$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft File: U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json) Hash identifier: L0dJH6/+nLoe0Y6s6jnQMBSS2TbKkNbPhS51DXyqr50= Subject key identifier: 4E:BE:36:2F:D0:88:13:33:AC:CE:5C:4D:95:7F:3B:17:61:38:74:92 Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8 Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft Manifest number: 0204 Signing time: Wed 19 Aug 2026 03:45:07 +0000 Manifest this update: Wed 19 Aug 2026 03:45:06 +0000 Manifest next update: Wed 26 Aug 2026 03:45:06 +0000 Files and hashes: 1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: 9GaCR01nK4McR4i+YfkA7Ii/Bdu3WnqsUzV4pqD6PMk=) 2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8 Validity Not Before: Aug 19 03:45:06 2026 GMT Not After : Aug 26 03:45:06 2026 GMT Subject: CN=6a8526c3-aae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:0f:72:41:25:c9:92:06:3b:51:22:9f:02: 69:e9:ac:83:ca:80:ea:9c:88:27:24:85:fa:c1:5c: 8b:16:78:0e:fb:9a:6f:16:b4:83:a4:54:c0:ac:c3: 1b:11:13:e5:15:62:ca:e1:de:c4:6d:62:c4:0b:43: c9:02:7c:cb:10:5c:b4:af:85:9a:a7:65:70:23:8f: 56:31:eb:36:67:8b:78:11:dd:f6:06:7d:0e:1a:c2: 54:e7:37:71:69:95:67:ca:81:2f:52:73:8c:0d:e4: 6a:1e:6f:82:d6:ed:f9:42:bd:45:97:0e:0a:ad:8c: 2a:e4:9b:23:4e:6f:64:80:fa:1c:c3:9c:e5:4f:d9: 69:2b:88:ea:29:dd:24:1a:f6:51:d3:47:0d:98:d3: 8e:66:96:75:f6:67:66:42:8f:a1:1c:b6:fe:9b:ef: 83:53:87:88:44:f1:2c:fa:54:ff:de:de:7c:aa:c2: 43:be:fd:73:a0:c5:15:4f:c7:8c:6f:83:99:fb:10: 53:c6:f0:89:44:f5:26:c3:91:ff:40:a6:2c:fc:09: 8e:13:8d:40:4e:e8:fe:0d:cf:53:08:62:f4:17:1d: 2d:e3:be:fa:6e:96:df:66:da:b9:57:36:f0:95:be: 13:7f:e0:9a:25:78:e8:99:15:10:81:17:c4:e1:d2: 96:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BE:36:2F:D0:88:13:33:AC:CE:5C:4D:95:7F:3B:17:61:38:74:92 X509v3 Authority Key Identifier: keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:80:47:c2:d0:77:05:49:12:79:9d:cc:4a:5c:06:ed:57:c9: c9:44:c1:dd:91:4a:d2:53:0c:6d:28:81:1a:96:1b:e8:be:9d: 97:e0:45:4a:7c:20:62:9b:f7:e3:32:97:0e:53:5a:cb:43:66: 66:8a:e1:aa:5d:d8:c7:4c:79:5b:77:d4:20:17:4f:30:84:98: 60:b9:30:30:f1:61:1a:88:63:be:4d:9f:0b:b7:ec:e4:e3:8a: 0e:7e:c4:ac:25:aa:a0:7e:cf:0c:e1:2f:0f:fb:67:40:e7:31: c2:61:a7:69:72:d0:d5:a4:11:47:24:7e:49:99:9d:4c:e7:fc: f6:77:91:e7:44:fc:26:7c:8d:e0:e7:6a:b4:2e:49:a9:2d:a5: d6:84:f8:c5:a0:75:d2:b6:d4:7f:06:ab:d2:b6:4f:28:58:9c: e5:53:dc:8d:f3:25:2f:04:58:6e:3b:f2:f7:dc:fa:16:d2:91: 84:0c:5b:39:d9:3f:9b:3e:de:c6:09:96:6a:96:c1:c0:47:ae: 5b:1d:c8:ab:78:0e:7c:ab:b0:15:62:80:84:05:8b:1e:6d:af: 84:06:f6:02:0e:8e:c0:4e:ba:b0:9c:b2:95:bc:17:0d:7f:d9: 0f:92:67:c4:c4:2a:eb:fd:75:63:de:4d:75:2b:dc:84:0d:73: 6d:34:1a:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA5QTMxMTAvBgNVBAUTKDUzQzBFN0YwNjhBQTFFRjAwM0EwQkVFMkE1RDUyREJD ODlEQ0RGQjgwHhcNMjYwODE5MDM0NTA2WhcNMjYwODI2MDM0NTA2WjAYMRYwFAYD VQQDEw02YTg1MjZjMy1hYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYMPckElyZIGO1EinwJp6ayDyoDqnIgnJIX6wVyLFngO+5pvFrSDpFTArMMb ERPlFWLK4d7EbWLEC0PJAnzLEFy0r4Wap2VwI49WMes2Z4t4Ed32Bn0OGsJU5zdx aZVnyoEvUnOMDeRqHm+C1u35Qr1Flw4KrYwq5JsjTm9kgPocw5zlT9lpK4jqKd0k GvZR00cNmNOOZpZ19mdmQo+hHLb+m++DU4eIRPEs+lT/3t58qsJDvv1zoMUVT8eM b4OZ+xBTxvCJRPUmw5H/QKYs/AmOE41ATuj+Dc9TCGL0Fx0t4776bpbfZtq5Vzbw lb4Tf+CaJXjomRUQgRfE4dKWLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6+Ni/Q iBMzrM5cTZV/OxdhOHSSMB8GA1UdIwQYMBaAFFPA5/Boqh7wA6C+4qXVLbyJ3N+4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDlBMy80M0ZCNjJGQThG RTgxMUVFOTJGNUM3NkFDNEY5QUUwMi9VOERuOEdpcUh2QURvTDdpcGRVdHZJbmMz N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U4RG44R2lxSHZBRG9MN2lwZFV0dkluYzM3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDlBMy80M0ZCNjJGQThGRTgxMUVFOTJGNUM3NkFDNEY5QUUwMi9VOERuOEdpcUh2 QURvTDdpcGRVdHZJbmMzN2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxYBHwtB3BUkSeZ3MSlwG7VfJyUTB3ZFK0lMMbSiBGpYb6L6dl+BFSnwgYpv3 4zKXDlNay0NmZorhql3Yx0x5W3fUIBdPMISYYLkwMPFhGohjvk2fC7fs5OOKDn7E rCWqoH7PDOEvD/tnQOcxwmGnaXLQ1aQRRyR+SZmdTOf89neR50T8JnyN4OdqtC5J qS2l1oT4xaB10rbUfwar0rZPKFic5VPcjfMlLwRYbjvy99z6FtKRhAxbOdk/mz7e xgmWapbBwEeuWx3Iq3gOfKuwFWKAhAWLHm2vhAb2Ag6OwE66sJyylbwXDX/ZD5Jn xMQq6/11Y95NdSvchA1zbTQauQ== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:47 2026 by rpki-client