$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json) Hash identifier: 0U5uCTTo9ULWZkXFjo4ZHqpJKZns63lPlouMfvzImvU= Subject key identifier: D1:46:E4:B1:84:6F:45:2B:BE:DE:93:AA:3F:B4:68:A2:17:AA:17:C8 Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft Manifest number: 0643 Signing time: Tue 18 Aug 2026 23:03:32 +0000 Manifest this update: Tue 18 Aug 2026 23:03:32 +0000 Manifest next update: Tue 25 Aug 2026 23:03:32 +0000 Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: HnMQoMFJt4fzaNOrE9KP3ktODN05DltxO3UDkooZqEY=) 2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: Atm+YjJWu/U6U/w3n/CtX93wrO07yuhb/OEeKyPt76Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Validity Not Before: Aug 18 23:03:32 2026 GMT Not After : Aug 25 23:03:32 2026 GMT Subject: CN=6a84e4c4-5788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:d4:3d:1b:97:a5:90:04:16:99:8a:21:16: 6f:f0:46:fd:78:03:a0:84:e2:c4:d4:d7:3b:f5:35: 22:46:29:8e:40:23:51:21:c4:5e:c8:8f:af:6f:cd: f9:73:aa:c5:9d:49:a8:0b:a9:ab:eb:69:d6:a9:7e: 5b:82:6c:5f:0e:bf:72:f1:48:e6:e2:7a:9f:49:00: 17:d5:4d:90:60:4f:99:dc:76:de:fe:02:38:c6:42: 62:28:e6:b3:1c:95:55:59:01:da:cf:f0:d5:b0:9b: aa:13:88:a0:92:cf:75:23:e8:f0:9d:00:e4:a5:70: d5:07:bf:f1:8b:4f:64:11:8d:6d:9c:22:27:b9:51: 31:63:da:46:1c:e6:78:62:51:21:6e:03:b5:9c:dc: 23:5b:c3:bf:3a:e4:95:ed:89:47:45:65:d1:08:bd: b4:61:ff:1b:86:b3:57:91:1f:59:50:85:8c:db:97: bb:96:c7:27:4b:6e:ba:a2:0b:fc:5a:63:0d:05:e0: 25:44:c5:dc:90:71:9d:b9:76:e2:ec:eb:99:14:a2: 82:a2:63:d2:b0:08:e2:06:42:33:61:7d:ef:6f:3c: 45:5d:30:ad:41:02:6d:84:d9:4e:88:24:70:cf:29: 20:08:93:64:b5:5a:7d:6a:85:02:f7:c3:1d:dd:99: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:46:E4:B1:84:6F:45:2B:BE:DE:93:AA:3F:B4:68:A2:17:AA:17:C8 X509v3 Authority Key Identifier: keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bd:e5:85:fb:4b:77:87:7b:55:19:bb:ed:da:71:d7:be:b4: 36:8d:e3:dd:53:b4:3a:ff:78:e9:5b:77:55:41:c9:47:bb:e5: 9c:6f:92:39:7a:c7:09:9d:00:8c:f6:52:24:ff:cc:e1:64:cd: 45:35:6d:95:bb:6f:1d:b3:0a:44:08:19:f7:5c:dd:6e:30:30: 87:df:0c:10:f6:77:13:e2:eb:8b:95:c3:db:63:d0:c2:c7:18: 4c:9e:08:49:42:56:43:b2:5c:71:ad:d9:f0:e5:74:dc:5e:06: ac:a3:99:fc:59:c2:a1:fd:a2:1b:48:c8:18:08:d5:35:90:7a: 74:72:75:6e:79:15:e2:c4:5a:b1:12:5b:4e:62:8a:f5:a2:af: 43:d1:69:54:7c:7d:94:b3:07:74:80:be:90:50:1b:8c:b0:33: 3a:23:13:88:7a:d2:a8:3e:63:3b:16:bb:0e:e1:a5:c6:3c:7f: 95:b4:a4:b3:5b:4b:5a:d7:0e:46:ca:d4:e4:91:3b:b6:96:de: 05:e8:4a:ad:86:0a:c8:02:b4:fc:54:34:93:e5:71:e1:a3:e1: 5c:94:ad:95:ef:cc:e3:ee:1c:7d:94:40:5a:4f:9d:52:86:7a: 9a:bc:9b:6b:9a:10:a1:7a:f9:b5:da:d9:16:46:3f:57:5c:94: 8d:3b:cc:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RUIxMTAvBgNVBAUTKDVDMzY1QjE3MzFDQTdDRTdEQjgxREQ1NzEzMEJENEQ2 NDMwMTlCNUUwHhcNMjYwODE4MjMwMzMyWhcNMjYwODI1MjMwMzMyWjAYMRYwFAYD VQQDEw02YTg0ZTRjNC01Nzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxTUPRuXpZAEFpmKIRZv8Eb9eAOghOLE1Nc79TUiRimOQCNRIcReyI+vb835 c6rFnUmoC6mr62nWqX5bgmxfDr9y8Ujm4nqfSQAX1U2QYE+Z3Hbe/gI4xkJiKOaz HJVVWQHaz/DVsJuqE4igks91I+jwnQDkpXDVB7/xi09kEY1tnCInuVExY9pGHOZ4 YlEhbgO1nNwjW8O/OuSV7YlHRWXRCL20Yf8bhrNXkR9ZUIWM25e7lscnS266ogv8 WmMNBeAlRMXckHGduXbi7OuZFKKComPSsAjiBkIzYX3vbzxFXTCtQQJthNlOiCRw zykgCJNktVp9aoUC98Md3ZnN1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFG5LGE b0Urvt6Tqj+0aKIXqhfIMB8GA1UdIwQYMBaAFFw2Wxcxynzn24HdVxML1NZDAZte MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFQi83NzE0OEFDNkVC MDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZPZmJnZDFYRXd2VTFrTUJt MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEWmJGekhLZk9mYmdkMVhFd3ZVMWtNQm0xNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFQi83NzE0OEFDNkVCMDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZP ZmJnZDFYRXd2VTFrTUJtMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnL3lhftLd4d7VRm77dpx1760No3j3VO0Ov946Vt3VUHJR7vlnG+SOXrHCZ0A jPZSJP/M4WTNRTVtlbtvHbMKRAgZ91zdbjAwh98MEPZ3E+Lri5XD22PQwscYTJ4I SUJWQ7Jcca3Z8OV03F4GrKOZ/FnCof2iG0jIGAjVNZB6dHJ1bnkV4sRasRJbTmKK 9aKvQ9FpVHx9lLMHdIC+kFAbjLAzOiMTiHrSqD5jOxa7DuGlxjx/lbSks1tLWtcO RsrU5JE7tpbeBehKrYYKyAK0/FQ0k+Vx4aPhXJStle/M4+4cfZRAWk+dUoZ6mryb a5oQoXr5tdrZFkY/V1yUjTvMNw== -----END CERTIFICATE-----Generated at Wed Aug 19 13:40:49 2026 by rpki-client