$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json) Hash identifier: 5WN8fbDTa9Yb+5KNcTDAYLynnwVe4IRxldjo8x+gcwY= Subject key identifier: F4:DF:A1:B2:FD:FF:3A:59:7E:E7:B5:C0:90:9C:5C:8B:FC:3B:F2:72 Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft Manifest number: 024D Signing time: Wed 19 Aug 2026 02:54:41 +0000 Manifest this update: Wed 19 Aug 2026 02:54:41 +0000 Manifest next update: Wed 26 Aug 2026 02:54:41 +0000 Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: EOK1WVgGpsfdnfJmPnY6hLivAWhSXKLaoiBd7QelPZA=) 2: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: JUt39muYmeNv/u+aov4ihdZ44u9U8v+STPTANHBtFY0=) 3: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: Rhg21vAkH25s4wjjiTY0OCatB1Takp0n6RNptpq99Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: Aug 19 02:54:41 2026 GMT Not After : Aug 26 02:54:41 2026 GMT Subject: CN=6a851af1-a9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:a0:46:43:3d:21:81:1d:21:80:ca:05:3d: b7:1c:ba:ba:aa:22:5c:4d:39:3c:c1:03:4c:62:85: 64:35:16:53:f0:6c:c5:43:e6:b1:20:96:b0:33:5c: b8:05:99:d4:38:9b:c3:9f:f0:87:01:02:04:12:33: 2f:e7:c0:94:29:18:ef:e9:75:2c:de:a4:8d:76:c3: a1:c0:ab:98:f5:3b:cb:28:b4:ad:50:f6:68:8a:f8: be:ca:93:7d:67:af:49:9e:ff:fb:98:17:a6:8c:77: a2:34:2c:f6:de:0e:4d:8e:0d:40:50:cb:a1:8b:2f: 23:fe:bf:f7:f1:8c:df:af:0a:07:84:2e:b4:67:25: c3:00:93:60:28:7d:75:21:b9:ff:65:98:4c:ec:ce: 07:42:eb:02:83:11:c4:de:82:b3:ba:f3:fd:48:4a: 5d:32:0d:9b:dd:43:29:bc:9b:8c:8c:e8:69:ed:de: 0c:c8:3d:ad:5c:a1:e8:d9:62:3e:81:69:23:69:f8: 9e:44:12:07:4b:ac:05:24:f4:de:ee:be:19:29:14: 0e:57:91:65:e7:42:8a:9a:69:24:59:c1:e6:3e:7d: b8:c7:a8:b8:b8:a5:34:3a:e6:8d:4d:e1:95:39:c2: cb:fe:05:9f:4f:39:e6:e4:fa:c7:28:ca:7e:a1:60: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DF:A1:B2:FD:FF:3A:59:7E:E7:B5:C0:90:9C:5C:8B:FC:3B:F2:72 X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a7:ec:3c:bb:4a:f7:5f:76:2e:84:b8:fa:4e:3e:2a:53:f8: 5a:35:47:7b:49:0f:da:06:56:1f:3d:6b:e6:5e:ba:b6:c9:9f: ed:e5:63:c9:7a:b7:b4:16:8e:0a:29:2b:71:6f:24:5d:1f:73: 43:d2:7c:8e:bf:b4:09:bc:d7:6f:d2:2e:d9:85:ff:d9:03:5b: 49:cd:15:6e:be:d8:eb:76:91:3b:81:bc:dd:25:2a:17:02:ff: a4:b6:22:75:99:5f:b3:f1:82:61:93:0a:ad:5a:c2:b4:d1:97: 2d:ff:55:83:e1:1e:d5:b0:c9:cb:2f:a6:7d:6e:b4:e4:23:45: b4:bb:c9:3f:49:7b:da:f3:16:8a:65:ae:91:07:b5:80:34:ad: 0f:69:3b:c2:e4:bb:0e:35:ed:89:5d:88:7c:be:3d:90:35:08: 51:20:f9:26:3b:e9:f4:cb:86:80:f8:88:db:b5:4a:8a:11:ff: 8b:58:a6:eb:f2:65:57:d9:02:0a:bb:2d:02:ca:5f:86:61:b4: bc:7c:d8:86:0a:03:95:d6:58:a3:21:7c:3b:fd:c0:87:ce:c9: b1:cf:a0:86:b6:02:95:1b:14:76:43:26:bc:05:01:ad:fc:3f: 92:fe:a2:20:1b:d1:57:9c:f4:d9:b0:07:ef:73:38:fd:bb:a6: bf:5f:10:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjYwODE5MDI1NDQxWhcNMjYwODI2MDI1NDQxWjAYMRYwFAYD VQQDEw02YTg1MWFmMS1hOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF+gRkM9IYEdIYDKBT23HLq6qiJcTTk8wQNMYoVkNRZT8GzFQ+axIJawM1y4 BZnUOJvDn/CHAQIEEjMv58CUKRjv6XUs3qSNdsOhwKuY9TvLKLStUPZoivi+ypN9 Z69Jnv/7mBemjHeiNCz23g5Njg1AUMuhiy8j/r/38YzfrwoHhC60ZyXDAJNgKH11 Ibn/ZZhM7M4HQusCgxHE3oKzuvP9SEpdMg2b3UMpvJuMjOhp7d4MyD2tXKHo2WI+ gWkjafieRBIHS6wFJPTe7r4ZKRQOV5Fl50KKmmkkWcHmPn24x6i4uKU0OuaNTeGV OcLL/gWfTznm5PrHKMp+oWDc5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTfobL9 /zpZfue1wJCcXIv8O/JyMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa c1hzODdZTVdUdlJOeFdUdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUqfsPLtK9192LoS4+k4+KlP4WjVHe0kP2gZWHz1r5l66tsmf7eVjyXq3tBaO CikrcW8kXR9zQ9J8jr+0CbzXb9Iu2YX/2QNbSc0Vbr7Y63aRO4G83SUqFwL/pLYi dZlfs/GCYZMKrVrCtNGXLf9Vg+Ee1bDJyy+mfW605CNFtLvJP0l72vMWimWukQe1 gDStD2k7wuS7DjXtiV2IfL49kDUIUSD5Jjvp9MuGgPiI27VKihH/i1im6/JlV9kC CrstAspfhmG0vHzYhgoDldZYoyF8O/3Ah87Jsc+ghrYClRsUdkMmvAUBrfw/kv6i IBvRV5z02bAH73M4/bumv18QQQ== -----END CERTIFICATE-----Generated at Thu Aug 20 23:36:09 2026 by rpki-client