$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json) Hash identifier: BfT5g8oxzTW/Q+968cRv2mvkSFpXDNl1UL5PGGZLsfA= Subject key identifier: 3B:B5:94:64:63:78:84:9E:7A:44:2B:64:D3:ED:4F:86:B6:CF:55:02 Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft Manifest number: 0C4D Signing time: Thu 20 Aug 2026 18:40:33 +0000 Manifest this update: Thu 20 Aug 2026 18:40:32 +0000 Manifest next update: Thu 27 Aug 2026 18:40:32 +0000 Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: M5Q5LQmDQ7dkt1rhXVkmpZmGdPGJFBHWWGTFEG09Czw=) 2: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: TblqmML4Z56TJGS/QmGAg1lALjsba+7daK1iMQjSZu0=) 3: E1647F18303311EA8796D584C4F9AE02.roa (hash: hvHQ4oovH4LfseVNWUdyIbRafNtihmdVkn0b5XITvtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Validity Not Before: Aug 20 18:40:32 2026 GMT Not After : Aug 27 18:40:32 2026 GMT Subject: CN=6a874a20-c86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9b:fa:bf:7d:3a:3b:ea:c4:92:84:57:f3:eb: 86:03:d2:18:f2:d5:1f:29:1c:e8:7f:04:9f:e2:22: 15:a4:19:b4:da:ed:18:53:08:f8:7d:27:24:5a:6b: 12:7f:62:42:32:a1:67:c8:b6:28:b8:05:33:89:10: a2:3f:42:b4:0e:9b:a9:79:4b:af:91:47:74:aa:90: 5e:27:b9:34:0a:dc:99:88:0e:f1:57:3b:e4:3c:6a: 62:45:19:be:4f:3a:75:91:bc:17:3e:20:8c:0e:e4: 26:fb:d0:68:c5:ae:1a:c0:f6:a1:a0:7d:ba:51:8a: 39:92:fb:17:69:30:99:a4:f4:5c:67:e2:41:47:2c: ed:b2:d7:76:2f:ee:3f:c1:e4:72:c9:e9:f1:0e:95: c2:ce:18:4a:82:f2:11:6b:3a:9b:97:c6:1e:6b:bd: 08:f3:8f:0b:65:9b:75:13:fc:b6:11:ce:39:3a:d4: 95:a3:5c:ec:5f:d5:4c:1f:34:7b:dc:70:1a:85:d0: f5:fe:87:03:35:e1:10:ff:0c:c9:d6:62:8d:69:4f: 47:4c:2c:4b:f4:7c:c0:1c:88:95:b0:3f:37:4f:f2: a8:0a:5e:66:14:93:c9:8c:45:a7:1e:1a:e7:fc:e2: b1:53:b7:8c:1f:d7:9d:e7:61:c6:7f:ff:47:8f:48: c1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B5:94:64:63:78:84:9E:7A:44:2B:64:D3:ED:4F:86:B6:CF:55:02 X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:79:35:5b:2f:f9:11:3e:e3:c3:03:99:72:93:06:37:64:57: c1:de:92:14:a8:64:39:a0:09:1a:15:d7:15:d7:39:7c:96:0e: 15:8c:89:d3:85:9d:6e:2c:69:7d:a1:c5:40:07:41:0c:08:aa: 86:51:a5:cb:68:37:9c:c0:7d:64:7f:e9:0e:5f:7a:d5:65:51: 37:02:f9:a6:3e:60:a4:9a:1d:4f:23:d6:4f:3a:87:db:56:52: 12:54:50:d9:06:61:49:d9:3f:50:9c:30:0a:8c:3b:85:17:92: 0f:63:aa:63:8a:40:6f:8a:f4:35:0d:4f:a7:c4:04:f3:9a:7e: b9:2d:e7:97:27:2f:03:81:cc:2e:8b:25:06:86:97:0e:11:aa: 43:f1:ed:39:f4:ce:6b:6c:50:40:93:54:a9:ab:2e:a7:f4:72: 18:f4:26:d6:31:18:a3:58:3d:b7:71:e1:2b:47:78:1d:be:db: 52:f1:1e:92:e6:af:bc:f5:68:22:da:bd:5f:4a:e3:f7:13:6a: 96:da:cc:2e:e7:32:92:c3:d7:2b:4c:c5:52:ab:3a:76:28:8a: b4:42:e2:b1:9f:e3:d2:63:b1:ce:f7:08:54:55:6b:0c:a9:fe: 63:09:90:27:d1:28:46:46:f9:1b:b5:66:54:c8:fc:c2:dd:62: af:7c:be:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjYwODIwMTg0MDMyWhcNMjYwODI3MTg0MDMyWjAYMRYwFAYD VQQDEw02YTg3NGEyMC1jODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5v6v306O+rEkoRX8+uGA9IY8tUfKRzofwSf4iIVpBm02u0YUwj4fSckWmsS f2JCMqFnyLYouAUziRCiP0K0DpupeUuvkUd0qpBeJ7k0CtyZiA7xVzvkPGpiRRm+ Tzp1kbwXPiCMDuQm+9Boxa4awPahoH26UYo5kvsXaTCZpPRcZ+JBRyztstd2L+4/ weRyyenxDpXCzhhKgvIRazqbl8Yea70I848LZZt1E/y2Ec45OtSVo1zsX9VMHzR7 3HAahdD1/ocDNeEQ/wzJ1mKNaU9HTCxL9HzAHIiVsD83T/KoCl5mFJPJjEWnHhrn /OKxU7eMH9ed52HGf/9Hj0jBLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDu1lGRj eISeekQrZNPtT4a2z1UCMB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6 M253S3JwbmluQm1WbFN0YTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ3k1Wy/5ET7jwwOZcpMGN2RXwd6SFKhkOaAJGhXXFdc5fJYOFYyJ04Wdbixp faHFQAdBDAiqhlGly2g3nMB9ZH/pDl961WVRNwL5pj5gpJodTyPWTzqH21ZSElRQ 2QZhSdk/UJwwCow7hReSD2OqY4pAb4r0NQ1Pp8QE85p+uS3nlycvA4HMLoslBoaX DhGqQ/HtOfTOa2xQQJNUqasup/RyGPQm1jEYo1g9t3HhK0d4Hb7bUvEekuavvPVo Itq9X0rj9xNqltrMLucyksPXK0zFUqs6diiKtELisZ/j0mOxzvcIVFVrDKn+YwmQ J9EoRkb5G7VmVMj8wt1ir3y+NQ== -----END CERTIFICATE-----Generated at Thu Aug 20 22:55:57 2026 by rpki-client