$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: 5gAk7o/8PSAjFRDQM7sWWE3y74pNkqaGqu8d5WzGWy4= Subject key identifier: 95:AF:D3:CD:6A:BE:08:B2:C5:8F:78:FB:23:1F:B0:BD:74:5A:5E:71 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 35AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 3591 Signing time: Thu 20 Aug 2026 14:46:10 +0000 Manifest this update: Thu 20 Aug 2026 14:46:10 +0000 Manifest next update: Thu 27 Aug 2026 14:46:10 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: 6Wcy9JabH5CCeUFhWjvtWXzAcC4lwiBSQw/IYY+FryE=) 2: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: INnaV0pNcRBw1wlHuRp8r9xMtrJx1g7hzwjOKtk2crw=) 3: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: u0liUKUx/5cqgAqMwjK3Jr9++ba1PKf6CQYNnuhwu/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13742 (0x35ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Aug 20 14:46:10 2026 GMT Not After : Aug 27 14:46:10 2026 GMT Subject: CN=6a871332-7c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6d:e1:78:02:c1:64:7d:38:d4:00:64:22:30: f8:a3:14:fc:49:37:f6:2f:77:6c:79:1b:98:19:87: df:26:98:50:02:d9:2f:6c:de:db:11:3c:87:a3:56: ad:00:a6:87:cb:1d:8b:e4:32:a9:38:32:ef:d3:90: 68:88:63:26:bf:e9:8b:4d:1a:04:aa:c2:14:77:a2: c2:60:4d:94:cd:8b:50:fd:60:f8:66:69:b9:80:85: a9:8a:23:3c:ac:3e:2b:8e:80:7f:68:78:fb:57:ff: c7:ce:42:46:89:09:05:b3:35:87:8a:e4:d1:dc:23: 3c:f1:7d:76:34:1e:c9:c1:49:5e:29:2b:96:af:92: e8:16:96:fd:78:58:87:98:9c:9f:1c:ac:bb:c4:29: 3f:3c:00:18:a2:e7:2c:1e:27:de:64:e5:b9:f8:7d: a6:c5:6f:ee:fc:3a:b5:90:44:32:26:93:5b:03:95: 3d:2e:eb:81:e1:45:1d:ff:f8:34:55:c0:44:cc:22: 48:3e:29:2e:0b:7d:41:78:d3:d2:19:62:b4:7c:1e: 8b:ba:b6:99:85:d1:df:39:46:be:84:8e:cd:7a:d6: e6:a2:dd:88:7e:f3:06:90:47:d0:db:23:43:ce:e3: 2c:d8:3f:c0:e6:a6:57:64:df:0e:37:28:05:d8:a6: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:D3:CD:6A:BE:08:B2:C5:8F:78:FB:23:1F:B0:BD:74:5A:5E:71 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ff:f2:92:4b:5a:d7:14:be:1c:d9:4f:b7:fc:8f:af:37:8c: a6:60:9f:a1:c9:f8:9d:8d:07:6b:8d:7c:43:4c:59:6e:70:89: 73:1f:22:b0:96:be:c4:89:69:0f:a0:52:2a:07:e2:5e:59:c4: 3a:f6:97:71:d3:01:f2:5b:19:67:00:62:bc:04:ba:ff:f9:dd: 8c:8a:41:72:d2:1d:af:31:73:a4:4d:80:a2:e8:f3:f1:f2:44: 37:7f:fd:5c:5c:a5:0b:e7:91:07:08:3c:0c:79:4c:2d:9b:76: f4:ed:f8:30:38:bd:f7:b4:d5:61:18:ea:1c:c7:a8:2a:3c:37: e0:ab:a3:ed:c8:ee:5f:72:93:d0:6c:a0:fc:b5:67:51:32:1d: 33:05:2c:cf:f3:9b:d3:2b:97:fa:c5:33:be:62:21:38:2d:ed: 14:19:7f:e4:5f:35:29:2b:88:6f:46:25:a1:76:5d:50:93:08: ea:bc:4c:07:f9:d5:46:e7:c9:0d:d8:d3:a4:83:a6:31:bd:d3: ba:4b:59:ab:fc:69:5a:31:2d:2c:3d:73:ef:b2:f4:7a:64:e5: 55:c9:0b:65:54:50:d3:44:e2:06:74:85:11:1e:cc:82:bf:f4: eb:a1:09:c1:e4:0b:21:55:5f:5a:4e:00:98:e9:ad:1d:20:1a: 0d:78:6a:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjYwODIwMTQ0NjEwWhcNMjYwODI3MTQ0NjEwWjAYMRYwFAYD VQQDEw02YTg3MTMzMi03YzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn23heALBZH041ABkIjD4oxT8STf2L3dseRuYGYffJphQAtkvbN7bETyHo1at AKaHyx2L5DKpODLv05BoiGMmv+mLTRoEqsIUd6LCYE2UzYtQ/WD4Zmm5gIWpiiM8 rD4rjoB/aHj7V//HzkJGiQkFszWHiuTR3CM88X12NB7JwUleKSuWr5LoFpb9eFiH mJyfHKy7xCk/PAAYoucsHifeZOW5+H2mxW/u/Dq1kEQyJpNbA5U9LuuB4UUd//g0 VcBEzCJIPikuC31BeNPSGWK0fB6LuraZhdHfOUa+hI7Netbmot2IfvMGkEfQ2yND zuMs2D/A5qZXZN8ONygF2Kbk1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWv081q vgiyxY94+yMfsL10Wl5xMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATP/ykkta1xS+HNlPt/yPrzeMpmCfocn4nY0Ha418Q0xZbnCJcx8isJa+xIlp D6BSKgfiXlnEOvaXcdMB8lsZZwBivAS6//ndjIpBctIdrzFzpE2Aoujz8fJEN3/9 XFylC+eRBwg8DHlMLZt29O34MDi997TVYRjqHMeoKjw34Kuj7cjuX3KT0Gyg/LVn UTIdMwUsz/Ob0yuX+sUzvmIhOC3tFBl/5F81KSuIb0YloXZdUJMI6rxMB/nVRufJ DdjTpIOmMb3TuktZq/xpWjEtLD1z77L0emTlVckLZVRQ00TiBnSFER7Mgr/066EJ weQLIVVfWk4AmOmtHSAaDXhqWA== -----END CERTIFICATE-----Generated at Sat Aug 22 11:01:31 2026 by rpki-client