$ rpki-client -vvf rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.mft File: tWRGBtORWu0wJkF2VCwu2O8CeJA.mft (raw, json) Hash identifier: D9WYZNltyRlYzSXiFFEcTwMwqXO11Jy/OJOedRVngUw= Subject key identifier: 04:D9:66:70:56:AD:B6:16:88:37:38:16:38:A8:D8:49:B8:7B:6B:F3 Authority key identifier: B5:64:46:06:D3:91:5A:ED:30:26:41:76:54:2C:2E:D8:EF:02:78:90 Certificate issuer: /CN=A91A159D/serialNumber=B5644606D3915AED30264176542C2ED8EF027890 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWRGBtORWu0wJkF2VCwu2O8CeJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.mft Manifest number: 07 Signing time: Wed 19 Aug 2026 09:56:27 +0000 Manifest this update: Wed 19 Aug 2026 09:56:26 +0000 Manifest next update: Wed 26 Aug 2026 09:56:26 +0000 Files and hashes: 1: tWRGBtORWu0wJkF2VCwu2O8CeJA.crl (hash: +saHeWWvMzzpF0WQnTkXl8RP1ZkCBKMgMIcgIcYhl1Q=) 2: B8B891B2948611F1A1FE4C366411F970.roa (hash: zmgpjZCA2cIXOSiaApPzxiyWMPIEecTYVbHhOasawDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.crl rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWRGBtORWu0wJkF2VCwu2O8CeJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A159D, serialNumber=B5644606D3915AED30264176542C2ED8EF027890 Validity Not Before: Aug 19 09:56:26 2026 GMT Not After : Aug 26 09:56:26 2026 GMT Subject: CN=6a857dcb-e211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:32:02:98:2c:7b:50:ab:14:2d:08:5b:de: ca:81:2f:c9:17:14:65:3b:7c:b4:96:1f:9c:f0:67: 7d:49:d9:93:d0:e4:50:9a:b5:24:f8:25:0c:7d:83: 91:80:a9:4d:64:6e:88:00:3c:fa:5f:54:f9:d8:20: c4:ed:e8:b8:d2:95:76:08:3f:1f:eb:67:64:02:60: c8:6d:15:0d:72:ee:32:52:74:da:60:80:65:99:c9: 70:4f:04:96:4c:1f:76:95:c4:f2:54:ea:52:e2:74: 81:b8:d7:a3:43:f1:dc:3d:37:91:42:9d:26:d5:b4: ea:52:f0:95:59:2c:ac:04:d1:0b:7f:55:99:b8:62: b6:ff:7a:8a:54:31:ea:fe:c7:cd:2e:dc:4f:63:d4: 48:b4:10:a1:e8:12:71:b5:d0:60:ac:05:41:11:c0: c1:25:08:ca:e2:4b:0b:53:28:07:9a:e2:c7:8a:03: ae:74:48:31:a3:9a:da:07:17:3a:5c:ca:02:6e:7f: 14:fe:84:a7:c6:ca:94:c9:e5:c4:be:07:65:5a:46: 29:00:2a:d2:d0:9d:74:6e:28:8d:26:ac:b2:16:32: 3b:b1:a9:d5:37:02:3e:57:c6:55:31:bd:c9:1c:59: 2c:be:b6:2f:1f:82:fe:8b:4f:de:08:70:4c:23:f7: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D9:66:70:56:AD:B6:16:88:37:38:16:38:A8:D8:49:B8:7B:6B:F3 X509v3 Authority Key Identifier: keyid:B5:64:46:06:D3:91:5A:ED:30:26:41:76:54:2C:2E:D8:EF:02:78:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWRGBtORWu0wJkF2VCwu2O8CeJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A159D/5F6BB346948611F1B3F6BA296411F970/tWRGBtORWu0wJkF2VCwu2O8CeJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f0:c1:47:de:b9:7b:00:77:0f:37:cc:23:c3:ca:94:57:fb: 18:9c:f1:7a:c1:83:1f:7c:1f:e7:50:72:19:a0:a1:e2:92:f4: c2:53:49:2e:92:22:1e:53:51:83:67:04:fd:cf:bf:3e:00:8d: 45:6d:70:da:74:10:9c:7f:33:07:65:f4:eb:9b:4e:9f:5c:a1: 9e:fe:05:e6:3e:c1:31:60:14:6f:7e:62:c5:66:1a:ee:f2:9f: d0:59:06:13:00:11:af:97:a2:57:6a:49:ce:cf:69:b5:31:4f: 56:b4:c8:20:a9:7c:cb:bf:67:8b:e0:95:74:2f:30:78:f2:2a: ad:4c:26:a6:94:d4:b5:90:e9:3d:1e:7c:f6:a3:31:fa:20:86: 85:37:d8:e1:06:1c:a0:e1:e6:b5:11:37:8f:70:30:4e:74:36: 19:43:02:22:3e:b4:54:b5:36:aa:9b:a3:7c:97:5a:82:6f:32: 0b:56:1a:28:a6:cd:93:10:ee:bd:21:ce:48:65:8d:a6:75:56: e5:ac:57:be:88:10:62:6b:06:eb:df:58:aa:b6:9d:50:63:90: 55:ba:cf:57:0d:63:8f:52:31:c7:02:21:95:f6:4f:52:5e:c8: 32:0c:c7:e3:a9:d6:7a:94:3f:b0:54:34:df:fd:94:4b:0d:ff: b9:99:8a:64 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTU5RDExMC8GA1UEBRMoQjU2NDQ2MDZEMzkxNUFFRDMwMjY0MTc2NTQyQzJFRDhF RjAyNzg5MDAeFw0yNjA4MTkwOTU2MjZaFw0yNjA4MjYwOTU2MjZaMBgxFjAUBgNV BAMTDTZhODU3ZGNiLWUyMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCogDICmCx7UKsULQhb3sqBL8kXFGU7fLSWH5zwZ31J2ZPQ5FCatST4JQx9g5GA qU1kbogAPPpfVPnYIMTt6LjSlXYIPx/rZ2QCYMhtFQ1y7jJSdNpggGWZyXBPBJZM H3aVxPJU6lLidIG416ND8dw9N5FCnSbVtOpS8JVZLKwE0Qt/VZm4Yrb/eopUMer+ x80u3E9j1Ei0EKHoEnG10GCsBUERwMElCMriSwtTKAea4seKA650SDGjmtoHFzpc ygJufxT+hKfGypTJ5cS+B2VaRikAKtLQnXRuKI0mrLIWMjuxqdU3Aj5XxlUxvckc WSy+ti8fgv6LT94IcEwj9y9ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBNlmcFat thaINzgWOKjYSbh7a/MwHwYDVR0jBBgwFoAUtWRGBtORWu0wJkF2VCwu2O8CeJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNTlELzVGNkJCMzQ2OTQ4 NjExRjFCM0Y2QkEyOTY0MTFGOTcwL3RXUkdCdE9SV3Uwd0prRjJWQ3d1Mk84Q2VK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFdSR0J0T1JXdTB3SmtGMlZDd3UyTzhDZUpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx NTlELzVGNkJCMzQ2OTQ4NjExRjFCM0Y2QkEyOTY0MTFGOTcwL3RXUkdCdE9SV3Uw d0prRjJWQ3d1Mk84Q2VKQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCG8MFH3rl7AHcPN8wjw8qUV/sYnPF6wYMffB/nUHIZoKHikvTCU0kukiIeU1GD ZwT9z78+AI1FbXDadBCcfzMHZfTrm06fXKGe/gXmPsExYBRvfmLFZhru8p/QWQYT ABGvl6JXaknOz2m1MU9WtMggqXzLv2eL4JV0LzB48iqtTCamlNS1kOk9Hnz2ozH6 IIaFN9jhBhyg4ea1ETePcDBOdDYZQwIiPrRUtTaqm6N8l1qCbzILVhoops2TEO69 Ic5IZY2mdVblrFe+iBBiawbr31iqtp1QY5BVus9XDWOPUjHHAiGV9k9SXsgyDMfj qdZ6lD+wVDTf/ZRLDf+5mYpk -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:47 2026 by rpki-client