$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft File: 446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json) Hash identifier: OZTBtyNPU8fQTcqM/sfaqYINUn+2jT4Uh4yuQlR1z/I= Subject key identifier: 7F:C0:FE:87:67:99:DB:27:FB:A3:2F:91:67:43:95:5C:09:99:CE:2D Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 Certificate issuer: /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft Manifest number: 01B1 Signing time: Wed 19 Aug 2026 04:49:06 +0000 Manifest this update: Wed 19 Aug 2026 04:49:06 +0000 Manifest next update: Wed 26 Aug 2026 04:49:06 +0000 Files and hashes: 1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: LlwdO41kJJ5EomgSfq5wrWPodcXUWhgjnWJJU5J7amQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Validity Not Before: Aug 19 04:49:06 2026 GMT Not After : Aug 26 04:49:06 2026 GMT Subject: CN=6a8535c2-09a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:67:62:3c:91:55:ae:21:09:ea:c2:0f:e5: df:fe:f1:ef:25:70:a0:2d:f5:ce:8c:7d:93:e6:62: 34:30:33:e1:76:36:be:87:f3:dc:f6:08:b3:23:3c: b8:b7:36:09:ae:a0:e6:5f:f7:26:a9:a3:87:b3:30: 45:2a:ce:6e:d1:bf:c0:bc:20:9c:ec:19:84:52:09: 00:61:34:ad:1e:62:33:98:df:5b:9f:39:5d:fe:a9: 9f:ce:cb:b9:f6:ec:60:8d:bc:75:1f:0b:d8:6c:bc: f7:60:51:be:da:3e:2f:90:30:c4:1a:10:31:14:ce: cd:f7:73:ec:49:75:3e:c3:48:02:9d:d0:90:52:e1: a3:7a:05:df:a0:0b:0d:59:eb:1b:5f:62:89:c6:c8: f9:c7:e2:33:56:40:c0:64:34:41:8d:e9:06:5c:60: 52:6f:95:e0:7d:6d:a6:ea:bf:ee:9f:19:22:17:ac: 95:58:5d:88:10:03:c9:c3:9f:52:e9:8c:11:f6:7b: 65:8e:69:c7:b9:e1:a7:fd:84:39:59:dd:30:45:33: b8:c0:d7:1c:60:68:70:c4:b7:66:27:9f:ef:1d:29: 46:da:44:6d:ed:b0:f8:3a:21:e8:d6:34:e4:d2:cc: 5e:f2:04:1c:1e:67:21:ce:bd:86:3b:fc:20:69:4c: 0f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C0:FE:87:67:99:DB:27:FB:A3:2F:91:67:43:95:5C:09:99:CE:2D X509v3 Authority Key Identifier: keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f1:16:e0:0b:87:5e:29:f4:a1:1a:b0:b0:2c:26:09:be:13: cc:e9:09:c4:15:2e:c9:31:5c:87:ee:48:dd:9b:2a:a7:e8:86: 85:1c:df:2c:70:35:43:bc:43:65:c5:ac:b6:bf:f8:78:00:c0: c1:3e:fb:0b:e5:ff:3d:dc:2c:a0:48:51:c5:d4:86:18:06:d8: d0:d4:39:b4:cc:75:28:8a:55:a2:88:2b:ad:3d:c0:4c:a0:43: 6d:6c:70:38:63:e3:df:bb:18:e9:73:e0:54:93:1b:8a:77:5f: 25:93:f9:29:bb:8d:13:22:47:a0:7c:1f:ac:de:75:ab:55:81: 5b:3d:6a:b5:09:49:cf:16:65:8c:56:8f:98:d9:d9:82:43:a6: e9:c2:39:1d:d2:e2:b4:57:57:a5:63:74:18:49:26:20:12:05: 68:59:f4:74:50:5b:84:fd:59:17:84:69:09:5f:7f:31:52:2c: 50:29:67:ec:c0:ae:31:83:e8:bd:4f:5c:21:b4:ea:6c:54:ff: cc:a3:94:c0:1a:0c:29:e9:5d:fb:69:1f:a6:df:f3:a5:a6:cc: 19:40:bf:2f:08:2f:72:fc:58:9e:fc:2e:48:56:b2:b2:70:28: 79:f4:ea:82:77:c5:52:8a:8e:98:23:33:68:76:72:d0:c4:ee: 8d:d3:5d:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NjAxMTAvBgNVBAUTKEUzOEVCM0Y1QTUxMDdFMzBGMENBNzFEREVBNzVCMTcw RDBCMDMyNTYwHhcNMjYwODE5MDQ0OTA2WhcNMjYwODI2MDQ0OTA2WjAYMRYwFAYD VQQDEw02YTg1MzVjMi0wOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSFnYjyRVa4hCerCD+Xf/vHvJXCgLfXOjH2T5mI0MDPhdja+h/Pc9gizIzy4 tzYJrqDmX/cmqaOHszBFKs5u0b/AvCCc7BmEUgkAYTStHmIzmN9bnzld/qmfzsu5 9uxgjbx1HwvYbLz3YFG+2j4vkDDEGhAxFM7N93PsSXU+w0gCndCQUuGjegXfoAsN WesbX2KJxsj5x+IzVkDAZDRBjekGXGBSb5XgfW2m6r/unxkiF6yVWF2IEAPJw59S 6YwR9ntljmnHueGn/YQ5Wd0wRTO4wNccYGhwxLdmJ5/vHSlG2kRt7bD4OiHo1jTk 0sxe8gQcHmchzr2GO/wgaUwP4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/A/odn mdsn+6MvkWdDlVwJmc4tMB8GA1UdIwQYMBaAFOOOs/WlEH4w8Mpx3ep1sXDQsDJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU2MC80QzNENkJDMDIx NkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZqRHd5bkhkNm5XeGNOQ3dN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0Nno5YVVRZmpEd3luSGQ2bld4Y05Dd01sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU2MC80QzNENkJDMDIxNkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZq RHd5bkhkNm5XeGNOQ3dNbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsvEW4AuHXin0oRqwsCwmCb4TzOkJxBUuyTFch+5I3Zsqp+iGhRzfLHA1Q7xD ZcWstr/4eADAwT77C+X/PdwsoEhRxdSGGAbY0NQ5tMx1KIpVoogrrT3ATKBDbWxw OGPj37sY6XPgVJMbindfJZP5KbuNEyJHoHwfrN51q1WBWz1qtQlJzxZljFaPmNnZ gkOm6cI5HdLitFdXpWN0GEkmIBIFaFn0dFBbhP1ZF4RpCV9/MVIsUCln7MCuMYPo vU9cIbTqbFT/zKOUwBoMKeld+2kfpt/zpabMGUC/LwgvcvxYnvwuSFaysnAoefTq gnfFUoqOmCMzaHZy0MTujdNdnA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:53 2026 by rpki-client