$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft File: l68SGHeJLIAH_k5xa4jjO-74AN8.mft (raw, json) Hash identifier: wiHamSZj8nb43xlHOeOfC4dlyJBPP3zN/Agliu7OC5s= Subject key identifier: 73:65:2C:9D:1F:45:3F:FD:45:04:14:73:C0:09:8B:71:02:CD:64:A6 Authority key identifier: 97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF Certificate issuer: /CN=A91B1F08/serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft Manifest number: 11 Signing time: Thu 27 Aug 2026 08:29:00 +0000 Manifest this update: Thu 27 Aug 2026 08:29:00 +0000 Manifest next update: Thu 03 Sep 2026 08:29:00 +0000 Files and hashes: 1: l68SGHeJLIAH_k5xa4jjO-74AN8.crl (hash: wxALIaffbPqyMSpAIAFL0iJb6a4BRJTqxOpFHrjRqeg=) 2: CF6E968E8B2811F18D2B202C3D11F970.roa (hash: nKbDtnjj8624VgFqL+Q3DAFfPVFpI7iStLeG1RhUWGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 06:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F08, serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF Validity Not Before: Aug 27 08:29:00 2026 GMT Not After : Sep 3 08:29:00 2026 GMT Subject: CN=6a8ff54c-93f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:18:fa:4d:a1:4e:8b:36:16:2b:87:2f:93: 61:82:b2:90:2f:d3:16:ef:aa:ba:79:da:0e:ec:30: 91:93:34:d1:84:9f:41:07:97:34:9a:ed:33:a1:08: 3a:10:b8:d5:c3:1e:8e:09:d5:ef:d2:6c:43:94:f7: 66:66:90:bf:ab:e6:e7:43:ad:55:b2:d1:3f:ab:34: 17:79:7b:3b:b9:45:d6:dc:99:8d:dd:96:ca:ee:8c: 68:ef:4f:b5:37:71:31:67:cc:2b:82:89:a5:4a:bf: 9f:bc:49:f3:10:3b:4d:4c:eb:e5:77:d5:b2:7a:3a: 0c:6a:fb:03:e7:97:5c:8c:14:6d:40:cf:b8:b7:c8: f9:6d:ea:92:11:cc:e2:96:39:ea:5c:61:d1:5f:b7: 86:56:c5:9b:1a:38:e5:55:a0:d9:e7:09:b9:8b:a6: 63:ec:d9:e2:d0:ae:ca:05:a2:32:6a:b0:31:7b:f1: 5e:a5:c9:ee:03:94:cc:2d:d8:33:d0:2c:02:8a:70: f3:01:db:a7:a4:f0:b6:61:af:4a:f1:e1:0c:a1:c0: 61:b2:04:a5:7f:d5:79:23:66:9f:1d:be:4b:d8:23: 22:e7:b8:5e:8d:78:0d:20:da:12:66:26:9e:3d:f3: 74:46:fd:9e:4c:79:f3:0e:cf:da:d6:0b:dc:58:11: b1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:65:2C:9D:1F:45:3F:FD:45:04:14:73:C0:09:8B:71:02:CD:64:A6 X509v3 Authority Key Identifier: keyid:97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:f1:46:bc:3f:3c:4e:0d:18:be:4c:ae:c3:a6:cf:99:a4:c2: 9b:59:f7:97:20:ba:a9:d1:c4:ce:70:90:71:f2:2d:f1:50:fd: 6d:96:46:de:68:d1:f3:f6:6f:ae:2b:37:bb:97:bf:20:0d:3d: 7c:bc:00:dc:e3:fd:ef:76:c2:70:04:85:b3:94:cc:cf:78:e5: 3c:ab:d4:30:78:15:ea:85:b9:6a:37:c4:30:9f:5d:bc:fd:d2: 9c:27:13:a7:2b:3c:46:d8:e5:93:ab:76:f6:7b:05:34:fd:52: f8:c7:7d:75:7b:a1:f2:3f:1c:f1:cc:87:8f:85:63:77:de:62: f3:d1:1c:04:15:6b:c3:07:92:b2:16:b6:c4:dc:19:77:c7:f3: 8c:c8:0c:20:05:35:be:43:c2:d2:f8:c2:cf:c6:cb:e9:43:be: a5:91:ec:3b:45:11:c5:83:8f:ac:4f:a1:7c:6d:79:82:70:e3: 08:ad:05:e6:82:ab:74:da:6b:d6:7b:ba:33:f2:77:d5:22:b5: 9e:99:b5:5c:2b:a9:89:d5:64:46:30:ec:b3:38:c6:56:c0:27: ef:34:f5:d0:dd:da:36:cb:6f:09:10:76:d5:ec:6b:ef:6e:60: 1a:62:b0:21:6c:cb:8f:c9:4f:ff:a2:f2:aa:cc:f9:8e:c9:c8: 64:84:41:48 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUYwODExMC8GA1UEBRMoOTdBRjEyMTg3Nzg5MkM4MDA3RkU0RTcxNkI4OEUzM0JF RUY4MDBERjAeFw0yNjA4MjcwODI5MDBaFw0yNjA5MDMwODI5MDBaMBgxFjAUBgNV BAMTDTZhOGZmNTRjLTkzZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+SRj6TaFOizYWK4cvk2GCspAv0xbvqrp52g7sMJGTNNGEn0EHlzSa7TOhCDoQ uNXDHo4J1e/SbEOU92ZmkL+r5udDrVWy0T+rNBd5ezu5RdbcmY3dlsrujGjvT7U3 cTFnzCuCiaVKv5+8SfMQO01M6+V31bJ6Ogxq+wPnl1yMFG1Az7i3yPlt6pIRzOKW OepcYdFft4ZWxZsaOOVVoNnnCbmLpmPs2eLQrsoFojJqsDF78V6lye4DlMwt2DPQ LAKKcPMB26ek8LZhr0rx4QyhwGGyBKV/1XkjZp8dvkvYIyLnuF6NeA0g2hJmJp49 83RG/Z5MefMOz9rWC9xYEbF5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUc2UsnR9F P/1FBBRzwAmLcQLNZKYwHwYDVR0jBBgwFoAUl68SGHeJLIAH/k5xa4jjO+74AN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRjA4LzBBMjI4OEUwOEIy ODExRjE4M0UyQzMwRTNEMTFGOTcwL2w2OFNHSGVKTElBSF9rNXhhNGpqTy03NEFO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDY4U0dIZUpMSUFIX2s1eGE0ampPLTc0QU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RjA4LzBBMjI4OEUwOEIyODExRjE4M0UyQzMwRTNEMTFGOTcwL2w2OFNHSGVKTElB SF9rNXhhNGpqTy03NEFOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBC8Ua8PzxODRi+TK7Dps+ZpMKbWfeXILqp0cTOcJBx8i3xUP1tlkbeaNHz9m+u Kze7l78gDT18vADc4/3vdsJwBIWzlMzPeOU8q9QweBXqhblqN8Qwn128/dKcJxOn KzxG2OWTq3b2ewU0/VL4x311e6HyPxzxzIePhWN33mLz0RwEFWvDB5KyFrbE3Bl3 x/OMyAwgBTW+Q8LS+MLPxsvpQ76lkew7RRHFg4+sT6F8bXmCcOMIrQXmgqt02mvW e7oz8nfVIrWembVcK6mJ1WRGMOyzOMZWwCfvNPXQ3do2y28JEHbV7GvvbmAaYrAh bMuPyU//ovKqzPmOychkhEFI -----END CERTIFICATE-----Generated at Thu Aug 27 11:00:57 2026 by rpki-client