$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: ich9ANbO8GiKi1oeT1iqd14WsqoirMUuDbIYkgcDI0A= Subject key identifier: C0:2A:CD:EF:80:16:D3:47:3A:94:0B:9D:DF:38:D5:D4:4F:F0:4C:49 Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 02A8 Signing time: Wed 19 Aug 2026 02:03:33 +0000 Manifest this update: Wed 19 Aug 2026 02:03:33 +0000 Manifest next update: Wed 26 Aug 2026 02:03:33 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: iTZzRGIkND+JiN86k87ICEvSVODxSJVS0nqZTjlzZ1o=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: caBGpQ3sxKtg4mxskMeTrM5eCKMi3Wf+XfGL8QuMB48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Aug 19 02:03:33 2026 GMT Not After : Aug 26 02:03:33 2026 GMT Subject: CN=6a850ef5-59b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7b:24:a3:dc:84:b6:e9:ec:7a:2e:e2:29:54: 86:2b:01:d3:62:43:f5:29:24:ea:3e:e5:80:64:27: ed:47:4a:e5:56:7d:37:fb:fa:9b:0f:3a:ff:a8:aa: c5:c2:51:15:71:e7:df:a0:c2:2e:b2:ae:ba:49:92: e1:77:5a:c2:9f:0c:34:68:f6:9d:89:0e:05:93:73: 9e:6c:1c:e8:15:97:e2:43:f7:fd:ea:c3:24:81:43: 16:f3:8c:53:37:e0:7e:25:6a:06:cc:e4:b5:e1:31: f4:02:17:1e:32:16:1f:fc:a5:0a:c2:00:4e:99:3f: f5:a7:28:03:45:c8:83:b1:6f:8a:6d:b2:d4:1d:47: 0f:c4:fd:63:0c:ae:a6:ca:c9:1c:1f:9e:17:48:b5: 21:46:b9:c1:4d:86:ba:6c:79:25:9a:ee:6c:54:95: 8e:9f:6c:75:db:5c:7b:4a:fd:72:ff:f7:07:06:35: eb:53:88:72:af:90:98:35:27:b7:75:e9:ba:27:58: f7:fe:9c:44:1b:93:7c:63:c0:14:85:6d:9b:49:98: 22:72:6f:9a:a8:c6:4e:6b:fe:03:08:7f:b5:d2:9c: 17:4d:ca:21:01:f0:40:5d:5f:6c:e9:6d:24:29:ad: 7a:83:50:35:99:9e:42:57:dc:4d:29:cf:a8:c5:d2: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2A:CD:EF:80:16:D3:47:3A:94:0B:9D:DF:38:D5:D4:4F:F0:4C:49 X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:28:f1:74:48:81:b4:61:a1:63:54:6d:aa:50:3c:02:30:ab: ad:0b:3f:12:df:04:bf:1f:9c:4d:7f:59:7b:eb:6d:e6:46:8b: 57:40:82:e4:85:e9:3b:b0:e2:83:db:41:4d:19:8d:a7:d5:49: d7:a2:0a:05:73:5f:ac:9d:50:4c:f2:d4:51:5f:70:ee:6d:1f: 17:f6:64:8e:1c:37:4c:6c:b6:b0:56:12:f1:b6:2c:75:1b:30: 39:20:e9:9e:a6:74:9a:ea:cf:32:eb:7c:cf:56:6c:e1:28:1c: c7:45:b7:34:77:57:28:d3:f1:e8:37:2d:9b:40:87:9a:26:55: 52:8d:5e:33:f8:47:06:7c:dc:e7:49:59:af:e7:a5:2f:08:b0: 87:00:49:a1:33:4c:75:bc:50:a8:2c:0b:65:af:0e:21:9b:e7: b9:33:20:ce:07:c5:b4:eb:b1:43:b4:89:e8:84:1e:9d:a5:63: 3d:dc:46:0f:f7:0b:19:e1:bb:75:36:a7:6c:06:3a:9f:af:0f: c8:df:1f:d7:f6:da:84:f6:77:3d:cc:12:e4:84:01:51:bd:0d: 3c:58:78:70:55:17:db:e4:dc:8f:33:f2:c9:24:2c:ec:87:f1: 2b:a6:90:4a:ea:6e:2f:58:5a:16:f4:56:1e:2f:69:43:18:8e: a4:c6:6e:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjYwODE5MDIwMzMzWhcNMjYwODI2MDIwMzMzWjAYMRYwFAYD VQQDEw02YTg1MGVmNS01OWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7nsko9yEtunsei7iKVSGKwHTYkP1KSTqPuWAZCftR0rlVn03+/qbDzr/qKrF wlEVceffoMIusq66SZLhd1rCnww0aPadiQ4Fk3OebBzoFZfiQ/f96sMkgUMW84xT N+B+JWoGzOS14TH0AhceMhYf/KUKwgBOmT/1pygDRciDsW+KbbLUHUcPxP1jDK6m yskcH54XSLUhRrnBTYa6bHklmu5sVJWOn2x121x7Sv1y//cHBjXrU4hyr5CYNSe3 dem6J1j3/pxEG5N8Y8AUhW2bSZgicm+aqMZOa/4DCH+10pwXTcohAfBAXV9s6W0k Ka16g1A1mZ5CV9xNKc+oxdLyyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMAqze+A FtNHOpQLnd841dRP8ExJMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALijxdEiBtGGhY1RtqlA8AjCrrQs/Et8Evx+cTX9Ze+tt5kaLV0CC5IXpO7Di g9tBTRmNp9VJ16IKBXNfrJ1QTPLUUV9w7m0fF/Zkjhw3TGy2sFYS8bYsdRswOSDp nqZ0murPMut8z1Zs4Sgcx0W3NHdXKNPx6Dctm0CHmiZVUo1eM/hHBnzc50lZr+el LwiwhwBJoTNMdbxQqCwLZa8OIZvnuTMgzgfFtOuxQ7SJ6IQenaVjPdxGD/cLGeG7 dTanbAY6n68PyN8f1/bahPZ3PcwS5IQBUb0NPFh4cFUX2+TcjzPyySQs7IfxK6aQ SupuL1haFvRWHi9pQxiOpMZuww== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:36 2026 by rpki-client