$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft File: XrCY701WVcxmtq-Bw83kBi2ALzs.mft (raw, json) Hash identifier: P3KASZSsPznZYkLrmbRZDOY4tzhADh66W0wXgzTpBHM= Subject key identifier: 44:99:6F:3C:00:AD:B3:2D:7F:F8:13:17:EE:81:7E:2E:50:42:6D:37 Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B Certificate issuer: /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft Manifest number: 05B0 Signing time: Wed 26 Aug 2026 22:57:03 +0000 Manifest this update: Wed 26 Aug 2026 22:57:02 +0000 Manifest next update: Wed 02 Sep 2026 22:57:02 +0000 Files and hashes: 1: XrCY701WVcxmtq-Bw83kBi2ALzs.crl (hash: KF2ZXEwEwOu6gfY60UCEz5pka8NV0nByvl3pm5OAX4g=) 2: B4D8E692267111ECA0546981C4F9AE02.roa (hash: CMK57h7d3VJ8Y5Z6L2ancbIus6PT121u0oU6HX7o5tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 22:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3FB, serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Validity Not Before: Aug 26 22:57:02 2026 GMT Not After : Sep 2 22:57:02 2026 GMT Subject: CN=6a8f6f3e-31d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:f1:44:58:47:47:8d:75:51:c4:ed:56:c7: df:7e:65:0d:36:5c:4c:10:89:d5:3e:30:35:5f:be: d2:05:77:1d:d8:c1:ed:dd:fa:7a:04:be:5f:24:f1: 1a:9c:24:3d:0e:71:b6:4e:18:7f:db:75:71:de:f9: 5f:a9:f8:45:4a:12:77:c8:d9:b3:b9:02:9f:be:23: ad:eb:62:fd:94:d6:b3:27:da:77:59:4b:f8:d1:0c: 96:a2:f0:37:84:f2:eb:51:6c:e0:71:f3:44:43:b7: 08:5b:98:bd:56:23:7b:a8:3a:e2:7d:79:7c:b0:e6: de:01:d0:4b:c4:3e:25:af:5d:d7:5a:12:1b:a7:54: 46:cc:c1:07:80:91:9b:8e:7a:58:9c:a2:dd:ff:96: 85:75:e8:a3:62:5a:22:a1:76:0e:9e:3a:85:cd:0e: 4d:2a:8b:90:5a:2e:41:19:fe:4e:9c:3f:6b:83:c4: 6a:7c:3d:45:31:1b:6d:24:c4:4b:6b:ef:aa:ec:53: 82:71:20:f3:ed:fb:f8:d9:f0:36:ad:01:e5:96:27: e7:82:54:97:ff:1d:ca:0c:18:c1:4c:b0:b6:cf:b6: c4:36:5f:36:7f:2d:aa:39:04:ee:e8:91:e9:e9:71: 4d:ad:0c:d7:9e:dd:6d:77:d5:53:a6:b1:b9:ea:bd: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:99:6F:3C:00:AD:B3:2D:7F:F8:13:17:EE:81:7E:2E:50:42:6D:37 X509v3 Authority Key Identifier: keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:34:2f:4e:0d:5e:51:5b:60:58:96:06:e4:df:eb:1e:8d:94: 56:b8:8c:a3:47:c8:3b:7e:cc:6d:95:a1:de:ee:78:f8:87:e1: 4d:02:5f:0b:e2:a8:d8:a3:c0:87:0e:92:15:b3:8c:f2:1e:32: 67:44:86:cd:b5:94:d3:d3:35:9d:0e:24:13:85:eb:1d:46:10: e3:b0:e3:ec:dc:0b:64:93:1b:c7:3d:16:7b:c5:df:d7:f3:4b: 86:64:45:c4:3e:70:bf:73:c6:27:c9:cb:72:70:40:56:dd:4c: 34:84:4b:cb:a5:51:c2:95:27:08:18:2a:00:8f:fe:d7:ee:25: c0:19:26:b5:f7:23:ec:a9:c4:d9:23:b2:aa:0a:d8:04:2f:ad: 1b:25:50:49:7f:9d:8f:48:d7:c8:58:36:78:9a:57:7b:9f:48: 90:9f:9c:e6:7b:0e:88:93:5c:94:5a:91:7a:33:8b:11:ae:73: a1:ae:c3:59:72:06:9d:66:23:3b:05:52:91:09:01:ed:9f:03: 6f:00:46:a3:35:28:dd:da:50:7f:2f:de:ce:ac:5f:41:d9:29: 09:f1:75:ab:2c:26:e4:ef:e7:91:d7:31:67:64:8d:5a:7f:65: 7c:0f:8d:7b:0d:8a:be:94:c9:a7:c5:03:fd:32:b0:47:b2:9b: 9d:95:db:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRkIxMTAvBgNVBAUTKDVFQjA5OEVGNEQ1NjU1Q0M2NkI2QUY4MUMzQ0RFNDA2 MkQ4MDJGM0IwHhcNMjYwODI2MjI1NzAyWhcNMjYwOTAyMjI1NzAyWjAYMRYwFAYD VQQDEw02YThmNmYzZS0zMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQbxRFhHR411UcTtVsfffmUNNlxMEInVPjA1X77SBXcd2MHt3fp6BL5fJPEa nCQ9DnG2Thh/23Vx3vlfqfhFShJ3yNmzuQKfviOt62L9lNazJ9p3WUv40QyWovA3 hPLrUWzgcfNEQ7cIW5i9ViN7qDrifXl8sObeAdBLxD4lr13XWhIbp1RGzMEHgJGb jnpYnKLd/5aFdeijYloioXYOnjqFzQ5NKouQWi5BGf5OnD9rg8RqfD1FMRttJMRL a++q7FOCcSDz7fv42fA2rQHllifnglSX/x3KDBjBTLC2z7bENl82fy2qOQTu6JHp 6XFNrQzXnt1td9VTprG56r1/mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESZbzwA rbMtf/gTF+6Bfi5QQm03MB8GA1UdIwQYMBaAFF6wmO9NVlXMZravgcPN5AYtgC87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNGQi9GREQ0NEMyMjI2 NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1ZjeG10cS1Cdzgza0JpMkFM enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyQ1k3MDFXVmN4bXRxLUJ3ODNrQmkyQUx6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNGQi9GREQ0NEMyMjI2NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1Zj eG10cS1Cdzgza0JpMkFMenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZDQvTg1eUVtgWJYG5N/rHo2UVriMo0fIO37MbZWh3u54+IfhTQJfC+Ko2KPA hw6SFbOM8h4yZ0SGzbWU09M1nQ4kE4XrHUYQ47Dj7NwLZJMbxz0We8Xf1/NLhmRF xD5wv3PGJ8nLcnBAVt1MNIRLy6VRwpUnCBgqAI/+1+4lwBkmtfcj7KnE2SOyqgrY BC+tGyVQSX+dj0jXyFg2eJpXe59IkJ+c5nsOiJNclFqRejOLEa5zoa7DWXIGnWYj OwVSkQkB7Z8DbwBGozUo3dpQfy/ezqxfQdkpCfF1qywm5O/nkdcxZ2SNWn9lfA+N ew2KvpTJp8UD/TKwR7KbnZXbNA== -----END CERTIFICATE-----Generated at Thu Aug 27 06:22:53 2026 by rpki-client