$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: cXEEpZdIRYc9HW/C2S1KJ3gG/dnsBoZESHwE0CBeatw= Subject key identifier: A2:43:F3:B0:0E:A7:62:90:3F:0D:27:84:5B:65:23:D1:A3:A3:DA:68 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 357A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 3572 Signing time: Tue 18 Aug 2026 15:05:24 +0000 Manifest this update: Tue 18 Aug 2026 15:05:23 +0000 Manifest next update: Tue 25 Aug 2026 15:05:23 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: 65pVZU0KF6r4jk++3LGcBKIcuVQldo/eZPI6pMHFQik=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: avjUCYfIUTnXlS17xW5tzr/N2L2zs3IwMpwbWsZCILA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13690 (0x357a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Aug 18 15:05:23 2026 GMT Not After : Aug 25 15:05:23 2026 GMT Subject: CN=6a8474b4-5593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b6:b1:4e:48:b2:08:66:7a:23:eb:13:67:66: 75:bc:20:b5:b2:9a:19:3f:8b:66:9a:f5:d4:13:ef: f2:db:b4:70:8b:ef:f9:97:e4:88:9f:de:ec:68:e8: 7d:58:4d:c5:28:3f:a5:a4:28:46:7c:5a:b3:99:90: 45:62:f5:16:4b:2c:74:87:73:91:76:fb:c1:e4:55: 99:fd:4b:93:85:27:e5:01:dd:ed:7f:a9:a4:d5:ce: 79:19:85:b1:8b:b6:6d:7b:c0:6f:c0:67:1a:b4:a4: 1f:d9:1b:cb:d2:80:6d:93:77:d0:32:61:94:2b:40: 4e:4d:df:62:e5:52:fb:d9:44:b2:5d:b9:21:12:f7: a6:5b:d0:62:3f:a8:a9:9b:a5:59:28:d6:a1:54:ec: b3:65:0a:b9:5c:a9:a4:bc:64:d9:84:b4:e4:ae:3e: 36:b8:b2:55:e6:c9:59:39:87:07:7b:53:a4:83:3a: a0:c2:85:cd:cc:8d:5a:cf:35:3f:53:e9:03:61:a5: 6e:fb:ce:32:b9:df:a8:10:45:4d:bb:89:88:6a:e3: 50:ec:ad:68:d9:91:03:d0:65:2f:2b:b5:f3:6b:dd: ab:de:67:3b:b4:d6:b4:85:0e:ec:55:24:3a:90:33: 2a:bc:c7:2c:fc:5d:95:88:6d:cd:60:00:d2:99:5a: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:43:F3:B0:0E:A7:62:90:3F:0D:27:84:5B:65:23:D1:A3:A3:DA:68 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b3:fa:97:25:da:3e:85:f9:73:6c:48:bd:ad:a0:0b:d0:f4: 43:7f:22:29:91:16:e1:18:87:d2:3e:f5:1c:20:d6:8a:b7:af: c6:66:18:d1:df:b1:b4:06:38:e6:15:ac:20:bf:59:98:0a:1d: 9d:89:c6:ec:fa:54:67:75:83:4d:a2:3f:9c:5f:b1:69:35:9f: 7c:33:24:03:35:ae:3f:a6:45:39:ce:83:05:85:c1:f6:3f:50: ca:5a:a8:1e:fc:63:7c:92:b2:5d:98:a8:52:1e:8c:01:d9:56: 50:74:90:ee:f3:64:75:05:65:3b:4e:e1:74:9b:e3:d9:d7:56: 1b:5b:fb:97:97:f2:56:f5:fd:bf:9b:fd:ba:e9:bd:c3:20:91: 30:da:e8:14:03:ca:e3:e8:a3:8c:e3:b7:a5:0f:ef:6c:b1:ca: a8:dc:ec:d3:41:46:59:7e:40:93:e5:ae:f9:99:40:b7:cf:65: bb:3d:3c:66:3d:65:98:04:33:0f:20:04:7c:02:eb:79:11:c3: 79:0c:ff:f6:9c:5f:c3:21:05:7f:35:aa:b1:4b:84:95:b4:c6: 95:95:1f:3d:4b:ee:e1:dc:3f:a4:97:20:f7:ef:7d:45:2a:77: 2b:0a:97:8e:97:fe:0a:51:cd:c8:c8:71:cf:42:2f:ab:da:8f: 19:af:2c:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjYwODE4MTUwNTIzWhcNMjYwODI1MTUwNTIzWjAYMRYwFAYD VQQDEw02YTg0NzRiNC01NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4raxTkiyCGZ6I+sTZ2Z1vCC1spoZP4tmmvXUE+/y27Rwi+/5l+SIn97saOh9 WE3FKD+lpChGfFqzmZBFYvUWSyx0h3ORdvvB5FWZ/UuThSflAd3tf6mk1c55GYWx i7Zte8BvwGcatKQf2RvL0oBtk3fQMmGUK0BOTd9i5VL72USyXbkhEvemW9BiP6ip m6VZKNahVOyzZQq5XKmkvGTZhLTkrj42uLJV5slZOYcHe1OkgzqgwoXNzI1azzU/ U+kDYaVu+84yud+oEEVNu4mIauNQ7K1o2ZED0GUvK7Xza92r3mc7tNa0hQ7sVSQ6 kDMqvMcs/F2ViG3NYADSmVquwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJD87AO p2KQPw0nhFtlI9Gjo9poMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk7P6lyXaPoX5c2xIva2gC9D0Q38iKZEW4RiH0j71HCDWirevxmYY0d+xtAY4 5hWsIL9ZmAodnYnG7PpUZ3WDTaI/nF+xaTWffDMkAzWuP6ZFOc6DBYXB9j9Qylqo HvxjfJKyXZioUh6MAdlWUHSQ7vNkdQVlO07hdJvj2ddWG1v7l5fyVvX9v5v9uum9 wyCRMNroFAPK4+ijjOO3pQ/vbLHKqNzs00FGWX5Ak+Wu+ZlAt89luz08Zj1lmAQz DyAEfALreRHDeQz/9pxfwyEFfzWqsUuElbTGlZUfPUvu4dw/pJcg9+99RSp3KwqX jpf+ClHNyMhxz0Ivq9qPGa8s6g== -----END CERTIFICATE-----Generated at Wed Aug 19 12:50:00 2026 by rpki-client