$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: H3XlIzQRcw5IlG9DwXER7tqtDIk94RMkNCypcuv/GWA= Subject key identifier: 87:58:00:90:2A:4D:28:35:77:BF:6E:A9:D1:43:99:7B:53:0E:63:A9 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 1527 Signing time: Wed 26 Aug 2026 16:46:25 +0000 Manifest this update: Wed 26 Aug 2026 16:46:24 +0000 Manifest next update: Wed 02 Sep 2026 16:46:24 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: ckcIUkWI7Fvgv6fpJwoXnUR1EP3Ahi/lfLWBCqowJog=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: p9ON/vBF+VJhjti0OsHW+khk9UzScAaJd1Q9IQceEPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 16:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5428 (0x1534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Aug 26 16:46:24 2026 GMT Not After : Sep 2 16:46:24 2026 GMT Subject: CN=6a8f1861-34f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:0d:74:6c:6c:b0:f9:b3:5c:43:50:27:26: b1:60:71:ff:da:a7:47:57:e0:f1:d8:b1:77:aa:b6: 94:45:50:ef:96:9a:89:ef:54:72:50:62:2b:b9:8e: 95:88:31:17:0c:9b:84:00:7f:50:e8:c4:3d:d6:b2: de:b1:4b:64:03:ab:17:4c:3d:d6:48:d1:7d:44:f4: ab:78:80:70:4a:3f:18:19:c2:57:22:15:e5:86:ad: e6:c2:44:0e:4e:23:7b:35:fe:25:09:9f:1b:04:e5: 34:4d:60:09:6d:c5:5c:0f:95:bd:73:06:ee:5d:ee: 9e:15:ae:5e:57:7f:09:9e:87:46:4a:38:98:ca:cf: 2a:08:a8:df:07:f7:ae:14:59:e0:31:cd:8f:e5:9e: 18:1b:7c:b7:82:ca:9c:16:32:91:2b:e5:aa:f3:a2: e4:8f:8b:f0:cb:c6:cf:d8:f6:91:1b:89:49:d0:c9: 53:66:ad:2f:d7:f4:7f:94:80:85:06:d8:5e:4b:87: 2d:96:4c:d0:69:9e:79:0b:d2:df:dd:61:2e:91:42: ef:66:c6:a6:5c:d1:fb:b4:db:fc:92:51:eb:eb:6b: f3:3a:8b:26:97:49:da:a6:b1:08:ae:31:44:aa:04: fe:7b:5e:dd:c6:48:e2:2c:67:b6:56:61:0a:69:50: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:58:00:90:2A:4D:28:35:77:BF:6E:A9:D1:43:99:7B:53:0E:63:A9 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:06:74:31:df:ef:f1:0d:84:90:f0:fd:66:43:6c:0a:3e:a3: 56:32:32:9e:bd:dc:e2:a5:9d:6b:bd:02:8b:7f:15:04:d4:28: 0d:24:0a:3d:b5:2f:4f:d0:4d:47:bf:77:cf:73:c7:95:b3:d6: c5:fa:1f:84:5b:62:e5:8a:3b:82:dc:cb:4c:a8:2a:4e:6e:dd: a5:33:00:98:7d:15:e4:d8:ac:ce:f3:1f:c6:12:74:c6:a3:84: 2f:9d:e5:b5:2f:1b:41:b9:3c:07:ee:39:0e:52:35:fa:ac:bf: 4c:64:23:b7:99:24:ba:fd:8b:66:51:35:7c:d8:63:36:7b:51: a7:e5:f2:2a:cb:e9:14:62:2d:72:db:01:e5:34:e2:ff:84:c9: 68:a0:f9:ae:1e:cf:a0:48:ef:9d:70:9c:ea:68:e5:1e:be:6e: 4e:8f:95:e5:df:b4:80:8b:db:da:9d:b0:55:99:c6:47:9c:3a: c8:e2:5f:ab:4a:65:57:90:3a:4f:e7:76:bf:e1:f1:21:a8:d2: e6:be:32:1b:46:6f:11:85:09:85:ae:c3:22:a0:2d:f7:6c:da: b8:59:18:fe:e5:6f:79:0f:4f:a8:37:d0:17:18:f9:db:b5:37: 8e:9e:3e:08:db:18:92:e6:fa:36:7e:a1:b7:d0:c1:55:dd:87: b5:a3:59:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjYwODI2MTY0NjI0WhcNMjYwOTAyMTY0NjI0WjAYMRYwFAYD VQQDEw02YThmMTg2MS0zNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlANdGxssPmzXENQJyaxYHH/2qdHV+Dx2LF3qraURVDvlpqJ71RyUGIruY6V iDEXDJuEAH9Q6MQ91rLesUtkA6sXTD3WSNF9RPSreIBwSj8YGcJXIhXlhq3mwkQO TiN7Nf4lCZ8bBOU0TWAJbcVcD5W9cwbuXe6eFa5eV38JnodGSjiYys8qCKjfB/eu FFngMc2P5Z4YG3y3gsqcFjKRK+Wq86Lkj4vwy8bP2PaRG4lJ0MlTZq0v1/R/lICF BtheS4ctlkzQaZ55C9Lf3WEukULvZsamXNH7tNv8klHr62vzOosml0naprEIrjFE qgT+e17dxkjiLGe2VmEKaVCClQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdYAJAq TSg1d79uqdFDmXtTDmOpMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANgZ0Md/v8Q2EkPD9ZkNsCj6jVjIynr3c4qWda70Ci38VBNQoDSQKPbUvT9BN R793z3PHlbPWxfofhFti5Yo7gtzLTKgqTm7dpTMAmH0V5NiszvMfxhJ0xqOEL53l tS8bQbk8B+45DlI1+qy/TGQjt5kkuv2LZlE1fNhjNntRp+XyKsvpFGItctsB5TTi /4TJaKD5rh7PoEjvnXCc6mjlHr5uTo+V5d+0gIvb2p2wVZnGR5w6yOJfq0plV5A6 T+d2v+HxIajS5r4yG0ZvEYUJha7DIqAt92zauFkY/uVveQ9PqDfQFxj527U3jp4+ CNsYkub6Nn6ht9DBVd2HtaNZKg== -----END CERTIFICATE-----Generated at Thu Aug 27 08:52:33 2026 by rpki-client