$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft File: hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft (raw, json) Hash identifier: rzszg29YilqJcMZSOxRWTUUqR5XLyxrxzTkXLP5B8iA= Subject key identifier: 3B:4B:5F:F6:F4:7D:35:1A:C7:5C:DF:CF:19:93:A6:DB:8B:CA:A4:86 Authority key identifier: 84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 Certificate issuer: /CN=A91A6AB7/serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft Manifest number: 3B Signing time: Sun 23 Aug 2026 08:10:25 +0000 Manifest this update: Sun 23 Aug 2026 08:10:24 +0000 Manifest next update: Sun 30 Aug 2026 08:10:24 +0000 Files and hashes: 1: hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl (hash: y/J6F3Kn9lgZnaaF+qYuC1Tz7LAlvMFBvMiLHngPatc=) 2: 2DFF5E4A450611F1937F277491833773.roa (hash: 47kNyS4a2pq8B+k+t2a9vj5unLrgCE/8MJzFAm97XS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6AB7, serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6 Validity Not Before: Aug 23 08:10:24 2026 GMT Not After : Aug 30 08:10:24 2026 GMT Subject: CN=6a8aaaf1-2d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:8f:79:6e:d6:26:b0:7e:53:ac:16:b8:36: 79:f9:6d:19:9a:3d:0b:7c:0a:f2:cf:4e:f0:56:e1: 3f:e7:dd:d8:d4:68:46:1c:85:91:6e:30:0f:94:cf: aa:80:6d:b3:ff:5c:d6:b8:b6:22:a1:22:a3:04:bc: 7e:cd:68:74:67:07:c8:09:e7:54:47:80:5b:af:1d: 0e:ca:ee:f9:07:2b:b3:f5:bb:75:ed:09:1d:0e:fb: 9f:08:d8:ed:0c:04:9e:74:41:5a:03:a5:3e:44:e8: b4:a2:4c:76:37:23:5a:8e:4c:26:aa:6c:cd:63:c7: 78:d6:93:b2:b3:70:5e:3b:39:82:40:f0:4b:0b:14: 8b:cd:a6:a0:c1:77:b2:35:8f:81:ac:b2:85:1a:8a: 07:0b:3a:ce:0d:83:33:5a:2c:56:07:b9:69:fe:6a: 98:cb:15:db:5f:b2:3c:e6:db:bc:83:eb:cb:6f:3e: 7b:41:2a:05:1d:20:79:b4:cc:fa:8d:8a:10:54:2a: 39:a3:cc:b0:79:bb:9b:da:c1:84:68:ec:61:c1:7b: 94:ea:25:8e:90:00:fd:8a:5f:99:8d:d0:57:f0:d2: 9d:4e:9a:b3:ae:e7:dd:03:23:09:5c:aa:14:b3:2a: ad:4b:3a:99:f7:53:93:d3:a2:f0:eb:91:1f:33:60: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4B:5F:F6:F4:7D:35:1A:C7:5C:DF:CF:19:93:A6:DB:8B:CA:A4:86 X509v3 Authority Key Identifier: keyid:84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4e:5f:49:e9:24:4c:c1:09:43:e7:59:a8:ab:75:36:79:b4: 64:74:b9:f6:40:54:59:9a:64:d4:cc:aa:ca:88:65:3f:42:02: ff:9f:c9:c8:ab:38:40:90:a1:ea:c7:c1:28:90:77:f3:89:34: fb:78:6d:c3:e5:1c:ec:b3:b0:34:3c:df:e0:4b:67:04:17:f6: f7:e3:5a:e1:06:53:9a:a3:35:8d:bb:ca:a9:6e:87:47:76:a5: ea:43:c7:56:a1:21:26:d8:eb:51:54:ab:97:82:1a:af:cd:fb: e5:ae:16:70:f6:6e:2d:63:ff:2f:94:e4:ac:7b:20:dc:3a:f3: 9e:6f:e1:91:ae:bc:e0:93:af:b4:2c:76:4e:15:7e:71:ba:2e: 53:ad:bb:68:69:31:3b:98:3e:82:ab:1f:3f:65:17:0d:08:16: 11:84:d2:01:91:1a:3f:e2:5d:99:54:d2:97:c5:ff:2f:bc:3b: 63:7b:f3:54:4e:06:0b:e5:f8:17:8e:3c:b2:16:43:bd:b7:42: fe:f1:b5:12:5c:c8:f9:c9:9b:0b:8b:d5:7c:78:95:8f:b3:50: 8e:bc:ec:c4:d4:29:bd:5a:5f:49:57:98:be:a4:37:66:18:4b: 90:97:3f:2f:91:e6:7b:e0:78:d3:1c:4b:58:ba:f4:8c:78:8a: 05:48:63:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCNzExMC8GA1UEBRMoODQ5QjBEOTkwMjBCRjFEOUQ2RjhEM0YwMjhDOTRGMEFB MDExRjZBNjAeFw0yNjA4MjMwODEwMjRaFw0yNjA4MzAwODEwMjRaMBgxFjAUBgNV BAMTDTZhOGFhYWYxLTJkOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPv495btYmsH5TrBa4Nnn5bRmaPQt8CvLPTvBW4T/n3djUaEYchZFuMA+Uz6qA bbP/XNa4tiKhIqMEvH7NaHRnB8gJ51RHgFuvHQ7K7vkHK7P1u3XtCR0O+58I2O0M BJ50QVoDpT5E6LSiTHY3I1qOTCaqbM1jx3jWk7KzcF47OYJA8EsLFIvNpqDBd7I1 j4GssoUaigcLOs4NgzNaLFYHuWn+apjLFdtfsjzm27yD68tvPntBKgUdIHm0zPqN ihBUKjmjzLB5u5vawYRo7GHBe5TqJY6QAP2KX5mN0Ffw0p1OmrOu590DIwlcqhSz Kq1LOpn3U5PTovDrkR8zYOvjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO0tf9vR9 NRrHXN/PGZOm24vKpIYwHwYDVR0jBBgwFoAUhJsNmQIL8dnW+NPwKMlPCqAR9qYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUI3L0M2REMxRDVDNDUw NTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRuVy1OUHdLTWxQQ3FBUjlx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEpzTm1RSUw4ZG5XLU5Qd0tNbFBDcUFSOXFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QUI3L0M2REMxRDVDNDUwNTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRu Vy1OUHdLTWxQQ3FBUjlxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQABTl9J6SRMwQlD51moq3U2ebRkdLn2QFRZmmTUzKrKiGU/QgL/n8nIqzhAkKHq x8EokHfziTT7eG3D5Rzss7A0PN/gS2cEF/b341rhBlOaozWNu8qpbodHdqXqQ8dW oSEm2OtRVKuXghqvzfvlrhZw9m4tY/8vlOSseyDcOvOeb+GRrrzgk6+0LHZOFX5x ui5TrbtoaTE7mD6Cqx8/ZRcNCBYRhNIBkRo/4l2ZVNKXxf8vvDtje/NUTgYL5fgX jjyyFkO9t0L+8bUSXMj5yZsLi9V8eJWPs1COvOzE1Cm9Wl9JV5i+pDdmGEuQlz8v keZ74HjTHEtYuvSMeIoFSGNP -----END CERTIFICATE-----Generated at Mon Aug 24 04:34:59 2026 by rpki-client