$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: Bm3dJVNtfW0ztakNYdwtEdboHjBSFgxf6Z8QIJpcJYU= Subject key identifier: 91:5C:CE:23:7D:29:98:02:D0:2D:A8:63:8A:D3:95:BF:D5:03:45:5F Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0DCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0D98 Signing time: Tue 18 Aug 2026 18:13:45 +0000 Manifest this update: Tue 18 Aug 2026 18:13:44 +0000 Manifest next update: Tue 25 Aug 2026 18:13:44 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: Vhva0wks4E2bhn/ieZZ3D8N6nefZcLchaA8GU1aaRvc=) 2: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: 2fkGW1bkGlUA5bGgALjxvNXrPUAl1hO1HVzydoUaRto=) 3: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: rOY8YY2G5Nf7WrRKkM4ulRjlSyfS7GykOQgcR4ZajfI=) 4: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: EzHhVhOcZNg4rGX3+arvWhv7Y1/rtxS40spbE5dRN4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3530 (0xdca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Aug 18 18:13:44 2026 GMT Not After : Aug 25 18:13:44 2026 GMT Subject: CN=6a84a0d9-536e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:c9:3c:1f:5e:55:d8:8a:91:29:3c:9a:57: 94:aa:88:1c:ab:da:8d:36:15:dd:4b:10:85:fe:84: d4:de:27:f4:c3:7e:97:f2:84:60:d5:27:90:1c:1d: 54:7d:3a:f2:23:e1:1f:77:97:aa:86:ac:e6:cc:74: 9d:96:55:8f:0f:a9:f4:a0:6a:5c:19:fd:c3:99:20: 6b:2e:96:81:e3:09:3e:26:c1:55:63:20:85:fc:d2: 1b:11:a3:41:23:b6:2a:88:8f:6e:0f:60:cc:58:15: 56:c7:9a:6b:38:c6:5a:a6:c5:fe:a9:8e:72:96:c5: 50:b0:b4:cc:46:50:f6:53:85:12:30:02:34:de:23: 0d:70:7b:aa:04:93:ce:43:9f:62:98:59:7f:f0:11: 55:08:0e:53:94:08:7a:64:fe:5b:ae:91:73:eb:e3: e7:5d:ec:4c:7c:69:8f:88:c8:58:2c:8f:e8:65:2f: 7d:ff:7e:bb:62:3b:38:44:0c:17:fd:5c:05:b5:a8: 79:80:d4:79:9c:d2:1f:1f:5f:ec:f8:02:38:a0:7c: 9c:be:bb:30:43:9f:44:0c:d3:f6:f1:80:cd:9c:87: 18:76:45:f1:68:31:c1:ad:f2:38:05:ce:7b:c6:f5: 96:f4:cd:25:12:04:e5:76:67:07:73:95:a5:dd:eb: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5C:CE:23:7D:29:98:02:D0:2D:A8:63:8A:D3:95:BF:D5:03:45:5F X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:10:1f:3c:fe:b3:ce:e4:6d:7d:65:ce:07:0d:21:b3:93:7b: 66:3d:86:fd:4a:d3:73:3a:4a:f2:e5:eb:c3:7d:23:38:50:5f: 6c:1f:e8:5f:76:8d:d0:a6:3d:85:fc:ea:f2:fd:55:ef:b5:e3: 16:c3:b7:20:64:57:d1:ac:38:63:4d:52:bd:ba:34:65:8b:ec: 93:72:94:54:f4:02:ab:05:e5:3d:6f:7a:c9:22:9f:fd:9f:e1: e3:23:4a:b2:0b:cf:fb:2e:3e:b1:3e:8d:f2:52:a1:ff:86:a7: 3b:82:6a:ce:07:54:be:60:37:9c:61:b8:e4:d7:83:df:24:2b: 2d:01:af:27:96:d4:6c:88:29:9f:30:7e:3f:bf:f6:8b:08:27: e8:5d:fc:98:14:08:d5:22:f5:9f:d8:62:39:29:93:38:9f:57: cb:8e:ce:47:b3:15:02:c4:f0:f1:56:a8:34:1b:17:83:2d:ef: 51:82:7d:7f:d5:f3:03:4a:df:9f:84:6e:89:d2:67:c6:5a:f7: bb:23:48:22:3e:e8:22:1f:af:e3:6b:18:8f:fa:ab:0e:39:31: 6a:11:ba:0c:10:fa:93:61:ce:32:7e:58:5f:67:b0:85:59:cf: f0:8c:db:19:72:1d:b9:df:e4:40:15:a6:30:0f:cf:7b:cd:15: ec:20:04:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjYwODE4MTgxMzQ0WhcNMjYwODI1MTgxMzQ0WjAYMRYwFAYD VQQDEw02YTg0YTBkOS01MzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8HJPB9eVdiKkSk8mleUqogcq9qNNhXdSxCF/oTU3if0w36X8oRg1SeQHB1U fTryI+Efd5eqhqzmzHSdllWPD6n0oGpcGf3DmSBrLpaB4wk+JsFVYyCF/NIbEaNB I7YqiI9uD2DMWBVWx5prOMZapsX+qY5ylsVQsLTMRlD2U4USMAI03iMNcHuqBJPO Q59imFl/8BFVCA5TlAh6ZP5brpFz6+PnXexMfGmPiMhYLI/oZS99/367Yjs4RAwX /VwFtah5gNR5nNIfH1/s+AI4oHycvrswQ59EDNP28YDNnIcYdkXxaDHBrfI4Bc57 xvWW9M0lEgTldmcHc5Wl3etzSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFcziN9 KZgC0C2oY4rTlb/VA0VfMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPhAfPP6zzuRtfWXOBw0hs5N7Zj2G/UrTczpK8uXrw30jOFBfbB/oX3aN0KY9 hfzq8v1V77XjFsO3IGRX0aw4Y01Svbo0ZYvsk3KUVPQCqwXlPW96ySKf/Z/h4yNK sgvP+y4+sT6N8lKh/4anO4JqzgdUvmA3nGG45NeD3yQrLQGvJ5bUbIgpnzB+P7/2 iwgn6F38mBQI1SL1n9hiOSmTOJ9Xy47OR7MVAsTw8VaoNBsXgy3vUYJ9f9XzA0rf n4RuidJnxlr3uyNIIj7oIh+v42sYj/qrDjkxahG6DBD6k2HOMn5YX2ewhVnP8Izb GXIdud/kQBWmMA/Pe80V7CAEKw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:12 2026 by rpki-client