$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: 4tX/xNtZYFhfG/mFPZ3oWS+WK+r81/zaXarDXTcW43o= Subject key identifier: D1:50:F0:B9:1C:D9:AA:A4:2F:61:55:70:7E:57:11:B0:96:BE:EC:2E Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 02C2 Signing time: Fri 21 Aug 2026 01:21:56 +0000 Manifest this update: Fri 21 Aug 2026 01:21:56 +0000 Manifest next update: Fri 28 Aug 2026 01:21:56 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: l/SAR/nPwnvF3VzYqfXQ13qRvpQtOGJcstu5+hJ7CK0=) 2: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 63Mc6PfxkqkDwQtpOI9U8lomk1Cxh7mzQMzSOn5gi4U=) 3: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: 0C9mx4bIr2S3KsrxXmmh+6ZkoQeTAaGyUsfLf68eqPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Aug 21 01:21:56 2026 GMT Not After : Aug 28 01:21:56 2026 GMT Subject: CN=6a87a834-cf67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:f2:d2:51:95:25:f7:be:3e:c3:23:48:2c: 61:93:67:84:5d:5e:a1:02:1f:fc:d8:33:ee:bf:c3: 08:b2:79:79:3c:a9:17:f2:98:06:37:df:05:d1:10: 3c:be:1b:6f:4b:e8:3e:ec:7f:0d:75:b2:e6:7c:6d: 2d:27:7d:68:e9:34:ac:24:56:eb:e6:6d:21:92:ce: 38:90:71:41:f0:27:0a:8b:33:28:71:4c:b0:4d:3d: 8e:1b:63:b2:34:66:69:39:7f:76:fc:0c:68:02:0e: 14:1b:f3:2d:3a:83:94:00:2e:ff:91:63:66:9c:fd: b9:24:82:65:18:99:b8:b9:bc:1e:33:6e:ba:5f:68: ed:4d:fd:af:67:46:27:d5:54:01:d1:b4:05:43:19: a0:e7:ba:55:18:03:33:10:99:fb:5a:01:43:26:5e: b9:19:ed:da:87:e5:59:2b:52:19:f2:cd:02:f4:90: 48:78:e1:26:b5:f9:1e:d7:a3:d5:9e:f4:23:58:61: 06:f9:99:70:e5:e2:90:2e:c0:e3:c0:3c:32:f7:36: 85:7b:e9:93:2d:82:c2:1a:4d:f6:e0:b5:0f:25:ad: e1:3a:eb:23:1f:93:38:4c:1a:a9:d1:33:86:00:c1: b3:9b:2e:99:50:d7:b2:67:e9:68:df:5d:72:8d:9d: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:50:F0:B9:1C:D9:AA:A4:2F:61:55:70:7E:57:11:B0:96:BE:EC:2E X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:2c:76:8c:82:26:64:d7:55:3b:94:a8:a7:a3:cd:8f:44:7c: d5:95:97:1b:fd:9c:a0:a8:45:9b:6e:35:86:07:20:4e:ff:a1: 17:8e:21:7d:49:cf:00:be:2f:b9:21:02:0b:7a:88:77:02:d1: fe:e0:8b:ac:67:94:7d:46:fd:53:dd:2a:80:e4:b6:32:1f:0f: 2e:11:26:35:3c:4a:83:04:98:19:65:b2:5a:15:0c:f4:31:cf: 7b:4c:25:85:77:ff:c8:c5:15:5b:6d:4f:09:0f:23:80:9c:41: a6:98:1a:61:32:28:c8:59:08:9f:af:e7:07:27:4a:e3:e0:9b: 17:ee:be:b1:cf:b1:26:6d:ec:db:d6:5f:35:32:4f:c4:3c:97: a1:cb:e1:94:41:01:eb:99:21:41:4f:a3:0f:c3:3e:29:26:7a: 5d:16:ef:32:17:c3:27:39:9e:45:c8:aa:a9:d2:99:03:ab:1f: 50:be:90:b0:95:c4:1a:2f:b3:17:cb:30:3d:6c:4f:1c:1c:81: 07:de:47:b9:c8:f6:05:6d:bf:79:fb:d6:58:98:19:0f:de:3d: d4:bd:33:2b:01:3b:1b:b5:a0:94:9b:22:c7:64:f0:5e:49:bb: 28:27:46:5b:aa:44:d5:85:c5:73:1a:09:fa:ea:62:da:63:d1: c7:28:9c:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjYwODIxMDEyMTU2WhcNMjYwODI4MDEyMTU2WjAYMRYwFAYD VQQDEw02YTg3YTgzNC1jZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYDy0lGVJfe+PsMjSCxhk2eEXV6hAh/82DPuv8MIsnl5PKkX8pgGN98F0RA8 vhtvS+g+7H8NdbLmfG0tJ31o6TSsJFbr5m0hks44kHFB8CcKizMocUywTT2OG2Oy NGZpOX92/AxoAg4UG/MtOoOUAC7/kWNmnP25JIJlGJm4ubweM266X2jtTf2vZ0Yn 1VQB0bQFQxmg57pVGAMzEJn7WgFDJl65Ge3ah+VZK1IZ8s0C9JBIeOEmtfke16PV nvQjWGEG+Zlw5eKQLsDjwDwy9zaFe+mTLYLCGk324LUPJa3hOusjH5M4TBqp0TOG AMGzmy6ZUNeyZ+lo311yjZ3o5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFQ8Lkc 2aqkL2FVcH5XEbCWvuwuMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIyx2jIImZNdVO5Sop6PNj0R81ZWXG/2coKhFm241hgcgTv+hF44hfUnPAL4v uSECC3qIdwLR/uCLrGeUfUb9U90qgOS2Mh8PLhEmNTxKgwSYGWWyWhUM9DHPe0wl hXf/yMUVW21PCQ8jgJxBppgaYTIoyFkIn6/nBydK4+CbF+6+sc+xJm3s29ZfNTJP xDyXocvhlEEB65khQU+jD8M+KSZ6XRbvMhfDJzmeRciqqdKZA6sfUL6QsJXEGi+z F8swPWxPHByBB95Hucj2BW2/efvWWJgZD9491L0zKwE7G7WglJsix2TwXkm7KCdG W6pE1YXFcxoJ+upi2mPRxyicYg== -----END CERTIFICATE-----Generated at Sat Aug 22 21:50:31 2026 by rpki-client