$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft File: pKVwtST2YpG2kJvyMTPV24NQQe0.mft (raw, json) Hash identifier: 8TCdAMVEryyZytMidRkAADa/PTdMou/ubwLDKTaVI7c= Subject key identifier: 14:00:0A:E1:64:82:9C:59:1E:F9:E6:B2:AB:4A:49:B1:24:50:9E:99 Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED Certificate issuer: /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft Manifest number: 28 Signing time: Wed 19 Aug 2026 09:34:20 +0000 Manifest this update: Wed 19 Aug 2026 09:34:20 +0000 Manifest next update: Wed 26 Aug 2026 09:34:20 +0000 Files and hashes: 1: pKVwtST2YpG2kJvyMTPV24NQQe0.crl (hash: LYxYGhYNyBmdeT39QFamFAmkw541elyJ9fwiow8GzR8=) 2: 8B417B6064AA11F19AE9C6D58F47A888.roa (hash: p4PsoFtVmoyNxlXYNhF8Qpg25SbCbP43gXrqt/3vkfE=) 3: 694EC58664AE11F189DF701D9347A888.roa (hash: uf1w2K+QavHMr69P1XIOXrrKK1vFbrU3GZGJb7MtqTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Validity Not Before: Aug 19 09:34:20 2026 GMT Not After : Aug 26 09:34:20 2026 GMT Subject: CN=6a85789c-ce48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e1:d0:bb:30:1a:ac:63:e9:f1:87:55:ab:67: f8:4f:0f:35:80:cd:0a:ae:dc:c6:76:30:44:b6:8d: 16:24:28:17:a4:a4:24:6c:ad:94:9d:33:4f:43:50: 76:30:23:d5:78:ef:cc:a6:d2:5f:71:f0:e7:31:6f: 2d:78:ad:de:e2:af:9a:71:f3:85:3b:2f:a9:3a:1c: 15:6e:31:bc:82:95:d2:94:62:ea:ac:55:36:1f:57: 0d:b3:12:41:fa:ef:fb:9f:38:cc:ce:7f:dc:48:e5: ec:0b:db:22:7d:d0:01:4a:27:d5:87:92:ba:69:1b: 76:e7:1b:19:ff:25:24:ff:9c:45:10:3d:8d:58:e8: a9:f3:bd:97:1b:2b:39:81:01:6b:80:ec:e3:01:3d: 8d:c0:9c:5b:36:51:a3:91:9b:f7:a2:42:16:62:71: 60:ca:53:62:20:67:96:d8:cb:28:38:37:ad:d7:6c: 76:06:39:3d:5b:43:e7:46:6f:e9:c2:3b:92:e7:9a: 68:66:99:18:ff:90:f3:c9:6f:9a:d9:40:bb:2e:08: a2:b2:5e:d7:2f:d5:e4:7c:08:8f:70:5c:ff:8f:e2: d0:2a:f2:90:6e:47:3c:bd:a3:ee:50:7f:74:13:49: 7a:c7:f9:58:85:de:27:69:23:03:f6:f5:10:9f:cf: 8e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:00:0A:E1:64:82:9C:59:1E:F9:E6:B2:AB:4A:49:B1:24:50:9E:99 X509v3 Authority Key Identifier: keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:80:9c:b9:c0:c8:90:d9:b5:80:01:2c:3c:a3:53:ad:2e:9d: 5a:97:5a:e7:d1:4f:41:37:af:81:2a:96:fb:75:60:29:07:45: a8:7d:ca:f5:5a:d1:a7:8b:ab:bb:41:5e:2d:66:1b:b4:b8:bf: fc:00:32:30:06:15:f5:37:00:3a:28:cb:3c:c5:35:35:2f:e6: 10:2e:3a:e1:6e:df:fc:5d:c1:32:2d:d2:66:1e:c4:ec:7e:1b: 1c:d4:f6:30:d8:d9:bf:b6:a8:43:23:41:96:9b:14:90:0b:20: f3:52:1b:4a:06:36:bb:7f:00:fd:a3:05:35:1b:01:1b:80:41: e1:57:4a:4f:ba:dd:8b:b0:b1:c0:b8:e0:cf:81:29:b0:a1:2c: aa:6b:87:ee:a7:ef:92:77:39:52:d5:88:9c:10:72:4c:d0:7c: c0:e8:eb:6a:d5:3a:79:17:ea:07:9e:bf:14:3f:b3:87:ab:30: 3f:63:f9:6b:00:0d:53:dc:87:50:79:69:58:37:12:91:c7:9c: 89:8f:b7:42:c6:12:ab:11:66:14:9f:86:46:7a:ca:0b:4f:41: 31:71:6f:7e:46:e9:a6:ec:12:1f:ae:5e:f4:9c:83:b4:bc:70: e4:fb:2c:0b:0b:64:c7:bf:c3:43:9e:f4:81:88:2e:58:35:5a: a9:06:15:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkMxQTExMC8GA1UEBRMoQTRBNTcwQjUyNEY2NjI5MUI2OTA5QkYyMzEzM0Q1REI4 MzUwNDFFRDAeFw0yNjA4MTkwOTM0MjBaFw0yNjA4MjYwOTM0MjBaMBgxFjAUBgNV BAMTDTZhODU3ODljLWNlNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe4dC7MBqsY+nxh1WrZ/hPDzWAzQqu3MZ2MES2jRYkKBekpCRsrZSdM09DUHYw I9V478ym0l9x8Ocxby14rd7ir5px84U7L6k6HBVuMbyCldKUYuqsVTYfVw2zEkH6 7/ufOMzOf9xI5ewL2yJ90AFKJ9WHkrppG3bnGxn/JST/nEUQPY1Y6KnzvZcbKzmB AWuA7OMBPY3AnFs2UaORm/eiQhZicWDKU2IgZ5bYyyg4N63XbHYGOT1bQ+dGb+nC O5LnmmhmmRj/kPPJb5rZQLsuCKKyXtcv1eR8CI9wXP+P4tAq8pBuRzy9o+5Qf3QT SXrH+ViF3idpIwP29RCfz45XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFAAK4WSC nFke+eayq0pJsSRQnpkwHwYDVR0jBBgwFoAUpKVwtST2YpG2kJvyMTPV24NQQe0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QzFBL0UxMkM0Q0E0NjRB OTExRjFCNjVGNTZCMjhGNDdBODg4L3BLVnd0U1QyWXBHMmtKdnlNVFBWMjROUVFl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEtWd3RTVDJZcEcya0p2eU1UUFYyNE5RUWUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QzFBL0UxMkM0Q0E0NjRBOTExRjFCNjVGNTZCMjhGNDdBODg4L3BLVnd0U1QyWXBH MmtKdnlNVFBWMjROUVFlMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCIgJy5wMiQ2bWAASw8o1OtLp1al1rn0U9BN6+BKpb7dWApB0Wofcr1WtGni6u7 QV4tZhu0uL/8ADIwBhX1NwA6KMs8xTU1L+YQLjrhbt/8XcEyLdJmHsTsfhsc1PYw 2Nm/tqhDI0GWmxSQCyDzUhtKBja7fwD9owU1GwEbgEHhV0pPut2LsLHAuODPgSmw oSyqa4fup++SdzlS1YicEHJM0HzA6Otq1Tp5F+oHnr8UP7OHqzA/Y/lrAA1T3IdQ eWlYNxKRx5yJj7dCxhKrEWYUn4ZGesoLT0ExcW9+Rumm7BIfrl70nIO0vHDk+ywL C2THv8NDnvSBiC5YNVqpBhUD -----END CERTIFICATE-----Generated at Wed Aug 19 16:03:51 2026 by rpki-client