$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft File: tY0p97gQfxWFtf_nDFAsbI9dMwI.mft (raw, json) Hash identifier: tmlo2HeVJg+6aCujJzrawtVJRJKrE7nowGlzBaD4fSc= Subject key identifier: 93:78:8C:91:13:53:90:BC:FC:BA:FA:F2:27:FB:0B:BD:00:86:A2:8F Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Certificate serial: 094C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft Manifest number: 092C Signing time: Tue 18 Aug 2026 20:33:31 +0000 Manifest this update: Tue 18 Aug 2026 20:33:31 +0000 Manifest next update: Tue 25 Aug 2026 20:33:31 +0000 Files and hashes: 1: tY0p97gQfxWFtf_nDFAsbI9dMwI.crl (hash: oj5oB401IA53/xuILC8XMeT+a64QPMeetisatXGdbfA=) 2: 3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (hash: Vl3ljhabWGTlG6GqBHRNZlqYXeuSFP4BoWLikf0UCmo=) 3: C33EB0EC7C4211EB933D233EC4F9AE02.roa (hash: gl38JCfINuQj5r+ArpGOl2htLCM9Mgwqo9xw/lh130Q=) 4: F6F5BCCE53E711F084348F87C4F9AE02.roa (hash: 30DNpUpUJwy2It5xAnDm6pl6G00ZZjWgrPOcvF+5H9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2380 (0x94c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Validity Not Before: Aug 18 20:33:31 2026 GMT Not After : Aug 25 20:33:31 2026 GMT Subject: CN=6a84c19b-e9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:08:20:99:06:8a:3e:6e:92:0e:4e:3e:9b: d6:bf:f5:11:6b:0f:55:1a:43:9a:42:6c:7a:c3:f7: 40:be:fc:02:c7:13:1e:fe:0a:a5:a1:18:62:66:40: 18:35:e6:c4:61:9f:fd:bb:71:1f:0d:76:0e:37:d8: 66:f9:89:24:ff:cb:82:3a:7c:35:4b:ec:5b:85:01: 0b:39:83:35:5f:e7:7f:cb:14:66:09:b1:22:ed:09: df:24:f6:81:2c:63:7a:85:61:83:fa:55:fd:26:24: ef:60:98:9b:ec:9a:4b:35:88:f0:42:12:c8:33:bd: 96:ea:d6:a8:64:1c:4f:5c:09:6c:86:e4:92:c7:19: b6:50:39:b6:ab:2a:d3:37:94:c2:3a:4a:de:3f:94: 85:e5:21:73:4b:fb:e9:63:9f:ed:da:79:fc:2f:d0: 4e:19:8f:b5:00:dc:3f:df:c3:14:7a:04:23:0e:40: e3:9d:11:fe:56:24:7d:24:c8:f8:ce:0e:4a:2b:4b: bd:f9:23:80:ba:53:b2:e2:90:65:81:6a:87:8b:ce: fc:87:41:3e:68:19:ab:13:ea:86:1c:98:19:14:47: 9a:33:49:9b:8e:e2:7d:f2:6d:5f:62:8a:ca:6f:1f: af:eb:ea:e6:49:0f:a9:c8:8e:65:df:7e:69:81:0c: 14:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:78:8C:91:13:53:90:BC:FC:BA:FA:F2:27:FB:0B:BD:00:86:A2:8F X509v3 Authority Key Identifier: keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:37:e3:79:df:fb:f7:02:a8:3c:96:71:b6:d7:95:e4:b0:51: fa:d8:79:d7:33:66:94:8a:69:04:61:5d:39:cc:44:14:e8:81: 76:c9:e1:11:13:71:8c:d3:67:b4:80:74:a5:d9:a8:af:fc:7c: 2c:3b:5e:ff:53:12:2e:b0:42:81:12:6b:d8:ee:0c:bc:3c:4e: c1:67:38:5f:6f:e4:c9:4b:db:4f:df:3a:27:45:a3:d4:f3:c6: f6:33:c2:10:28:98:f1:25:d4:35:7a:d0:4d:3e:ea:b6:6d:9d: ce:b6:d3:d9:70:c5:42:38:a7:ab:de:fd:1f:48:80:e1:dc:a8: c9:8d:3b:87:3b:b9:40:d9:06:27:96:9a:ed:7f:7e:bf:4a:8f: 9f:74:18:e4:c3:ba:99:2f:65:ae:91:66:a7:4f:b1:c7:51:7f: 61:40:13:97:71:da:e9:07:e8:7e:68:f2:ef:1e:f8:24:96:de: a4:91:d5:37:c7:2c:82:05:1e:f4:0a:13:ae:6b:19:57:d6:df: b5:25:22:25:6b:ba:39:e3:36:a3:26:3a:26:3e:c7:40:5b:a0: 34:83:01:66:aa:ef:83:0e:9d:36:72:d7:3c:d4:1e:19:d4:f6: ab:f4:01:32:70:22:ed:4a:3a:08:17:e3:c2:60:cc:36:be:77: 8b:5b:07:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQTQxMTAvBgNVBAUTKEI1OEQyOUY3QjgxMDdGMTU4NUI1RkZFNzBDNTAyQzZD OEY1RDMzMDIwHhcNMjYwODE4MjAzMzMxWhcNMjYwODI1MjAzMzMxWjAYMRYwFAYD VQQDEw02YTg0YzE5Yi1lOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEAIIJkGij5ukg5OPpvWv/URaw9VGkOaQmx6w/dAvvwCxxMe/gqloRhiZkAY NebEYZ/9u3EfDXYON9hm+Ykk/8uCOnw1S+xbhQELOYM1X+d/yxRmCbEi7QnfJPaB LGN6hWGD+lX9JiTvYJib7JpLNYjwQhLIM72W6taoZBxPXAlshuSSxxm2UDm2qyrT N5TCOkreP5SF5SFzS/vpY5/t2nn8L9BOGY+1ANw/38MUegQjDkDjnRH+ViR9JMj4 zg5KK0u9+SOAulOy4pBlgWqHi878h0E+aBmrE+qGHJgZFEeaM0mbjuJ98m1fYorK bx+v6+rmSQ+pyI5l335pgQwU2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJN4jJET U5C8/Lr68if7C70AhqKPMB8GA1UdIwQYMBaAFLWNKfe4EH8VhbX/5wxQLGyPXTMC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NBNC8xNUY2OEI1Q0NG MTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4V0Z0Zl9uREZBc2JJOWRN d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RZMHA5N2dRZnhXRnRmX25ERkFzYkk5ZE13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NBNC8xNUY2OEI1Q0NGMTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4 V0Z0Zl9uREZBc2JJOWRNd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhDfjed/79wKoPJZxtteV5LBR+th51zNmlIppBGFdOcxEFOiBdsnhERNxjNNn tIB0pdmor/x8LDte/1MSLrBCgRJr2O4MvDxOwWc4X2/kyUvbT986J0Wj1PPG9jPC ECiY8SXUNXrQTT7qtm2dzrbT2XDFQjinq979H0iA4dyoyY07hzu5QNkGJ5aa7X9+ v0qPn3QY5MO6mS9lrpFmp0+xx1F/YUATl3Ha6Qfofmjy7x74JJbepJHVN8csggUe 9AoTrmsZV9bftSUiJWu6OeM2oyY6Jj7HQFugNIMBZqrvgw6dNnLXPNQeGdT2q/QB MnAi7Uo6CBfjwmDMNr53i1sHZw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:39 2026 by rpki-client