$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: zJPETqsrtr70VaonYSpSHQInpLHAlHvV7Zp4CvrnTgk= Subject key identifier: 3E:18:8E:19:46:AF:6F:DB:1B:6F:FF:62:39:CB:57:34:85:04:10:46 Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 01F9 Signing time: Wed 19 Aug 2026 03:51:30 +0000 Manifest this update: Wed 19 Aug 2026 03:51:29 +0000 Manifest next update: Wed 26 Aug 2026 03:51:29 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: aruB7fmF9l3ioh2OErpAHq3VtOXqdakSawXR7PRI41w=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: alib+UnyJdcp5QK+xSWFYIjYS/kjVCRiqsWyoxYGVsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: Aug 19 03:51:29 2026 GMT Not After : Aug 26 03:51:29 2026 GMT Subject: CN=6a852842-35b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:a9:20:43:3d:1a:8b:01:31:32:c2:1b:1c: 23:4f:ed:37:0f:6a:8a:55:c8:f4:e3:58:5d:12:00: 34:65:f1:a7:3d:35:8e:bd:ff:93:fb:e5:49:fa:b5: 1d:8e:76:a6:20:52:72:17:2d:69:6c:a7:cd:5b:33: f9:24:19:cd:40:50:bd:da:53:ef:24:39:29:cf:63: 41:05:54:3a:51:a2:6e:ea:29:d0:56:5e:1b:60:a3: 6c:57:8f:d9:b4:73:40:e1:19:8a:6e:1c:f2:62:1c: 2d:d4:72:a1:35:56:d9:37:11:74:db:72:7a:ee:5e: e3:10:53:8a:8c:a0:ef:89:86:8e:24:9a:23:9d:3a: e3:89:00:f5:4d:10:79:92:20:5a:0f:01:77:78:51: f3:b6:e8:72:6f:17:f3:a9:61:0e:0f:dc:8c:bb:f9: 35:ce:a4:7b:50:ca:0a:78:a8:46:54:63:0c:ca:ba: 08:b5:c7:64:c0:6f:32:05:cf:2d:1a:f3:c6:3b:1b: 56:d7:a1:28:f6:50:6d:49:e1:98:cd:1a:27:b9:a7: 2d:8c:1b:a7:fb:b4:35:a0:44:cc:32:ad:c8:9a:3c: ea:c1:8f:3d:37:38:89:16:46:67:1b:2d:95:53:b9: c9:ea:da:fd:b8:29:d7:1c:cc:9d:c3:43:42:90:20: 46:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:18:8E:19:46:AF:6F:DB:1B:6F:FF:62:39:CB:57:34:85:04:10:46 X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4c:bd:15:50:c5:fe:48:7a:30:b4:0c:5b:8e:a5:68:73:8c: a2:13:60:90:97:95:be:f8:84:1c:8a:75:35:28:56:d8:13:6e: 69:68:04:33:9c:0a:3b:94:ea:36:d0:e4:0f:12:ce:40:63:76: b8:82:2e:54:f1:26:80:fb:2c:d5:1f:05:c9:e0:77:0b:8d:57: f6:d5:c0:eb:ea:21:8b:dc:ae:ea:df:40:4d:4f:98:5f:11:83: 08:b4:a9:de:ee:97:31:b7:46:1a:14:6f:d7:d3:bd:ce:fb:5b: 79:3c:c3:b6:76:22:45:53:57:cc:2c:a9:aa:17:ff:a2:d4:84: 6b:2e:ee:93:77:39:bc:1c:69:18:9d:52:0c:47:b3:06:b0:c6: 0b:34:8d:9c:63:b7:36:c1:0a:fb:d6:68:e6:b0:89:0b:73:49: 34:0a:0d:b1:6e:72:0b:6c:34:3e:35:21:98:a9:0c:8c:15:25: f2:8f:94:1a:74:c5:3d:de:dc:f6:6b:6b:70:f3:e8:07:7e:46: 81:99:94:35:e4:1f:80:6d:9f:9b:87:83:45:88:70:2e:38:20: 9a:92:ac:9e:6f:44:f8:66:cc:ab:cb:03:e2:dc:dd:95:29:05: 4d:1e:b3:e8:61:a5:3b:00:a4:d0:28:6e:d9:b0:e5:17:19:ca: 70:a3:cd:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjYwODE5MDM1MTI5WhcNMjYwODI2MDM1MTI5WjAYMRYwFAYD VQQDEw02YTg1Mjg0Mi0zNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmeipIEM9GosBMTLCGxwjT+03D2qKVcj041hdEgA0ZfGnPTWOvf+T++VJ+rUd jnamIFJyFy1pbKfNWzP5JBnNQFC92lPvJDkpz2NBBVQ6UaJu6inQVl4bYKNsV4/Z tHNA4RmKbhzyYhwt1HKhNVbZNxF023J67l7jEFOKjKDviYaOJJojnTrjiQD1TRB5 kiBaDwF3eFHztuhybxfzqWEOD9yMu/k1zqR7UMoKeKhGVGMMyroItcdkwG8yBc8t GvPGOxtW16Eo9lBtSeGYzRonuactjBun+7Q1oETMMq3ImjzqwY89NziJFkZnGy2V U7nJ6tr9uCnXHMydw0NCkCBGwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4YjhlG r2/bG2//YjnLVzSFBBBGMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh0y9FVDF/kh6MLQMW46laHOMohNgkJeVvviEHIp1NShW2BNuaWgEM5wKO5Tq NtDkDxLOQGN2uIIuVPEmgPss1R8FyeB3C41X9tXA6+ohi9yu6t9ATU+YXxGDCLSp 3u6XMbdGGhRv19O9zvtbeTzDtnYiRVNXzCypqhf/otSEay7uk3c5vBxpGJ1SDEez BrDGCzSNnGO3NsEK+9Zo5rCJC3NJNAoNsW5yC2w0PjUhmKkMjBUl8o+UGnTFPd7c 9mtrcPPoB35GgZmUNeQfgG2fm4eDRYhwLjggmpKsnm9E+GbMq8sD4tzdlSkFTR6z 6GGlOwCk0Chu2bDlFxnKcKPNoQ== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:44 2026 by rpki-client