$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: cKHmBz6TqphGMG4j9UljezbZANBl60gMqMUziCMO4TE= Subject key identifier: A7:A1:C9:BE:74:B0:26:66:7D:E6:81:D5:A8:31:53:46:C0:F4:5D:36 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 026A Signing time: Wed 19 Aug 2026 02:43:41 +0000 Manifest this update: Wed 19 Aug 2026 02:43:41 +0000 Manifest next update: Wed 26 Aug 2026 02:43:41 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: 9O05IV/STmfm4O6OvbaMKmdJ7qJ0qPjHcV4wDyTTLA0=) 2: 4C1DFC6E600F11F1B719D3058847A888.roa (hash: XI/6ywdBOKZJkA6ntRfKeh+vbgYn6sdPFXnFJIGb2HE=) 3: 297CAAF2600F11F19DD612FE8747A888.roa (hash: 3caSMOx+p5Jr6uBlGiryWygb4IBsCl4CdewfhyZYMAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Aug 19 02:43:41 2026 GMT Not After : Aug 26 02:43:41 2026 GMT Subject: CN=6a85185d-0847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:c7:f6:e0:b6:1b:0c:58:11:5c:e0:1b:c5: ee:ee:7e:ad:14:aa:71:53:71:36:08:bf:e4:8a:5a: cf:6e:c0:bb:42:30:4e:61:27:13:28:7c:f8:87:3a: d7:12:68:8a:d0:1b:90:8f:80:91:e4:6e:28:26:ad: 46:91:87:cf:0e:34:37:77:c3:ce:c6:ca:d8:3b:29: 7d:ba:e4:13:2f:64:3f:d7:9e:d7:ad:d7:c1:65:6e: 2f:2d:d9:ff:8c:86:45:f6:e3:ea:c6:29:99:9d:0e: 61:61:cd:c1:a4:4c:75:5f:70:d5:e8:4c:62:e2:11: 4e:46:c2:ee:ec:2e:e6:04:d0:da:c6:b9:d3:d9:f0: af:55:35:58:cd:9a:e2:cd:ee:f1:05:08:28:87:ab: 77:c1:a2:ce:3e:45:1c:63:62:ff:7a:67:d8:29:9c: 4a:01:be:20:54:d2:7c:5b:ad:4f:2e:42:61:7b:0b: ee:8a:38:65:d8:06:7f:95:0f:aa:a1:b7:ca:34:e4: e5:f4:9a:b6:64:bb:ab:68:d2:13:a5:c8:f8:c8:87: 28:38:1a:f4:26:ff:01:dc:44:73:d5:9b:33:23:cf: 30:76:f0:dd:3d:8b:41:02:35:da:81:1b:46:7e:bd: 6d:0d:4e:93:04:a9:12:36:fb:79:a3:6d:19:2e:44: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A1:C9:BE:74:B0:26:66:7D:E6:81:D5:A8:31:53:46:C0:F4:5D:36 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:7e:38:d8:06:b2:35:17:09:bb:43:a8:a1:0c:65:cb:c6:d4: 63:b9:f5:97:33:62:b3:9b:c1:27:31:a1:36:9d:b3:82:a5:f7: 84:f4:31:ee:86:26:7e:73:1c:8f:2c:2e:3c:5a:c7:97:c0:38: 18:15:42:c9:e5:a8:fe:f4:a8:5b:ad:6c:1a:49:1f:ce:f8:04: 55:c5:3c:fc:3c:01:c5:83:11:23:06:c6:66:89:0f:72:85:fd: 64:24:67:a4:79:29:24:61:f3:ea:a1:d4:be:8e:78:7f:22:79: 8b:5d:9a:9f:97:f5:22:07:46:87:35:f8:44:7e:19:c6:cf:ec: 99:c8:1d:20:1e:b1:69:be:4a:31:8a:40:60:3a:62:4c:00:e5: a6:2f:03:f8:cf:f8:0f:7f:25:b5:29:ef:51:fb:24:80:66:6b: 59:0f:bb:7e:66:c9:06:a1:5e:fd:65:a8:bf:02:7e:26:08:99: 2d:b7:a1:93:88:b7:89:ed:cc:cf:c3:dc:1f:0a:59:b8:ca:36: ca:d4:3a:1d:44:7a:28:54:fd:2a:9d:22:d7:29:f1:b8:af:71: d1:bf:f0:5f:98:2c:fb:5d:23:a4:3e:9d:81:c1:ae:03:d6:b9: 54:17:d4:67:1a:18:68:7f:ee:86:0c:78:c1:2d:48:b3:76:51: 3b:b8:4d:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjYwODE5MDI0MzQxWhcNMjYwODI2MDI0MzQxWjAYMRYwFAYD VQQDEw02YTg1MTg1ZC0wODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2jH9uC2GwxYEVzgG8Xu7n6tFKpxU3E2CL/kilrPbsC7QjBOYScTKHz4hzrX EmiK0BuQj4CR5G4oJq1GkYfPDjQ3d8POxsrYOyl9uuQTL2Q/157XrdfBZW4vLdn/ jIZF9uPqximZnQ5hYc3BpEx1X3DV6Exi4hFORsLu7C7mBNDaxrnT2fCvVTVYzZri ze7xBQgoh6t3waLOPkUcY2L/emfYKZxKAb4gVNJ8W61PLkJhewvuijhl2AZ/lQ+q obfKNOTl9Jq2ZLuraNITpcj4yIcoOBr0Jv8B3ERz1ZszI88wdvDdPYtBAjXagRtG fr1tDU6TBKkSNvt5o20ZLkS+5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKehyb50 sCZmfeaB1agxU0bA9F02MB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr3442AayNRcJu0OooQxly8bUY7n1lzNis5vBJzGhNp2zgqX3hPQx7oYmfnMc jywuPFrHl8A4GBVCyeWo/vSoW61sGkkfzvgEVcU8/DwBxYMRIwbGZokPcoX9ZCRn pHkpJGHz6qHUvo54fyJ5i12an5f1IgdGhzX4RH4Zxs/smcgdIB6xab5KMYpAYDpi TADlpi8D+M/4D38ltSnvUfskgGZrWQ+7fmbJBqFe/WWovwJ+JgiZLbehk4i3ie3M z8PcHwpZuMo2ytQ6HUR6KFT9Kp0i1ynxuK9x0b/wX5gs+10jpD6dgcGuA9a5VBfU ZxoYaH/uhgx4wS1Is3ZRO7hN9w== -----END CERTIFICATE-----Generated at Wed Aug 19 11:44:59 2026 by rpki-client