$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft File: 089k1dsXYfy2pVLwaAkTMMW19Ts.mft (raw, json) Hash identifier: 3BiwW/B14qkTUCJdcrxUakkIrHVpPtAaTgzaKXDRXzs= Subject key identifier: 81:1D:B8:3B:B4:0F:1D:8F:81:60:A2:24:44:2D:9A:47:76:15:48:F0 Authority key identifier: D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B Certificate issuer: /CN=A91A25DF/serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft Manifest number: D2 Signing time: Wed 19 Aug 2026 07:25:37 +0000 Manifest this update: Wed 19 Aug 2026 07:25:36 +0000 Manifest next update: Wed 26 Aug 2026 07:25:36 +0000 Files and hashes: 1: 089k1dsXYfy2pVLwaAkTMMW19Ts.crl (hash: x/87YgMnhSYFDJnopUMXFZF/A3uuGejxwvnZcLhqrBo=) 2: C54DD1F45EDA11F0A5EAB579C4F9AE02.roa (hash: FqZP/xwpLEICrivpR+MiIySP/UWB1Pr1kwt+h035Nxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A25DF, serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B Validity Not Before: Aug 19 07:25:36 2026 GMT Not After : Aug 26 07:25:36 2026 GMT Subject: CN=6a855a71-249d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:aa:33:d1:61:03:a8:b1:6e:b9:10:17:ba: 94:c1:af:df:fc:88:89:bb:50:07:b5:da:34:0d:0d: d9:ac:6f:8a:93:89:61:8f:7b:85:37:18:1e:85:d4: 1e:07:78:ec:96:7d:d8:0f:f9:94:a1:56:fd:4a:e5: 51:35:0d:ad:00:20:83:0d:1f:09:13:0e:f9:1b:73: c0:55:8c:07:35:9c:cd:73:cc:ba:79:c4:5b:12:8c: ae:cc:c8:5e:27:5c:08:0d:09:43:6c:09:ba:ee:4a: c7:b9:a3:c6:c5:20:f6:6d:ed:78:81:2f:f4:fe:58: 06:ff:d6:79:2e:5b:7a:d1:fe:81:6a:f3:c5:82:b8: d5:89:9c:3f:ef:5a:5a:cb:7d:62:79:c2:64:bb:15: b6:18:47:0d:72:24:a1:bc:69:20:62:18:9b:c1:d0: 51:1d:b4:34:a9:a6:c6:5c:6c:86:f9:d8:1d:3b:59: ec:88:b9:e5:66:7e:3c:cd:9f:52:1c:1e:b3:aa:a2: 6b:c5:7a:96:49:9c:86:a9:90:67:2d:f0:75:b3:bb: d8:d7:d2:f7:4a:f2:d3:13:1d:88:07:b8:3e:58:b8: ae:bd:c0:5f:5a:1c:e5:59:d5:26:e0:02:e2:95:28: c6:a5:dd:36:92:7b:7e:ce:a2:d2:5e:bb:d7:78:cd: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1D:B8:3B:B4:0F:1D:8F:81:60:A2:24:44:2D:9A:47:76:15:48:F0 X509v3 Authority Key Identifier: keyid:D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:67:36:98:f2:44:6c:3d:d6:6c:21:fb:27:31:50:cb:5c:80: 66:03:24:e2:c4:57:63:e5:ef:98:70:26:dc:37:f4:f6:c1:92: bc:27:63:c3:bd:4e:16:d4:a5:9f:7b:47:30:5c:e4:6c:40:4d: 6e:63:b4:0e:94:e5:3a:3a:86:25:5c:55:3e:61:86:9f:98:93: 2c:30:44:1b:62:91:0e:d8:9c:43:fc:43:12:33:5c:15:47:cc: 20:74:06:a6:74:03:e4:5e:14:9b:4d:b2:0e:73:b7:33:27:7d: e4:08:48:b1:bd:36:48:82:05:07:71:ba:22:9d:21:cc:27:09: 6a:28:0e:d5:91:1b:03:ac:bb:b7:5c:44:93:95:2c:5e:9e:90: ff:f8:50:dc:70:0c:70:55:be:a7:71:52:1e:e1:9e:08:b0:1b: 2f:fc:c1:88:5a:49:23:89:43:54:6c:42:34:66:bf:cd:32:ae: 4a:67:ba:68:39:cd:8e:69:28:0a:19:7c:25:57:37:6a:22:ef: 41:93:9a:e6:d0:d6:3c:18:ef:f2:6b:32:63:86:90:a9:a3:19: cf:95:08:c1:1f:bc:9b:c2:e3:42:38:8b:03:ee:25:c3:e1:b3: b0:3c:21:b0:35:31:f6:2e:88:3d:0e:db:78:99:56:24:2f:af: 53:37:17:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI1REYxMTAvBgNVBAUTKEQzQ0Y2NEQ1REIxNzYxRkNCNkE1NTJGMDY4MDkxMzMw QzVCNUY1M0IwHhcNMjYwODE5MDcyNTM2WhcNMjYwODI2MDcyNTM2WjAYMRYwFAYD VQQDEw02YTg1NWE3MS0yNDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12SqM9FhA6ixbrkQF7qUwa/f/IiJu1AHtdo0DQ3ZrG+Kk4lhj3uFNxgehdQe B3jsln3YD/mUoVb9SuVRNQ2tACCDDR8JEw75G3PAVYwHNZzNc8y6ecRbEoyuzMhe J1wIDQlDbAm67krHuaPGxSD2be14gS/0/lgG/9Z5Llt60f6BavPFgrjViZw/71pa y31iecJkuxW2GEcNciShvGkgYhibwdBRHbQ0qabGXGyG+dgdO1nsiLnlZn48zZ9S HB6zqqJrxXqWSZyGqZBnLfB1s7vY19L3SvLTEx2IB7g+WLiuvcBfWhzlWdUm4ALi lSjGpd02knt+zqLSXrvXeM270QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEduDu0 Dx2PgWCiJEQtmkd2FUjwMB8GA1UdIwQYMBaAFNPPZNXbF2H8tqVS8GgJEzDFtfU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjVERi9FNjEyNDA4MjVF RDUxMUYwOUNGMUQ1MENDNEY5QUUwMi8wODlrMWRzWFlmeTJwVkx3YUFrVE1NVzE5 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA4OWsxZHNYWWZ5MnBWTHdhQWtUTU1XMTlUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjVERi9FNjEyNDA4MjVFRDUxMUYwOUNGMUQ1MENDNEY5QUUwMi8wODlrMWRzWFlm eTJwVkx3YUFrVE1NVzE5VHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZmc2mPJEbD3WbCH7JzFQy1yAZgMk4sRXY+XvmHAm3Df09sGSvCdjw71OFtSl n3tHMFzkbEBNbmO0DpTlOjqGJVxVPmGGn5iTLDBEG2KRDticQ/xDEjNcFUfMIHQG pnQD5F4Um02yDnO3Myd95AhIsb02SIIFB3G6Ip0hzCcJaigO1ZEbA6y7t1xEk5Us Xp6Q//hQ3HAMcFW+p3FSHuGeCLAbL/zBiFpJI4lDVGxCNGa/zTKuSme6aDnNjmko Chl8JVc3aiLvQZOa5tDWPBjv8msyY4aQqaMZz5UIwR+8m8LjQjiLA+4lw+GzsDwh sDUx9i6IPQ7beJlWJC+vUzcX5g== -----END CERTIFICATE-----Generated at Wed Aug 19 15:14:04 2026 by rpki-client