$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: AbXpAkqt4IAmrfW+JZ3RvIA5D0pGTRL2Kj7KCPx9pnk= Subject key identifier: 32:9D:1F:62:4C:E1:08:63:E0:43:94:C2:45:F3:36:DF:1D:32:F6:D3 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 02DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 02CF Signing time: Wed 19 Aug 2026 01:43:40 +0000 Manifest this update: Wed 19 Aug 2026 01:43:40 +0000 Manifest next update: Wed 26 Aug 2026 01:43:40 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: wuEt6rDBb4Xlfs5GClMpvC5Upfg4kScY8sZ7VsDGJ3I=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: oF8S7Pot7FDKo2GEEMdlADVMTbeltD2yj2mRKY200Ag=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: uMB1cvVhprKp86XWev+HO3mpwPNrzk9do4ee899gfzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 732 (0x2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Aug 19 01:43:40 2026 GMT Not After : Aug 26 01:43:40 2026 GMT Subject: CN=6a850a4c-ca5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a7:58:79:9f:61:3e:24:58:0f:c7:67:1e:d4: d7:8b:fd:e3:79:e3:c7:c8:bf:e0:da:26:2f:80:e3: 47:8c:74:23:a1:54:46:eb:ee:43:4e:b6:03:23:d9: 6f:49:48:6f:48:c7:f5:17:5f:eb:35:14:d9:4f:9a: 9c:44:dd:4d:fd:9a:00:7b:0a:63:29:8f:d1:e3:b8: b1:68:d7:e7:0c:64:2d:6a:05:86:b8:2b:5e:91:42: 1f:cd:10:5d:c2:de:d8:82:98:77:99:ea:27:21:a1: 2d:aa:02:53:7e:dc:8b:7e:16:05:45:4c:07:6e:df: 8a:d5:89:fa:1b:6c:9d:26:1f:65:fd:59:e7:07:d2: 20:bf:ac:02:5d:37:ef:93:df:34:b3:40:f0:2f:ba: 49:99:1b:98:6b:5c:c9:cc:59:4f:c7:4c:4c:29:97: 92:46:f6:b2:52:1f:1d:d0:ad:03:98:24:91:75:f1: 59:6c:b4:a0:98:09:d4:9e:da:ad:e9:1a:79:b1:60: 15:46:cb:b3:db:db:16:68:66:ff:a8:a2:e1:6b:5a: 2d:45:44:b9:29:85:f6:17:61:ba:0c:52:2a:e8:82: 8b:fe:97:c7:0b:9e:17:29:e9:7e:3b:ce:5e:94:74: 85:c5:72:6c:b2:b2:71:41:cc:15:56:4e:45:c7:04: f1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9D:1F:62:4C:E1:08:63:E0:43:94:C2:45:F3:36:DF:1D:32:F6:D3 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:02:47:0c:ad:c2:2e:b6:c6:89:fc:97:aa:35:16:4c:af:bf: ab:9c:e3:25:6a:17:28:d1:97:74:f4:8c:a5:25:32:f5:ce:d0: b1:5e:4e:cc:29:46:7e:9b:f1:04:a1:7c:a5:a0:55:13:77:68: 6b:7d:28:f1:e3:32:d7:b4:6c:1b:13:4e:a9:ab:2f:9f:3c:6d: 62:1e:74:69:a0:91:40:89:a7:22:bb:9b:fd:c8:d8:36:49:be: e5:b1:cc:38:5b:26:01:49:c5:b7:ce:65:fb:71:9b:20:10:ba: fc:c7:d2:05:73:5b:bc:22:3e:b9:e1:c3:5b:99:b9:fa:b8:64: 98:f5:44:13:a0:7f:7a:f4:f9:7d:e9:72:c0:21:6e:e6:51:14: cc:7d:1a:f6:ef:88:8c:5a:f4:a3:37:d7:36:19:98:02:a9:5d: b0:4c:eb:1b:00:27:bf:c6:0f:ea:b3:46:69:81:5f:34:36:52: fc:69:96:ae:9c:dd:43:a3:4c:7b:95:7f:93:c2:e6:e0:bc:5c: ae:6d:07:3f:11:47:99:a5:4a:61:dd:b2:bf:af:e7:41:96:c7: 96:98:08:ae:06:b0:9d:bb:0d:8c:07:ab:14:62:af:e9:1d:ad: 4f:d1:88:de:92:cc:60:ea:ad:28:cd:79:2c:d5:14:cd:65:3f: 64:22:ad:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjYwODE5MDE0MzQwWhcNMjYwODI2MDE0MzQwWjAYMRYwFAYD VQQDEw02YTg1MGE0Yy1jYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6dYeZ9hPiRYD8dnHtTXi/3jeePHyL/g2iYvgONHjHQjoVRG6+5DTrYDI9lv SUhvSMf1F1/rNRTZT5qcRN1N/ZoAewpjKY/R47ixaNfnDGQtagWGuCtekUIfzRBd wt7Ygph3meonIaEtqgJTftyLfhYFRUwHbt+K1Yn6G2ydJh9l/VnnB9Igv6wCXTfv k980s0DwL7pJmRuYa1zJzFlPx0xMKZeSRvayUh8d0K0DmCSRdfFZbLSgmAnUntqt 6Rp5sWAVRsuz29sWaGb/qKLha1otRUS5KYX2F2G6DFIq6IKL/pfHC54XKel+O85e lHSFxXJssrJxQcwVVk5FxwTxJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKdH2JM 4Qhj4EOUwkXzNt8dMvbTMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARAJHDK3CLrbGifyXqjUWTK+/q5zjJWoXKNGXdPSMpSUy9c7QsV5OzClGfpvx BKF8paBVE3doa30o8eMy17RsGxNOqasvnzxtYh50aaCRQImnIrub/cjYNkm+5bHM OFsmAUnFt85l+3GbIBC6/MfSBXNbvCI+ueHDW5m5+rhkmPVEE6B/evT5felywCFu 5lEUzH0a9u+IjFr0ozfXNhmYAqldsEzrGwAnv8YP6rNGaYFfNDZS/GmWrpzdQ6NM e5V/k8Lm4Lxcrm0HPxFHmaVKYd2yv6/nQZbHlpgIrgawnbsNjAerFGKv6R2tT9GI 3pLMYOqtKM15LNUUzWU/ZCKtVA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:43 2026 by rpki-client