$ rpki-client -vvvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json) Hash identifier: cKihN4OFqehMDYF7REIW9nsD1lQcPo17Vm/mAAS8rns= Subject key identifier: 69:B5:22:2D:2F:55:55:5B:02:F5:4E:69:9C:F0:11:26:D7:3D:C7:A1 Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft Manifest number: 0139 Signing time: Tue 25 Aug 2026 05:29:50 +0000 Manifest this update: Tue 25 Aug 2026 05:29:50 +0000 Manifest next update: Tue 01 Sep 2026 05:29:50 +0000 Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: 08l1Yo9qcc3LK21Tviik4PGralKwjeLrO+wTlVmo2/8=) 2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 05:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Validity Not Before: Aug 25 05:29:50 2026 GMT Not After : Sep 1 05:29:50 2026 GMT Subject: CN=6a8d284e-86d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:09:1c:6e:9b:4e:9d:6d:ca:2d:27:24:e0: 38:fc:eb:28:42:09:56:45:3b:16:8e:dc:a0:c6:68: de:5c:2b:bf:05:7c:1a:11:f1:e4:8b:0e:fe:1d:6b: ec:b8:0e:39:ec:aa:34:e0:41:24:1f:d0:a0:28:96: 63:2d:28:c1:c9:03:05:a6:c0:98:f7:87:28:47:b5: 9a:c4:66:12:7e:7a:92:c3:7b:2f:8e:db:93:00:6b: 87:0f:61:84:01:f6:ae:d4:c4:85:57:28:93:00:36: fc:23:cc:a6:01:78:65:1e:82:8c:c9:99:c0:28:7b: fc:01:13:b7:62:ea:a9:0c:c1:af:89:09:5e:ba:5a: 0c:53:0b:6e:c7:a6:6d:24:1f:36:74:cd:d1:2a:34: 97:77:38:eb:ad:ef:c9:89:a1:7d:77:d8:3e:83:1d: 77:e7:de:52:cd:5a:9a:6d:73:80:96:c5:6d:a3:b5: bf:9d:78:b9:49:90:ad:ad:27:db:3a:45:79:f4:4b: e6:50:3c:c7:16:71:5d:ca:59:6f:f7:d5:b7:4b:0a: f5:c8:d6:67:08:c8:f3:b7:5e:3f:e1:fd:3a:15:a2: b5:9e:65:1c:4d:d3:f8:ed:b9:62:01:ee:2c:e7:b1: d7:e5:9b:1f:96:33:b4:c3:41:91:61:f6:2f:f0:31: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B5:22:2D:2F:55:55:5B:02:F5:4E:69:9C:F0:11:26:D7:3D:C7:A1 X509v3 Authority Key Identifier: keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a6:a3:21:e5:c5:ba:39:fa:a4:81:7c:0b:3c:11:4e:0a:58: 74:1b:11:ea:2a:f5:d2:6e:35:dd:c9:ad:07:18:71:aa:76:b8: 7c:f2:c7:3e:37:46:31:d8:e2:5b:06:a8:25:aa:07:45:de:be: 90:60:0b:1f:ff:9a:d0:ae:53:a5:e2:89:9d:3d:fc:f7:28:4d: 5a:10:35:00:4e:7f:81:33:c7:a9:7e:b2:cc:c8:77:74:81:fd: 20:9d:82:cf:ba:51:34:8c:68:40:13:8c:14:24:26:19:ae:66: c3:19:a0:29:82:2c:86:39:9a:57:b6:56:aa:7e:35:96:8c:00: fe:89:cf:fb:a0:5e:30:df:5e:83:68:b2:68:ab:30:be:05:ee: 55:eb:4b:c5:53:c7:65:e6:ef:a4:5d:b2:04:40:83:0e:e6:50: 17:94:63:64:70:58:e5:33:34:b0:26:38:06:65:24:84:d1:f6: fc:67:78:6f:da:5d:b9:d8:41:69:7e:c0:e7:6d:03:1d:d0:ab: cb:5b:a9:65:1e:37:1f:20:b0:0c:57:aa:e6:c9:81:af:03:f4: 30:a5:a4:77:a5:90:7e:7f:fd:f2:42:c1:d5:be:6a:66:b5:eb: 1e:8f:23:4a:9e:0c:c3:9b:f5:f4:f8:23:72:d6:ea:97:0d:5f: 14:47:5b:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RTIxMTAvBgNVBAUTKDZBQUYzRDlCQzNERkEzQTEyNTA4Mjk2NUQ4RkYzM0I4 MTI4RjI5MUYwHhcNMjYwODI1MDUyOTUwWhcNMjYwOTAxMDUyOTUwWjAYMRYwFAYD VQQDEw02YThkMjg0ZS04NmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqkJHG6bTp1tyi0nJOA4/OsoQglWRTsWjtygxmjeXCu/BXwaEfHkiw7+HWvs uA457Ko04EEkH9CgKJZjLSjByQMFpsCY94coR7WaxGYSfnqSw3svjtuTAGuHD2GE Afau1MSFVyiTADb8I8ymAXhlHoKMyZnAKHv8ARO3YuqpDMGviQleuloMUwtux6Zt JB82dM3RKjSXdzjrre/JiaF9d9g+gx13595SzVqabXOAlsVto7W/nXi5SZCtrSfb OkV59EvmUDzHFnFdyllv99W3Swr1yNZnCMjzt14/4f06FaK1nmUcTdP47bliAe4s 57HX5ZsfljO0w0GRYfYv8DFQvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGm1Ii0v VVVbAvVOaZzwESbXPcehMB8GA1UdIwQYMBaAFGqvPZvD36OhJQgpZdj/M7gSjykf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZFMi8zQjU0MUYyMENC M0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82RWxDQ2xsMlA4enVCS1BL UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzZFMi8zQjU0MUYyMENCM0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82 RWxDQ2xsMlA4enVCS1BLUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgaajIeXFujn6pIF8CzwRTgpYdBsR6ir10m413cmtBxhxqna4fPLHPjdGMdji WwaoJaoHRd6+kGALH/+a0K5TpeKJnT389yhNWhA1AE5/gTPHqX6yzMh3dIH9IJ2C z7pRNIxoQBOMFCQmGa5mwxmgKYIshjmaV7ZWqn41lowA/onP+6BeMN9eg2iyaKsw vgXuVetLxVPHZebvpF2yBECDDuZQF5RjZHBY5TM0sCY4BmUkhNH2/Gd4b9pdudhB aX7A520DHdCry1upZR43HyCwDFeq5smBrwP0MKWkd6WQfn/98kLB1b5qZrXrHo8j Sp4Mw5v19Pgjctbqlw1fFEdbFw== -----END CERTIFICATE-----Generated at Wed Aug 26 16:11:07 2026 by rpki-client