$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: 6PEYXct0MUwmxhL1T/aTjMA4G1lJ0mB/u77r1cdVPNY= Subject key identifier: 3D:FC:1A:3A:5C:83:FE:ED:16:7A:83:2E:25:EF:5C:EE:FB:92:94:85 Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: 01B4 Signing time: Wed 19 Aug 2026 04:39:59 +0000 Manifest this update: Wed 19 Aug 2026 04:39:58 +0000 Manifest next update: Wed 26 Aug 2026 04:39:58 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: KKjRkSoBQ5ynkJ/myI7qabrzTNFZke5GDltJIdshWm4=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: 6+bY61LdDlam0PC7GuKMwEXRvre/3cSdh3l+aLkv2pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: Aug 19 04:39:58 2026 GMT Not After : Aug 26 04:39:58 2026 GMT Subject: CN=6a85339f-6e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:ea:10:d4:27:13:eb:ef:72:94:78:cb:ca: f4:b1:51:e4:1b:57:17:dd:97:c4:41:79:5f:71:9f: 66:e1:a9:9d:b8:6b:6e:71:d0:4c:61:e3:f1:d2:59: 49:88:33:88:fe:53:c2:ed:a9:8c:32:ac:58:3f:65: e6:a5:63:82:a6:ec:33:cd:26:64:d1:cb:6b:c3:49: 0d:16:21:23:3f:a5:9a:d1:d3:28:8d:cd:b4:c9:b6: a2:b9:a8:8e:fa:e1:97:22:ea:bb:67:c4:b4:2e:a9: 03:58:b6:62:ef:f9:c3:83:e5:5d:03:a0:f9:aa:cc: ee:29:c7:bc:cd:5f:c5:41:02:6c:aa:19:39:79:84: 25:27:33:c7:ac:44:9a:57:bd:24:5c:b4:16:3a:db: 42:0f:08:da:d3:21:1c:72:bf:6a:57:e5:35:47:a4: 16:f5:51:d0:f8:fc:fe:d6:09:c7:eb:a5:c7:b7:8d: 4f:bb:56:88:8a:54:f9:52:b8:79:88:f2:24:13:10: c1:47:af:2b:06:cb:8d:33:8a:07:08:15:25:44:bc: 50:1c:ee:7d:8b:8b:f9:5e:bb:c3:13:9d:71:b9:08: 16:62:88:fb:e3:da:61:8b:a0:1e:16:45:7a:1e:00: f6:4e:6e:d4:00:44:d6:2a:ce:50:23:84:09:68:76: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FC:1A:3A:5C:83:FE:ED:16:7A:83:2E:25:EF:5C:EE:FB:92:94:85 X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:96:da:4b:42:12:8b:2b:55:99:be:c0:62:29:d1:29:58:d4: 9b:e5:27:c7:7b:85:14:c2:35:a3:c1:0b:67:87:0b:db:a0:d8: 3f:f2:04:f8:52:9f:a0:74:b1:78:d6:92:be:d6:7e:c9:a5:e2: fd:55:6e:04:46:b7:75:d9:c1:35:7f:00:8e:09:ed:2e:66:9a: b2:9a:b4:c8:f6:98:da:96:06:25:cd:88:0a:cc:19:e6:eb:18: 78:29:9f:4f:d4:27:77:67:32:87:38:ec:18:5c:f3:c6:0d:14: 68:d3:b2:59:bd:bb:4c:67:83:7e:7f:75:07:9d:21:36:cd:9f: ed:23:d9:14:16:3e:cf:4a:71:96:5b:d8:56:f5:5b:78:67:ea: 3d:e0:da:2c:2c:3b:ec:53:0b:5a:fa:4e:b0:19:e3:d2:5c:1c: f8:ac:d8:da:48:51:52:aa:7c:5e:49:cc:04:7c:3d:23:89:48: 7e:68:26:7f:c9:98:e2:ac:f4:95:e9:c0:f6:34:03:4d:a2:90: 89:f6:1b:19:8f:e1:7c:21:94:74:ae:bb:9b:8c:24:26:59:17: 88:17:d9:7b:29:96:22:47:3c:d8:fc:f6:a1:d1:61:c7:cc:da: c8:5e:52:c0:60:5d:00:5d:8a:9e:62:2a:af:13:31:f5:fe:0d: 1a:8b:46:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjYwODE5MDQzOTU4WhcNMjYwODI2MDQzOTU4WjAYMRYwFAYD VQQDEw02YTg1MzM5Zi02ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumrqENQnE+vvcpR4y8r0sVHkG1cX3ZfEQXlfcZ9m4amduGtucdBMYePx0llJ iDOI/lPC7amMMqxYP2XmpWOCpuwzzSZk0ctrw0kNFiEjP6Wa0dMojc20ybaiuaiO +uGXIuq7Z8S0LqkDWLZi7/nDg+VdA6D5qszuKce8zV/FQQJsqhk5eYQlJzPHrESa V70kXLQWOttCDwja0yEccr9qV+U1R6QW9VHQ+Pz+1gnH66XHt41Pu1aIilT5Urh5 iPIkExDBR68rBsuNM4oHCBUlRLxQHO59i4v5XrvDE51xuQgWYoj749phi6AeFkV6 HgD2Tm7UAETWKs5QI4QJaHYfeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD38Gjpc g/7tFnqDLiXvXO77kpSFMB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0 S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZbaS0ISiytVmb7AYinRKVjUm+Unx3uFFMI1o8ELZ4cL26DYP/IE+FKfoHSx eNaSvtZ+yaXi/VVuBEa3ddnBNX8AjgntLmaaspq0yPaY2pYGJc2ICswZ5usYeCmf T9Qnd2cyhzjsGFzzxg0UaNOyWb27TGeDfn91B50hNs2f7SPZFBY+z0pxllvYVvVb eGfqPeDaLCw77FMLWvpOsBnj0lwc+KzY2khRUqp8XknMBHw9I4lIfmgmf8mY4qz0 lenA9jQDTaKQifYbGY/hfCGUdK67m4wkJlkXiBfZeymWIkc82Pz2odFhx8zayF5S wGBdAF2KnmIqrxMx9f4NGotGPA== -----END CERTIFICATE-----Generated at Wed Aug 19 13:41:34 2026 by rpki-client