$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft File: XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json) Hash identifier: jA+VgVMJgovYdWDF3pCb66vTHJ5hQT0GWQoVYuC9bF8= Subject key identifier: 11:AF:38:20:66:91:BE:62:AA:1F:D0:50:88:23:BF:74:D7:BD:81:F9 Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft Manifest number: 96 Signing time: Wed 19 Aug 2026 08:07:29 +0000 Manifest this update: Wed 19 Aug 2026 08:07:29 +0000 Manifest next update: Wed 26 Aug 2026 08:07:29 +0000 Files and hashes: 1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: VpFZsZf1wox20VbTtqR47SP/cDikGfJcm2ZKKVU6LQw=) 2: 40506BD64F6311F1B33586E9C4833773.roa (hash: /xujX/eflt5wRcWaBi7MbQ6JbnMkzZt1Nfl3vZK9gwA=) 3: 6273B5964F6411F1B5990A8BC5833773.roa (hash: y3V7Ac3VRTVKkf/zwxo2Yj3w4U6T8D7jfnzMbqhRIFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Validity Not Before: Aug 19 08:07:29 2026 GMT Not After : Aug 26 08:07:29 2026 GMT Subject: CN=6a856441-6442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fe:2a:cc:75:68:f7:09:8c:bc:cd:7b:f1:3e: 7c:fe:89:a3:25:bd:cc:cd:20:29:76:00:c6:20:b9: 64:74:d7:1e:6e:3f:2e:e7:21:d4:23:39:cc:a4:5e: 98:ef:2f:8b:fd:36:33:ef:29:af:d5:ed:53:08:04: 96:cb:f4:b3:4f:61:db:88:ea:24:80:33:17:05:1b: 41:67:06:13:83:79:ba:b0:86:80:fe:d3:9d:b3:07: 70:01:d7:56:70:79:97:1a:d1:06:4e:4c:63:d0:58: 52:6b:2d:d0:f4:81:74:fe:dc:5e:03:9a:8d:91:aa: 32:09:ca:2b:5a:10:4b:ca:5f:60:da:67:5c:2a:54: 94:60:8f:18:25:03:11:88:6f:59:1e:e9:a1:e6:03: d6:18:66:75:a0:dc:35:75:f3:59:70:b5:a2:78:9c: 9b:6a:3e:61:75:26:0b:6e:12:4f:9d:05:19:db:36: dc:cc:d0:ca:5a:da:f9:5f:b5:f1:c0:80:1e:43:8d: 88:9d:4a:69:e1:c6:de:1a:8e:83:6f:42:3a:18:02: 3f:74:4d:90:45:1c:bc:75:1c:c8:df:28:a2:91:c7: 7a:e5:13:a0:6d:be:93:bc:05:a5:d9:d6:1d:af:0a: 72:2a:38:6b:ca:68:31:07:f0:86:c4:07:95:16:00: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:38:20:66:91:BE:62:AA:1F:D0:50:88:23:BF:74:D7:BD:81:F9 X509v3 Authority Key Identifier: keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c8:49:32:2a:d2:f6:15:c7:9d:4a:9d:b3:a5:bd:4d:55:fe: d2:bb:2f:ff:46:42:a1:a7:21:c3:bf:64:5a:eb:f1:c6:9f:b6: ff:2e:df:bf:31:46:d6:d2:8a:e7:15:24:fe:50:12:9e:b3:b5: 5d:ad:f1:43:43:51:fc:dc:66:4c:98:17:38:73:8c:04:80:32: 88:4f:41:c7:35:cc:d4:54:90:1a:a8:b7:be:52:65:f1:ad:82: 68:a3:5f:97:df:a9:3d:d4:9c:f6:92:9e:17:30:fe:de:70:6f: 6d:ae:00:e8:16:fd:ef:e3:af:7a:0a:b1:52:d2:77:80:0e:29: 77:1d:55:89:68:3d:8c:0e:f3:9c:ec:9f:59:49:5f:e9:a9:d0: 88:59:db:34:63:2e:84:4b:92:a9:0e:1f:ad:8e:e5:40:f3:1c: b8:81:01:73:84:fe:17:d5:a1:17:14:6f:d0:dd:ee:9d:05:7f: 02:96:b6:bd:4f:45:f5:1f:4f:ea:c4:50:a2:4e:33:9d:4a:4f: 25:9e:c3:57:d5:ea:eb:9c:41:b6:8c:ac:5f:16:e4:74:b2:44: c6:6d:4b:27:1d:00:60:c0:a1:60:e8:09:fa:d7:96:f6:7c:54: d5:76:b9:34:2f:33:ce:18:98:3c:95:c6:b9:7a:3b:bd:90:af: d3:33:1e:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNBNUIxMTAvBgNVBAUTKDVENEY0MTJBRTQ4MDEwRkU1NDg3RjAxOEYxNzFBOUM2 NDY5RDlBQzUwHhcNMjYwODE5MDgwNzI5WhcNMjYwODI2MDgwNzI5WjAYMRYwFAYD VQQDEw02YTg1NjQ0MS02NDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAof4qzHVo9wmMvM178T58/omjJb3MzSApdgDGILlkdNcebj8u5yHUIznMpF6Y 7y+L/TYz7ymv1e1TCASWy/SzT2HbiOokgDMXBRtBZwYTg3m6sIaA/tOdswdwAddW cHmXGtEGTkxj0FhSay3Q9IF0/txeA5qNkaoyCcorWhBLyl9g2mdcKlSUYI8YJQMR iG9ZHumh5gPWGGZ1oNw1dfNZcLWieJybaj5hdSYLbhJPnQUZ2zbczNDKWtr5X7Xx wIAeQ42InUpp4cbeGo6Db0I6GAI/dE2QRRy8dRzI3yiikcd65ROgbb6TvAWl2dYd rwpyKjhrymgxB/CGxAeVFgBmiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGvOCBm kb5iqh/QUIgjv3TXvYH5MB8GA1UdIwQYMBaAFF1PQSrkgBD+VIfwGPFxqcZGnZrF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0E1Qi9EMjVEODY4RUMw M0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQNVVoX0FZOFhHcHhrYWRt c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1zVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0E1Qi9EMjVEODY4RUMwM0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQ NVVoX0FZOFhHcHhrYWRtc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm8hJMirS9hXHnUqds6W9TVX+0rsv/0ZCoachw79kWuvxxp+2/y7fvzFG1tKK 5xUk/lASnrO1Xa3xQ0NR/NxmTJgXOHOMBIAyiE9BxzXM1FSQGqi3vlJl8a2CaKNf l9+pPdSc9pKeFzD+3nBvba4A6Bb97+OvegqxUtJ3gA4pdx1ViWg9jA7znOyfWUlf 6anQiFnbNGMuhEuSqQ4frY7lQPMcuIEBc4T+F9WhFxRv0N3unQV/Apa2vU9F9R9P 6sRQok4znUpPJZ7DV9Xq65xBtoysXxbkdLJExm1LJx0AYMChYOgJ+teW9nxU1Xa5 NC8zzhiYPJXGuXo7vZCv0zMeaA== -----END CERTIFICATE-----Generated at Wed Aug 19 17:56:36 2026 by rpki-client