$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: 3zqxQJzs4ecktvDN88sY7gj3Id9E8PH0DbKACYHmE0k= Subject key identifier: 0D:6B:DF:BC:1B:1E:56:47:06:EA:4A:13:1D:CD:B5:AD:BF:76:92:14 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0DA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0D76 Signing time: Tue 18 Aug 2026 18:18:44 +0000 Manifest this update: Tue 18 Aug 2026 18:18:43 +0000 Manifest next update: Tue 25 Aug 2026 18:18:43 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: GY2Arh4O0CFqgdOZt0nNkNJpDaOm/Pm1xrISJ21kESg=) 2: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: 4LEYJL5AX5PWlCqKTlZUy7qHGLo4uYAp+saoJjmZfVo=) 3: A45810226E0B11F1B444C73C6CA30FBC.roa (hash: Xtf0/6y3YC6FhVot6UpoOkskXFie6As5P2KK3d/KTL0=) 4: 595C264E6E0B11F1ACBB12326CA30FBC.roa (hash: JuMurLXv+8GOmVkD0dIzXf49xiHEijtStC/1h+HNo+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3488 (0xda0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Aug 18 18:18:43 2026 GMT Not After : Aug 25 18:18:43 2026 GMT Subject: CN=6a84a204-22b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:14:75:1f:32:1a:4e:f3:f3:fb:84:b5:4e: b6:8c:ea:e3:11:79:f1:cc:d6:93:76:b3:ac:0c:72: 62:26:f4:b3:70:10:74:a4:7f:92:f5:41:24:29:2d: 01:0f:76:fc:2e:7a:b4:96:20:da:55:4f:5d:f2:8f: 71:25:0b:2d:97:bb:be:cd:6e:3f:fc:ff:d7:13:73: 54:6b:be:f1:9f:20:06:0d:b6:e6:51:6c:b3:33:e6: ba:0e:e3:97:6e:1d:65:15:3d:bf:e0:72:d1:f4:fe: 02:34:07:88:96:ca:b1:a6:11:43:74:76:3e:4d:77: fd:e9:41:0a:17:0d:17:0e:06:4a:05:26:dc:7b:a5: fa:3b:99:77:22:5d:62:f4:b3:ed:3f:a9:8a:3d:8b: 33:7c:82:39:ff:81:9a:71:69:f1:71:41:aa:89:50: 1f:20:f3:d4:d0:87:74:e9:8d:77:ca:40:89:4a:b2: 86:44:f8:22:34:ec:4f:0e:49:c5:90:39:fa:e1:6f: 0a:51:3d:07:80:59:16:33:d5:fb:a7:57:23:63:40: 0b:9e:4b:cb:b3:2a:ae:67:d1:01:1c:c5:fc:ee:fb: 74:1c:e2:93:9d:4c:32:6f:f0:7d:fa:7e:63:aa:8f: c0:3f:1f:de:04:71:e2:4e:80:a7:66:3e:21:13:21: 37:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6B:DF:BC:1B:1E:56:47:06:EA:4A:13:1D:CD:B5:AD:BF:76:92:14 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d4:f5:79:81:0b:b9:73:51:a8:01:06:1d:d9:70:95:df:eb: d9:0a:4c:08:2b:16:f4:ac:d8:0b:70:65:ca:37:dc:9f:e0:5e: 6b:5c:76:08:62:4c:12:1c:97:db:09:f6:66:6b:d8:41:40:31: db:98:36:06:f1:7e:22:4e:db:8f:bd:0c:a9:ad:8f:03:46:68: c8:cf:0d:8f:39:46:9b:1a:41:b9:3f:79:0a:2f:e7:8f:92:12: 9d:b0:41:09:7c:e4:8f:01:dd:71:5d:36:94:a3:6e:53:2e:58: 6f:8c:07:17:e6:1d:d1:a8:80:85:01:89:16:ed:d2:64:07:ce: 67:1f:2b:88:30:5e:14:10:67:c3:91:36:25:fa:a9:79:ed:f4: 24:0a:db:b2:01:2f:5c:63:95:f5:e8:86:55:8d:e5:d9:1b:97: b7:40:4f:58:4f:6b:df:39:14:d0:1f:61:28:6d:19:c3:4d:43: d6:f9:fb:e6:4e:a6:77:fb:f4:62:69:ce:87:cb:87:d1:ca:3a: a0:e1:a1:a5:34:0a:ea:7d:90:5e:dd:df:0a:ed:ab:01:dc:ac: d4:39:20:a9:a8:fa:78:d0:e1:cb:0d:7e:f9:c7:5b:ea:a6:47: 0c:d9:42:ad:66:7b:03:01:0a:48:74:24:60:c3:37:8c:de:d3: 60:6b:88:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjYwODE4MTgxODQzWhcNMjYwODI1MTgxODQzWjAYMRYwFAYD VQQDEw02YTg0YTIwNC0yMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0P4UdR8yGk7z8/uEtU62jOrjEXnxzNaTdrOsDHJiJvSzcBB0pH+S9UEkKS0B D3b8Lnq0liDaVU9d8o9xJQstl7u+zW4//P/XE3NUa77xnyAGDbbmUWyzM+a6DuOX bh1lFT2/4HLR9P4CNAeIlsqxphFDdHY+TXf96UEKFw0XDgZKBSbce6X6O5l3Il1i 9LPtP6mKPYszfII5/4GacWnxcUGqiVAfIPPU0Id06Y13ykCJSrKGRPgiNOxPDknF kDn64W8KUT0HgFkWM9X7p1cjY0ALnkvLsyquZ9EBHMX87vt0HOKTnUwyb/B9+n5j qo/APx/eBHHiToCnZj4hEyE3lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1r37wb HlZHBupKEx3Nta2/dpIUMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAdT1eYELuXNRqAEGHdlwld/r2QpMCCsW9KzYC3Blyjfcn+Bea1x2CGJMEhyX 2wn2ZmvYQUAx25g2BvF+Ik7bj70Mqa2PA0ZoyM8NjzlGmxpBuT95Ci/nj5ISnbBB CXzkjwHdcV02lKNuUy5Yb4wHF+Yd0aiAhQGJFu3SZAfOZx8riDBeFBBnw5E2Jfqp ee30JArbsgEvXGOV9eiGVY3l2RuXt0BPWE9r3zkU0B9hKG0Zw01D1vn75k6md/v0 YmnOh8uH0co6oOGhpTQK6n2QXt3fCu2rAdys1Dkgqaj6eNDhyw1++cdb6qZHDNlC rWZ7AwEKSHQkYMM3jN7TYGuIPw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:01 2026 by rpki-client