$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: TQFQAr6zdAM33XeTwnM4hFjAjdEVcKCuz2/8Z9ObjPE= Subject key identifier: 0B:A2:79:E5:FF:78:75:15:41:7E:C6:AD:40:B1:8B:83:09:A4:F1:A3 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 0473 Signing time: Wed 19 Aug 2026 00:29:30 +0000 Manifest this update: Wed 19 Aug 2026 00:29:29 +0000 Manifest next update: Wed 26 Aug 2026 00:29:29 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: YFzknwj3jVtHi4ARE8wSuhyheQg5fcbCRa3SuAMhvCY=) 2: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: C2xe2xSt+zG2ZuMpvD0jHOEIkW1+AE92r/FDO/VZFwY=) 3: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: US3zQpwIIKbs6wAdZrpkun85NZn/CcgVmY5RXTFLp6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Aug 19 00:29:29 2026 GMT Not After : Aug 26 00:29:29 2026 GMT Subject: CN=6a84f8ea-cde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:aa:76:ed:8a:e1:76:fc:ae:85:ab:9f:0d: 2b:15:b9:f4:54:98:f8:97:8c:44:d0:41:90:8c:e6: d4:c0:ef:bb:7f:fc:ea:ef:14:37:84:f8:0d:d2:ee: cf:76:0c:a7:f6:4f:c4:d3:4a:af:06:8e:17:ba:ac: a6:51:7a:f3:04:28:6b:8b:78:33:e7:7a:8d:60:4c: d7:92:32:71:ce:cb:ad:2d:62:33:8c:34:b2:d4:5c: dc:45:94:16:7e:fc:e4:d7:c4:07:d6:01:ae:02:7d: b3:85:1b:77:32:3a:c4:31:21:1e:40:0c:da:6b:60: dd:09:8f:1b:fc:b2:5c:54:17:ef:a0:b3:d7:d4:e4: 5c:ea:9b:3b:81:d3:95:55:c8:45:4a:77:42:6b:59: 0d:24:8e:4f:ac:16:2f:34:80:52:c9:d3:73:ad:ed: f1:1b:f2:20:dd:72:f2:fc:6a:ee:9d:83:1e:4b:ff: ce:f6:52:23:f3:15:64:bb:37:9f:d8:21:98:2c:6f: e6:08:a6:0d:19:f6:18:fb:18:d0:cf:8a:56:28:d3: da:a7:2d:76:e9:5b:07:57:34:67:c0:04:f4:aa:5f: c6:64:81:88:b8:c7:90:72:3a:33:9f:2d:3a:af:1c: 44:a7:b9:f4:89:52:e7:84:d2:3e:21:e9:eb:b3:42: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A2:79:E5:FF:78:75:15:41:7E:C6:AD:40:B1:8B:83:09:A4:F1:A3 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:85:bf:bd:b5:9f:5f:3e:f8:2a:9e:e3:71:21:b9:38:54:fd: 8e:b8:62:a1:a7:af:50:f2:3c:9b:f3:9f:eb:4c:4d:61:58:3f: 5d:ee:72:6f:78:b1:14:f1:bc:ce:58:64:f1:22:e3:52:72:2a: 11:92:7f:c9:0d:c6:02:8a:f2:bc:45:ce:f2:60:bc:e7:a0:1f: db:38:4c:d3:f9:76:8d:96:98:47:e8:a2:83:6f:35:79:b1:b7: 9c:6c:e3:93:bf:2d:49:0f:97:2f:f6:6e:15:21:11:6d:d0:2d: 5d:66:68:c7:d4:b1:e3:35:20:de:c5:db:1b:2b:64:89:c5:5f: 95:f6:be:b1:87:1e:6b:50:22:7e:18:bd:90:ae:fb:4d:3f:1c: f5:6d:b1:46:4f:ad:54:c3:4e:f2:14:0e:84:6c:82:df:83:8b: 95:9d:5d:dd:93:05:c2:40:cf:14:80:98:d6:5a:86:45:2c:f0: 06:17:ad:a3:e6:90:2a:11:5e:ae:41:18:7c:a5:3f:74:79:f8: 43:0e:80:de:b5:ed:9c:ec:97:98:8e:d7:e3:ae:89:a8:fc:f4: 27:aa:7d:20:4f:06:17:61:d6:09:b9:78:26:2d:80:17:06:73: 75:e2:a1:fd:54:e3:f1:6d:59:9a:07:1d:e1:64:03:63:51:f7: 30:61:78:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjYwODE5MDAyOTI5WhcNMjYwODI2MDAyOTI5WjAYMRYwFAYD VQQDEw02YTg0ZjhlYS1jZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGiqdu2K4Xb8roWrnw0rFbn0VJj4l4xE0EGQjObUwO+7f/zq7xQ3hPgN0u7P dgyn9k/E00qvBo4XuqymUXrzBChri3gz53qNYEzXkjJxzsutLWIzjDSy1FzcRZQW fvzk18QH1gGuAn2zhRt3MjrEMSEeQAzaa2DdCY8b/LJcVBfvoLPX1ORc6ps7gdOV VchFSndCa1kNJI5PrBYvNIBSydNzre3xG/Ig3XLy/GrunYMeS//O9lIj8xVkuzef 2CGYLG/mCKYNGfYY+xjQz4pWKNPapy126VsHVzRnwAT0ql/GZIGIuMeQcjozny06 rxxEp7n0iVLnhNI+Ienrs0IlrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAuieeX/ eHUVQX7GrUCxi4MJpPGjMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW4W/vbWfXz74Kp7jcSG5OFT9jrhioaevUPI8m/Of60xNYVg/Xe5yb3ixFPG8 zlhk8SLjUnIqEZJ/yQ3GAoryvEXO8mC856Af2zhM0/l2jZaYR+iig281ebG3nGzj k78tSQ+XL/ZuFSERbdAtXWZox9Sx4zUg3sXbGytkicVflfa+sYcea1Aifhi9kK77 TT8c9W2xRk+tVMNO8hQOhGyC34OLlZ1d3ZMFwkDPFICY1lqGRSzwBheto+aQKhFe rkEYfKU/dHn4Qw6A3rXtnOyXmI7X466JqPz0J6p9IE8GF2HWCbl4Ji2AFwZzdeKh /VTj8W1Zmgcd4WQDY1H3MGF4Ow== -----END CERTIFICATE-----Generated at Wed Aug 19 12:50:55 2026 by rpki-client