$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: j9pSjWn22BcktdM2I+aMjxIbhR/vEn6I/6WXKzGaWo8= Subject key identifier: D9:2E:3E:DF:FD:31:DC:CA:8A:45:AA:53:CA:78:E5:C3:B4:5B:0E:BB Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 0997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 0986 Signing time: Tue 18 Aug 2026 20:20:29 +0000 Manifest this update: Tue 18 Aug 2026 20:20:29 +0000 Manifest next update: Tue 25 Aug 2026 20:20:29 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: TJsV/P2VqToubZWpUFZx41nqnaVjHuP3w/kq6Ym6CZM=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Aug 18 20:20:29 2026 GMT Not After : Aug 25 20:20:29 2026 GMT Subject: CN=6a84be8d-55e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:ae:8a:36:cc:60:a4:58:75:a0:3e:42:59: 4e:2d:90:91:13:ea:f2:e5:67:06:f0:31:1f:4a:e0: 49:f1:f7:2d:88:86:6c:1d:6f:22:54:15:e0:ab:01: 24:de:64:e3:5f:a4:ea:8b:d6:45:51:da:0b:70:68: af:2d:59:49:5a:b3:72:8a:9b:87:19:e2:8b:74:65: 4b:72:c0:7a:64:db:4d:19:22:23:d5:90:ef:0f:f9: 36:a2:0f:bb:3d:4a:d3:c4:7e:47:93:18:e8:0a:0b: 20:02:4c:55:34:cd:a6:5d:f1:e8:45:6d:04:ab:24: 86:ab:6f:f5:4c:13:7c:5c:c5:2c:79:64:9c:fd:f8: 9d:61:a5:cf:06:e1:a8:f5:d7:cc:1f:3b:53:bc:1f: a9:23:2a:c7:52:e1:50:90:2b:56:31:c7:72:b1:0e: 01:06:8c:25:a6:6d:d3:89:76:c3:cc:30:21:24:99: b1:e5:4f:75:65:cf:06:d6:db:ad:35:df:65:f3:9a: ea:c6:c8:78:09:9f:06:4b:d5:88:1a:7b:ee:bc:1c: 08:a7:76:14:b9:4b:72:f7:38:02:aa:36:46:50:7e: 0f:be:e4:eb:e3:d8:f9:ac:63:37:64:73:be:91:3c: f4:03:e9:a7:d4:82:76:82:8c:25:23:60:67:c4:e4: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2E:3E:DF:FD:31:DC:CA:8A:45:AA:53:CA:78:E5:C3:B4:5B:0E:BB X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a9:e8:4c:2a:f6:2f:ae:c1:77:bd:0d:d7:b8:4e:f9:a7:16: 0b:5b:c8:45:da:7d:0c:ac:01:56:48:02:5d:8d:36:e6:ae:91: 8b:d8:6c:9a:ac:04:8e:4f:d2:ea:f2:b4:76:5f:5e:5f:05:0c: 21:22:d5:c4:6e:0e:b4:0f:74:ce:a0:03:0f:44:d3:ce:95:f7: 31:3b:7b:3e:93:3f:59:92:70:54:87:17:15:92:9e:20:86:b9: 1a:7c:7d:81:72:3e:10:24:93:28:20:f6:01:1a:25:69:b5:77: 56:08:fc:48:53:76:29:3c:3e:d9:de:44:bc:83:fd:76:8b:c9: ac:6a:cc:c8:2b:35:89:e4:00:15:b7:ec:d4:c2:60:96:ad:92: 2c:31:ff:15:8e:23:4a:82:1b:dc:e3:9b:ac:3c:57:6e:98:d8: 90:48:9a:62:21:06:85:4b:28:df:b8:8c:ee:87:db:7f:2c:2b: e7:e6:ef:d8:42:2b:92:83:7b:82:8f:aa:af:04:f1:b7:29:a7: 1d:ec:06:18:f6:ce:a2:6a:9c:3a:b6:7d:f1:42:f7:54:61:6b: ac:8c:8d:cb:c9:b1:32:10:01:dd:50:8c:98:9c:30:b0:8b:e5: 3e:f3:43:af:19:17:d9:3b:83:be:ab:23:27:57:07:66:02:9e: 4f:09:3b:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjYwODE4MjAyMDI5WhcNMjYwODI1MjAyMDI5WjAYMRYwFAYD VQQDEw02YTg0YmU4ZC01NWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOeuijbMYKRYdaA+QllOLZCRE+ry5WcG8DEfSuBJ8fctiIZsHW8iVBXgqwEk 3mTjX6Tqi9ZFUdoLcGivLVlJWrNyipuHGeKLdGVLcsB6ZNtNGSIj1ZDvD/k2og+7 PUrTxH5HkxjoCgsgAkxVNM2mXfHoRW0EqySGq2/1TBN8XMUseWSc/fidYaXPBuGo 9dfMHztTvB+pIyrHUuFQkCtWMcdysQ4BBowlpm3TiXbDzDAhJJmx5U91Zc8G1tut Nd9l85rqxsh4CZ8GS9WIGnvuvBwIp3YUuUty9zgCqjZGUH4PvuTr49j5rGM3ZHO+ kTz0A+mn1IJ2gowlI2BnxOTgPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkuPt/9 MdzKikWqU8p45cO0Ww67MB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlanoTCr2L67Bd70N17hO+acWC1vIRdp9DKwBVkgCXY025q6Ri9hsmqwEjk/S 6vK0dl9eXwUMISLVxG4OtA90zqADD0TTzpX3MTt7PpM/WZJwVIcXFZKeIIa5Gnx9 gXI+ECSTKCD2ARolabV3Vgj8SFN2KTw+2d5EvIP9dovJrGrMyCs1ieQAFbfs1MJg lq2SLDH/FY4jSoIb3OObrDxXbpjYkEiaYiEGhUso37iM7ofbfywr5+bv2EIrkoN7 go+qrwTxtymnHewGGPbOomqcOrZ98UL3VGFrrIyNy8mxMhAB3VCMmJwwsIvlPvND rxkX2TuDvqsjJ1cHZgKeTwk79A== -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:09 2026 by rpki-client