$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: 2JSWYXPtzAY3nC+V5GSo/oeUBos+xi68dVnZZQ3jsj8= Subject key identifier: 07:32:E1:C3:38:DF:76:A1:18:75:E4:1F:D2:9B:4D:09:54:E5:8F:2F Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 0237 Signing time: Wed 19 Aug 2026 03:08:36 +0000 Manifest this update: Wed 19 Aug 2026 03:08:36 +0000 Manifest next update: Wed 26 Aug 2026 03:08:36 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: l8Odj/UY7pHZZqitOM3ploswA8BM1Q7gXHRyl7J557Q=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: cutsButNN4vD7PlDi3ED+TD0SRxebGD6KjlE+3nvyoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: Aug 19 03:08:36 2026 GMT Not After : Aug 26 03:08:36 2026 GMT Subject: CN=6a851e34-45cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:77:2e:bb:71:6b:2f:5a:4e:79:0e:19:d4:c2: 04:9f:82:d8:90:fc:61:e6:a7:11:9e:47:62:e7:18: 5d:41:04:60:96:d5:71:72:e9:b6:17:db:ca:73:c1: 49:a6:7e:8f:15:df:a8:0a:e0:b1:45:f8:da:ae:c1: 5f:d0:38:82:36:8f:82:b6:fa:6b:82:2f:79:62:a1: da:94:b7:e1:60:8c:d5:7f:0c:03:33:50:dc:de:78: 7c:6c:07:3b:e6:01:c4:5e:58:45:af:5d:b4:bb:5f: 8d:b5:04:99:33:06:35:30:d2:f6:4a:a2:61:ba:95: 31:31:14:69:6b:f4:ed:54:a7:84:48:57:12:a4:89: bc:63:22:3c:07:62:f3:de:88:b5:1c:a4:cb:16:1b: a8:2f:45:e8:49:49:e3:e9:9a:25:ad:c8:4d:15:63: dc:2b:4f:16:89:1d:4f:a5:d3:19:56:72:e2:ac:87: 13:0d:9e:7b:03:3e:55:81:10:92:4e:3f:37:3a:3f: 11:cf:e1:55:9b:d1:1c:63:39:6c:8f:cd:ab:e0:2a: e6:5a:10:29:f0:41:62:23:8b:1a:80:56:ec:e4:3a: f7:8b:5e:1d:07:97:00:cd:e2:00:67:4d:71:d7:63: b3:8c:23:2d:f7:c6:b9:44:fb:a7:f3:d8:a0:49:ac: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:32:E1:C3:38:DF:76:A1:18:75:E4:1F:D2:9B:4D:09:54:E5:8F:2F X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:1e:c7:cc:83:f2:4c:5a:5a:9e:a1:81:fe:77:12:4b:6d:58: 5a:8b:3d:37:ad:ce:07:fe:fc:74:6e:74:94:50:fc:b7:43:8d: c5:c8:e4:70:bd:13:d9:51:15:a4:d9:cd:83:7f:ae:bf:4d:cd: c4:e6:b4:f8:94:04:b8:fc:b4:36:fe:24:0b:95:9c:15:08:9f: 47:86:79:99:ac:4a:95:9a:77:06:5e:ea:79:be:0b:38:55:47: 7d:d4:50:70:e3:25:30:45:2b:ef:b9:df:af:81:3e:b9:f2:6c: e0:73:24:0e:5d:3e:a2:71:b8:b0:c0:09:35:7d:5d:b7:84:4f: ed:95:bf:32:70:48:3f:bb:05:dd:a1:03:dd:3e:89:62:c0:fe: 2d:aa:3e:62:6c:ba:17:10:34:aa:20:9f:27:18:c5:e6:20:a7: 3a:8c:f1:8c:d1:06:87:4c:70:52:d0:6e:e8:32:8e:9a:8f:bb: 02:77:cd:55:16:58:fe:93:f4:11:fb:6b:1c:e5:e0:28:48:66: 4d:28:10:9c:a8:c3:e2:07:f7:9e:60:cf:9a:b9:9a:9f:48:52: cb:8a:76:a1:d1:07:cc:0f:84:58:92:97:70:b2:39:7d:51:bb: d6:a7:1a:bd:97:17:86:94:b0:fd:85:71:d8:5e:82:82:84:0a: e1:13:56:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjYwODE5MDMwODM2WhcNMjYwODI2MDMwODM2WjAYMRYwFAYD VQQDEw02YTg1MWUzNC00NWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3cuu3FrL1pOeQ4Z1MIEn4LYkPxh5qcRnkdi5xhdQQRgltVxcum2F9vKc8FJ pn6PFd+oCuCxRfjarsFf0DiCNo+Ctvprgi95YqHalLfhYIzVfwwDM1Dc3nh8bAc7 5gHEXlhFr120u1+NtQSZMwY1MNL2SqJhupUxMRRpa/TtVKeESFcSpIm8YyI8B2Lz 3oi1HKTLFhuoL0XoSUnj6ZolrchNFWPcK08WiR1PpdMZVnLirIcTDZ57Az5VgRCS Tj83Oj8Rz+FVm9EcYzlsj82r4CrmWhAp8EFiI4sagFbs5Dr3i14dB5cAzeIAZ01x 12OzjCMt98a5RPun89igSawKKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcy4cM4 33ahGHXkH9KbTQlU5Y8vMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZR7HzIPyTFpanqGB/ncSS21YWos9N63OB/78dG50lFD8t0ONxcjkcL0T2VEV pNnNg3+uv03NxOa0+JQEuPy0Nv4kC5WcFQifR4Z5maxKlZp3Bl7qeb4LOFVHfdRQ cOMlMEUr77nfr4E+ufJs4HMkDl0+onG4sMAJNX1dt4RP7ZW/MnBIP7sF3aED3T6J YsD+Lao+Ymy6FxA0qiCfJxjF5iCnOozxjNEGh0xwUtBu6DKOmo+7AnfNVRZY/pP0 EftrHOXgKEhmTSgQnKjD4gf3nmDPmrman0hSy4p2odEHzA+EWJKXcLI5fVG71qca vZcXhpSw/YVx2F6CgoQK4RNWNw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:02 2026 by rpki-client