$ rpki-client -vvf rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft File: khO1BHpA8jx8YASA5tqnoc9_oug.mft (raw, json) Hash identifier: FUBGv5NuW2wOa6aIAY9Xr9KCu0fbEEkVtEnIdyVXH+Y= Subject key identifier: BE:3B:03:D6:CB:66:D5:9D:6D:C3:A4:02:E3:C6:A4:25:CE:1C:C3:FD Authority key identifier: 92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8 Certificate issuer: /CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft Manifest number: 0227 Signing time: Wed 19 Aug 2026 03:16:59 +0000 Manifest this update: Wed 19 Aug 2026 03:16:58 +0000 Manifest next update: Wed 26 Aug 2026 03:16:58 +0000 Files and hashes: 1: khO1BHpA8jx8YASA5tqnoc9_oug.crl (hash: 1AqkjAwpU7UMKUdAnD5QDXub2bO6P+WT9hZCPaL33mE=) 2: 4E18682450A911EEA39AAE41C4F9AE02.roa (hash: 1TmegfXL7CHMVE3+A+CZbSuJIC3tkud4zJDxKyv9h1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91435F3, serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8 Validity Not Before: Aug 19 03:16:58 2026 GMT Not After : Aug 26 03:16:58 2026 GMT Subject: CN=6a85202b-289f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:44:93:d3:39:f0:cc:89:c6:c9:92:2a:4a: 88:b2:32:fb:0a:3f:dd:f9:3a:f4:5d:78:d9:9a:cb: 08:77:01:32:3f:c4:1a:c6:f3:82:c0:cf:4f:48:d1: 3a:81:0d:05:a2:cd:d3:94:53:3c:f1:ed:d7:32:c6: 56:96:81:6e:fa:60:84:01:ad:2a:54:11:2f:20:02: b9:81:77:18:b9:c0:3f:f2:c6:e4:e3:9a:bc:de:86: d5:0c:49:3f:b6:20:ea:b3:7e:d3:85:2a:a1:58:26: cf:95:23:b4:9c:58:6c:b7:66:ec:28:21:87:05:c8: d0:95:0f:10:5c:e5:8d:31:2f:d1:d8:1d:ea:50:d2: 5f:52:ee:fa:5c:fd:44:06:3d:ab:b1:d6:9a:b6:53: 97:3d:71:5c:cc:9c:b3:c3:67:b3:f2:b7:75:25:dc: 8c:3f:74:4a:6d:8b:d3:fa:a5:05:4a:8f:95:6a:ba: 91:8b:da:31:dd:39:fc:b3:19:86:6f:11:c8:be:bf: 97:08:55:39:b0:23:35:74:b0:74:c3:ad:eb:cc:5d: a4:c1:42:d5:83:58:af:8f:64:51:4b:f5:36:8f:e5: 5e:3e:a1:f8:71:fd:f3:52:1c:1f:8e:b6:ef:68:fd: 2b:07:52:31:86:75:10:c5:b7:de:9e:c8:81:6d:d6: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3B:03:D6:CB:66:D5:9D:6D:C3:A4:02:E3:C6:A4:25:CE:1C:C3:FD X509v3 Authority Key Identifier: keyid:92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5c:da:0d:c9:a9:78:65:ce:6d:70:8f:58:26:2a:df:58:f7: be:f1:49:0a:dc:85:57:26:a8:0b:fd:fb:91:66:44:f9:6d:f3: 0b:e6:ee:03:28:2e:e0:6c:83:57:f6:f4:3d:c8:a8:45:46:a9: eb:ff:9c:64:64:25:7d:cc:c9:2e:c6:70:f5:7b:73:2c:0e:50: eb:49:c4:85:ed:ff:ed:a1:74:44:4b:3e:5f:e4:ce:7b:eb:ce: b7:28:48:7f:9a:42:7a:cd:50:08:ef:ea:28:ec:32:0a:09:62: db:57:29:b4:99:57:3b:7f:93:4d:4e:5a:0f:a3:3c:03:e1:27: 6a:0c:30:26:1e:e3:1f:f1:cb:d0:91:df:73:d9:76:ea:83:a5: 02:43:26:f9:b2:3b:b2:98:5b:f7:77:b4:94:65:20:4c:10:f6: 22:94:6c:4b:c7:bc:74:59:84:c3:59:7f:76:d0:54:08:09:11: 85:a2:86:78:3f:90:51:af:2a:ca:96:59:ba:62:52:e5:0a:54: b1:9f:fb:cd:27:46:bd:92:d2:89:57:77:48:aa:f1:6c:1a:bc: 85:eb:1b:49:73:43:f1:8b:bc:f1:3c:83:4d:31:1f:d8:4d:7b: f0:a4:d7:9e:31:f8:1d:57:1a:25:d4:b8:54:7c:9b:6b:28:0c: a9:7d:56:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM1RjMxMTAvBgNVBAUTKDkyMTNCNTA0N0E0MEYyM0M3QzYwMDQ4MEU2REFBN0Ex Q0Y3RkEyRTgwHhcNMjYwODE5MDMxNjU4WhcNMjYwODI2MDMxNjU4WjAYMRYwFAYD VQQDEw02YTg1MjAyYi0yODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLtEk9M58MyJxsmSKkqIsjL7Cj/d+Tr0XXjZmssIdwEyP8QaxvOCwM9PSNE6 gQ0Fos3TlFM88e3XMsZWloFu+mCEAa0qVBEvIAK5gXcYucA/8sbk45q83obVDEk/ tiDqs37ThSqhWCbPlSO0nFhst2bsKCGHBcjQlQ8QXOWNMS/R2B3qUNJfUu76XP1E Bj2rsdaatlOXPXFczJyzw2ez8rd1JdyMP3RKbYvT+qUFSo+VarqRi9ox3Tn8sxmG bxHIvr+XCFU5sCM1dLB0w63rzF2kwULVg1ivj2RRS/U2j+VePqH4cf3zUhwfjrbv aP0rB1IxhnUQxbfensiBbdalYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL47A9bL ZtWdbcOkAuPGpCXOHMP9MB8GA1UdIwQYMBaAFJITtQR6QPI8fGAEgObap6HPf6Lo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzVGMy85QjVEQjVFQTUw QTgxMUVFQjZERTA5M0ZDNEY5QUUwMi9raE8xQkhwQThqeDhZQVNBNXRxbm9jOV9v dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTzFCSHBBOGp4OFlBU0E1dHFub2M5X291Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzVGMy85QjVEQjVFQTUwQTgxMUVFQjZERTA5M0ZDNEY5QUUwMi9raE8xQkhwQThq eDhZQVNBNXRxbm9jOV9vdWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ1zaDcmpeGXObXCPWCYq31j3vvFJCtyFVyaoC/37kWZE+W3zC+buAygu4GyD V/b0PcioRUap6/+cZGQlfczJLsZw9XtzLA5Q60nEhe3/7aF0REs+X+TOe+vOtyhI f5pCes1QCO/qKOwyCgli21cptJlXO3+TTU5aD6M8A+EnagwwJh7jH/HL0JHfc9l2 6oOlAkMm+bI7sphb93e0lGUgTBD2IpRsS8e8dFmEw1l/dtBUCAkRhaKGeD+QUa8q ypZZumJS5QpUsZ/7zSdGvZLSiVd3SKrxbBq8hesbSXND8Yu88TyDTTEf2E178KTX njH4HVcaJdS4VHybaygMqX1WAw== -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:54 2026 by rpki-client