$ rpki-client -vvf rpki.apnic.net/member_repository/A915C38F/301BCE988D6311F18EF7CFC66C11F970/xo4hkWXI9SELF-KeFLDcBx0rQZ0.mft File: xo4hkWXI9SELF-KeFLDcBx0rQZ0.mft (raw, json) Hash identifier: bP28hdckDhue9xmiAP62TgfVI70jpKAoCs4ZYvEMD9U= Subject key identifier: C2:7D:16:01:3F:13:82:40:9B:BF:F0:6D:C7:DA:87:FE:18:EB:0B:62 Authority key identifier: C6:8E:21:91:65:C8:F5:21:0B:17:E2:9E:14:B0:DC:07:1D:2B:41:9D Certificate issuer: /CN=A915C38F/serialNumber=C68E219165C8F5210B17E29E14B0DC071D2B419D Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xo4hkWXI9SELF-KeFLDcBx0rQZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C38F/301BCE988D6311F18EF7CFC66C11F970/xo4hkWXI9SELF-KeFLDcBx0rQZ0.mft Manifest number: 0B Signing time: Wed 19 Aug 2026 09:53:20 +0000 Manifest this update: Wed 19 Aug 2026 09:53:19 +0000 Manifest next update: Wed 26 Aug 2026 09:53:19 +0000 Files and hashes: 1: xo4hkWXI9SELF-KeFLDcBx0rQZ0.crl (hash: o/5gZd5aQLc7/CId+1W8/zzw6ujIyKzYx58DoP1fSG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C38F/301BCE988D6311F18EF7CFC66C11F970/xo4hkWXI9SELF-KeFLDcBx0rQZ0.crl rsync://rpki.apnic.net/member_repository/A915C38F/301BCE988D6311F18EF7CFC66C11F970/xo4hkWXI9SELF-KeFLDcBx0rQZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xo4hkWXI9SELF-KeFLDcBx0rQZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C38F, serialNumber=C68E219165C8F5210B17E29E14B0DC071D2B419D Validity Not Before: Aug 19 09:53:19 2026 GMT Not After : Aug 26 09:53:19 2026 GMT Subject: CN=6a857d0f-5846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5b:bb:8a:2d:73:05:2b:82:46:18:17:0a:2d: 59:13:b6:6a:ba:15:e4:d0:6f:73:99:dc:0a:f1:11: f0:44:fb:58:8d:92:21:ab:7f:2d:39:2c:1d:42:78: 7d:c1:76:70:f5:d0:fc:41:b0:16:1b:fb:57:97:d3: d6:51:05:43:e1:51:4b:80:0a:42:e3:17:4e:e1:61: 17:a7:aa:36:86:d0:d8:a9:02:8a:77:fa:c0:1c:f1: 32:61:5e:ca:f5:f4:3b:c8:da:d1:16:e5:85:c5:8e: c1:a7:71:b1:c0:ce:01:4c:6a:19:a0:63:28:8b:df: 38:8c:18:32:c8:f0:f3:76:5b:02:88:8d:8a:80:db: 8d:c2:c8:e7:71:44:c1:29:f6:55:36:04:f7:42:17: 31:38:90:25:6c:b9:72:4b:e1:00:1f:00:5a:5b:2e: e1:bb:4c:aa:9b:ba:a0:c3:d0:9d:dd:eb:b7:97:36: 6e:cd:0d:6a:3c:a6:3a:80:9c:a9:43:47:8d:d8:75: 13:05:06:83:45:60:8f:f2:3a:3b:02:1f:ab:1f:a3: 53:be:4e:73:3d:52:de:9a:01:23:d8:d0:80:63:eb: 33:30:06:1b:f3:c2:23:49:b5:07:81:93:69:fb:8f: b1:b0:c3:83:32:e1:20:0a:ba:a2:40:20:29:5b:4d: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7D:16:01:3F:13:82:40:9B:BF:F0:6D:C7:DA:87:FE:18:EB:0B:62 X509v3 Authority Key Identifier: keyid:C6:8E:21:91:65:C8:F5:21:0B:17:E2:9E:14:B0:DC:07:1D:2B:41:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C38F/301BCE988D6311F18EF7CFC66C11F970/xo4hkWXI9SELF-KeFLDcBx0rQZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xo4hkWXI9SELF-KeFLDcBx0rQZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C38F/301BCE988D6311F18EF7CFC66C11F970/xo4hkWXI9SELF-KeFLDcBx0rQZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b1:e4:7a:2a:b5:89:67:17:b4:65:53:2c:ad:40:6b:39:18: fd:97:30:b4:db:ba:2c:4f:6e:27:0b:52:4b:4d:15:af:4d:9d: 39:4c:d4:90:ab:a6:f6:82:1e:e4:e2:f3:c5:6a:36:c0:6d:e5: 72:fb:71:4d:9e:47:e7:98:11:72:00:03:b8:a5:79:81:89:67: e4:7c:0c:69:1c:9a:54:cf:fb:cc:03:9b:dd:d7:fb:b4:53:d1: 58:c6:3b:f8:38:71:67:a9:21:67:e6:dc:9b:f4:80:f6:98:ac: 66:a3:6f:d9:37:17:11:eb:0b:71:73:09:c9:39:74:a5:2c:95: d7:44:b6:1e:e1:58:13:db:b6:a8:ea:65:a5:b7:ae:34:b5:ea: 95:04:3c:90:e2:a0:40:45:d6:99:68:44:ce:8b:6a:95:68:a0: 8c:71:4a:5b:5b:12:4f:b2:d3:f5:8b:dc:55:58:3e:e0:ea:2f: f1:36:2d:5e:bd:2b:b5:74:96:3f:03:3b:f3:0a:3b:62:3d:89: d7:6b:44:ed:9e:6c:f5:6c:4e:f1:ea:54:16:d0:94:10:3a:30: 40:5f:9a:63:e0:e5:3d:fc:76:c8:ae:0e:b8:1b:ad:23:fa:73: 0b:34:0f:75:af:3f:c9:11:93:a3:6c:f2:c8:c8:96:61:fb:19: f1:ec:b1:fe -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzM4RjExMC8GA1UEBRMoQzY4RTIxOTE2NUM4RjUyMTBCMTdFMjlFMTRCMERDMDcx RDJCNDE5RDAeFw0yNjA4MTkwOTUzMTlaFw0yNjA4MjYwOTUzMTlaMBgxFjAUBgNV BAMTDTZhODU3ZDBmLTU4NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCDW7uKLXMFK4JGGBcKLVkTtmq6FeTQb3OZ3ArxEfBE+1iNkiGrfy05LB1CeH3B dnD10PxBsBYb+1eX09ZRBUPhUUuACkLjF07hYRenqjaG0NipAop3+sAc8TJhXsr1 9DvI2tEW5YXFjsGncbHAzgFMahmgYyiL3ziMGDLI8PN2WwKIjYqA243CyOdxRMEp 9lU2BPdCFzE4kCVsuXJL4QAfAFpbLuG7TKqbuqDD0J3d67eXNm7NDWo8pjqAnKlD R43YdRMFBoNFYI/yOjsCH6sfo1O+TnM9Ut6aASPY0IBj6zMwBhvzwiNJtQeBk2n7 j7Gww4My4SAKuqJAIClbTQ0TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwn0WAT8T gkCbv/Btx9qH/hjrC2IwHwYDVR0jBBgwFoAUxo4hkWXI9SELF+KeFLDcBx0rQZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDMzhGLzMwMUJDRTk4OEQ2 MzExRjE4RUY3Q0ZDNjZDMTFGOTcwL3hvNGhrV1hJOVNFTEYtS2VGTERjQngwclFa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveG80aGtXWEk5U0VMRi1LZUZMRGNCeDByUVowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD MzhGLzMwMUJDRTk4OEQ2MzExRjE4RUY3Q0ZDNjZDMTFGOTcwL3hvNGhrV1hJOVNF TEYtS2VGTERjQngwclFaMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaseR6KrWJZxe0ZVMsrUBrORj9lzC027osT24nC1JLTRWvTZ05TNSQq6b2gh7k 4vPFajbAbeVy+3FNnkfnmBFyAAO4pXmBiWfkfAxpHJpUz/vMA5vd1/u0U9FYxjv4 OHFnqSFn5tyb9ID2mKxmo2/ZNxcR6wtxcwnJOXSlLJXXRLYe4VgT27ao6mWlt640 teqVBDyQ4qBARdaZaETOi2qVaKCMcUpbWxJPstP1i9xVWD7g6i/xNi1evSu1dJY/ AzvzCjtiPYnXa0Ttnmz1bE7x6lQW0JQQOjBAX5pj4OU9/HbIrg64G60j+nMLNA91 rz/JEZOjbPLIyJZh+xnx7LH+ -----END CERTIFICATE-----Generated at Wed Aug 19 12:44:42 2026 by rpki-client