$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft File: XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft (raw, json) Hash identifier: TuYYE8laa+1++MLEqso3uVLHRm4LWjizZ/RmOqMbhO0= Subject key identifier: 00:26:64:59:9B:18:EF:34:E6:75:95:F9:46:F6:FB:8F:E0:4B:FC:8C Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 0A91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft Manifest number: 0A75 Signing time: Tue 18 Aug 2026 19:56:30 +0000 Manifest this update: Tue 18 Aug 2026 19:56:30 +0000 Manifest next update: Tue 25 Aug 2026 19:56:30 +0000 Files and hashes: 1: XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl (hash: 4r7bHZiwyCjtkhyl2EzyAyr2dbKGfx3d1GCHNtVsSrA=) 2: 52F955A89B1511EA9BEFA53BC4F9AE02.roa (hash: QxpDSJ07LckMEIu/DE0y0sMsWiKkQU5kLHdPOI9l4t8=) 3: BED54F1A9B1611EA939F5A3FC4F9AE02.roa (hash: X8e6yUeB/PRsPPF+C3MHmJi3qUuiq3zf6vIdK4BxUh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9, serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Aug 18 19:56:30 2026 GMT Not After : Aug 25 19:56:30 2026 GMT Subject: CN=6a84b8ee-b6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:63:71:75:b9:bc:21:75:a4:66:3f:83:96: a8:96:9d:98:f4:f0:b4:49:ca:ee:fc:04:74:b1:df: 49:05:8a:8e:3d:dd:8f:95:b0:b5:b0:f0:b5:e1:45: b3:61:cf:10:63:8e:a7:89:1b:e6:7e:bd:65:17:be: 88:27:f6:fe:26:c3:ef:f6:60:45:03:90:bd:2b:38: fd:b6:51:26:e0:1f:2c:96:d2:ef:07:95:9d:94:fb: 96:ba:a8:69:98:4b:8a:8a:72:69:d6:8a:6b:16:14: d0:b0:36:8a:a5:37:d9:dc:74:79:eb:15:6d:47:02: ae:ba:95:cf:01:4f:6b:8b:ed:69:77:06:6c:8f:ad: 66:ff:f6:5a:67:21:27:c3:f2:13:11:a8:d1:bc:a6: cb:6d:89:93:2f:ac:1f:4e:43:e3:1d:5e:4b:28:d0: 75:d6:48:e1:2e:de:a0:fc:e5:86:09:59:4f:a4:9f: e8:27:90:46:5e:2b:ed:00:25:b1:ff:1f:95:61:67: 64:25:2f:d7:71:f3:41:1c:a8:b1:93:7c:f6:62:d8: 5d:64:5c:90:04:50:1d:4b:54:a8:77:49:18:5f:11: 96:43:9c:3b:8a:d3:3f:92:6d:26:87:d9:d4:1b:52: 13:01:e5:c5:c6:51:00:29:d3:13:6a:56:19:4f:3c: 36:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:26:64:59:9B:18:EF:34:E6:75:95:F9:46:F6:FB:8F:E0:4B:FC:8C X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:78:92:a9:a3:04:ee:17:6f:b6:f5:71:47:c1:61:c4:43:bb: d5:b8:e8:94:86:b9:1a:90:ae:ba:59:5d:76:99:58:45:30:77: 8f:6a:bf:68:49:c8:2f:2d:c5:1d:f6:a7:6d:2f:23:a6:5f:4d: ca:46:66:ac:52:0a:ed:33:1c:76:53:8d:59:4b:b0:01:ca:4c: bd:74:b5:83:75:e0:73:d4:69:6e:00:7e:bd:9c:0e:b8:e7:5f: d5:68:ef:55:63:5e:67:4f:e5:f5:f4:62:98:42:cd:3f:46:0c: fd:bb:e4:94:eb:46:4a:7d:a4:31:af:dd:86:42:84:0d:8f:63: 41:f9:c5:80:78:52:cf:74:c5:4b:26:e6:87:28:5c:a8:58:2b: 5f:7a:2b:62:8e:af:ef:fd:68:78:f2:de:8d:32:e9:10:4e:de: 67:84:e7:f1:bf:f4:56:30:21:f5:4b:23:9e:da:e4:e6:4e:fb: a5:67:f8:db:dc:12:bb:18:59:70:3c:89:14:8b:62:05:b4:b4: b6:90:d0:f9:4d:df:24:a3:25:0a:1e:ed:aa:15:c3:d2:cf:db: 6c:6a:dc:eb:b0:ac:cc:a2:40:a6:9c:e3:3e:7b:13:c6:2a:da: 9a:0f:af:9b:4b:b0:a3:3b:29:08:55:c5:6d:ed:8b:4b:48:ac: 87:5d:30:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjYwODE4MTk1NjMwWhcNMjYwODI1MTk1NjMwWjAYMRYwFAYD VQQDEw02YTg0YjhlZS1iNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDBjcXW5vCF1pGY/g5aolp2Y9PC0Scru/AR0sd9JBYqOPd2PlbC1sPC14UWz Yc8QY46niRvmfr1lF76IJ/b+JsPv9mBFA5C9Kzj9tlEm4B8sltLvB5WdlPuWuqhp mEuKinJp1oprFhTQsDaKpTfZ3HR56xVtRwKuupXPAU9ri+1pdwZsj61m//ZaZyEn w/ITEajRvKbLbYmTL6wfTkPjHV5LKNB11kjhLt6g/OWGCVlPpJ/oJ5BGXivtACWx /x+VYWdkJS/XcfNBHKixk3z2YthdZFyQBFAdS1Sod0kYXxGWQ5w7itM/km0mh9nU G1ITAeXFxlEAKdMTalYZTzw27wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAmZFmb GO805nWV+Ub2+4/gS/yMMB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBCOS85Q0JGM0Q5MDhGQTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hf M0pKMU5WekxxNHlCQVluMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmniSqaME7hdvtvVxR8FhxEO71bjolIa5GpCuullddplYRTB3j2q/aEnILy3F HfanbS8jpl9NykZmrFIK7TMcdlONWUuwAcpMvXS1g3Xgc9RpbgB+vZwOuOdf1Wjv VWNeZ0/l9fRimELNP0YM/bvklOtGSn2kMa/dhkKEDY9jQfnFgHhSz3TFSybmhyhc qFgrX3orYo6v7/1oePLejTLpEE7eZ4Tn8b/0VjAh9Usjntrk5k77pWf429wSuxhZ cDyJFItiBbS0tpDQ+U3fJKMlCh7tqhXD0s/bbGrc67CszKJAppzjPnsTxiramg+v m0uwozspCFXFbe2LS0ish10wFA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:56 2026 by rpki-client