$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json) Hash identifier: 3yYEt4zFmcjhIQyGDhYHuCfQlVFsFKxpRvpiwWw+vPA= Subject key identifier: 49:47:52:D3:FB:06:79:67:4B:4F:AC:23:72:26:83:5F:24:3F:81:70 Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft Manifest number: 01AD Signing time: Wed 19 Aug 2026 04:42:13 +0000 Manifest this update: Wed 19 Aug 2026 04:42:12 +0000 Manifest next update: Wed 26 Aug 2026 04:42:12 +0000 Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: wEUZzYOXTa51hV30a036hWoZH1O5t6Uqd70ZA9PIqfs=) 2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: wvSHxxBQmLwE16AVo39FOmMXKWaWbJvTWAsomwhTSy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Validity Not Before: Aug 19 04:42:12 2026 GMT Not After : Aug 26 04:42:12 2026 GMT Subject: CN=6a853425-7b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:f0:72:69:cf:e2:ec:ad:46:d8:53:a9:11: 8a:b0:31:cd:13:5f:78:c9:33:f5:6a:46:5b:24:b2: fd:18:38:ef:ed:de:84:85:04:d6:47:95:c0:12:ed: 8f:a4:d9:19:6b:fe:66:9e:5b:db:fb:83:2b:a7:df: 81:bd:5d:1c:7f:cf:2a:57:a4:7b:72:2d:49:58:c6: a7:3e:58:79:8a:cd:70:c1:eb:8c:f3:8a:f7:0f:29: 86:0e:20:57:b1:ee:a9:36:04:06:a0:2a:4f:23:bb: aa:4c:47:53:f1:41:e7:da:a6:e6:52:69:c1:92:c0: 52:1e:09:94:a6:1c:45:6f:80:17:5a:56:cf:f8:9a: e3:d5:d7:f6:fd:b5:f0:a1:e4:5a:a9:08:4a:57:c2: a5:8b:2a:f8:69:ae:0e:05:0b:6f:fc:78:39:22:77: b5:71:5c:60:b9:ef:13:14:ad:1e:6e:9c:c6:89:65: 39:7e:43:8a:d6:48:df:46:5a:fe:ed:b7:50:4d:ac: cf:55:37:5d:02:18:64:e6:db:03:0c:10:74:f0:16: ee:00:53:7e:5f:c5:4c:cf:8c:03:21:bf:83:f1:09: c0:25:b4:89:e6:d4:af:49:11:ae:f7:2f:b5:77:f7: 03:26:16:d1:c6:41:b0:e8:d3:1a:de:30:49:6c:f8: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:47:52:D3:FB:06:79:67:4B:4F:AC:23:72:26:83:5F:24:3F:81:70 X509v3 Authority Key Identifier: keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bc:cb:b8:8f:35:fe:62:71:0b:fb:d6:b2:a6:cf:40:bc:e5: cd:08:99:5a:fb:d2:7b:0c:75:1c:0e:1f:14:c3:34:8e:cc:1a: 0c:2f:99:4e:a1:04:4f:d9:44:51:7f:31:42:a7:25:bf:04:f3: cd:c2:2b:1e:74:22:a5:bf:b3:22:d1:bd:5c:b1:dd:3a:a4:24: 9c:ea:6a:9f:9f:a6:31:70:a7:71:83:d8:27:22:c8:12:2e:14: 54:49:e1:aa:5d:ab:0f:19:a5:c4:0d:e0:88:98:18:68:76:1b: 4b:37:00:fb:b0:01:06:e8:02:57:d8:2b:cd:a3:5d:b3:37:bc: 7a:ca:d1:00:b0:67:86:3f:98:6a:22:7f:82:93:0f:f7:3e:c3: 0c:c6:55:db:ec:f9:eb:80:84:d7:03:2b:6b:1b:57:d5:63:75: 44:ac:a9:07:5a:77:cd:59:b6:64:a1:87:e1:37:0b:b3:79:ab: 26:56:68:4e:72:41:09:2e:7f:4d:2a:64:ab:29:e0:9a:c0:8c: 74:e6:65:e8:fe:d8:28:24:f0:e8:b2:af:90:c0:2b:e4:aa:f2: 23:75:d0:cd:f0:fb:a6:83:4a:89:4d:1a:cb:95:1d:ff:2e:10: 8d:46:ad:fd:ba:e6:19:ac:ee:97:d3:e4:40:9f:c2:be:05:0b: 57:d5:dd:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCNDcxMTAvBgNVBAUTKDVERjU2NkQ3NjIzNjdDMjhDN0YzRjEyNTYxQjQ3MTZC OENBMUI5NjYwHhcNMjYwODE5MDQ0MjEyWhcNMjYwODI2MDQ0MjEyWjAYMRYwFAYD VQQDEw02YTg1MzQyNS03YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsALwcmnP4uytRthTqRGKsDHNE194yTP1akZbJLL9GDjv7d6EhQTWR5XAEu2P pNkZa/5mnlvb+4Mrp9+BvV0cf88qV6R7ci1JWManPlh5is1wweuM84r3DymGDiBX se6pNgQGoCpPI7uqTEdT8UHn2qbmUmnBksBSHgmUphxFb4AXWlbP+Jrj1df2/bXw oeRaqQhKV8Kliyr4aa4OBQtv/Hg5Ine1cVxgue8TFK0ebpzGiWU5fkOK1kjfRlr+ 7bdQTazPVTddAhhk5tsDDBB08BbuAFN+X8VMz4wDIb+D8QnAJbSJ5tSvSRGu9y+1 d/cDJhbRxkGw6NMa3jBJbPilFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElHUtP7 BnlnS0+sI3Img18kP4FwMB8GA1UdIwQYMBaAFF31ZtdiNnwox/PxJWG0cWuMoblm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0I0Ny84NzFCOTI5NDBG QTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZDakg4X0VsWWJSeGE0eWh1 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmVm0xMkkyZkNqSDhfRWxZYlJ4YTR5aHVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0I0Ny84NzFCOTI5NDBGQTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZD akg4X0VsWWJSeGE0eWh1V1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALrzLuI81/mJxC/vWsqbPQLzlzQiZWvvSewx1HA4fFMM0jswaDC+ZTqEET9lE UX8xQqclvwTzzcIrHnQipb+zItG9XLHdOqQknOpqn5+mMXCncYPYJyLIEi4UVEnh ql2rDxmlxA3giJgYaHYbSzcA+7ABBugCV9grzaNdsze8esrRALBnhj+YaiJ/gpMP 9z7DDMZV2+z564CE1wMraxtX1WN1RKypB1p3zVm2ZKGH4TcLs3mrJlZoTnJBCS5/ TSpkqyngmsCMdOZl6P7YKCTw6LKvkMAr5KryI3XQzfD7poNKiU0ay5Ud/y4QjUat /brmGazul9PkQJ/CvgULV9XdHw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:43 2026 by rpki-client