$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: krppsSdaKhtm656rNr0OqzG8jV86GL2wcy7mSHZa614= Subject key identifier: A5:C3:5C:4F:26:CD:24:A2:DF:D5:3E:EE:E4:9B:77:2E:1F:88:DD:3A Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 0697 Signing time: Sat 22 Aug 2026 22:15:58 +0000 Manifest this update: Sat 22 Aug 2026 22:15:57 +0000 Manifest next update: Sat 29 Aug 2026 22:15:57 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: JBTHfRQAPqmtCKbmSHlPUFERMZX6vBR8XfePFXCERl8=) 2: 18981398329B11EDB9F09862C4F9AE02.roa (hash: BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=) 3: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=) 4: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: DeEQGurqm7eSpSsYzXwNaAtssPLf2RiuTFIL21AIcCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Aug 22 22:15:57 2026 GMT Not After : Aug 29 22:15:57 2026 GMT Subject: CN=6a8a1f9e-88c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:86:91:01:1d:01:eb:c4:fc:55:21:6a:1e: a5:7c:2e:7a:86:0b:f4:23:5f:cd:28:78:79:67:f7: 2b:18:3c:ef:d2:ff:28:d5:4e:68:ee:4d:03:c2:88: fb:1d:c4:bc:62:1e:73:01:a6:27:c6:50:9b:e4:c7: c9:4c:78:9d:32:4d:10:54:7d:9f:75:a8:ce:0c:6d: b8:c1:d9:18:2b:7e:09:ea:8a:b7:ed:af:c1:a5:a5: 43:8d:36:9b:c7:9f:18:ee:cf:2f:f6:94:36:3f:ce: 8c:51:53:bc:d3:87:d0:b4:f8:33:68:56:d1:cb:ce: 15:79:f7:07:0d:5a:3a:74:17:2e:ac:a5:d9:66:f0: 0b:3a:cc:9b:33:c4:e6:cb:b1:ae:f3:0a:a0:22:14: 9c:c0:7a:0f:20:0e:1e:08:54:6c:7d:87:1d:f9:b1: a5:22:38:d5:ce:a1:ca:da:47:0b:61:08:39:70:a9: 1d:a5:02:f1:46:1d:38:8a:3a:be:39:c3:96:c5:2a: c1:a8:c7:1c:15:0c:fb:a7:f1:e4:e9:8c:5e:5b:18: 62:75:4f:32:87:c0:77:10:45:eb:f7:21:2c:4a:e8: 68:ec:ff:55:ba:56:8d:0b:06:30:09:05:65:ea:24: b4:f6:f8:4b:e3:df:9f:97:ab:76:cc:a7:41:61:f6: 4d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C3:5C:4F:26:CD:24:A2:DF:D5:3E:EE:E4:9B:77:2E:1F:88:DD:3A X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:94:d7:f8:2f:d7:28:95:c0:80:7b:cc:a2:7e:4c:ff:ba:a4: f9:6f:49:87:38:6f:b6:42:76:17:0d:17:c0:31:78:ed:34:a5: 6b:9a:a2:8a:c9:c6:76:4b:60:47:5f:cf:09:6b:80:11:dd:76: e6:77:f8:a6:98:26:20:7f:82:a7:a6:3a:15:ae:b9:65:f5:f2: 27:b7:3f:75:ab:bc:cc:f6:13:62:81:a4:c5:78:dd:0d:59:6e: 05:e1:2e:31:1b:db:6a:45:d3:9a:3e:ff:09:5a:c5:c5:68:49: 2d:96:c3:ef:2d:ac:f1:4f:5c:ac:03:95:a8:1d:82:25:5e:89: 25:fe:81:0f:25:29:e7:98:04:a6:8b:e0:7a:0c:8f:74:c4:11: 55:65:5a:e6:4a:9e:1e:b1:14:2e:51:98:46:4d:22:93:83:42: e4:4b:fb:cd:92:a4:e9:d7:c4:67:49:a7:65:5a:01:ab:91:d0: d5:03:0d:45:67:47:74:a4:23:15:ba:2e:b9:92:d0:79:db:74: f0:e2:bf:bb:fe:69:bd:f7:0b:ec:ae:d1:fe:e2:7a:b3:0f:6e: f1:5b:c8:4f:d4:9f:13:0a:83:28:f4:0a:f3:62:a7:fe:c6:70: 1f:b8:38:75:19:49:bd:66:d7:97:3f:18:f0:e9:50:02:9c:94: 8e:3d:f4:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjYwODIyMjIxNTU3WhcNMjYwODI5MjIxNTU3WjAYMRYwFAYD VQQDEw02YThhMWY5ZS04OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu06GkQEdAevE/FUhah6lfC56hgv0I1/NKHh5Z/crGDzv0v8o1U5o7k0Dwoj7 HcS8Yh5zAaYnxlCb5MfJTHidMk0QVH2fdajODG24wdkYK34J6oq37a/BpaVDjTab x58Y7s8v9pQ2P86MUVO804fQtPgzaFbRy84VefcHDVo6dBcurKXZZvALOsybM8Tm y7Gu8wqgIhScwHoPIA4eCFRsfYcd+bGlIjjVzqHK2kcLYQg5cKkdpQLxRh04ijq+ OcOWxSrBqMccFQz7p/Hk6YxeWxhidU8yh8B3EEXr9yEsSuho7P9VulaNCwYwCQVl 6iS09vhL49+fl6t2zKdBYfZNSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXDXE8m zSSi39U+7uSbdy4fiN06MB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEJTX+C/XKJXAgHvMon5M/7qk+W9JhzhvtkJ2Fw0XwDF47TSla5qiisnGdktg R1/PCWuAEd125nf4ppgmIH+Cp6Y6Fa65ZfXyJ7c/dau8zPYTYoGkxXjdDVluBeEu MRvbakXTmj7/CVrFxWhJLZbD7y2s8U9crAOVqB2CJV6JJf6BDyUp55gEpovgegyP dMQRVWVa5kqeHrEULlGYRk0ik4NC5Ev7zZKk6dfEZ0mnZVoBq5HQ1QMNRWdHdKQj FbouuZLQedt08OK/u/5pvfcL7K7R/uJ6sw9u8VvIT9SfEwqDKPQK82Kn/sZwH7g4 dRlJvWbXlz8Y8OlQApyUjj30TA== -----END CERTIFICATE-----Generated at Sat Aug 22 23:23:46 2026 by rpki-client