$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft File: hfK68bffHaqMiKtsXnjB_MP3jQg.mft (raw, json) Hash identifier: erFuc5eSvrhadmIKHPW4wS8An8HMTtYdsZ+DNQsdLXw= Subject key identifier: CB:F4:AB:A2:64:3B:1F:6E:4C:5E:35:1D:69:00:76:E3:34:3F:44:2D Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft Manifest number: 0480 Signing time: Wed 19 Aug 2026 00:30:05 +0000 Manifest this update: Wed 19 Aug 2026 00:30:05 +0000 Manifest next update: Wed 26 Aug 2026 00:30:05 +0000 Files and hashes: 1: hfK68bffHaqMiKtsXnjB_MP3jQg.crl (hash: t7Q/Rd67lFXeOLJ8JmvEiklpLPhSvlaIwNPZp+H/G64=) 2: F570D764773F11F09FC02036C4F9AE02.roa (hash: gvPu45DyIqZBu1jQxEhjgfSh962TYPXbAHfGb3N8kR4=) 3: 06FA5A64774011F0BE2D3736C4F9AE02.roa (hash: cl/4/5b1299P9Rw9mt6jtdWymjlwHiUICZ1E9aWqHuM=) 4: A7FBA00E778811EDAE39280CC4F9AE02.roa (hash: NtIL0Ds6f0ZS7MHa9CMEFQcx6i11Pda/8hAwPCcExQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Aug 19 00:30:05 2026 GMT Not After : Aug 26 00:30:05 2026 GMT Subject: CN=6a84f90d-9cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:5e:6e:8f:fb:19:0d:c5:2d:ed:24:ae:e0: 03:ae:a4:b9:ac:09:07:8a:56:d0:b8:f2:f9:9b:ce: 7d:02:13:39:17:56:3c:ce:33:11:21:67:44:85:21: b6:4d:58:22:c9:32:99:92:a3:81:7b:d2:29:d1:df: b9:0f:bd:e8:9d:37:fe:c0:5e:1d:ce:a7:a1:f0:a6: 09:e3:54:b9:3d:b7:23:f4:f1:86:50:4e:a1:ad:37: 05:f8:3b:eb:e5:be:e7:ec:47:cd:54:34:93:eb:7e: 43:ee:98:be:04:47:e3:73:2f:3f:58:44:69:8d:22: b0:2e:87:47:3b:21:7f:08:03:58:fa:03:9f:90:1f: b5:28:f9:bd:af:47:2e:dd:9f:ef:fb:e9:f8:67:3f: 20:87:78:b6:89:5d:9a:0c:7f:e1:22:3c:c2:93:76: 3a:53:99:c4:6a:ba:68:88:2c:a0:92:97:44:8f:1e: 75:0e:8d:5e:11:37:86:5e:fd:24:00:5f:e7:ce:e7: 0b:05:05:fd:d7:ea:ed:71:87:6e:a7:39:66:6b:eb: cd:03:31:6c:f0:9a:b5:4b:69:19:9c:06:13:70:5c: 94:36:28:2f:9b:4a:18:3d:34:04:a2:4a:97:03:b5: b6:55:e6:1e:94:43:56:b0:9c:ad:ce:d4:2b:6a:b2: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:AB:A2:64:3B:1F:6E:4C:5E:35:1D:69:00:76:E3:34:3F:44:2D X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e1:28:bc:cc:f4:33:2b:dd:dd:6e:f1:2d:e1:66:bd:66:a0: 51:f8:c4:d3:bb:d9:9f:53:4b:40:e7:e7:af:6a:ce:97:86:ef: 09:93:25:9c:31:98:96:eb:4b:80:07:62:2c:cd:72:b1:40:b9: b8:0f:bb:6d:34:30:cc:1e:a7:83:d2:8b:d8:ab:0b:3f:b6:cc: d0:f6:73:a4:b4:ce:db:b9:0a:00:ee:16:a4:3f:20:49:fd:c4: 9f:0d:6a:4a:18:a1:43:be:26:81:e0:89:91:99:93:42:bf:2f: 0c:4d:1e:64:01:c5:76:c6:45:13:9c:3d:54:69:34:ae:00:54: b5:21:07:cf:a4:4b:fc:fb:8a:99:25:73:3e:a0:7f:a9:99:bb: ae:e0:b6:9e:32:ae:0e:1f:82:d3:78:3b:cf:eb:a2:96:cb:74: 21:97:72:bf:c3:87:f1:48:04:69:b9:56:33:ef:53:08:83:80: a2:5c:ba:9b:37:b8:2a:56:3b:7e:df:c6:c6:8c:7c:9a:f2:59: 3c:c0:b3:dd:d1:d2:12:68:08:90:eb:ef:b4:6d:b3:ce:f5:a0: 71:61:da:f1:f0:9f:4f:e9:7c:4e:5d:22:ba:c0:51:d0:11:a9: ad:20:44:6f:11:b6:70:95:f6:c7:00:04:ba:30:97:5e:ad:f9: 5e:63:24:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjYwODE5MDAzMDA1WhcNMjYwODI2MDAzMDA1WjAYMRYwFAYD VQQDEw02YTg0ZjkwZC05Y2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKpebo/7GQ3FLe0kruADrqS5rAkHilbQuPL5m859AhM5F1Y8zjMRIWdEhSG2 TVgiyTKZkqOBe9Ip0d+5D73onTf+wF4dzqeh8KYJ41S5Pbcj9PGGUE6hrTcF+Dvr 5b7n7EfNVDST635D7pi+BEfjcy8/WERpjSKwLodHOyF/CANY+gOfkB+1KPm9r0cu 3Z/v++n4Zz8gh3i2iV2aDH/hIjzCk3Y6U5nEarpoiCygkpdEjx51Do1eETeGXv0k AF/nzucLBQX91+rtcYdupzlma+vNAzFs8Jq1S2kZnAYTcFyUNigvm0oYPTQEokqX A7W2VeYelENWsJytztQrarKiZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMv0q6Jk Ox9uTF41HWkAduM0P0QtMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8xRjQwNEUzMEE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhh cU1pS3RzWG5qQl9NUDNqUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf+EovMz0Myvd3W7xLeFmvWagUfjE07vZn1NLQOfnr2rOl4bvCZMlnDGYlutL gAdiLM1ysUC5uA+7bTQwzB6ng9KL2KsLP7bM0PZzpLTO27kKAO4WpD8gSf3Enw1q ShihQ74mgeCJkZmTQr8vDE0eZAHFdsZFE5w9VGk0rgBUtSEHz6RL/PuKmSVzPqB/ qZm7ruC2njKuDh+C03g7z+uilst0IZdyv8OH8UgEablWM+9TCIOAoly6mze4KlY7 ft/Gxox8mvJZPMCz3dHSEmgIkOvvtG2zzvWgcWHa8fCfT+l8Tl0iusBR0BGprSBE bxG2cJX2xwAEujCXXq35XmMk+Q== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:28 2026 by rpki-client