$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft File: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft (raw, json) Hash identifier: /g6pG3E2G+5N+YHFeTQMm6sBGr+p1ZYBv0GZYuAmVN4= Subject key identifier: 9C:BF:9A:26:A0:E2:DD:F4:E0:3A:8E:F3:BB:CD:73:6E:C8:AD:A4:FF Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F Certificate issuer: /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft Manifest number: 53 Signing time: Wed 19 Aug 2026 08:58:26 +0000 Manifest this update: Wed 19 Aug 2026 08:58:26 +0000 Manifest next update: Wed 26 Aug 2026 08:58:26 +0000 Files and hashes: 1: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl (hash: ELFCY4bDF/1W0fhZcnutL0AvUnc5mzZC2p7N4wikhfw=) 2: FF170F921D0011F1B83A0561033D8C67.roa (hash: 1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=) 3: FE51AA4A1D0011F1B83A0561033D8C67.roa (hash: nX9JuDxfEd7grZ7RzFCPrS8jl7ib0YWyM+WZLBvfFBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Validity Not Before: Aug 19 08:58:26 2026 GMT Not After : Aug 26 08:58:26 2026 GMT Subject: CN=6a857032-fc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:72:44:49:61:61:ab:5c:4f:a7:a2:42:dc: 04:c0:1d:ac:8b:ed:17:61:0f:4b:64:f2:b1:8f:fe: c4:b0:1e:96:ef:0f:44:58:86:a6:cb:3f:e4:b5:5d: 6c:a0:ef:94:cc:85:67:01:1e:f6:d6:f7:ba:24:60: a7:26:4b:ac:63:6b:ee:d2:62:8a:e1:f1:70:31:8e: a9:cd:60:bc:0f:06:ff:39:33:a0:2c:f9:2b:7d:13: ce:65:51:f6:d8:14:77:7e:54:f2:4b:3c:09:6c:41: 60:4f:42:6e:78:f4:a7:0e:b5:07:d8:56:77:6d:9f: 04:e7:e7:a3:c2:80:e8:63:34:a8:e7:98:ea:89:79: 07:4e:71:c2:68:7d:a0:41:24:bf:c1:28:85:28:d2: ec:7a:e9:80:c0:1d:6b:3d:df:9e:43:41:cc:76:02: a4:4b:b3:d1:22:65:9a:38:c1:6e:f5:43:a6:15:46: 8f:58:af:99:e0:eb:fc:31:5a:60:66:60:7a:eb:4c: e7:4e:1b:6d:89:ff:53:15:94:8a:87:d1:4b:3f:ba: 55:06:e5:1e:32:b6:d0:2c:4c:16:83:4a:c1:38:ad: 0c:7e:9a:2e:d9:10:84:97:d0:6b:24:d0:c4:1a:34: c1:4f:34:85:28:0f:3d:2e:1b:bb:24:bf:e8:d7:bd: 12:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BF:9A:26:A0:E2:DD:F4:E0:3A:8E:F3:BB:CD:73:6E:C8:AD:A4:FF X509v3 Authority Key Identifier: keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ef:4e:03:ca:bd:86:81:c3:24:42:17:a0:d6:c1:3d:93:e3: f7:31:07:2e:b7:b2:ea:bd:7b:75:c4:db:87:b3:6b:8d:90:16: 1c:94:d4:8e:e4:59:31:3c:a6:1e:0d:eb:6b:c6:1b:ea:88:75: 05:80:b3:1d:ec:a5:14:87:28:91:a0:b5:1a:32:2a:c3:3f:da: e3:e3:2f:dd:dd:76:52:c9:95:fe:ef:e3:e9:20:80:cc:11:42: a3:9a:38:3d:d3:fc:04:0f:da:f5:4c:96:e7:10:c8:12:14:72: ab:74:3b:f0:df:33:d1:ce:d0:fd:fe:c5:cb:6a:31:7a:7b:aa: 95:d2:e7:fb:6d:54:50:b2:0c:ee:c6:27:b9:43:51:dc:cd:4b: 94:5d:52:b0:78:6a:1c:3a:16:a0:b4:74:70:da:49:31:e9:90: 17:68:c3:aa:9d:8b:f5:5e:a3:21:69:70:b3:ca:83:4a:7f:c6: 77:05:4a:b7:c9:28:91:89:26:d6:8f:ae:85:ab:0c:9a:95:b0: 0a:5a:95:bc:13:d9:21:57:4f:c3:d6:c1:d4:f9:3f:a4:d1:eb: 02:4d:4a:be:a4:cf:19:d2:42:53:a5:22:d4:0c:d3:b8:d4:07: 34:69:dc:48:3a:67:84:e4:ca:65:ac:23:80:8c:21:40:4c:9e: d2:79:e7:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUMwNTExMC8GA1UEBRMoMDA4RDRGOUY1ODY4RUMyMkE3QTkxRUNBQURDRDdFMEQz QjMxMTE3RjAeFw0yNjA4MTkwODU4MjZaFw0yNjA4MjYwODU4MjZaMBgxFjAUBgNV BAMTDTZhODU3MDMyLWZjMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGXXJESWFhq1xPp6JC3ATAHayL7RdhD0tk8rGP/sSwHpbvD0RYhqbLP+S1XWyg 75TMhWcBHvbW97okYKcmS6xja+7SYorh8XAxjqnNYLwPBv85M6As+St9E85lUfbY FHd+VPJLPAlsQWBPQm549KcOtQfYVndtnwTn56PCgOhjNKjnmOqJeQdOccJofaBB JL/BKIUo0ux66YDAHWs9355DQcx2AqRLs9EiZZo4wW71Q6YVRo9Yr5ng6/wxWmBm YHrrTOdOG22J/1MVlIqH0Us/ulUG5R4yttAsTBaDSsE4rQx+mi7ZEISX0Gsk0MQa NMFPNIUoDz0uG7skv+jXvRLrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnL+aJqDi 3fTgOo7zu81zbsitpP8wHwYDVR0jBBgwFoAUAI1Pn1ho7CKnqR7Krc1+DTsxEX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QzA1Lzc3QkFDNDMwMUQw MDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NLbnFSN0tyYzEtRFRzeEVY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUkxUG4xaG83Q0tucVI3S3JjMS1EVHN4RVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QzA1Lzc3QkFDNDMwMUQwMDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NL bnFSN0tyYzEtRFRzeEVYOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7704Dyr2GgcMkQheg1sE9k+P3MQcut7LqvXt1xNuHs2uNkBYclNSO5FkxPKYe DetrxhvqiHUFgLMd7KUUhyiRoLUaMirDP9rj4y/d3XZSyZX+7+PpIIDMEUKjmjg9 0/wED9r1TJbnEMgSFHKrdDvw3zPRztD9/sXLajF6e6qV0uf7bVRQsgzuxie5Q1Hc zUuUXVKweGocOhagtHRw2kkx6ZAXaMOqnYv1XqMhaXCzyoNKf8Z3BUq3ySiRiSbW j66FqwyalbAKWpW8E9khV0/D1sHU+T+k0esCTUq+pM8Z0kJTpSLUDNO41Ac0adxI OmeE5MplrCOAjCFATJ7Seefw -----END CERTIFICATE-----Generated at Fri Aug 21 03:32:49 2026 by rpki-client