$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: IPR4LrcJP+MDkZNJhwVoKTwzh0HVLuDcddFeKPRgDk8= Subject key identifier: D8:DB:4A:F3:69:05:6D:E7:06:09:B2:85:04:F6:2F:CE:83:FC:28:18 Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 02DD Signing time: Wed 19 Aug 2026 03:47:21 +0000 Manifest this update: Wed 19 Aug 2026 03:47:20 +0000 Manifest next update: Wed 26 Aug 2026 03:47:20 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: FvEX03yNsrXkbsGciKZrkJh1MUAQUkrDLIrD6GN9blM=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: TfhxYXEuzGwCmeMd3nNc0DOls3QWgWihrLMEBQlhbYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Aug 19 03:47:20 2026 GMT Not After : Aug 26 03:47:20 2026 GMT Subject: CN=6a852748-1a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:b6:9f:6a:ce:a6:7a:c0:40:97:f8:2a:dd: 96:c8:53:f7:0a:6e:3e:d7:42:b1:6d:5a:97:2f:89: f4:d9:52:ad:9a:5a:82:0e:3e:41:2e:07:b8:87:d1: 97:6c:75:1e:9d:79:85:8f:85:34:55:b9:29:61:d6: b0:a4:b2:e7:b2:42:d1:bc:96:40:a1:ef:ce:cc:11: 0f:41:09:d1:f1:ad:8e:8f:72:6f:35:25:07:91:dc: 67:4a:92:6a:a0:5f:d0:22:ba:44:7e:4a:ef:36:45: b6:76:42:55:04:f9:a6:1e:64:01:9f:7e:45:2c:58: b3:e4:cf:b0:6e:be:46:c9:26:3b:c7:77:d6:6a:97: 64:8a:4b:5c:ab:22:94:f2:13:08:c7:f7:e5:e8:03: c3:f1:b1:18:32:26:02:70:00:6b:92:74:a5:6f:36: 2a:6b:1b:8d:0c:d0:bb:e7:c3:7d:ba:67:04:94:d8: e3:b7:4e:7b:56:18:e3:20:b0:ed:ef:bb:da:be:eb: 45:6e:05:ce:82:c6:20:23:98:5f:b7:e1:9a:a4:27: c4:8b:e1:05:30:ba:cc:a5:6e:5c:73:12:73:86:9e: cf:f8:9f:5b:ea:b6:23:6b:db:67:b9:6a:ac:39:32: 8e:e8:54:93:df:a3:57:f0:d6:04:45:3e:ac:b5:65: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DB:4A:F3:69:05:6D:E7:06:09:B2:85:04:F6:2F:CE:83:FC:28:18 X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:37:63:1b:a3:d0:3b:3e:85:5b:2e:e2:22:bd:eb:97:7e:cc: c9:cf:98:4a:71:53:c5:13:90:cb:fe:f1:19:5e:f6:10:1d:94: ed:d1:cd:09:20:11:8a:f1:d4:7c:1c:d6:59:42:ba:0e:90:69: 6c:c1:e9:fe:27:be:26:41:27:d7:cc:b5:57:1d:78:b2:94:8a: 0e:d5:71:bc:cd:c8:7f:58:de:bd:a4:84:70:6e:bc:a9:12:4b: ae:d0:d6:72:a4:aa:db:5d:cd:9b:e8:40:5c:06:2f:06:8e:70: a5:4f:c7:75:fa:eb:d4:8a:ef:38:5a:4a:2c:26:27:37:dc:5d: 10:92:d9:31:ba:45:b6:93:ee:f6:6a:54:b3:90:fd:d0:83:b8: 78:81:56:d7:a8:7c:94:d9:3f:1d:93:bf:45:d9:93:de:30:88: c8:15:fb:d4:18:5d:4c:33:3d:17:11:e8:9f:01:32:64:3b:ac: 29:ec:88:43:11:8c:bd:92:6f:12:fb:54:2f:0e:a3:68:0b:33: 7f:48:c1:a7:76:4e:6f:8b:6a:06:c7:75:48:ef:68:8a:c0:bf: 51:99:73:57:1f:b9:a7:d3:12:6a:cc:1e:1b:36:a7:aa:04:f2: e2:96:61:0d:f7:81:ff:0a:40:e7:eb:da:e6:72:5e:e1:81:0a: 36:c3:9b:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDA4Nzc3RkEzODFCRjI1OEUwQ0FDMzdENTA5RUYwQkFD NzA2NjQ4NDQwHhcNMjYwODE5MDM0NzIwWhcNMjYwODI2MDM0NzIwWjAYMRYwFAYD VQQDEw02YTg1Mjc0OC0xYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjw+2n2rOpnrAQJf4Kt2WyFP3Cm4+10KxbVqXL4n02VKtmlqCDj5BLge4h9GX bHUenXmFj4U0VbkpYdawpLLnskLRvJZAoe/OzBEPQQnR8a2Oj3JvNSUHkdxnSpJq oF/QIrpEfkrvNkW2dkJVBPmmHmQBn35FLFiz5M+wbr5GySY7x3fWapdkiktcqyKU 8hMIx/fl6APD8bEYMiYCcABrknSlbzYqaxuNDNC758N9umcElNjjt057VhjjILDt 77vavutFbgXOgsYgI5hft+GapCfEi+EFMLrMpW5ccxJzhp7P+J9b6rYja9tnuWqs OTKO6FST36NX8NYERT6stWWFmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjbSvNp BW3nBgmyhQT2L86D/CgYMB8GA1UdIwQYMBaAFAh3f6OBvyWODKw31QnvC6xwZkhE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZNE1yRGZWQ2U4THJIQm1T RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZ NE1yRGZWQ2U4THJIQm1TRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgjdjG6PQOz6FWy7iIr3rl37Myc+YSnFTxROQy/7xGV72EB2U7dHNCSARivHU fBzWWUK6DpBpbMHp/ie+JkEn18y1Vx14spSKDtVxvM3If1jevaSEcG68qRJLrtDW cqSq213Nm+hAXAYvBo5wpU/Hdfrr1IrvOFpKLCYnN9xdEJLZMbpFtpPu9mpUs5D9 0IO4eIFW16h8lNk/HZO/RdmT3jCIyBX71BhdTDM9FxHonwEyZDusKeyIQxGMvZJv EvtULw6jaAszf0jBp3ZOb4tqBsd1SO9oisC/UZlzVx+5p9MSasweGzanqgTy4pZh DfeB/wpA5+va5nJe4YEKNsObgA== -----END CERTIFICATE-----Generated at Wed Aug 19 15:14:51 2026 by rpki-client