$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: VoeTf7OY1aA829dyTBq59At7yYPel2Qb/VlI1l7y4Ww= Subject key identifier: 83:E7:4F:2A:A0:B7:9E:4A:86:8F:F1:BA:0F:AD:30:85:23:0A:52:18 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: 0159 Signing time: Tue 25 Aug 2026 05:08:51 +0000 Manifest this update: Tue 25 Aug 2026 05:08:50 +0000 Manifest next update: Tue 01 Sep 2026 05:08:50 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: 6qhMo2Omtm24hKgyvvv8xaLKlz+KRMq9pKe/i1Z0bG4=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: N8subGTXgSFo4mT5pf8HJvgdyU5Rcsjvn4+t6H3QhDo=) 3: 6D79D956EF8E11F0A4EF9B52626F56BC.roa (hash: 4G7rkAOPzZxy6QxlsO0//em4aGUKuTqPaZNaxC3+I/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 05:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Aug 25 05:08:50 2026 GMT Not After : Sep 1 05:08:50 2026 GMT Subject: CN=6a8d2363-74fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:8c:90:f5:40:cc:3a:63:65:eb:8a:4b:c0: 86:bf:15:c8:eb:4f:6b:63:9f:f7:ba:9c:d5:c7:54: 37:13:83:e5:04:86:92:ca:24:d1:3c:44:2f:85:05: 62:66:dc:fd:31:1c:fa:80:5a:be:6e:58:98:82:2d: 3b:2d:c6:32:a1:05:94:88:98:06:72:32:e8:2a:c8: 12:ed:70:d1:fa:48:53:61:bf:76:e1:5d:2e:80:f1: 90:bd:54:ff:44:a9:22:2e:2e:8e:55:bf:f5:a6:46: b7:31:aa:ba:2e:ee:be:f7:92:36:6b:1a:00:a8:c6: 10:99:61:0e:9e:10:fe:a3:4f:d3:ba:6d:b3:f1:ef: e4:47:1f:e1:92:ec:65:e1:ae:96:b2:c9:36:35:8c: 75:7c:ea:09:7b:de:1a:1b:27:86:db:1a:57:90:cb: c6:6c:b6:1f:45:4b:d6:a8:aa:b4:a9:a4:51:4e:dc: 98:57:c5:60:fe:35:8a:b4:de:d4:03:19:c3:4e:b2: b6:b0:6d:ae:bd:7c:9b:c1:d0:e4:49:d1:46:84:be: bf:0b:74:de:71:32:33:99:e0:7c:e7:cf:ba:0a:8e: fe:20:38:6c:d2:34:40:26:1c:61:e3:07:c7:89:aa: 40:0b:71:c7:05:7a:fe:a1:1c:9f:ad:c6:7e:ba:ad: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E7:4F:2A:A0:B7:9E:4A:86:8F:F1:BA:0F:AD:30:85:23:0A:52:18 X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8a:83:5d:11:71:f1:43:b0:90:3f:0e:5c:38:a8:88:54:59: 6d:fd:e9:03:ac:d9:ec:b6:16:cb:ea:8a:f0:a7:52:4d:f5:93: b1:10:c2:09:93:fd:28:b1:33:60:52:37:96:8c:c1:08:0a:74: 85:d8:ab:c1:97:1f:b9:6b:97:a3:6f:93:9a:ab:22:50:2e:c0: 92:83:6b:01:4f:53:10:41:30:83:c1:27:24:57:f9:a5:c9:76: cc:51:a1:19:ae:65:1b:4e:a7:dc:99:bd:ab:ac:e1:9f:93:50: 3e:a5:24:00:c8:de:9c:09:9f:ba:aa:a8:9b:47:cf:13:4b:64: 7d:c9:bc:f7:1d:55:4f:a8:71:58:81:4e:76:d4:4a:b7:16:aa: 2b:1f:8e:b8:22:f4:60:e6:43:96:d3:38:18:de:54:db:5d:d4: 5b:bd:4f:15:28:eb:a3:2d:51:4c:2f:9b:17:0f:aa:44:1f:9f: f1:f5:0f:5c:03:0a:0d:f7:c7:5d:32:3b:2e:09:bf:d2:16:b6: db:43:fa:8f:8f:ed:e0:d5:1b:f9:26:fe:a1:41:c6:d9:0d:03: c6:c8:78:cb:c4:9a:45:f3:d0:fe:c9:52:3a:be:17:ea:f5:50: a9:1d:f9:1a:03:0e:01:8c:e7:8a:a0:40:90:78:81:84:a1:f3: a1:4d:c1:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjYwODI1MDUwODUwWhcNMjYwOTAxMDUwODUwWjAYMRYwFAYD VQQDEw02YThkMjM2My03NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WOMkPVAzDpjZeuKS8CGvxXI609rY5/3upzVx1Q3E4PlBIaSyiTRPEQvhQVi Ztz9MRz6gFq+bliYgi07LcYyoQWUiJgGcjLoKsgS7XDR+khTYb924V0ugPGQvVT/ RKkiLi6OVb/1pka3Maq6Lu6+95I2axoAqMYQmWEOnhD+o0/Tum2z8e/kRx/hkuxl 4a6Wssk2NYx1fOoJe94aGyeG2xpXkMvGbLYfRUvWqKq0qaRRTtyYV8Vg/jWKtN7U AxnDTrK2sG2uvXybwdDkSdFGhL6/C3TecTIzmeB858+6Co7+IDhs0jRAJhxh4wfH iapAC3HHBXr+oRyfrcZ+uq1U1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPnTyqg t55Kho/xug+tMIUjClIYMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD Wnk1bTh3QmZaR20yS0pGeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC4qDXRFx8UOwkD8OXDioiFRZbf3pA6zZ7LYWy+qK8KdSTfWTsRDCCZP9KLEz YFI3lozBCAp0hdirwZcfuWuXo2+TmqsiUC7AkoNrAU9TEEEwg8EnJFf5pcl2zFGh Ga5lG06n3Jm9q6zhn5NQPqUkAMjenAmfuqqom0fPE0tkfcm89x1VT6hxWIFOdtRK txaqKx+OuCL0YOZDltM4GN5U213UW71PFSjroy1RTC+bFw+qRB+f8fUPXAMKDffH XTI7Lgm/0ha220P6j4/t4NUb+Sb+oUHG2Q0Dxsh4y8SaRfPQ/slSOr4X6vVQqR35 GgMOAYzniqBAkHiBhKHzoU3B3w== -----END CERTIFICATE-----Generated at Wed Aug 26 20:36:22 2026 by rpki-client