$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json) Hash identifier: syDaz7pgvihV7PwHCygS2jsA+7C7n0EOsH/e2ShPbv0= Subject key identifier: 03:AD:8F:B6:63:1A:B8:AF:67:91:DD:98:04:66:1E:CC:AF:42:EF:6D Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Certificate serial: 036A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft Manifest number: 035C Signing time: Wed 19 Aug 2026 01:17:04 +0000 Manifest this update: Wed 19 Aug 2026 01:17:03 +0000 Manifest next update: Wed 26 Aug 2026 01:17:03 +0000 Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: fV7Iw+4bEq1SiKun0IKsT5iyH1A3DJ28ccelwc0yTpw=) 2: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: x4nzg1eiqnQ3xL+MBP6Ok4N2HAa+La4GXnfqybcguR8=) 3: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: yJO+i+oPRpe2hJdrBjCi6ZjWjUnUDaX0mnbL3Z2r1os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 874 (0x36a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Validity Not Before: Aug 19 01:17:03 2026 GMT Not After : Aug 26 01:17:03 2026 GMT Subject: CN=6a85040f-b833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:6b:08:5d:ae:19:16:92:73:0f:a8:42:9c: e2:1e:6e:17:87:7e:26:10:b3:be:cb:5a:ac:29:52: 47:7e:83:e0:49:58:2a:be:05:ac:91:4a:0c:2f:24: 0e:1e:1e:e2:c0:58:55:f8:54:02:f3:65:8b:88:24: 02:45:6e:25:08:84:9b:04:8a:2b:9d:43:c6:37:be: ce:d6:0a:28:4d:a3:7d:fd:82:ee:ed:a6:a9:78:b0: b4:32:a8:0d:88:00:02:3a:f7:29:86:e0:3f:77:ca: 44:cd:97:6d:24:ef:d2:ee:ab:b7:05:c9:ec:f9:ab: 6f:39:7f:1b:5c:72:34:c4:aa:7e:d3:20:5b:e2:3d: 73:3d:53:1a:48:e5:13:ec:20:a0:87:35:ca:ca:6e: 34:21:ac:25:5a:46:15:fa:d7:48:6f:51:3c:03:90: b6:8c:2a:c4:09:30:93:04:99:7b:97:a9:73:19:67: 38:3c:9a:47:90:6b:0c:90:6a:36:cf:be:b9:58:3c: cd:9c:08:0c:51:6c:57:1f:cf:e2:01:8d:eb:79:52: bc:73:e3:3c:b4:16:3a:09:43:2f:c7:77:ac:79:a2: 6c:d7:c7:60:1b:f7:f5:2d:1d:ff:dc:31:e9:b2:b3: c6:02:b9:72:65:c1:46:e4:e0:81:cf:c5:af:62:d4: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AD:8F:B6:63:1A:B8:AF:67:91:DD:98:04:66:1E:CC:AF:42:EF:6D X509v3 Authority Key Identifier: keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:06:7e:d2:f3:fb:40:b5:69:b7:01:95:46:38:6b:64:f8:a9: c2:fa:e1:3a:c9:0a:ab:7e:71:5c:25:9c:92:93:f9:1a:d1:aa: 0b:a7:a8:68:64:12:80:f7:9d:6d:c9:d6:9e:c0:05:01:4a:68: 05:25:7e:36:67:52:fd:73:bb:8a:5f:0d:73:3c:a4:3e:de:1d: 44:aa:84:f5:04:08:ca:bc:7c:6f:c9:fc:e3:07:da:6e:b9:02: 44:ff:6c:dc:c9:86:a2:2d:81:f9:c1:db:b3:db:11:f1:36:28: 63:3f:41:8f:5a:e4:cd:74:8d:00:4b:49:8c:1f:d4:2e:8d:e7: ef:03:c5:e2:be:39:97:45:2c:91:06:d7:81:74:e1:ec:3d:34: 86:a5:ff:21:ee:9a:ab:eb:b7:08:fc:39:01:cb:74:c1:e1:a6: c6:32:ff:e6:b1:42:c7:03:1b:60:5f:82:15:b2:c4:ac:ac:f6: d0:a3:d3:59:f4:9d:2e:c1:38:95:7b:94:5b:6d:ec:a2:da:39: f2:8f:b1:14:b8:b4:e8:30:a1:80:b0:e7:36:cc:b5:d3:fe:1c: a5:93:f0:1e:d8:90:08:b9:7c:cd:ff:42:9a:43:b9:33:d1:91: bc:1a:8a:81:3b:28:b5:f6:82:ae:2c:91:30:3e:34:9a:fa:6a: b3:f0:5f:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMUIxMTAvBgNVBAUTKDRCNDQxNEFFNjg1RTQ4OEY0MkIxQjY0N0VFQTAxREVC QjBDNEYzQTAwHhcNMjYwODE5MDExNzAzWhcNMjYwODI2MDExNzAzWjAYMRYwFAYD VQQDEw02YTg1MDQwZi1iODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcxrCF2uGRaScw+oQpziHm4Xh34mELO+y1qsKVJHfoPgSVgqvgWskUoMLyQO Hh7iwFhV+FQC82WLiCQCRW4lCISbBIornUPGN77O1gooTaN9/YLu7aapeLC0MqgN iAACOvcphuA/d8pEzZdtJO/S7qu3Bcns+atvOX8bXHI0xKp+0yBb4j1zPVMaSOUT 7CCghzXKym40IawlWkYV+tdIb1E8A5C2jCrECTCTBJl7l6lzGWc4PJpHkGsMkGo2 z765WDzNnAgMUWxXH8/iAY3reVK8c+M8tBY6CUMvx3eseaJs18dgG/f1LR3/3DHp srPGArlyZcFG5OCBz8WvYtTLlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOtj7Zj GrivZ5HdmARmHsyvQu9tMB8GA1UdIwQYMBaAFEtEFK5oXkiPQrG2R+6gHeuwxPOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIxQi80QjM4NjREODBF MEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJOUNzYlpIN3FBZDY3REU4 NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwUVVybWhlU0k5Q3NiWkg3cUFkNjdERTg2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIxQi80QjM4NjREODBFMEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJ OUNzYlpIN3FBZDY3REU4NkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAgZ+0vP7QLVptwGVRjhrZPipwvrhOskKq35xXCWckpP5GtGqC6eoaGQSgPed bcnWnsAFAUpoBSV+NmdS/XO7il8NczykPt4dRKqE9QQIyrx8b8n84wfabrkCRP9s 3MmGoi2B+cHbs9sR8TYoYz9Bj1rkzXSNAEtJjB/ULo3n7wPF4r45l0UskQbXgXTh 7D00hqX/Ie6aq+u3CPw5Act0weGmxjL/5rFCxwMbYF+CFbLErKz20KPTWfSdLsE4 lXuUW23soto58o+xFLi06DChgLDnNsy10/4cpZPwHtiQCLl8zf9CmkO5M9GRvBqK gTsotfaCriyRMD40mvpqs/BfNw== -----END CERTIFICATE-----Generated at Thu Aug 20 23:38:03 2026 by rpki-client