$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: VVRbQgSH2GR1dYfYgao1JimyfMMNIbyy5VfwE8RkfXU= Subject key identifier: 1F:4E:1F:0E:62:F8:BD:05:AC:8E:6C:A6:A1:EF:98:DB:B6:0F:DF:A4 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: B4 Signing time: Wed 19 Aug 2026 07:45:18 +0000 Manifest this update: Wed 19 Aug 2026 07:45:18 +0000 Manifest next update: Wed 26 Aug 2026 07:45:18 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: /wf/l7HGWd6j0sa2opKq4NSiZX24+dc1+qWQ7gCZ+/o=) 2: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=) 3: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Aug 19 07:45:18 2026 GMT Not After : Aug 26 07:45:18 2026 GMT Subject: CN=6a855f0e-7797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:aa:42:d0:44:8e:05:af:b9:7e:69:85:5b: 91:40:46:c7:8c:b8:b6:42:cf:83:b6:de:42:8a:80: 1e:bd:20:da:b9:46:c9:76:5c:53:32:01:8f:98:8c: 5e:a0:c5:5a:8e:8b:98:3b:3b:68:3b:8b:a3:58:fa: a4:37:52:1d:cd:38:55:62:33:a1:28:3c:ba:39:d8: ab:e2:6a:a0:9b:f6:22:00:35:c0:6d:20:3d:e6:a9: 39:10:68:fe:2f:a2:f7:c3:f0:c6:ca:71:f9:12:b3: e1:ca:db:9a:7c:20:f8:96:d1:76:b6:38:21:56:15: 55:7e:16:10:17:5b:8c:79:1f:4a:c5:68:c2:14:2a: c1:01:bd:42:37:ad:73:03:b7:a6:94:9f:e4:01:b7: 21:83:76:55:c7:1a:ce:82:d9:76:87:b4:b5:a9:bb: 77:33:ac:a9:38:ea:97:19:61:2c:90:54:6a:26:c5: 7a:aa:59:8d:c6:8b:bb:17:8e:ae:52:45:90:47:27: c7:f6:64:f5:50:c9:f7:4a:fa:e6:3e:41:2f:8f:e3: 60:62:ac:7e:be:5a:a1:c9:b7:3c:c8:7d:a1:a1:22: 2f:8a:c4:53:83:76:ea:20:3c:be:f9:87:89:de:00: 33:62:44:d4:b8:5a:7e:37:0c:bc:67:b8:cc:61:d7: 35:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4E:1F:0E:62:F8:BD:05:AC:8E:6C:A6:A1:EF:98:DB:B6:0F:DF:A4 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:dc:c1:32:d6:b0:0f:9c:7d:e7:9e:fa:5c:d7:fb:ba:d0:dc: 58:b2:7a:e1:be:98:61:df:2e:44:80:05:8c:14:29:85:ae:d6: b3:57:74:f3:74:df:87:42:74:81:3a:93:db:7e:8f:59:ae:d3: a8:56:36:cc:b5:2c:64:f8:b2:d8:eb:d0:e7:ef:2d:37:42:95: 15:9a:f9:6a:fb:fb:94:1a:82:5c:e8:bf:78:80:43:3a:2b:1c: 59:85:96:2c:8f:1f:65:fb:ce:51:35:f8:bb:80:29:26:1a:28: 8f:df:f8:51:45:a9:76:47:8e:d7:5a:5a:63:23:66:dc:3e:db: c5:ea:20:ea:19:68:83:60:69:59:b5:6d:46:e6:62:4c:67:2f: 58:77:c4:8a:9e:fa:a9:17:70:99:e3:60:35:07:51:26:4a:8b: c8:cd:a5:a0:1b:5c:59:3c:97:62:ce:8d:ff:1a:92:b5:ad:34: 1a:cf:85:6a:ee:29:fb:e3:84:27:64:8a:53:54:78:bd:6b:b0: ed:78:85:99:89:cb:1a:1e:6b:dc:39:16:53:fd:62:df:19:f2: 04:25:a6:95:66:51:ad:98:33:26:5e:c3:0d:68:f4:a9:94:9c: 9b:4d:49:3e:8a:15:6d:3c:e0:48:e6:52:74:a8:c0:94:ee:70: 48:4c:7b:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4QTAxMTAvBgNVBAUTKEFGQkFBMTUxNkU5RTE3RjI0Q0Y5MTQ1QjhDN0NENEJB ODFBNTdBNDAwHhcNMjYwODE5MDc0NTE4WhcNMjYwODI2MDc0NTE4WjAYMRYwFAYD VQQDEw02YTg1NWYwZS03Nzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNqqQtBEjgWvuX5phVuRQEbHjLi2Qs+Dtt5CioAevSDauUbJdlxTMgGPmIxe oMVajouYOztoO4ujWPqkN1IdzThVYjOhKDy6Odir4mqgm/YiADXAbSA95qk5EGj+ L6L3w/DGynH5ErPhytuafCD4ltF2tjghVhVVfhYQF1uMeR9KxWjCFCrBAb1CN61z A7emlJ/kAbchg3ZVxxrOgtl2h7S1qbt3M6ypOOqXGWEskFRqJsV6qlmNxou7F46u UkWQRyfH9mT1UMn3SvrmPkEvj+NgYqx+vlqhybc8yH2hoSIvisRTg3bqIDy++YeJ 3gAzYkTUuFp+Nwy8Z7jMYdc1+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9OHw5i +L0FrI5spqHvmNu2D9+kMB8GA1UdIwQYMBaAFK+6oVFunhfyTPkUW4x81LqBpXpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhBMC9CMjA2OENGODhF MjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZfSk0tUlJiakh6VXVvR2xl a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhBMC9CMjA2OENGODhFMjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZf Sk0tUlJiakh6VXVvR2xla0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdNzBMtawD5x95576XNf7utDcWLJ64b6YYd8uRIAFjBQpha7Ws1d083Tfh0J0 gTqT236PWa7TqFY2zLUsZPiy2OvQ5+8tN0KVFZr5avv7lBqCXOi/eIBDOiscWYWW LI8fZfvOUTX4u4ApJhooj9/4UUWpdkeO11paYyNm3D7bxeog6hlog2BpWbVtRuZi TGcvWHfEip76qRdwmeNgNQdRJkqLyM2loBtcWTyXYs6N/xqSta00Gs+Fau4p++OE J2SKU1R4vWuw7XiFmYnLGh5r3DkWU/1i3xnyBCWmlWZRrZgzJl7DDWj0qZScm01J PooVbTzgSOZSdKjAlO5wSEx73g== -----END CERTIFICATE-----Generated at Wed Aug 19 12:51:44 2026 by rpki-client