$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft File: XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft (raw, json) Hash identifier: HuIf+Vx/hyu5S6JOXznh5w3bHktbVOmNHYTVxBhVTFA= Subject key identifier: 17:44:C8:C6:6D:14:1A:82:A8:08:0C:65:D5:A1:1A:AE:F8:A1:60:D2 Authority key identifier: 5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 Certificate issuer: /CN=A91E7B89/serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft Manifest number: 80 Signing time: Sat 15 Aug 2026 07:50:58 +0000 Manifest this update: Sat 15 Aug 2026 07:50:57 +0000 Manifest next update: Sat 22 Aug 2026 07:50:57 +0000 Files and hashes: 1: XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl (hash: S1Htf49yWZmpUtD18ApuWYCfVIlpZ5x2UnjRFyckMF0=) 2: 1C61CBFA1D1A11F1B8E79D60103D8C67.roa (hash: a189GeZn/qoKIWbLCd3ZJZBVaZ36ji3gpESDwYzEX9s=) 3: 72480DC0D9A111F0989DD75268D3641D.roa (hash: 254YjhyMn8TcecNMQW2J/rfKDC3ffHZAOD2O4s1Qu3A=) 4: 1BD6E18E1D1A11F1B8E79D60103D8C67.roa (hash: rrytxPSd1VoT8yzZHF5nlkUhFP1WWEaU2+XamxIi/z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7B89, serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Validity Not Before: Aug 15 07:50:57 2026 GMT Not After : Aug 22 07:50:57 2026 GMT Subject: CN=6a801a62-1ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:5f:a2:3f:9e:2f:c3:97:d0:da:03:60:a5: f8:2d:f7:ee:66:15:c9:63:5d:fd:8b:16:17:a6:40: 5d:3b:ad:b1:28:a4:dc:f1:50:e6:20:55:ff:a6:91: 57:3f:a9:67:19:b1:16:96:f6:a3:7c:9a:7f:da:6d: 95:76:10:6f:3b:fa:7c:c2:86:50:21:6d:38:a6:c1: 18:f1:5f:cf:97:30:e5:97:93:8c:7a:96:d1:b7:38: 92:65:3a:c6:50:21:a2:7f:5f:1d:66:d3:34:c1:54: 45:3b:c2:56:58:16:83:1f:c1:53:e6:b1:01:a0:36: 51:e4:7b:d3:f2:44:bb:0e:c9:e0:cd:85:00:e7:44: f7:c9:0e:03:b1:95:65:5e:f7:b3:a0:38:72:e5:21: 24:d1:37:85:9e:b4:0b:d0:06:2e:c5:48:2c:fe:9d: 54:ad:8d:95:72:8e:f0:c4:a9:73:bd:38:65:30:1b: da:a3:66:24:81:0c:73:14:fa:c3:cf:5d:ea:bd:cf: 03:7f:da:bb:de:79:d0:8b:a4:e2:7c:3b:82:f6:e8: c3:e2:2a:b1:34:d1:a8:c1:6a:53:b0:78:a6:a7:ab: aa:f4:8d:79:d9:d8:73:be:e3:3d:9a:3e:6b:7d:20: ec:1e:70:17:75:45:83:cf:34:9d:60:45:ba:e0:bc: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:44:C8:C6:6D:14:1A:82:A8:08:0C:65:D5:A1:1A:AE:F8:A1:60:D2 X509v3 Authority Key Identifier: keyid:5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:23:e5:d4:25:a5:d1:de:9c:4c:bf:cf:f3:a4:63:f3:a3:be: 91:23:be:d3:30:91:9e:0c:a3:4f:bc:58:4b:52:46:15:73:1c: 4b:da:0e:60:37:24:40:3a:f5:6c:01:2c:11:19:ec:5c:b3:3f: d2:ce:14:5f:e8:90:c9:58:75:0b:4e:bc:de:59:13:dc:d6:a8: 7d:88:8c:2b:0d:1f:df:db:1d:f4:16:a3:cd:e3:7a:73:50:41: 0d:90:69:27:7f:e1:f1:2d:6b:bc:2a:4e:c2:05:7b:38:73:d5: 60:7b:86:c0:f0:28:b0:01:d5:95:15:a0:12:ea:5d:c8:a5:d6: a8:d2:64:e3:fc:55:11:60:2a:60:5f:22:96:b5:89:59:0e:00: d5:37:36:53:f6:1f:cb:c8:7c:44:29:1a:62:d0:16:ad:d2:5d: 71:ac:e2:25:b2:2f:d1:7b:06:f2:0a:1b:9a:ce:a5:84:9c:9d: d6:47:d2:43:85:00:c8:af:6a:c0:07:7c:23:d7:b7:72:d5:ca: 8a:78:ec:86:00:51:0f:8a:31:a0:5b:fa:29:c0:d9:ad:07:f9: f2:40:00:9a:83:c4:27:18:19:f3:d9:48:a0:d3:4e:75:af:85: 17:5b:6c:1f:03:07:55:50:5a:79:12:fe:e5:f2:dd:53:76:24: b0:01:66:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCODkxMTAvBgNVBAUTKDVFNzg2NDJCMDNDQzM3RTI2RkQ0MTVFN0Q3NjFCRTQ4 NDczNkM1NjYwHhcNMjYwODE1MDc1MDU3WhcNMjYwODIyMDc1MDU3WjAYMRYwFAYD VQQDEw02YTgwMWE2Mi0xYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3u9foj+eL8OX0NoDYKX4LffuZhXJY139ixYXpkBdO62xKKTc8VDmIFX/ppFX P6lnGbEWlvajfJp/2m2VdhBvO/p8woZQIW04psEY8V/PlzDll5OMepbRtziSZTrG UCGif18dZtM0wVRFO8JWWBaDH8FT5rEBoDZR5HvT8kS7DsngzYUA50T3yQ4DsZVl XvezoDhy5SEk0TeFnrQL0AYuxUgs/p1UrY2Vco7wxKlzvThlMBvao2YkgQxzFPrD z13qvc8Df9q73nnQi6TifDuC9ujD4iqxNNGowWpTsHimp6uq9I152dhzvuM9mj5r fSDsHnAXdUWDzzSdYEW64LwEhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdEyMZt FBqCqAgMZdWhGq74oWDSMB8GA1UdIwQYMBaAFF54ZCsDzDfib9QV59dhvkhHNsVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0I4OS80MUJFNEY0NEQ5 QTAxMUYwOTMxMzBFMDc2OEQzNjQxRC9YbmhrS3dQTU4tSnYxQlhuMTJHLVNFYzJ4 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huaGtLd1BNTi1KdjFCWG4xMkctU0VjMnhXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0I4OS80MUJFNEY0NEQ5QTAxMUYwOTMxMzBFMDc2OEQzNjQxRC9YbmhrS3dQTU4t SnYxQlhuMTJHLVNFYzJ4V1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFSPl1CWl0d6cTL/P86Rj86O+kSO+0zCRngyjT7xYS1JGFXMcS9oOYDckQDr1 bAEsERnsXLM/0s4UX+iQyVh1C0683lkT3NaofYiMKw0f39sd9BajzeN6c1BBDZBp J3/h8S1rvCpOwgV7OHPVYHuGwPAosAHVlRWgEupdyKXWqNJk4/xVEWAqYF8ilrWJ WQ4A1Tc2U/Yfy8h8RCkaYtAWrdJdcaziJbIv0XsG8gobms6lhJyd1kfSQ4UAyK9q wAd8I9e3ctXKinjshgBRD4oxoFv6KcDZrQf58kAAmoPEJxgZ89lIoNNOda+FF1ts HwMHVVBaeRL+5fLdU3YksAFmfA== -----END CERTIFICATE-----Generated at Sat Aug 15 13:00:14 2026 by rpki-client