$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: JNGizTBKHDsLTwnkSiD3p4HO1OFrsHC26Ketx/Qneho= Subject key identifier: 60:BD:27:EF:71:B9:CA:3D:AB:F0:11:1D:E7:9E:E3:1A:44:B5:B7:38 Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 0457 Signing time: Wed 19 Aug 2026 00:33:20 +0000 Manifest this update: Wed 19 Aug 2026 00:33:19 +0000 Manifest next update: Wed 26 Aug 2026 00:33:19 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: roSPPr+yezgppA/b/6hHUODXQiSfYql1EtQM9pNiY/g=) 2: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: uIe065ouSrK1ZyYaAyKs/pdPmvRv0EpPK089oDcTECA=) 3: CB0F28626A3D11F18BEDC8237D47A888.roa (hash: 9aLbjRQRMYIzYencq0lATGqFcBhPNKrd9K7Wus4HUHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Aug 19 00:33:19 2026 GMT Not After : Aug 26 00:33:19 2026 GMT Subject: CN=6a84f9d0-da28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c1:97:2b:ac:1a:a0:4f:49:fa:ea:a6:53:85: 18:00:98:ef:6b:db:1e:d5:64:a4:04:f0:5d:6d:11: 00:11:8b:37:af:09:9d:fc:71:49:0e:7a:08:cc:a6: a6:dc:fc:5f:c3:16:24:58:48:0d:11:e1:18:85:70: fa:42:a3:23:c5:39:1c:22:8b:3b:cc:4b:4a:c6:db: 82:69:ea:28:54:6c:1c:1b:a7:6f:12:24:1a:d9:f6: ed:7d:e8:47:05:9b:1d:4f:c3:3d:ae:7b:6c:ec:97: a8:9f:7f:0c:21:ba:14:a3:87:f5:fb:61:d5:4c:e4: 7d:07:e7:3c:21:7a:d6:c7:c4:c3:19:5c:4b:c9:82: 6e:94:d5:c2:1c:98:b4:7e:9c:3f:bb:b7:e3:f7:14: 2b:14:5b:8f:9c:13:b5:89:a9:02:5e:08:7e:cb:30: 1e:87:b2:e5:27:dd:47:a1:87:11:6f:c1:b3:bb:29: e4:1f:4d:1d:db:8c:53:14:c2:b0:d1:2e:bb:a3:0a: 58:1b:87:54:b8:9e:8a:9d:ea:a3:a3:7d:db:28:04: 1d:31:b1:13:f9:83:30:8e:3a:7a:d2:99:7c:b3:40: 99:08:5d:55:97:df:80:82:ed:69:a0:0f:c6:84:f5: b3:06:0b:a9:82:ae:1e:a3:1f:b3:80:b5:3e:90:42: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BD:27:EF:71:B9:CA:3D:AB:F0:11:1D:E7:9E:E3:1A:44:B5:B7:38 X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:50:02:9c:67:27:fd:2c:a0:a6:d8:2c:0e:06:75:d1:ad:3e: b4:c9:95:d9:25:c3:df:8d:23:df:0a:37:07:48:b7:73:c5:40: b5:3a:59:75:f7:60:9e:09:f6:89:9c:3d:fe:b2:16:d8:9d:c1: 92:0d:9f:fc:1e:c2:c8:ed:6e:6d:92:bb:84:d3:27:8d:cc:b8: 8f:05:3d:bb:16:86:e4:73:6b:23:b0:97:5c:59:d3:b1:d9:75: d0:7c:49:aa:17:dc:9c:6d:5f:bc:20:f2:0a:5a:76:a6:5d:15: 4a:1f:63:9a:86:cb:27:b1:da:ba:d5:4b:d5:1a:62:53:b8:18: 0a:40:bb:54:21:c9:c7:c1:85:18:ef:61:8f:9e:32:db:8b:85: bc:4b:76:21:f2:67:ef:08:c2:78:c7:00:a5:a2:f0:43:3a:70: c6:ca:a1:f3:9a:45:df:44:47:15:38:37:32:97:13:03:cf:dc: bd:d9:97:7c:dd:aa:82:02:af:b7:d0:3c:9e:9d:82:52:66:a9: 13:ae:c2:da:a6:7b:d7:ff:6d:05:90:ec:6d:90:59:16:73:8e: da:d0:e3:8b:40:e3:bd:cf:93:4f:a8:52:a0:da:32:72:da:9c: 7a:51:ec:53:02:78:86:d4:1b:6d:06:f1:32:fc:ad:07:0c:7e: 87:d6:0d:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjYwODE5MDAzMzE5WhcNMjYwODI2MDAzMzE5WjAYMRYwFAYD VQQDEw02YTg0ZjlkMC1kYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cGXK6waoE9J+uqmU4UYAJjva9se1WSkBPBdbREAEYs3rwmd/HFJDnoIzKam 3PxfwxYkWEgNEeEYhXD6QqMjxTkcIos7zEtKxtuCaeooVGwcG6dvEiQa2fbtfehH BZsdT8M9rnts7Jeon38MIboUo4f1+2HVTOR9B+c8IXrWx8TDGVxLyYJulNXCHJi0 fpw/u7fj9xQrFFuPnBO1iakCXgh+yzAeh7LlJ91HoYcRb8GzuynkH00d24xTFMKw 0S67owpYG4dUuJ6Kneqjo33bKAQdMbET+YMwjjp60pl8s0CZCF1Vl9+Agu1poA/G hPWzBgupgq4eox+zgLU+kELF9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGC9J+9x uco9q/ARHeee4xpEtbc4MB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA1ACnGcn/SygptgsDgZ10a0+tMmV2SXD340j3wo3B0i3c8VAtTpZdfdgngn2 iZw9/rIW2J3Bkg2f/B7CyO1ubZK7hNMnjcy4jwU9uxaG5HNrI7CXXFnTsdl10HxJ qhfcnG1fvCDyClp2pl0VSh9jmobLJ7HautVL1RpiU7gYCkC7VCHJx8GFGO9hj54y 24uFvEt2IfJn7wjCeMcApaLwQzpwxsqh85pF30RHFTg3MpcTA8/cvdmXfN2qggKv t9A8np2CUmapE67C2qZ71/9tBZDsbZBZFnOO2tDji0Djvc+TT6hSoNoyctqcelHs UwJ4htQbbQbxMvytBwx+h9YNfw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:50:12 2026 by rpki-client