$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft File: aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json) Hash identifier: jhJog3/M7trTZK+aUCX2Q2ctJfRD6nJJ0LXLHSP5JOA= Subject key identifier: BC:AD:15:AF:65:2A:64:68:AD:15:40:5F:95:D7:50:BA:6D:95:BE:A1 Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft Manifest number: 0127 Signing time: Wed 19 Aug 2026 06:28:11 +0000 Manifest this update: Wed 19 Aug 2026 06:28:10 +0000 Manifest next update: Wed 26 Aug 2026 06:28:10 +0000 Files and hashes: 1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: ei+EYWFlXKmYv99h/zDiqMp88xFJ2v3XzDxwLvFjUwo=) 2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: 3Xg1AaNg4FRgN/jJovwLAdi1iupqR9Y5UnYEwAQubeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA Validity Not Before: Aug 19 06:28:10 2026 GMT Not After : Aug 26 06:28:10 2026 GMT Subject: CN=6a854cfb-82ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:21:78:18:75:07:98:ff:32:de:96:51:03: 46:bb:a8:0f:08:c1:e0:4c:2a:2e:44:b9:f3:0e:0d: 5f:21:64:a8:24:31:d9:6d:b6:9e:e5:d9:10:49:94: 4b:68:be:87:75:4e:49:bd:0f:5d:8c:26:51:dc:91: 6b:c5:ed:a7:2d:00:17:e2:e2:a5:cf:87:e6:84:74: a6:b9:ba:ed:2d:09:33:7f:8b:28:76:dc:20:30:6a: 0c:d2:a9:7c:30:c2:06:d0:1c:d0:15:1d:c1:59:f4: ee:ff:f9:93:0e:2e:59:c8:9d:24:dc:07:bc:6f:92: 02:bf:a7:94:5d:51:f9:b9:12:f6:8d:e6:8d:69:5e: 45:76:cc:15:e7:6c:13:fd:2b:ca:4e:2a:c9:6d:52: d9:d0:e4:74:3a:0b:20:51:50:c1:c7:8a:e5:6b:f2: 17:f7:5e:15:ce:1e:f7:8f:06:f0:74:05:91:5c:18: 22:fa:aa:7c:6d:ad:cf:9a:5c:9d:b0:53:37:17:9e: 4a:29:3a:f6:e0:0f:a6:3f:ae:7f:1b:a0:53:ed:b9: 7c:60:72:99:ea:3b:90:bb:b3:2b:87:7f:af:38:0e: df:9c:0d:6b:da:fe:22:4f:17:6b:63:ed:7a:ce:43: 40:ea:df:74:8f:82:ab:c2:c6:fc:96:c5:43:d8:74: 51:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AD:15:AF:65:2A:64:68:AD:15:40:5F:95:D7:50:BA:6D:95:BE:A1 X509v3 Authority Key Identifier: keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:43:df:1e:5c:8e:f3:f0:2d:83:fb:56:b8:d1:4d:4f:ca:63: c3:5c:c1:1e:55:f6:cb:c9:85:23:53:20:de:95:2e:5d:8b:d9: 37:f6:b8:e3:ac:0d:2f:20:71:4f:33:aa:12:50:9c:ea:75:21: f6:5e:bf:12:a0:40:ea:5c:ee:0c:49:dd:30:13:27:2a:7d:c7: 37:cc:31:28:b5:5a:29:30:3f:27:65:75:df:16:fc:77:b1:16: 1b:85:89:dd:ac:34:22:d8:6a:8b:08:1f:70:e2:c7:65:1c:55: de:1d:87:61:77:9e:fd:98:99:d1:f0:16:d2:28:c5:52:7b:69: cf:c7:4c:70:ef:3b:7a:ec:97:3d:d8:13:dc:43:6c:fc:e8:6a: 7b:82:b6:50:74:99:37:c3:82:0e:92:2d:c9:8c:ff:53:c1:b9: 0b:0f:42:2f:47:a4:c4:46:9c:1c:c6:e8:5e:6c:ae:76:d0:bd: b7:24:61:ea:7c:5d:3d:c4:d1:76:18:f8:82:2b:0b:d6:92:c4: 47:0f:1e:46:37:74:ff:0b:76:87:66:e1:2b:ea:11:5e:9a:a0: ff:5f:28:43:d9:df:ed:39:32:20:a6:81:06:56:82:f5:c1:52: 4b:94:bf:67:f7:d0:09:dd:18:f6:cf:34:53:31:d5:40:73:d9: 42:bc:b9:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMDgxMTAvBgNVBAUTKDY4QUQwRDA0NzBGNkFDNkYxOUM2NEVFRjQwOTRFRTBC QjU4NzFFREEwHhcNMjYwODE5MDYyODEwWhcNMjYwODI2MDYyODEwWjAYMRYwFAYD VQQDEw02YTg1NGNmYi04MmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtU4heBh1B5j/Mt6WUQNGu6gPCMHgTCouRLnzDg1fIWSoJDHZbbae5dkQSZRL aL6HdU5JvQ9djCZR3JFrxe2nLQAX4uKlz4fmhHSmubrtLQkzf4sodtwgMGoM0ql8 MMIG0BzQFR3BWfTu//mTDi5ZyJ0k3Ae8b5ICv6eUXVH5uRL2jeaNaV5FdswV52wT /SvKTirJbVLZ0OR0OgsgUVDBx4rla/IX914Vzh73jwbwdAWRXBgi+qp8ba3Pmlyd sFM3F55KKTr24A+mP65/G6BT7bl8YHKZ6juQu7Mrh3+vOA7fnA1r2v4iTxdrY+16 zkNA6t90j4Krwsb8lsVD2HRRxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLytFa9l KmRorRVAX5XXULptlb6hMB8GA1UdIwQYMBaAFGitDQRw9qxvGcZO70CU7gu1hx7a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIwOC85RTI4NTU3RUU0 RUUxMUVGQjFFRDc2MEVDNEY5QUUwMi9hSzBOQkhEMnJHOFp4azd2UUpUdUM3V0hI dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLME5CSEQyckc4WnhrN3ZRSlR1QzdXSEh0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTIwOC85RTI4NTU3RUU0RUUxMUVGQjFFRDc2MEVDNEY5QUUwMi9hSzBOQkhEMnJH OFp4azd2UUpUdUM3V0hIdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATUPfHlyO8/Atg/tWuNFNT8pjw1zBHlX2y8mFI1Mg3pUuXYvZN/a446wNLyBx TzOqElCc6nUh9l6/EqBA6lzuDEndMBMnKn3HN8wxKLVaKTA/J2V13xb8d7EWG4WJ 3aw0IthqiwgfcOLHZRxV3h2HYXee/ZiZ0fAW0ijFUntpz8dMcO87euyXPdgT3ENs /Ohqe4K2UHSZN8OCDpItyYz/U8G5Cw9CL0ekxEacHMboXmyudtC9tyRh6nxdPcTR dhj4gisL1pLERw8eRjd0/wt2h2bhK+oRXpqg/18oQ9nf7TkyIKaBBlaC9cFSS5S/ Z/fQCd0Y9s80UzHVQHPZQry5uQ== -----END CERTIFICATE-----Generated at Wed Aug 19 11:44:49 2026 by rpki-client