$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft File: TS0NULyRom4hHzg_UCqz1w0C3HA.mft (raw, json) Hash identifier: BA+pY8c0ROie/3J0WffeRAHl0Z4wtJmU+hWSXAjop9w= Subject key identifier: DA:3C:5B:EC:01:A1:3C:3C:86:BE:70:1E:43:1E:36:7D:E5:3A:44:34 Authority key identifier: 4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 Certificate issuer: /CN=A91406FF/serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft Manifest number: 5B Signing time: Wed 19 Aug 2026 08:53:02 +0000 Manifest this update: Wed 19 Aug 2026 08:53:01 +0000 Manifest next update: Wed 26 Aug 2026 08:53:01 +0000 Files and hashes: 1: TS0NULyRom4hHzg_UCqz1w0C3HA.crl (hash: n9wQOlrLq5UzfATD0PljPutlGsVyGBIQ7033ojo5Znk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Validity Not Before: Aug 19 08:53:01 2026 GMT Not After : Aug 26 08:53:01 2026 GMT Subject: CN=6a856eee-0c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:82:41:c0:10:69:74:b5:af:25:3e:d1:c9: ac:cf:62:c5:a6:84:0c:b1:87:05:af:bc:00:2c:d9: e3:52:fb:58:a1:09:3f:d5:bc:74:fe:67:d0:06:0c: 40:ed:c1:37:4c:3b:58:47:02:e1:77:dc:22:aa:70: aa:28:24:5b:a5:1b:ad:56:38:e8:6b:ba:a1:26:94: d4:d8:44:ec:88:12:6b:34:33:b9:74:b6:37:8b:75: ce:1b:4f:c4:84:f2:f0:6a:6b:d7:c4:e4:5e:b2:71: 6b:be:f8:54:a7:95:cf:b3:a2:50:5a:84:e0:63:85: 3e:58:b3:e6:90:63:cd:cf:be:55:4b:3d:ae:d4:94: f0:d7:48:7d:91:52:f1:b8:b9:c4:9c:d0:99:73:50: 1d:11:44:70:54:4e:28:d1:3e:0e:41:bc:8a:dc:db: a5:db:cc:db:00:31:65:30:43:e5:44:4a:65:0a:42: c0:01:76:f8:c0:eb:38:76:8f:16:c5:7e:0f:61:a2: 82:7a:d9:b5:c9:5d:b1:8a:57:61:8b:5f:db:f9:01: ad:7e:a2:c6:5f:0d:a4:bb:1e:1d:60:42:a1:54:bd: 8b:8c:ae:68:40:e3:1f:a4:ee:08:e4:c4:09:5b:a3: 23:fc:41:26:5a:a7:b4:51:f9:f1:8c:c2:86:fa:fd: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3C:5B:EC:01:A1:3C:3C:86:BE:70:1E:43:1E:36:7D:E5:3A:44:34 X509v3 Authority Key Identifier: keyid:4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d0:bc:20:26:d1:e2:de:f5:42:14:22:d2:60:e5:91:44:34: 29:38:61:d5:b8:30:a8:58:2f:c2:59:fc:00:32:85:e0:62:f2: 44:1b:52:a7:37:69:17:8b:49:a0:41:4e:b5:cb:cb:67:41:55: 0f:7e:b7:96:34:92:2b:3b:68:bc:ab:ba:ac:04:7e:fa:94:8d: 3b:2b:78:e9:71:80:38:89:5d:df:19:b4:33:64:51:90:e7:df: 7f:50:e9:bd:cd:bc:a8:25:c4:2d:8e:a2:9d:9c:50:98:3f:11: 46:6f:23:87:bc:7f:f4:bb:22:1f:30:17:39:ea:95:c2:78:10: aa:64:00:e7:35:a0:36:06:d4:3e:b4:7f:d1:81:57:4e:8c:dd: 35:2a:19:38:1d:59:f9:d5:e4:5e:ab:1b:1c:a2:95:6e:d0:9f: 9e:fd:f9:ea:6d:c7:c3:b5:4c:bb:43:01:bb:dd:de:1d:03:2a: 63:1f:2e:59:84:f9:af:ee:8e:a1:3e:ab:a9:4c:a8:0e:10:09: 97:54:b5:f8:5b:4c:12:6d:c8:18:d8:5c:48:fe:cd:ee:80:fa: 44:b6:7c:77:05:0e:cd:b9:a8:91:39:3f:9b:da:b1:26:2e:ed: 2c:38:84:c2:98:71:0e:fb:fa:7e:ea:89:5e:74:1a:40:4c:20: 12:79:e6:ff -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoNEQyRDBENTBCQzkxQTI2RTIxMUYzODNGNTAyQUIzRDcw RDAyREM3MDAeFw0yNjA4MTkwODUzMDFaFw0yNjA4MjYwODUzMDFaMBgxFjAUBgNV BAMTDTZhODU2ZWVlLTBjNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnK4JBwBBpdLWvJT7RyazPYsWmhAyxhwWvvAAs2eNS+1ihCT/VvHT+Z9AGDEDt wTdMO1hHAuF33CKqcKooJFulG61WOOhruqEmlNTYROyIEms0M7l0tjeLdc4bT8SE 8vBqa9fE5F6ycWu++FSnlc+zolBahOBjhT5Ys+aQY83PvlVLPa7UlPDXSH2RUvG4 ucSc0JlzUB0RRHBUTijRPg5BvIrc26XbzNsAMWUwQ+VESmUKQsABdvjA6zh2jxbF fg9hooJ62bXJXbGKV2GLX9v5Aa1+osZfDaS7Hh1gQqFUvYuMrmhA4x+k7gjkxAlb oyP8QSZap7RR+fGMwob6/UiLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2jxb7AGh PDyGvnAeQx42feU6RDQwHwYDVR0jBBgwFoAUTS0NULyRom4hHzg/UCqz1w0C3HAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzFENzEwNjBBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200aEh6Z19VQ3F6MXcwQzNI QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFMwTlVMeVJvbTRoSHpnX1VDcXoxdzBDM0hBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzFENzEwNjBBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200 aEh6Z19VQ3F6MXcwQzNIQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/0LwgJtHi3vVCFCLSYOWRRDQpOGHVuDCoWC/CWfwAMoXgYvJEG1KnN2kXi0mg QU61y8tnQVUPfreWNJIrO2i8q7qsBH76lI07K3jpcYA4iV3fGbQzZFGQ599/UOm9 zbyoJcQtjqKdnFCYPxFGbyOHvH/0uyIfMBc56pXCeBCqZADnNaA2BtQ+tH/RgVdO jN01Khk4HVn51eReqxscopVu0J+e/fnqbcfDtUy7QwG73d4dAypjHy5ZhPmv7o6h PqupTKgOEAmXVLX4W0wSbcgY2FxI/s3ugPpEtnx3BQ7NuaiROT+b2rEmLu0sOITC mHEO+/p+6oledBpATCASeeb/ -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:35 2026 by rpki-client