$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: xYxsc465qRHup0cqkqTJxq1DHg/230vzlRNBx+pptHA= Subject key identifier: 4E:48:05:20:4D:F8:1E:7E:B3:5F:44:75:95:CD:12:D6:E6:C3:16:67 Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 0A00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 09D5 Signing time: Thu 20 Aug 2026 19:50:27 +0000 Manifest this update: Thu 20 Aug 2026 19:50:26 +0000 Manifest next update: Thu 27 Aug 2026 19:50:26 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: 2h1L1p4aZqDW8Ex4h8QWdscs0jb/BNf5JM51su2MLcs=) 2: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: rC7/cLhAbtNiKypXkgnC2P4P5so5I+YnfNchz84YMA0=) 3: 7B3252CC014911F1B56055C9516F56BC.roa (hash: Q4zhbv5IYafCWF+cKZ+N5EqVvhygYSFdunW/fgxR9Ms=) 4: 03706138786411EC8624EB12C4F9AE02.roa (hash: BrG7Q3Tkykmo9xilseoxsNjwLBVZ7ijytYCkK61f/ms=) 5: 2BFE357EF06211F08763644E5C6F56BC.roa (hash: 7NcbnhD/HJ8NBFUu7bu5fda+cHjTW1crabfldM6QJwo=) 6: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: 95lSl7vVPRfDQ24xYlePTZRf3aCd1VmR4GdHAdsIHtU=) 7: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: +RYGeu7uX4uBBcHWusqQhkXqLpcB4R1AKfIKops3PNA=) 8: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: soe5Moz4gQVVes64vfH27mxJAWxDV9xSP3vrYYcdBj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Aug 20 19:50:26 2026 GMT Not After : Aug 27 19:50:26 2026 GMT Subject: CN=6a875a83-69f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:24:8f:cc:61:4a:47:41:1e:73:17:c2:d4: f7:ea:c2:fa:bf:28:fa:ad:4b:80:3f:a6:47:d2:8f: 0b:82:1b:87:28:12:e6:b5:ad:ff:77:cc:45:c6:f0: c0:0e:ee:e8:27:e9:db:d5:e1:4a:cc:36:7b:54:8e: 75:26:f7:b1:2b:58:1f:f1:50:25:f8:e7:6d:52:c7: 7b:4c:66:4a:83:7d:42:b4:00:9a:26:a0:d6:bd:e6: bd:25:32:63:10:a0:5f:9d:68:ab:ce:25:1f:f8:b1: a6:77:19:88:b4:44:c4:4a:b2:4d:b2:72:60:a7:e2: 9a:25:4c:02:3d:fe:20:59:c1:21:61:cc:2f:ca:ea: 15:94:eb:43:59:99:4f:bd:b7:dc:36:20:34:ab:db: cf:2c:00:61:04:f5:95:58:1a:5e:9f:db:59:11:b7: 59:63:86:81:45:c3:43:ef:23:07:ea:5e:bf:b2:f4: 8a:b0:01:8e:0d:9a:74:5e:cb:61:a1:1d:c9:73:23: 67:ee:8e:18:f9:fb:e0:d3:ce:ee:14:7d:79:95:5c: 28:d3:a4:6e:50:ad:82:75:0b:c4:7e:77:93:7c:c9: 81:58:b1:fb:f8:0b:61:da:6e:eb:58:95:1b:30:42: 23:6b:62:0e:37:8c:de:e9:c5:ac:6b:bd:5a:f4:ab: dc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:05:20:4D:F8:1E:7E:B3:5F:44:75:95:CD:12:D6:E6:C3:16:67 X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5c:12:77:3e:64:c3:a8:31:df:b7:d4:1d:b1:f7:71:4f:c1: 83:c4:92:f9:6d:82:78:13:4b:21:aa:33:41:a6:44:fd:d0:da: e5:df:3c:17:de:80:ca:5d:43:39:f8:70:44:b1:51:88:c7:eb: a0:40:3b:41:27:a6:99:99:ba:24:85:f8:27:cc:0d:fa:7c:3d: 45:93:f2:1a:bb:a5:97:42:c3:75:d0:f9:fb:f4:bf:ef:9b:13: 3f:c5:17:0d:08:ef:f0:5b:71:57:cc:b8:46:9a:99:ae:ed:f8: 18:8d:fb:92:41:cb:fc:fc:b1:c8:ab:52:69:4d:2f:2e:b8:73: d9:19:6e:9c:3e:c9:95:65:6c:19:9a:1c:43:8f:35:71:d9:12: 49:f9:b1:52:a3:47:eb:7a:a2:0e:2c:45:d9:fe:ea:25:b9:33: 59:0a:c4:9a:b4:0a:f2:78:de:be:5a:d7:71:6e:a0:0f:d9:00: c6:b0:d0:c2:9b:08:e0:09:cb:5b:9a:e2:9d:d2:88:0e:61:74: 0b:a0:9a:83:03:c1:bf:1f:5d:61:74:c0:7b:77:14:39:05:b4: 65:e5:3c:94:60:f6:fa:86:8c:15:a5:39:0c:cf:20:4b:7e:22: 8e:c9:97:a8:86:cb:07:15:7f:9b:96:d0:75:ba:b1:39:a0:a5: b0:b2:31:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjYwODIwMTk1MDI2WhcNMjYwODI3MTk1MDI2WjAYMRYwFAYD VQQDEw02YTg3NWE4My02OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVskj8xhSkdBHnMXwtT36sL6vyj6rUuAP6ZH0o8LghuHKBLmta3/d8xFxvDA Du7oJ+nb1eFKzDZ7VI51JvexK1gf8VAl+OdtUsd7TGZKg31CtACaJqDWvea9JTJj EKBfnWirziUf+LGmdxmItETESrJNsnJgp+KaJUwCPf4gWcEhYcwvyuoVlOtDWZlP vbfcNiA0q9vPLABhBPWVWBpen9tZEbdZY4aBRcND7yMH6l6/svSKsAGODZp0Xsth oR3JcyNn7o4Y+fvg087uFH15lVwo06RuUK2CdQvEfneTfMmBWLH7+Ath2m7rWJUb MEIja2ION4ze6cWsa71a9KvcmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5IBSBN +B5+s19EdZXNEtbmwxZnMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXVwSdz5kw6gx37fUHbH3cU/Bg8SS+W2CeBNLIaozQaZE/dDa5d88F96Ayl1D OfhwRLFRiMfroEA7QSemmZm6JIX4J8wN+nw9RZPyGrull0LDddD5+/S/75sTP8UX DQjv8FtxV8y4RpqZru34GI37kkHL/PyxyKtSaU0vLrhz2RlunD7JlWVsGZocQ481 cdkSSfmxUqNH63qiDixF2f7qJbkzWQrEmrQK8njevlrXcW6gD9kAxrDQwpsI4AnL W5rindKIDmF0C6CagwPBvx9dYXTAe3cUOQW0ZeU8lGD2+oaMFaU5DM8gS34ijsmX qIbLBxV/m5bQdbqxOaClsLIxAA== -----END CERTIFICATE-----Generated at Fri Aug 21 00:19:12 2026 by rpki-client