$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: Ztlz7E1ZRjcvzgjl/g9dh4l3AfHjJs7piYK7BM6RkaM= Subject key identifier: C6:E3:E5:A5:94:96:F0:C3:D7:12:3D:EC:0D:7D:23:C6:3B:B7:F8:BB Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 0949 Signing time: Tue 18 Aug 2026 20:29:08 +0000 Manifest this update: Tue 18 Aug 2026 20:29:07 +0000 Manifest next update: Tue 25 Aug 2026 20:29:07 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: x7ok4wBeEi41d3VJCG6F8AueiAELCGRX2dGEPMdxYis=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: cUXww9pLUmzXMLoFEIgXrShzexTLcuKYoU1Hg9CwYj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Aug 18 20:29:07 2026 GMT Not After : Aug 25 20:29:07 2026 GMT Subject: CN=6a84c094-7c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:64:84:4e:31:73:6e:8f:15:35:c5:6b:78: cf:ab:4e:d6:57:9a:8f:9f:cc:23:da:a9:c3:4f:df: 1c:e7:4b:17:7f:d2:03:19:6e:0b:a7:44:35:ce:f5: e2:f5:93:89:6a:e5:ae:b2:f2:d2:d2:ae:7e:60:ba: f5:b6:c8:f3:a0:71:c7:90:67:4d:58:f2:a7:e8:4e: 67:b6:0b:c9:48:b5:53:e4:01:d8:18:49:c2:1f:c2: 7d:18:46:4a:f4:b3:59:1b:19:31:fd:8d:ed:15:02: 6b:9e:a7:d3:39:fd:e2:49:1b:1f:29:bd:4b:c3:7e: 2d:29:cd:ae:14:5c:f7:a2:03:8e:31:4b:13:46:cd: 77:af:df:c2:d5:66:6e:c2:d7:93:db:eb:9f:92:99: f5:86:df:e4:c6:e6:04:af:24:39:8d:6b:e3:0b:13: 03:4b:60:f9:4a:dc:86:52:1f:11:74:e2:d0:f1:b7: da:bf:94:e2:19:be:e6:9b:83:fc:1c:f1:b0:b7:f6: 96:d1:49:8c:d0:28:b1:2d:91:a6:0e:60:b8:df:87: c6:9f:f2:9a:69:f9:ab:ca:d0:98:64:fc:a8:93:ca: c2:85:d8:9d:e2:71:d0:67:fc:f6:fe:bd:88:a4:4c: fc:a2:86:bb:5f:ea:6d:98:2a:c1:21:b6:4e:25:29: 17:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E3:E5:A5:94:96:F0:C3:D7:12:3D:EC:0D:7D:23:C6:3B:B7:F8:BB X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:69:cc:0f:df:aa:1a:2d:c3:c2:69:5b:e9:6f:ab:e0:6e:de: 8a:f8:10:5b:e0:9a:19:29:02:c8:80:78:1f:84:f4:e3:4d:7d: 78:d4:fb:c2:8e:e5:06:14:14:15:39:24:d1:23:2a:d4:a6:e4: c6:f8:b4:14:1e:4f:2a:a3:ba:9b:cb:f1:44:11:a3:30:1f:16: 70:bc:85:27:16:6f:6c:cf:7f:c8:ff:da:17:8c:bf:be:1e:72: e9:2d:a5:ec:fc:fb:59:ff:25:97:b6:2b:3c:7a:fa:f9:59:86: d2:e7:57:c2:ab:fe:73:39:17:ef:d8:7e:82:87:10:66:91:bc: 4a:05:f7:46:81:9d:85:ea:e5:09:40:d8:c6:02:d2:dd:dc:c7: 00:7e:01:f9:87:af:b1:37:3c:f2:d2:62:23:df:81:ae:af:29: e3:ef:c7:5f:e6:1a:5a:c4:e1:ad:62:dd:78:0d:3b:1d:fc:ac: fa:50:44:46:29:fe:ea:4a:b9:62:06:a1:13:c8:5b:d2:16:f9: c2:4c:67:86:e0:b4:16:6d:c1:c3:2b:b2:ef:38:e4:07:f6:82: bc:d9:40:e9:46:84:55:62:07:42:b3:ea:35:3a:3c:b8:ce:b7: 6d:56:81:d0:74:af:28:5d:a1:9f:92:8f:bd:fd:14:2b:28:10: 99:12:87:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjYwODE4MjAyOTA3WhcNMjYwODI1MjAyOTA3WjAYMRYwFAYD VQQDEw02YTg0YzA5NC03YzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sJkhE4xc26PFTXFa3jPq07WV5qPn8wj2qnDT98c50sXf9IDGW4Lp0Q1zvXi 9ZOJauWusvLS0q5+YLr1tsjzoHHHkGdNWPKn6E5ntgvJSLVT5AHYGEnCH8J9GEZK 9LNZGxkx/Y3tFQJrnqfTOf3iSRsfKb1Lw34tKc2uFFz3ogOOMUsTRs13r9/C1WZu wteT2+ufkpn1ht/kxuYEryQ5jWvjCxMDS2D5StyGUh8RdOLQ8bfav5TiGb7mm4P8 HPGwt/aW0UmM0CixLZGmDmC434fGn/KaafmrytCYZPyok8rChdid4nHQZ/z2/r2I pEz8ooa7X+ptmCrBIbZOJSkX/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbj5aWU lvDD1xI97A19I8Y7t/i7MB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi2nMD9+qGi3Dwmlb6W+r4G7eivgQW+CaGSkCyIB4H4T04019eNT7wo7lBhQU FTkk0SMq1Kbkxvi0FB5PKqO6m8vxRBGjMB8WcLyFJxZvbM9/yP/aF4y/vh5y6S2l 7Pz7Wf8ll7YrPHr6+VmG0udXwqv+czkX79h+gocQZpG8SgX3RoGdherlCUDYxgLS 3dzHAH4B+YevsTc88tJiI9+Brq8p4+/HX+YaWsThrWLdeA07Hfys+lBERin+6kq5 YgahE8hb0hb5wkxnhuC0Fm3Bwyuy7zjkB/aCvNlA6UaEVWIHQrPqNTo8uM63bVaB 0HSvKF2hn5KPvf0UKygQmRKHKw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:35 2026 by rpki-client