$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: ZcQEwIe+vjxO8c6bdc3+3CfAH4IYL8dpPTvz6i0Z4pU= Subject key identifier: 7F:05:E7:11:62:94:CF:41:C8:80:70:B9:D0:8A:41:3A:46:BC:2C:D6 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 01DC Signing time: Wed 19 Aug 2026 04:08:33 +0000 Manifest this update: Wed 19 Aug 2026 04:08:33 +0000 Manifest next update: Wed 26 Aug 2026 04:08:33 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: HRSmET8ljEqi9alrc8+DQ79G4kK9953ZIac6bNWxSZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Aug 19 04:08:33 2026 GMT Not After : Aug 26 04:08:33 2026 GMT Subject: CN=6a852c41-ab4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:99:31:2a:c6:de:c1:60:d4:c2:a1:c9:83:56: b4:63:24:d2:79:9e:17:a9:84:fb:35:ff:42:13:13: 7c:22:6b:18:5d:a3:a6:15:a5:ea:34:3e:d0:e5:04: c3:a2:99:83:ad:6c:e1:87:28:ee:05:88:1c:f4:9e: 3a:3f:9a:55:03:55:6d:00:75:4d:91:10:48:f2:e8: 8c:93:e2:e9:3c:1e:14:e2:9f:75:a9:06:9e:2c:f1: b3:3c:2a:1e:c1:c0:26:4a:8d:66:59:bd:d6:8a:22: 2e:f4:99:6e:ac:c1:78:3b:3a:3a:ab:c6:99:ef:ad: 91:47:3e:20:2f:64:f8:e5:96:e5:2e:bf:65:03:6e: 55:e9:0c:7c:92:32:c0:f6:20:d3:5b:92:3a:e9:36: 06:fd:45:74:b9:a0:0e:9e:ed:59:79:54:62:9c:8f: 0d:ef:2d:6b:04:7b:a2:ed:86:7c:07:ac:48:6a:30: b0:a4:3d:94:cf:43:89:98:07:48:ce:6a:b3:5c:36: 21:00:48:e3:07:bb:68:a6:a4:97:b7:39:07:af:65: 31:1b:69:c5:1f:32:b7:64:0f:fa:62:05:d5:d2:8c: 22:db:f8:e9:86:ec:d3:84:48:c8:e7:a9:0e:fb:19: a3:de:bc:4f:ef:81:d9:9f:64:23:5b:6b:5e:3c:16: 7a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:05:E7:11:62:94:CF:41:C8:80:70:B9:D0:8A:41:3A:46:BC:2C:D6 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:43:ce:58:f8:4e:42:a8:73:7c:27:50:f9:60:c2:4b:eb:a7: 75:7a:34:d3:1a:d3:77:de:56:86:63:f2:61:9a:ab:14:19:ee: 77:22:71:85:69:e6:b9:94:b3:7c:bb:76:18:94:d9:2e:d9:b8: 03:bf:46:15:32:55:5f:f1:f3:60:a9:37:81:dc:1c:de:19:33: 35:46:c7:af:49:9e:25:f6:4c:c7:22:db:b0:cf:4b:04:5b:bb: 20:77:13:b8:da:22:1c:a8:b5:96:c4:83:6c:39:63:8f:04:6f: 7c:6f:8a:b6:03:33:2a:86:35:76:48:02:3f:1a:6b:7f:6c:5d: 51:a3:23:2d:60:12:25:83:e8:86:38:a1:42:18:4a:3f:77:96: a4:06:83:23:23:c6:81:0e:9c:35:9b:ed:9f:8d:e3:b7:33:c5: 91:f7:f7:98:b2:1a:6b:07:81:f4:a9:4b:69:c5:c7:00:30:34: ac:31:ec:6d:8a:4e:1e:66:e6:92:6b:92:ea:24:5f:1b:80:ef: 90:96:c4:d0:63:42:74:4c:03:dd:10:36:4a:9e:ec:a5:0f:5d: 98:ec:33:c7:f3:53:22:ce:09:a9:c4:5f:0a:83:f1:e5:7c:cb: 71:b0:66:7a:63:f6:ca:25:d8:28:3f:7c:82:09:30:61:33:81: 74:b3:b8:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjYwODE5MDQwODMzWhcNMjYwODI2MDQwODMzWjAYMRYwFAYD VQQDEw02YTg1MmM0MS1hYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAipkxKsbewWDUwqHJg1a0YyTSeZ4XqYT7Nf9CExN8ImsYXaOmFaXqND7Q5QTD opmDrWzhhyjuBYgc9J46P5pVA1VtAHVNkRBI8uiMk+LpPB4U4p91qQaeLPGzPCoe wcAmSo1mWb3WiiIu9JlurMF4Ozo6q8aZ762RRz4gL2T45ZblLr9lA25V6Qx8kjLA 9iDTW5I66TYG/UV0uaAOnu1ZeVRinI8N7y1rBHui7YZ8B6xIajCwpD2Uz0OJmAdI zmqzXDYhAEjjB7topqSXtzkHr2UxG2nFHzK3ZA/6YgXV0owi2/jphuzThEjI56kO +xmj3rxP74HZn2QjW2tePBZ6hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8F5xFi lM9ByIBwudCKQTpGvCzWMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArUPOWPhOQqhzfCdQ+WDCS+undXo00xrTd95WhmPyYZqrFBnudyJxhWnmuZSz fLt2GJTZLtm4A79GFTJVX/HzYKk3gdwc3hkzNUbHr0meJfZMxyLbsM9LBFu7IHcT uNoiHKi1lsSDbDljjwRvfG+KtgMzKoY1dkgCPxprf2xdUaMjLWASJYPohjihQhhK P3eWpAaDIyPGgQ6cNZvtn43jtzPFkff3mLIaaweB9KlLacXHADA0rDHsbYpOHmbm kmuS6iRfG4DvkJbE0GNCdEwD3RA2Sp7spQ9dmOwzx/NTIs4JqcRfCoPx5XzLcbBm emP2yiXYKD98ggkwYTOBdLO4FA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:08 2026 by rpki-client