$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: OY2dAlMJzKn7ooFegc/GTJ7e+aOMr+dl4rIxoNuCX9U= Subject key identifier: CB:88:74:3D:71:55:FF:AD:07:19:12:B1:C9:43:94:0F:A3:1D:66:ED Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 0401 Signing time: Fri 21 Aug 2026 00:19:55 +0000 Manifest this update: Fri 21 Aug 2026 00:19:54 +0000 Manifest next update: Fri 28 Aug 2026 00:19:54 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: hp/oTcuiOdEUQAPpzOQhhjLQWwbILElVaacRVqhtDkQ=) 2: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: MYhon/bKVvfbESU7PH3/suSb5/+YVeHAdnZ0m09ZYpE=) 3: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: VLoma/afTmz4hnI0EdqXpLXgczEhizYxmaDG9CyhcCo=) 4: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 4Abgy+X2ZW9Ha0ytPuEUdXVUheE/F+OPg09zPVRwTxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Aug 21 00:19:54 2026 GMT Not After : Aug 28 00:19:54 2026 GMT Subject: CN=6a8799ab-32c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:2a:2d:1d:7d:8b:50:0a:b0:f7:06:f9:bf: 78:2b:61:4b:69:05:81:4e:24:ad:9e:13:ec:a0:58: 3d:74:41:b4:c0:93:d2:e9:e1:c4:59:7a:aa:b4:e7: fb:c0:46:13:89:e4:1c:06:ed:92:78:db:e0:aa:df: 3c:d9:c6:c8:74:7d:67:54:c3:10:fa:a3:45:c6:9d: 98:b2:a0:d7:44:a2:ce:b9:8b:e9:18:26:77:38:27: 01:64:39:98:b1:78:09:3d:c2:6e:ea:66:d7:e6:84: 7d:2a:bb:c5:d8:3c:6b:de:77:29:76:88:be:b7:b5: 8f:93:de:26:32:3a:80:b7:91:ed:2d:d9:2a:0b:10: 74:dc:ee:c9:5e:55:4f:bd:aa:ed:9b:fe:9c:15:ee: 83:e6:d2:0f:f4:1e:2c:fe:bf:96:62:64:52:26:aa: 6e:ac:3f:24:3d:39:20:2f:cc:b6:69:3a:3d:00:d3: 6a:d7:1e:bf:cb:13:15:f0:34:50:a4:51:8a:30:8f: 16:02:be:ac:90:86:46:7c:24:52:67:e3:89:ea:60: 92:86:96:e4:b9:0f:a9:43:0e:d2:a8:dd:57:3e:a7: 67:ea:53:22:ee:98:45:5d:09:cf:d9:8b:db:cb:10: e2:9a:0d:aa:2b:d1:ea:25:c9:a9:47:a0:4a:ca:74: 3c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:88:74:3D:71:55:FF:AD:07:19:12:B1:C9:43:94:0F:A3:1D:66:ED X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:25:ea:ed:a9:f2:d9:6d:c2:48:7f:a9:1c:fa:93:8c:d2:ea: 7a:86:52:a7:68:6d:84:57:53:10:63:41:2e:ba:35:d1:a6:80: d2:9a:f8:32:0c:79:8a:7c:5e:c6:35:d6:ae:09:d4:b5:0f:5a: eb:0a:b2:d1:44:a9:f7:f2:bb:63:33:b4:6d:de:b5:3c:90:5d: fe:0b:65:08:64:26:22:9c:64:4d:98:92:33:e7:d2:e7:cc:d7: 04:40:84:78:1a:98:56:be:39:05:47:2d:15:83:c0:4a:a8:49: cc:cd:b0:a5:0d:f4:55:9c:4b:70:21:0c:a9:f2:09:27:40:c3: 82:2d:f1:06:d6:d9:ec:c2:bd:8c:99:c0:12:b7:83:73:dd:a1: 9f:c9:4b:f7:1f:f4:00:9f:3b:d0:f1:90:79:62:c8:28:8e:95: 65:ff:7b:7b:38:f5:e4:7d:fa:52:4b:b5:31:c3:b9:37:33:e2: b0:d2:a7:88:8b:66:75:78:9c:81:b2:c4:7b:fa:4f:19:15:62: bd:b2:32:e6:eb:61:f3:ea:ee:3f:28:ab:1f:10:21:ad:b5:59: 7e:a4:3b:45:0a:97:15:7d:1e:a6:f7:90:43:4a:65:45:b8:eb: 9a:b8:d4:c8:2a:eb:02:ec:12:68:33:47:82:5e:02:a8:24:ac: 30:59:45:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwODIxMDAxOTU0WhcNMjYwODI4MDAxOTU0WjAYMRYwFAYD VQQDEw02YTg3OTlhYi0zMmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+4qLR19i1AKsPcG+b94K2FLaQWBTiStnhPsoFg9dEG0wJPS6eHEWXqqtOf7 wEYTieQcBu2SeNvgqt882cbIdH1nVMMQ+qNFxp2YsqDXRKLOuYvpGCZ3OCcBZDmY sXgJPcJu6mbX5oR9KrvF2Dxr3ncpdoi+t7WPk94mMjqAt5HtLdkqCxB03O7JXlVP vartm/6cFe6D5tIP9B4s/r+WYmRSJqpurD8kPTkgL8y2aTo9ANNq1x6/yxMV8DRQ pFGKMI8WAr6skIZGfCRSZ+OJ6mCShpbkuQ+pQw7SqN1XPqdn6lMi7phFXQnP2Yvb yxDimg2qK9HqJcmpR6BKynQ8tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuIdD1x Vf+tBxkSsclDlA+jHWbtMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADCXq7any2W3CSH+pHPqTjNLqeoZSp2hthFdTEGNBLro10aaA0pr4Mgx5inxe xjXWrgnUtQ9a6wqy0USp9/K7YzO0bd61PJBd/gtlCGQmIpxkTZiSM+fS58zXBECE eBqYVr45BUctFYPASqhJzM2wpQ30VZxLcCEMqfIJJ0DDgi3xBtbZ7MK9jJnAEreD c92hn8lL9x/0AJ870PGQeWLIKI6VZf97ezj15H36Uku1McO5NzPisNKniItmdXic gbLEe/pPGRVivbIy5uth8+ruPyirHxAhrbVZfqQ7RQqXFX0epveQQ0plRbjrmrjU yCrrAuwSaDNHgl4CqCSsMFlFvw== -----END CERTIFICATE-----Generated at Fri Aug 21 02:48:26 2026 by rpki-client