$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft File: XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json) Hash identifier: kWidkHZQT4z/m/QJDscNYD5fDR4K9IHCXDG0ApPjCWU= Subject key identifier: 70:DA:F3:15:A3:4F:63:8F:DB:C5:1D:9F:E1:1B:C5:55:AE:0B:63:69 Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 Certificate issuer: /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Certificate serial: 0A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft Manifest number: 0A54 Signing time: Sun 16 Aug 2026 19:56:35 +0000 Manifest this update: Sun 16 Aug 2026 19:56:34 +0000 Manifest next update: Sun 23 Aug 2026 19:56:34 +0000 Files and hashes: 1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: tOuDC2bjW5WbtTpr1znRzjtg4ws/wx9eTLf/cUSwNLk=) 2: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: V4TtDHDwWfSTPDtmdJxLiYpQrBPMzCI9Mup9QQhSTOc=) 3: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: phoNlFrzl7WYjyRvdppnlSL/FBRV8iS5x5iyLwB+dTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Aug 2026 19:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2671 (0xa6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727 Validity Not Before: Aug 16 19:56:34 2026 GMT Not After : Aug 23 19:56:34 2026 GMT Subject: CN=6a8215f2-da1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:e5:9d:7b:b5:60:1f:3a:0c:af:00:ce:b8: a4:6e:cd:c9:1d:df:d8:67:82:ad:45:20:2e:61:b7: 0f:d1:3b:e5:e1:f3:3b:d1:8f:44:b1:ee:a6:6e:1c: 53:9a:9a:c9:27:fd:af:41:7c:88:ff:99:4a:a5:5c: 75:ac:90:6d:18:91:b5:0d:9d:28:ff:08:dc:68:5d: 3c:00:f0:85:a4:41:e2:81:08:89:41:11:59:a6:ee: f7:0b:79:f3:4c:2b:ee:ba:20:63:46:24:48:70:51: 90:b7:c5:0a:05:c7:37:6d:9e:c2:36:0b:83:94:86: a0:6d:3a:8c:96:46:11:d1:e4:ac:b2:92:db:df:c9: 20:1f:d0:06:77:c2:14:d5:2d:84:91:3f:72:73:ab: 83:2b:f4:6c:49:cb:6a:81:36:72:63:31:2a:af:be: b8:64:b2:41:25:27:d6:4a:a9:65:6e:c8:0e:8d:34: 22:46:b8:7e:4c:a5:4a:12:f0:8b:a2:7a:fa:6d:c1: 41:80:c9:33:71:2d:86:9d:0a:0e:98:bd:e9:30:a6: d2:b6:ac:cc:e1:02:2e:e1:67:55:7f:6f:e8:88:e3: 7a:e8:94:01:95:76:88:72:99:7b:96:ec:39:2a:0b: 3a:00:0d:76:34:62:97:be:1d:44:90:bd:55:67:53: 72:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DA:F3:15:A3:4F:63:8F:DB:C5:1D:9F:E1:1B:C5:55:AE:0B:63:69 X509v3 Authority Key Identifier: keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4a:d7:43:27:0f:92:30:cc:9d:e6:f0:c8:5d:a1:43:1d:c9: 68:28:58:f7:21:a8:9e:fd:04:a4:9a:9c:78:d2:c6:fe:04:6e: 78:d4:9a:03:91:0f:d0:1d:3d:7b:f0:df:fd:db:4e:92:0e:e9: 78:eb:4c:bd:8f:32:c4:c7:1b:0d:86:45:98:c6:af:39:1e:29: f8:fe:0f:04:0c:69:eb:97:e2:cd:d7:d2:38:35:0c:8c:d2:88: 41:01:f0:87:22:65:6a:53:c9:a0:a3:35:06:d8:0d:56:45:3f: 45:12:a9:96:34:20:51:67:c5:a9:58:c2:c1:7f:75:d8:0f:c1: 62:cb:12:1d:91:fd:1c:b7:95:aa:d7:33:55:f4:a6:b5:b7:71: 14:ce:e8:f1:b3:d9:59:38:70:01:2d:f8:64:a4:c6:8a:b3:ee: 1d:32:10:63:f1:84:41:39:b3:21:47:08:63:40:79:99:a9:37: 9c:08:51:af:23:05:94:2a:e3:9a:c5:da:c3:06:a9:99:21:82: c8:94:64:db:ce:da:89:6b:8b:49:7d:16:51:63:64:c9:55:d9: 64:88:06:db:2a:28:7f:88:89:27:28:b0:06:8c:b1:12:4a:0c: df:e1:ec:6c:51:ef:9e:f5:83:e5:77:ae:81:c7:c0:a4:ff:9b: 25:83:4d:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4QTkxMTAvBgNVBAUTKDVDMEFCNDI1RjJCNDIzNUUxQzgxNTY4M0JENkM4RThC N0I4MEI3MjcwHhcNMjYwODE2MTk1NjM0WhcNMjYwODIzMTk1NjM0WjAYMRYwFAYD VQQDEw02YTgyMTVmMi1kYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHTlnXu1YB86DK8Azrikbs3JHd/YZ4KtRSAuYbcP0Tvl4fM70Y9Ese6mbhxT mprJJ/2vQXyI/5lKpVx1rJBtGJG1DZ0o/wjcaF08APCFpEHigQiJQRFZpu73C3nz TCvuuiBjRiRIcFGQt8UKBcc3bZ7CNguDlIagbTqMlkYR0eSsspLb38kgH9AGd8IU 1S2EkT9yc6uDK/RsSctqgTZyYzEqr764ZLJBJSfWSqllbsgOjTQiRrh+TKVKEvCL onr6bcFBgMkzcS2GnQoOmL3pMKbStqzM4QIu4WdVf2/oiON66JQBlXaIcpl7luw5 Kgs6AA12NGKXvh1EkL1VZ1NyHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDa8xWj T2OP28Udn+EbxVWuC2NpMB8GA1UdIwQYMBaAFFwKtCXytCNeHIFWg71sjot7gLcn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhBOS8yQUEwNDMzMDk0 RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkxNGNnVmFEdld5T2kzdUF0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBcTBKZkswSTE0Y2dWYUR2V3lPaTN1QXR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhBOS8yQUEwNDMzMDk0RjAxMUVBODNFRjFFN0RDNEY5QUUwMi9YQXEwSmZLMEkx NGNnVmFEdld5T2kzdUF0eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHUrXQycPkjDMnebwyF2hQx3JaChY9yGonv0EpJqceNLG/gRueNSaA5EP0B09 e/Df/dtOkg7peOtMvY8yxMcbDYZFmMavOR4p+P4PBAxp65fizdfSODUMjNKIQQHw hyJlalPJoKM1BtgNVkU/RRKpljQgUWfFqVjCwX912A/BYssSHZH9HLeVqtczVfSm tbdxFM7o8bPZWThwAS34ZKTGirPuHTIQY/GEQTmzIUcIY0B5mak3nAhRryMFlCrj msXawwapmSGCyJRk287aiWuLSX0WUWNkyVXZZIgG2yoof4iJJyiwBoyxEkoM3+Hs bFHvnvWD5XeugcfApP+bJYNNwg== -----END CERTIFICATE-----Generated at Mon Aug 17 21:17:11 2026 by rpki-client