$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/1iASfm_6fYHe3U-W-C-tlcxS0Cw.mft File: 1iASfm_6fYHe3U-W-C-tlcxS0Cw.mft (raw, json) Hash identifier: VZ+wIL1fftlKDe3rWTKXQAO2+HIBJB/LRKyVRg8FpX4= Subject key identifier: 86:91:D4:E0:DF:63:F4:1C:D3:E1:89:01:18:F5:BB:18:3F:F3:B2:BE Authority key identifier: D6:20:12:7E:6F:FA:7D:81:DE:DD:4F:96:F8:2F:AD:95:CC:52:D0:2C Certificate issuer: /CN=A91AC757/serialNumber=D620127E6FFA7D81DEDD4F96F82FAD95CC52D02C Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1iASfm_6fYHe3U-W-C-tlcxS0Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/1iASfm_6fYHe3U-W-C-tlcxS0Cw.mft Manifest number: 03 Signing time: Wed 19 Aug 2026 10:00:14 +0000 Manifest this update: Wed 19 Aug 2026 10:00:13 +0000 Manifest next update: Wed 26 Aug 2026 10:00:13 +0000 Files and hashes: 1: 1iASfm_6fYHe3U-W-C-tlcxS0Cw.crl (hash: IHDSw02JCh/zf3F34u+DS+5sMdTH9KoqL3emva2jGq4=) 2: F853B1C29A0211F18F8C777D4D11F970.roa (hash: fe0aVdGEpQ9c2YnXQ7ePvMy2djgjZ8aL7PmX+IEPKgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/1iASfm_6fYHe3U-W-C-tlcxS0Cw.crl rsync://rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/1iASfm_6fYHe3U-W-C-tlcxS0Cw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1iASfm_6fYHe3U-W-C-tlcxS0Cw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC757, serialNumber=D620127E6FFA7D81DEDD4F96F82FAD95CC52D02C Validity Not Before: Aug 19 10:00:13 2026 GMT Not After : Aug 26 10:00:13 2026 GMT Subject: CN=6a857ead-2717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:2b:8d:b5:70:9b:1b:a9:64:e9:a1:20:d8: a1:21:02:2e:c6:70:77:6f:e0:c6:88:a8:68:98:20: cb:3c:c3:8d:ad:a2:84:10:53:72:73:aa:57:98:83: 81:27:6e:8c:de:16:4b:2a:53:5a:a1:c5:13:06:0a: f4:b0:76:35:c6:b0:9d:35:a4:77:50:8b:ba:f0:74: 9b:9b:17:6e:f8:16:0b:b4:99:4b:62:3a:5d:79:12: f8:bd:da:12:dc:05:2c:9f:d1:69:8b:13:ce:18:2d: ac:a4:c0:34:1b:53:eb:18:be:5a:7c:37:ae:ae:c7: a3:a0:83:82:61:8b:b4:57:c0:e7:31:48:89:46:f3: c9:64:08:27:cc:45:23:b1:1d:5e:99:23:e4:e7:c0: 2a:c4:95:6d:a7:9c:95:14:f8:9a:43:9f:e2:86:b0: 66:33:ae:8f:48:a9:b4:f8:98:78:99:c0:b8:99:a9: 1f:28:c7:ee:d9:15:72:b3:a3:ed:95:25:ab:1a:11: 67:61:8f:a9:f2:08:f3:0b:07:dd:c3:f8:8a:44:df: b6:00:b0:e8:07:a2:56:8c:23:6e:ab:85:e5:4a:9a: 9a:be:09:4a:04:41:ba:6d:f9:bd:b9:35:4b:83:d7: a6:ad:77:7c:3b:78:5b:89:95:0e:6c:51:c9:16:c8: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:91:D4:E0:DF:63:F4:1C:D3:E1:89:01:18:F5:BB:18:3F:F3:B2:BE X509v3 Authority Key Identifier: keyid:D6:20:12:7E:6F:FA:7D:81:DE:DD:4F:96:F8:2F:AD:95:CC:52:D0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/1iASfm_6fYHe3U-W-C-tlcxS0Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1iASfm_6fYHe3U-W-C-tlcxS0Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC757/5072BEA299FE11F1A9DE99834B11F970/1iASfm_6fYHe3U-W-C-tlcxS0Cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:27:08:bd:e5:43:32:8a:eb:19:32:62:0d:69:6c:5a:29:95: 4d:0d:1f:dd:dc:bc:66:4b:08:b7:92:9c:94:df:dc:d3:0f:31: 5f:4e:4b:35:1f:4c:54:dd:82:15:12:c2:12:4f:e7:d7:8b:3b: 7c:66:7f:20:cb:90:6a:71:b5:7b:af:d7:1b:08:3b:76:81:88: b0:43:bc:9d:60:91:cc:b8:5a:3d:ad:3c:9c:37:3e:28:fd:9e: 5a:c4:30:4f:02:01:ab:b8:99:c6:c3:e9:75:07:ba:50:b6:ce: 0c:f3:ea:a0:f2:f7:0c:ba:a4:19:97:b3:84:5f:f1:0d:0a:3c: fe:e5:92:4b:da:03:75:75:ef:14:92:5e:3a:24:58:5b:2e:6e: ae:5e:3c:90:8a:a0:88:55:32:76:f1:25:ee:f0:b3:71:23:88: bd:bd:27:b3:3a:2b:42:00:1e:1e:36:83:3d:18:52:1d:57:20: b8:01:12:65:6a:f1:a8:92:f8:ef:1a:6a:94:36:1c:8a:52:3c: 68:a9:96:fe:6f:24:12:49:96:84:a6:e4:aa:a4:ab:60:4a:65: c2:33:10:f0:f1:1e:7b:d3:23:26:2c:01:8d:de:fc:59:3c:41: 03:05:c7:e3:52:02:56:6d:68:80:8e:73:56:e8:d9:54:ae:23: 94:25:b7:8e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Qzc1NzExMC8GA1UEBRMoRDYyMDEyN0U2RkZBN0Q4MURFREQ0Rjk2RjgyRkFEOTVD QzUyRDAyQzAeFw0yNjA4MTkxMDAwMTNaFw0yNjA4MjYxMDAwMTNaMBgxFjAUBgNV BAMTDTZhODU3ZWFkLTI3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC68yuNtXCbG6lk6aEg2KEhAi7GcHdv4MaIqGiYIMs8w42tooQQU3JzqleYg4En bozeFksqU1qhxRMGCvSwdjXGsJ01pHdQi7rwdJubF274Fgu0mUtiOl15Evi92hLc BSyf0WmLE84YLaykwDQbU+sYvlp8N66ux6Ogg4Jhi7RXwOcxSIlG88lkCCfMRSOx HV6ZI+TnwCrElW2nnJUU+JpDn+KGsGYzro9IqbT4mHiZwLiZqR8ox+7ZFXKzo+2V JasaEWdhj6nyCPMLB93D+IpE37YAsOgHolaMI26rheVKmpq+CUoEQbpt+b25NUuD 16atd3w7eFuJlQ5sUckWyHxTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhpHU4N9j 9BzT4YkBGPW7GD/zsr4wHwYDVR0jBBgwFoAU1iASfm/6fYHe3U+W+C+tlcxS0Cww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNzU3LzUwNzJCRUEyOTlG RTExRjFBOURFOTk4MzRCMTFGOTcwLzFpQVNmbV82ZllIZTNVLVctQy10bGN4UzBD dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWlBU2ZtXzZmWUhlM1UtVy1DLXRsY3hTMEN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NzU3LzUwNzJCRUEyOTlGRTExRjFBOURFOTk4MzRCMTFGOTcwLzFpQVNmbV82ZllI ZTNVLVctQy10bGN4UzBDdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1Jwi95UMyiusZMmINaWxaKZVNDR/d3LxmSwi3kpyU39zTDzFfTks1H0xU3YIV EsIST+fXizt8Zn8gy5BqcbV7r9cbCDt2gYiwQ7ydYJHMuFo9rTycNz4o/Z5axDBP AgGruJnGw+l1B7pQts4M8+qg8vcMuqQZl7OEX/ENCjz+5ZJL2gN1de8Ukl46JFhb Lm6uXjyQiqCIVTJ28SXu8LNxI4i9vSezOitCAB4eNoM9GFIdVyC4ARJlavGokvjv GmqUNhyKUjxoqZb+byQSSZaEpuSqpKtgSmXCMxDw8R570yMmLAGN3vxZPEEDBcfj UgJWbWiAjnNW6NlUriOUJbeO -----END CERTIFICATE-----Generated at Wed Aug 19 15:59:52 2026 by rpki-client