$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json) Hash identifier: QPb9WjDp+SmE01xlPSMbSIU237A0WI4tRiIW5ysHL8w= Subject key identifier: 64:66:B4:E2:76:FC:12:C9:3D:85:65:5A:09:C1:F8:17:E3:E3:87:66 Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft Manifest number: 0532 Signing time: Tue 18 Aug 2026 23:52:51 +0000 Manifest this update: Tue 18 Aug 2026 23:52:50 +0000 Manifest next update: Tue 25 Aug 2026 23:52:50 +0000 Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: sMIqwDy6ffrGuFUhsrlc4Fg7J9eZqRZpX7CrODc3QEg=) 2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: s+tgLB+pF+5avCp/zLgOBTjy0rHN55LZZRbWJEXSZEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Validity Not Before: Aug 18 23:52:50 2026 GMT Not After : Aug 25 23:52:50 2026 GMT Subject: CN=6a84f053-237f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:e6:1b:eb:4d:d1:e0:52:83:9e:0d:68:ed: 4a:c4:c7:1e:5a:bf:04:10:5f:d2:bd:b6:47:25:8e: fb:16:db:2e:19:2b:89:0d:7b:15:ee:86:05:ce:bd: b0:0d:7d:ed:1e:88:f9:3f:ab:1b:ba:df:a8:b0:ae: 55:22:14:60:0a:db:0b:70:b6:9d:4f:cc:4c:b5:1a: c6:3d:2d:96:5c:75:74:f9:6d:71:ec:25:9f:78:f8: 1b:cc:21:ea:ad:7c:9b:46:f2:b8:db:25:76:06:db: 5c:dd:0b:59:a8:f9:fb:40:ef:cc:d8:2e:c1:4e:81: 58:fa:9d:e7:c9:c6:a5:36:a2:16:1a:06:cb:54:90: 46:4b:74:ae:2d:c1:19:f4:23:5a:ae:93:b3:a9:09: 10:ba:a2:0c:a0:e3:dd:e7:73:20:e7:24:ec:23:ef: 0e:6f:f2:66:62:19:eb:cc:74:d4:b4:33:52:ec:bd: 68:63:97:00:80:fc:5b:ca:a2:bf:9d:ae:3d:85:51: 92:54:b3:30:4c:1e:31:25:30:f4:59:73:fb:09:49: b4:a6:b3:97:c8:b4:8f:07:77:de:cd:98:dd:99:e4: e1:5c:58:f2:0a:5f:8e:a8:36:e7:6b:f9:8f:06:54: 34:e8:5f:4a:d9:98:7d:5a:d1:61:28:7d:fc:db:90: b3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:66:B4:E2:76:FC:12:C9:3D:85:65:5A:09:C1:F8:17:E3:E3:87:66 X509v3 Authority Key Identifier: keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4e:be:9d:8b:a6:2f:84:22:2b:b8:a0:c0:c8:5f:0b:dd:59: bd:ef:32:7b:15:f5:33:66:ef:20:f9:0e:e6:7f:74:64:f0:22: de:38:46:a5:a7:c3:67:ba:95:34:18:7e:b4:e6:fe:dd:05:08: ed:6f:cb:f7:fd:56:54:9c:1c:a1:66:28:31:fc:98:43:9d:3b: d7:0f:dc:b4:b8:7f:ed:96:12:79:19:bf:80:3b:32:8e:e8:2c: 4e:38:5a:b6:60:98:07:16:7a:4f:2f:d6:04:3a:b4:7b:d2:96: df:13:ee:0a:80:02:e3:37:28:1a:bd:6b:21:44:af:1d:82:bd: 57:08:1d:fd:56:c3:a7:66:cf:e4:b3:a0:13:dc:d4:39:cb:85: 67:b8:48:69:da:f2:88:05:2d:be:9e:3f:71:3b:90:dd:08:d0: 2d:d5:54:4b:63:4b:1e:5e:33:1c:51:97:f9:5d:1c:f4:89:5f: 32:1b:90:f5:9c:d9:11:55:cc:b6:e5:a4:c0:a6:f3:55:f1:55: b9:ea:a3:d3:93:f8:bc:e3:ee:37:fc:49:f1:cc:fd:93:01:41: 86:ab:ed:ae:6e:97:1f:93:34:f3:8d:38:0c:4c:67:2e:b6:ec: c1:2c:82:25:db:64:66:a4:ef:66:24:c3:49:72:25:8a:32:9c: 0b:5e:1b:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyRUUxMTAvBgNVBAUTKDVFOEI1RDk1NkU5QkRCRDkwNzcwMTQyQUM3MEZERjlC NjM4OEM2RDgwHhcNMjYwODE4MjM1MjUwWhcNMjYwODI1MjM1MjUwWjAYMRYwFAYD VQQDEw02YTg0ZjA1My0yMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkPmG+tN0eBSg54NaO1KxMceWr8EEF/SvbZHJY77FtsuGSuJDXsV7oYFzr2w DX3tHoj5P6sbut+osK5VIhRgCtsLcLadT8xMtRrGPS2WXHV0+W1x7CWfePgbzCHq rXybRvK42yV2Bttc3QtZqPn7QO/M2C7BToFY+p3nycalNqIWGgbLVJBGS3SuLcEZ 9CNarpOzqQkQuqIMoOPd53Mg5yTsI+8Ob/JmYhnrzHTUtDNS7L1oY5cAgPxbyqK/ na49hVGSVLMwTB4xJTD0WXP7CUm0prOXyLSPB3fezZjdmeThXFjyCl+OqDbna/mP BlQ06F9K2Zh9WtFhKH3825CzaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRmtOJ2 /BLJPYVlWgnB+Bfj44dmMB8GA1UdIwQYMBaAFF6LXZVum9vZB3AUKscP35tjiMbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJFRS84RDk2Njc1NDU2 RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5a0hjQlFxeHdfZm0yT0l4 dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvdGRsVzZiMjlrSGNCUXF4d19mbTJPSXh0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJFRS84RDk2Njc1NDU2RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5 a0hjQlFxeHdfZm0yT0l4dGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHk6+nYumL4QiK7igwMhfC91Zve8yexX1M2bvIPkO5n90ZPAi3jhGpafDZ7qV NBh+tOb+3QUI7W/L9/1WVJwcoWYoMfyYQ5071w/ctLh/7ZYSeRm/gDsyjugsTjha tmCYBxZ6Ty/WBDq0e9KW3xPuCoAC4zcoGr1rIUSvHYK9Vwgd/VbDp2bP5LOgE9zU OcuFZ7hIadryiAUtvp4/cTuQ3QjQLdVUS2NLHl4zHFGX+V0c9IlfMhuQ9ZzZEVXM tuWkwKbzVfFVueqj05P4vOPuN/xJ8cz9kwFBhqvtrm6XH5M08404DExnLrbswSyC JdtkZqTvZiTDSXIlijKcC14bbA== -----END CERTIFICATE-----Generated at Wed Aug 19 16:03:24 2026 by rpki-client