$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: h5sWiPKk6tZX4FDaRHtwgEVexKOeEj5fcIY8IgT/czU= Subject key identifier: 78:FF:5A:50:79:DB:B5:2C:92:A0:95:55:10:D0:D7:65:9C:F5:C2:82 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 0201 Signing time: Wed 19 Aug 2026 04:17:23 +0000 Manifest this update: Wed 19 Aug 2026 04:17:22 +0000 Manifest next update: Wed 26 Aug 2026 04:17:22 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: wCyOJO5VbtACEvukmswZzmvg8hZPQKgdcX2/CzJKtT4=) 2: B060FCD00E4311F1AA27A3801A3D8C67.roa (hash: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Aug 19 04:17:22 2026 GMT Not After : Aug 26 04:17:22 2026 GMT Subject: CN=6a852e52-51dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:f9:4d:d7:4d:3a:12:b2:1b:8e:61:59:a0: 94:4b:3a:2a:04:5d:66:6b:b5:70:85:5e:d9:8d:c5: 3b:fa:8e:b2:d2:cb:63:94:b7:2f:06:b1:79:56:d4: 1f:40:38:d9:cb:d4:05:29:24:0a:88:cc:c9:cd:17: 88:50:21:ca:79:1b:e5:da:fc:19:d4:2b:93:5b:6f: 95:6b:24:90:9f:7d:3b:39:50:03:c0:0b:e5:bd:6d: 95:54:50:a5:73:5d:7d:de:79:bb:8f:39:70:9f:02: 9b:46:e9:24:01:d0:fe:a7:5c:4a:f2:b1:28:06:21: 79:1c:15:bc:24:68:ce:63:33:8c:d1:07:6a:71:5a: f9:ae:24:c3:d3:a7:2d:11:a4:df:ec:ef:5a:6a:cf: 35:74:ba:a7:5d:43:3b:b6:7c:32:28:93:66:1f:2e: 37:ee:3c:10:77:d5:21:ae:1d:2f:03:e6:f1:08:e8: 29:b8:34:80:ad:bf:bf:00:93:3e:e6:bd:18:3a:d3: 76:55:f0:09:a9:98:90:df:34:25:6c:b5:c5:a1:e5: 7f:59:5b:47:6d:d2:a8:63:c4:6e:60:01:e7:24:a6: 16:88:5d:7f:6c:7b:e1:12:b8:c6:6b:eb:f3:be:24: 45:87:89:a6:66:6f:64:9c:ae:c0:5a:59:2e:84:48: 7c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FF:5A:50:79:DB:B5:2C:92:A0:95:55:10:D0:D7:65:9C:F5:C2:82 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:e5:ae:45:7b:48:c1:db:27:11:67:a2:8e:93:a8:89:ca:e2: 73:00:77:05:fe:a3:0c:64:f1:24:1d:4d:fa:ca:63:da:fa:c5: 5e:62:a9:d9:40:70:4f:7d:40:aa:8b:23:b2:1b:bb:94:24:52: 29:62:4b:56:19:ae:60:9b:3a:c6:fa:92:e8:a3:3b:be:ef:9b: 06:70:49:23:7e:5c:77:57:3a:9c:fd:ba:81:83:28:51:d3:f5: 05:c4:9a:cb:37:49:31:b5:3d:00:50:b3:f9:a6:09:79:c1:7a: ff:66:41:f4:fa:45:2a:fc:f0:ba:1c:d9:66:bc:4f:38:61:e3: 1a:7d:10:4d:18:72:b2:b6:86:a2:fd:b2:8b:1f:24:37:6a:9e: d9:b3:b8:c1:ab:db:50:93:ce:45:80:18:cc:a9:8e:3f:ea:49: e4:cb:85:e2:d0:73:64:f7:e7:34:51:7f:de:c4:b5:a7:82:4a: 3c:c4:c8:5a:27:5f:9a:57:c0:37:bf:06:7f:d4:0c:71:87:4d: fa:9f:59:ad:6d:c0:cb:b8:96:94:44:e7:26:2b:de:5b:b0:40: cb:3e:c8:96:0e:3c:82:5a:8f:96:ba:bd:b7:49:80:a4:e3:82: fe:fe:bf:bd:00:ae:6b:cc:39:c7:af:06:cc:67:2b:c3:f6:f8: 63:74:b9:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjYwODE5MDQxNzIyWhcNMjYwODI2MDQxNzIyWjAYMRYwFAYD VQQDEw02YTg1MmU1Mi01MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSn5TddNOhKyG45hWaCUSzoqBF1ma7VwhV7ZjcU7+o6y0stjlLcvBrF5VtQf QDjZy9QFKSQKiMzJzReIUCHKeRvl2vwZ1CuTW2+VaySQn307OVADwAvlvW2VVFCl c1193nm7jzlwnwKbRukkAdD+p1xK8rEoBiF5HBW8JGjOYzOM0QdqcVr5riTD06ct EaTf7O9aas81dLqnXUM7tnwyKJNmHy437jwQd9Uhrh0vA+bxCOgpuDSArb+/AJM+ 5r0YOtN2VfAJqZiQ3zQlbLXFoeV/WVtHbdKoY8RuYAHnJKYWiF1/bHvhErjGa+vz viRFh4mmZm9knK7AWlkuhEh8MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHj/WlB5 27UskqCVVRDQ12Wc9cKCMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACOWuRXtIwdsnEWeijpOoicricwB3Bf6jDGTxJB1N+spj2vrFXmKp2UBwT31A qosjshu7lCRSKWJLVhmuYJs6xvqS6KM7vu+bBnBJI35cd1c6nP26gYMoUdP1BcSa yzdJMbU9AFCz+aYJecF6/2ZB9PpFKvzwuhzZZrxPOGHjGn0QTRhysraGov2yix8k N2qe2bO4wavbUJPORYAYzKmOP+pJ5MuF4tBzZPfnNFF/3sS1p4JKPMTIWidfmlfA N78Gf9QMcYdN+p9ZrW3Ay7iWlETnJiveW7BAyz7Ilg48glqPlrq9t0mApOOC/v6/ vQCua8w5x68GzGcrw/b4Y3S5lw== -----END CERTIFICATE-----Generated at Wed Aug 19 14:31:19 2026 by rpki-client