$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: XxbYTpalWAKKi3m1PhNrWEOLPcyPRST9IDtVWbxPMkM= Subject key identifier: 37:95:10:11:8D:D8:E2:BE:EB:34:05:AA:6F:0B:E2:0E:DF:16:10:47 Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 034B Signing time: Wed 19 Aug 2026 01:23:22 +0000 Manifest this update: Wed 19 Aug 2026 01:23:21 +0000 Manifest next update: Wed 26 Aug 2026 01:23:21 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: gjg65VCffLNM35BqQI8OtPKVg5lUWTKVqrt2Fq8wA+c=) 2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: DmII7xnGU6x5+UHNOvDmxgrYS3cKxdXu+2myxdUSRF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: Aug 19 01:23:21 2026 GMT Not After : Aug 26 01:23:21 2026 GMT Subject: CN=6a85058a-e0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:86:e2:59:5f:75:04:40:a7:8a:93:4f:6c: e2:3a:44:e2:48:46:9e:74:28:8e:e9:43:2a:c4:7d: a8:64:e7:70:9d:5d:53:ab:83:14:35:34:47:43:f3: 6d:a0:24:ba:17:62:0d:d4:3a:cf:d7:95:b1:30:bf: 53:42:a5:82:09:c7:73:39:68:0f:df:26:91:c5:ee: ca:c3:19:5e:cb:4d:af:c4:72:36:ab:4b:4c:7e:64: 86:6d:0e:5c:ac:35:ea:09:91:a3:7d:8c:30:82:10: 4d:41:51:ac:de:15:7f:21:92:62:c5:28:94:41:a0: 2c:09:4a:0e:27:c2:17:b6:61:f0:ab:85:1b:fe:4a: 4b:a4:75:3f:28:50:37:0e:8b:64:f7:68:e4:20:97: a1:44:9a:36:35:54:c8:c2:78:ae:b4:f9:3b:6d:ed: 6f:36:bc:44:34:be:f2:a9:97:f8:72:26:77:bf:eb: 4f:9e:5c:4b:34:36:39:b8:74:43:cc:a6:a6:50:16: 7f:48:54:92:ab:44:50:2d:3a:5e:8c:35:19:95:42: 7f:fd:d0:c5:32:41:a9:81:4f:fe:d7:1b:28:64:43: 56:28:c3:a6:c5:73:c6:36:c2:4b:52:8e:d1:21:68: 68:90:d6:6f:c0:e9:3a:ae:aa:8e:37:d1:36:0e:6a: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:95:10:11:8D:D8:E2:BE:EB:34:05:AA:6F:0B:E2:0E:DF:16:10:47 X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:10:b4:b3:67:1a:4c:1e:ad:8c:68:14:57:70:64:e2:88:10: fa:bb:2f:36:9c:fa:d1:26:72:32:63:11:c6:32:da:ad:84:5d: 52:85:83:8e:3e:5c:d9:68:cf:5d:68:3e:a0:02:1d:7a:79:35: 44:1f:b4:3c:ab:b7:18:d6:fa:a7:b7:36:5d:34:a3:65:8a:f2: a3:cd:8b:28:81:39:b4:87:3d:af:63:f3:89:00:a5:b4:0e:78: 60:ae:a0:79:6e:57:6b:ba:f1:c5:26:ec:19:92:18:21:1f:68: ae:ea:85:59:52:0b:6e:de:30:b0:31:d3:f4:34:c0:a1:ee:78: bc:03:d5:69:84:3d:dc:05:5f:dc:d7:3f:d5:99:ad:6b:6a:54: 01:2b:d2:fe:49:a6:75:8b:d3:4d:3a:be:3b:97:3a:76:56:af: 2e:7c:f2:18:70:d2:d8:3b:ef:50:3d:35:16:35:a1:66:c2:6d: b1:4b:ea:64:e9:65:ef:df:52:d3:33:d9:04:d2:0e:c3:62:35: 99:01:ca:01:e7:52:e9:2a:c4:dc:39:6c:d6:ed:e3:3a:94:c4: 8f:ed:2f:25:dc:e0:c1:b4:07:b0:d0:25:b7:4e:c3:ad:54:a0: 8c:80:37:85:66:3a:75:c7:a0:42:4a:39:ea:fa:b9:fe:34:f7: 6e:4e:ab:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjYwODE5MDEyMzIxWhcNMjYwODI2MDEyMzIxWjAYMRYwFAYD VQQDEw02YTg1MDU4YS1lMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+OG4llfdQRAp4qTT2ziOkTiSEaedCiO6UMqxH2oZOdwnV1Tq4MUNTRHQ/Nt oCS6F2IN1DrP15WxML9TQqWCCcdzOWgP3yaRxe7Kwxley02vxHI2q0tMfmSGbQ5c rDXqCZGjfYwwghBNQVGs3hV/IZJixSiUQaAsCUoOJ8IXtmHwq4Ub/kpLpHU/KFA3 Dotk92jkIJehRJo2NVTIwniutPk7be1vNrxENL7yqZf4ciZ3v+tPnlxLNDY5uHRD zKamUBZ/SFSSq0RQLTpejDUZlUJ//dDFMkGpgU/+1xsoZENWKMOmxXPGNsJLUo7R IWhokNZvwOk6rqqON9E2DmrgEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDeVEBGN 2OK+6zQFqm8L4g7fFhBHMB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnxC0s2caTB6tjGgUV3Bk4ogQ+rsvNpz60SZyMmMRxjLarYRdUoWDjj5c2WjP XWg+oAIdenk1RB+0PKu3GNb6p7c2XTSjZYryo82LKIE5tIc9r2PziQCltA54YK6g eW5Xa7rxxSbsGZIYIR9oruqFWVILbt4wsDHT9DTAoe54vAPVaYQ93AVf3Nc/1Zmt a2pUASvS/kmmdYvTTTq+O5c6dlavLnzyGHDS2DvvUD01FjWhZsJtsUvqZOll799S 0zPZBNIOw2I1mQHKAedS6SrE3Dls1u3jOpTEj+0vJdzgwbQHsNAlt07DrVSgjIA3 hWY6dcegQko56vq5/jT3bk6r9A== -----END CERTIFICATE-----Generated at Wed Aug 19 11:44:04 2026 by rpki-client