$ rpki-client -vvvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: HptuY9OQskJcv0fnVT1hAMQRyzd5IRjsVu/47hlgW6g= Subject key identifier: C2:3B:E0:15:B5:2A:2A:C6:9F:57:4C:54:D2:1F:FB:7F:E4:FC:94:21 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 0222 Signing time: Thu 27 Aug 2026 02:30:21 +0000 Manifest this update: Thu 27 Aug 2026 02:30:20 +0000 Manifest next update: Thu 03 Sep 2026 02:30:20 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: 4mF4tOsSKNfdlNLwJpTen7WjgztZ3+kHGGYui3Q7+8E=) 2: 624C3E865DB011F0875D570FC4F9AE02.roa (hash: vugsK16sJjvSr8OK0LSYKyoQkwn8bb1O/z7sIhYr5Cs=) 3: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ViCudgIPygezvAtMJaZKmsZPceBqOw4Pvj8wkwoWduE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 23:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Aug 27 02:30:20 2026 GMT Not After : Sep 3 02:30:20 2026 GMT Subject: CN=6a8fa13d-1df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:97:10:c3:75:40:9f:b7:e3:ed:27:c2:d9: 6d:dc:03:51:03:92:cd:2a:ee:0e:c1:5b:10:c4:c4: 5d:95:5e:0f:86:7b:90:97:70:0d:6d:8e:e8:da:cb: 43:80:87:6f:38:20:cd:5a:9a:92:5c:5f:2c:3d:c2: d5:f0:1b:97:48:41:10:d4:4d:d8:4c:29:82:47:9f: 93:d8:11:89:16:8b:44:c3:83:24:ec:db:22:9a:f2: 6b:90:17:d9:53:49:06:51:f0:1f:04:c9:3e:c7:f4: c5:83:90:45:db:98:cc:6c:f0:90:a7:0e:e9:a5:12: 6c:de:0b:0c:6d:de:49:c3:54:a0:17:3f:f5:7c:8c: 39:c4:7d:48:d4:97:aa:bd:9b:b3:26:bb:e4:8e:89: 7e:9f:42:26:cc:73:6f:4d:4b:eb:4b:34:95:40:76: ea:61:a1:c0:a7:aa:fe:d4:e1:54:5e:6c:5c:3e:96: 6d:d5:12:32:e1:24:f6:a5:58:cc:ac:e2:63:aa:d1: 30:8e:2b:4a:a8:96:25:37:a9:02:b5:5d:f9:7c:a4: d8:fe:40:82:c8:5e:68:8a:85:c1:62:cc:59:b8:ff: f7:32:95:dd:52:65:45:bc:7b:3a:c7:a4:3f:d9:79: 1b:6a:8c:9a:9b:7e:ab:61:31:9e:57:30:35:94:ff: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3B:E0:15:B5:2A:2A:C6:9F:57:4C:54:D2:1F:FB:7F:E4:FC:94:21 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ab:8d:a7:25:30:26:31:20:80:6c:4a:81:32:22:2c:0a:8c: 68:8e:d0:89:70:eb:c9:5d:da:ee:f9:e7:e5:44:8c:18:34:a7: 67:df:a4:f3:e4:bd:f3:3d:83:30:61:93:91:0b:0f:cc:3d:01: f0:ce:14:2c:e7:db:44:9e:16:f1:d3:32:78:a0:7f:5e:40:2e: 3b:82:e9:a0:80:cf:a4:b3:23:81:37:e1:e7:14:c3:54:e4:d1: 1a:8b:1f:3d:b1:09:c9:6a:fc:a4:b4:d4:52:c6:ba:be:2e:f7: 80:55:6c:9e:30:b6:af:00:ce:d4:41:99:7a:a6:ad:72:09:e8: a2:61:ac:7a:6b:2b:95:04:a5:9b:2d:d1:f3:6a:ce:72:92:2c: ec:87:f1:e1:9a:b7:74:f3:55:73:a6:71:61:39:ca:29:cf:a8: 27:20:05:73:f7:a6:56:1b:3d:58:b0:83:b4:12:b5:af:ab:bb: 02:37:0c:30:82:37:9f:4d:72:94:56:67:d7:f9:57:ad:86:91: 3d:2c:ca:a4:ea:2c:af:cf:53:c2:11:79:f8:48:6f:04:35:1c: eb:03:a6:c6:3f:e8:ff:4e:4a:1e:ea:9b:30:1f:19:5e:60:b1: ae:db:ff:d9:76:6b:5d:f8:44:b5:2c:91:6b:78:95:ca:57:a4: 7d:0b:c4:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjYwODI3MDIzMDIwWhcNMjYwOTAzMDIzMDIwWjAYMRYwFAYD VQQDEw02YThmYTEzZC0xZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3+XEMN1QJ+34+0nwtlt3ANRA5LNKu4OwVsQxMRdlV4PhnuQl3ANbY7o2stD gIdvOCDNWpqSXF8sPcLV8BuXSEEQ1E3YTCmCR5+T2BGJFotEw4Mk7NsimvJrkBfZ U0kGUfAfBMk+x/TFg5BF25jMbPCQpw7ppRJs3gsMbd5Jw1SgFz/1fIw5xH1I1Jeq vZuzJrvkjol+n0ImzHNvTUvrSzSVQHbqYaHAp6r+1OFUXmxcPpZt1RIy4ST2pVjM rOJjqtEwjitKqJYlN6kCtV35fKTY/kCCyF5oioXBYsxZuP/3MpXdUmVFvHs6x6Q/ 2Xkbaoyam36rYTGeVzA1lP9gwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMI74BW1 KirGn1dMVNIf+3/k/JQhMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhKuNpyUwJjEggGxKgTIiLAqMaI7QiXDryV3a7vnn5USMGDSnZ9+k8+S98z2D MGGTkQsPzD0B8M4ULOfbRJ4W8dMyeKB/XkAuO4LpoIDPpLMjgTfh5xTDVOTRGosf PbEJyWr8pLTUUsa6vi73gFVsnjC2rwDO1EGZeqatcgnoomGsemsrlQSlmy3R82rO cpIs7Ifx4Zq3dPNVc6ZxYTnKKc+oJyAFc/emVhs9WLCDtBK1r6u7AjcMMII3n01y lFZn1/lXrYaRPSzKpOosr89TwhF5+EhvBDUc6wOmxj/o/05KHuqbMB8ZXmCxrtv/ 2XZrXfhEtSyRa3iVylekfQvEbA== -----END CERTIFICATE-----Generated at Thu Aug 27 04:02:28 2026 by rpki-client