f:a7:26:8f:46:74:19:64:fd:9f:81:a4:96:dd: b3:29:a9:c5:7b:d9:29:ad:c0:fd:36:e7:36:71:24:36:72:ec: b8:d5:8f:3a:b9:dd:81:9c:75:67:13:5f:b3:6c:12:5a:ce:77: 55:2e:8a:29:d3:75:d0:69:95:25:7b:d0:d5:39:ef:02:11:b8: 9a:80:0d:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjYwODIyMjEyMDQzWhcNMjYwODI5MjEyMDQzWjAYMRYwFAYD VQQDEw02YThhMTJhYi1lODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5Tib2Dy/1agHJsSpB1jMQ6yFNYbKJ9rrVoMp0/cj1uxDY7WKb9ifHsjFsF1 xuDIb8ycSG+4XJYuSIpAmytGFaTNL0X8vhIkM64Cx5TWLw0PiJuQ1lsvUpVksorT iAC2cquPQqNcGCix8pCHi2ydVjYFslZe1p80fR6D2s8XHoFg70/5x/0jE7epBAMX MY/P3qNmGURUxzYjZ7QNIOLdLM6TXDCnzrzcvC19G32YeE3iSALLzbggBffNQhX5 Imq8fVOucp8JjxVvysnwOqOsYoMu6lUoBIQDjsS9tsQGen8CV+mbNAFHyBTfOaJy hTE6LJn+kLmSgRG7XJpGFGCyxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUiA4/7 y59C/uVWCz6v7rz/TnXOMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZkb2f0ki0AjOzgLtBWDSgkM8OQDcwRyDdnXBS9UrHA/ozLrzPueqxF1Sbjok YAtXmE9mYbov0yFfRVzSq89x09JyclZe1Azzg6kog1hxattaHvW+JRqugVm8FMhr h1hHPyDiau0sjm4mxYJgqzjBgBuyNYAXXYsQ+6vHCqCrEThWieHWn8OQWZKDQKKN P1IkgIrcaW+teKrsTN5Ty5FJAb1RlOwLilJ24UvhnY3GI9EkduboUsTGNw+nJo9G dBlk/Z+BpJbdsympxXvZKa3A/TbnNnEkNnLsuNWPOrndgZx1ZxNfs2wSWs53VS6K KdN10GmVJXvQ1TnvAhG4moANRQ== -----END CERTIFICATE-----Generated at Sun Aug 23 00:19:48 2026 by rpki-client