$ rpki-client -vvf rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft File: XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft (raw, json) Hash identifier: qAuycWFeriU0L2heyhvKVyuQMY9Ki0I+vjuVqHL6Aoc= Subject key identifier: E4:42:B7:49:14:9C:25:99:A3:42:EE:42:55:46:A4:9B:22:82:FA:25 Authority key identifier: 5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50 Certificate issuer: /CN=A918D584/serialNumber=5F215F14BF066EE008E4A766FAE9D9115324BE50 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft Manifest number: 08 Signing time: Wed 19 Aug 2026 09:57:32 +0000 Manifest this update: Wed 19 Aug 2026 09:57:31 +0000 Manifest next update: Wed 26 Aug 2026 09:57:31 +0000 Files and hashes: 1: XyFfFL8GbuAI5Kdm-unZEVMkvlA.crl (hash: KsHJma/WCZLxa2paQuLNULazkvizk+TtmBDHwzuR+WA=) 2: D734C78E960511F1BEC32C725911F970.roa (hash: Zw+l3n3jwIZmqVJDoYdyD1mxtERcCmbxoSyWbO+ajFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.crl rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D584, serialNumber=5F215F14BF066EE008E4A766FAE9D9115324BE50 Validity Not Before: Aug 19 09:57:31 2026 GMT Not After : Aug 26 09:57:31 2026 GMT Subject: CN=6a857e0c-e5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:a6:82:83:d7:84:9f:26:76:08:7d:b9:59: a3:bb:d7:d7:06:1c:01:ed:27:8d:e5:05:fd:1c:17: b5:16:41:6a:dc:c0:de:f8:ee:48:d8:3e:e7:77:90: c7:87:69:1f:f1:fc:cd:cf:15:ae:ba:08:84:9f:51: 4f:c8:a3:04:04:06:e7:64:99:56:7a:88:02:68:85: b5:9e:9a:0b:fd:8b:bf:e4:36:ff:87:47:69:0f:a8: 6e:8e:99:47:94:29:28:48:51:41:39:7e:f6:98:b8: e7:3f:ac:04:83:71:93:31:9f:bd:bb:72:d4:4f:eb: 8a:fe:0c:91:be:9b:03:8f:e7:90:41:00:7f:8a:35: 0b:34:8f:57:d0:9e:9a:2a:7b:94:a9:0f:7b:b6:1c: 1d:ce:c0:c7:7c:2b:2b:27:44:17:52:15:df:8b:b4: fc:c8:f7:9d:c3:b8:b1:b3:ee:ea:fe:28:46:02:3f: 18:82:c2:2c:fa:6a:fd:7d:2b:49:b8:8c:49:ff:c9: 18:0e:50:9c:30:65:ef:4c:49:6c:3e:da:ef:cb:c6: 05:ac:bf:ad:a7:b7:6e:b3:08:bc:bc:26:c3:17:db: ba:be:16:b6:f4:99:4e:a8:14:1b:42:4d:54:1d:4b: 3a:fe:66:de:b7:0c:68:40:2e:e4:0e:56:6f:a3:7e: dd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:42:B7:49:14:9C:25:99:A3:42:EE:42:55:46:A4:9B:22:82:FA:25 X509v3 Authority Key Identifier: keyid:5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5d:48:f5:e0:53:bc:7c:64:85:a9:2e:db:f8:98:94:79:ee: c7:a7:5b:41:38:9d:8b:34:7e:b2:fe:0d:9c:4f:62:46:a7:c2: 03:3f:2e:a5:e1:0b:04:e3:89:29:58:d8:31:a4:ca:eb:07:60: e0:c6:a4:40:a7:79:44:bb:4c:11:30:c2:f8:c1:fd:a1:47:42: 93:8f:12:15:01:a8:92:5c:78:c1:ce:11:00:71:77:40:71:7d: a8:ae:b1:05:a1:85:c5:4a:4a:91:b2:c9:f2:03:a2:6b:c6:37: be:51:4d:ce:e1:01:3d:7d:77:be:ae:5c:a6:93:5e:13:ce:58: 13:c5:65:b0:d4:70:2a:ad:29:fc:44:d3:f6:08:f5:7b:aa:4c: eb:b5:c8:0c:8c:6f:09:5d:0c:67:b5:a6:7e:f7:cd:c9:0b:b4: a3:5a:67:21:d8:dc:92:fd:e6:c5:9c:26:de:f2:f4:93:ae:45: 6e:ce:bd:a6:fe:b5:41:14:4b:c9:87:75:78:c8:13:4b:f4:0b: 64:a9:e7:9a:ec:45:af:0e:a3:be:2f:8a:36:55:42:e5:f8:4a: 4f:39:68:58:f8:b8:bf:b7:9f:0d:27:9e:1d:0b:e6:2f:cb:0f: d3:fd:c7:24:b4:aa:9a:27:84:3a:a9:6b:ab:57:8d:1a:5c:ae: 17:4f:67:58 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDU4NDExMC8GA1UEBRMoNUYyMTVGMTRCRjA2NkVFMDA4RTRBNzY2RkFFOUQ5MTE1 MzI0QkU1MDAeFw0yNjA4MTkwOTU3MzFaFw0yNjA4MjYwOTU3MzFaMBgxFjAUBgNV BAMTDTZhODU3ZTBjLWU1ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxcKaCg9eEnyZ2CH25WaO719cGHAHtJ43lBf0cF7UWQWrcwN747kjYPud3kMeH aR/x/M3PFa66CISfUU/IowQEBudkmVZ6iAJohbWemgv9i7/kNv+HR2kPqG6OmUeU KShIUUE5fvaYuOc/rASDcZMxn727ctRP64r+DJG+mwOP55BBAH+KNQs0j1fQnpoq e5SpD3u2HB3OwMd8KysnRBdSFd+LtPzI953DuLGz7ur+KEYCPxiCwiz6av19K0m4 jEn/yRgOUJwwZe9MSWw+2u/LxgWsv62nt26zCLy8JsMX27q+Frb0mU6oFBtCTVQd Szr+Zt63DGhALuQOVm+jft1XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5EK3SRSc JZmjQu5CVUakmyKC+iUwHwYDVR0jBBgwFoAUXyFfFL8GbuAI5Kdm+unZEVMkvlAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENTg0LzMxQjJBQzY2OTVF RTExRjE5RjY0NDZEMjUxMTFGOTcwL1h5RmZGTDhHYnVBSTVLZG0tdW5aRVZNa3Zs QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHlGZkZMOEdidUFJNUtkbS11blpFVk1rdmxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NTg0LzMxQjJBQzY2OTVFRTExRjE5RjY0NDZEMjUxMTFGOTcwL1h5RmZGTDhHYnVB STVLZG0tdW5aRVZNa3ZsQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBSXUj14FO8fGSFqS7b+JiUee7Hp1tBOJ2LNH6y/g2cT2JGp8IDPy6l4QsE44kp WNgxpMrrB2DgxqRAp3lEu0wRMML4wf2hR0KTjxIVAaiSXHjBzhEAcXdAcX2orrEF oYXFSkqRssnyA6Jrxje+UU3O4QE9fXe+rlymk14TzlgTxWWw1HAqrSn8RNP2CPV7 qkzrtcgMjG8JXQxntaZ+983JC7SjWmch2NyS/ebFnCbe8vSTrkVuzr2m/rVBFEvJ h3V4yBNL9Atkqeea7EWvDqO+L4o2VULl+EpPOWhY+Li/t58NJ54dC+Yvyw/T/cck tKqaJ4Q6qWurV40aXK4XT2dY -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:47 2026 by rpki-client