$ rpki-client -vvvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json) Hash identifier: 2vNoux1+cwPs6eq+IjQoyTwxZC4hmq91vBEZA8jV6ZI= Subject key identifier: 81:BE:5E:05:F1:C7:60:85:59:B6:16:E7:05:25:E5:6C:9B:01:3F:BD Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft Manifest number: 0142 Signing time: Fri 21 Aug 2026 05:26:47 +0000 Manifest this update: Fri 21 Aug 2026 05:26:47 +0000 Manifest next update: Fri 28 Aug 2026 05:26:47 +0000 Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: O8I5nruNkpqz6+Fyw+oMl0Jf/Qn3Xu0WtP5nz0clqWA=) 2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: fbcyaAtrA1h5av9wkarvyax0xETi5abCoRaPXoCMR3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Validity Not Before: Aug 21 05:26:47 2026 GMT Not After : Aug 28 05:26:47 2026 GMT Subject: CN=6a87e197-6b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:f2:15:b7:12:59:93:30:96:23:21:08:d2: 16:0f:70:27:80:88:96:21:1a:7d:62:d0:2a:98:00: b6:22:ab:74:91:1e:83:5f:6d:ab:13:86:bc:24:1d: e7:77:66:33:ba:7f:b9:cb:f4:19:2f:4a:67:06:64: c7:bb:98:d0:e7:83:fd:47:96:fe:5c:8c:37:a8:77: 29:c2:5c:48:cc:1a:03:85:e0:27:95:78:3d:dd:df: ab:70:4c:3e:34:7e:55:50:bc:db:1a:b0:2c:81:dd: 18:04:6c:61:b5:f6:2e:6d:7c:25:47:6e:cf:c9:62: 13:8c:67:a7:1d:b6:1b:fc:e6:27:f9:56:e4:cc:ae: ac:e2:af:4c:3b:2c:6d:60:8f:c1:d2:41:2a:6f:25: 83:29:41:28:15:04:3d:8c:2d:09:eb:16:6a:32:cf: aa:52:14:82:e9:44:f4:26:6e:52:fa:8b:9a:2f:e5: 88:f1:4a:7c:1a:c9:e1:ca:58:fb:94:2f:1a:e6:6f: d4:c5:16:48:43:15:30:ff:b5:52:76:bc:61:a6:31: 80:7d:6f:98:d8:63:75:79:80:85:d8:e5:eb:5c:b8: 7d:d3:4d:07:45:c5:69:ad:37:93:17:94:19:74:18: d6:93:74:de:da:48:aa:5e:45:e4:14:5a:76:45:9e: c8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BE:5E:05:F1:C7:60:85:59:B6:16:E7:05:25:E5:6C:9B:01:3F:BD X509v3 Authority Key Identifier: keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f8:20:39:d9:ae:f1:a4:a2:90:93:1a:6c:a5:8b:5a:19:ae: c0:76:76:23:b8:3a:f8:8f:80:b1:30:94:de:17:ce:42:79:44: d4:8f:49:71:dd:e9:03:7c:76:32:e2:74:78:15:d2:99:40:7f: ba:9d:ba:d6:fe:ca:54:4a:64:4f:ea:01:41:7a:90:39:e4:69: b3:a0:c4:a3:04:d9:4b:d7:20:ca:e9:17:79:0c:d5:43:d5:fb: 45:91:13:d8:85:36:05:f6:31:21:1d:42:55:f4:3d:4d:5e:67: 7d:82:d5:1a:a6:74:04:3c:4d:7e:7c:5a:7f:14:fe:1b:b0:60: 2d:6b:f5:5e:6f:01:25:e8:c7:a3:18:80:68:42:b7:56:c2:cb: d0:af:0f:35:16:0b:75:17:96:1b:fa:25:d1:b2:88:68:28:26: 92:e6:b7:04:3d:22:71:92:1a:29:10:b6:50:93:c3:f1:73:d7: 1c:6b:6a:c2:0c:05:c5:e6:c9:72:e6:cd:ec:02:5e:06:37:60: 50:0d:88:ab:41:05:3e:66:5e:69:d6:9a:65:59:36:09:48:66: 4c:fb:95:a8:ca:6b:0e:f8:24:b7:e0:01:4e:6c:0c:1b:cd:a7: aa:d6:dc:e4:c6:50:a3:e2:a0:cc:55:36:6f:53:a2:67:b3:80: 0d:0d:c2:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3Q0YxMTAvBgNVBAUTKEVDM0Q4MDdGNzkzQzlDRjVGQ0UzMzVFRTE1RTA5ODQ0 NDlCNDMwOTYwHhcNMjYwODIxMDUyNjQ3WhcNMjYwODI4MDUyNjQ3WjAYMRYwFAYD VQQDEw02YTg3ZTE5Ny02YjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur/yFbcSWZMwliMhCNIWD3AngIiWIRp9YtAqmAC2Iqt0kR6DX22rE4a8JB3n d2Yzun+5y/QZL0pnBmTHu5jQ54P9R5b+XIw3qHcpwlxIzBoDheAnlXg93d+rcEw+ NH5VULzbGrAsgd0YBGxhtfYubXwlR27PyWITjGenHbYb/OYn+VbkzK6s4q9MOyxt YI/B0kEqbyWDKUEoFQQ9jC0J6xZqMs+qUhSC6UT0Jm5S+ouaL+WI8Up8Gsnhylj7 lC8a5m/UxRZIQxUw/7VSdrxhpjGAfW+Y2GN1eYCF2OXrXLh9000HRcVprTeTF5QZ dBjWk3Te2kiqXkXkFFp2RZ7IKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIG+XgXx x2CFWbYW5wUl5WybAT+9MB8GA1UdIwQYMBaAFOw9gH95PJz1/OM17hXgmERJtDCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTdDRi9CNDE1NTQ1OEIy QzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5QWDg0elh1RmVDWVJFbTBN SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1KWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTdDRi9CNDE1NTQ1OEIyQzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5Q WDg0elh1RmVDWVJFbTBNSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJvggOdmu8aSikJMabKWLWhmuwHZ2I7g6+I+AsTCU3hfOQnlE1I9Jcd3pA3x2 MuJ0eBXSmUB/up261v7KVEpkT+oBQXqQOeRps6DEowTZS9cgyukXeQzVQ9X7RZET 2IU2BfYxIR1CVfQ9TV5nfYLVGqZ0BDxNfnxafxT+G7BgLWv1Xm8BJejHoxiAaEK3 VsLL0K8PNRYLdReWG/ol0bKIaCgmkua3BD0icZIaKRC2UJPD8XPXHGtqwgwFxebJ cubN7AJeBjdgUA2Iq0EFPmZeadaaZVk2CUhmTPuVqMprDvgkt+ABTmwMG82nqtbc 5MZQo+KgzFU2b1OiZ7OADQ3CNg== -----END CERTIFICATE-----Generated at Fri Aug 21 23:10:21 2026 by rpki-client