$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json) Hash identifier: dRPetuSMR2FZmpMXbeQItbRnGFMUqBZvpYL2eN47/8M= Subject key identifier: 04:B8:B5:52:CA:A1:E5:C2:E3:E6:C8:65:4D:D0:C7:7C:93:76:2D:C4 Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 0796 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft Manifest number: 0782 Signing time: Wed 26 Aug 2026 21:30:27 +0000 Manifest this update: Wed 26 Aug 2026 21:30:27 +0000 Manifest next update: Wed 02 Sep 2026 21:30:27 +0000 Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: 82CWzKCxQIxfg1D8pGHWL/jh9Vs33nn3cuNg+JONvh8=) 2: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: NXfieC6S74PlG+JtYRQQl5gMzeIDNhGSgnxY2WBkw18=) 3: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: JK6/e0PvYBa8kGFQgLjtSrCPCDpo6wNDkFljh8D9dzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 21:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1942 (0x796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: Aug 26 21:30:27 2026 GMT Not After : Sep 2 21:30:27 2026 GMT Subject: CN=6a8f5af3-b548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:40:64:f4:0f:5c:cf:f8:0c:06:23:ea:c6: ca:f0:5a:ac:2d:cc:c5:63:d5:6e:fd:74:8b:f4:2c: c8:10:c9:1e:ed:20:6c:54:4c:08:6e:d2:1f:33:d4: 5a:bc:79:96:fb:40:e7:34:e1:7f:0a:39:40:74:9e: 28:43:ef:23:20:bd:1f:58:c1:b5:57:ff:d7:f9:25: 79:07:f9:35:0a:30:3b:ac:df:41:9b:71:f3:9b:40: 4e:25:a3:36:27:33:42:99:a5:83:41:27:89:ab:86: 28:90:7d:c2:2d:70:9d:8c:cc:73:4f:42:89:c8:4b: 77:ff:64:2b:1f:03:5c:62:3f:e4:7c:f9:62:92:ca: 3d:06:79:9c:41:43:ac:b8:41:4b:7c:86:b1:24:9d: f8:ad:da:29:39:56:fa:1e:e8:c3:4d:c5:4d:ee:89: 3a:fd:ca:16:c0:0e:53:81:06:ed:22:60:bf:6a:ef: 0d:7d:77:3a:e9:b7:24:ae:e0:9d:db:23:9a:38:a0: 93:82:72:bb:af:f7:62:52:bc:35:3c:90:8b:40:87: c4:ff:10:38:80:ad:51:3f:e1:7a:20:64:7d:df:bd: ab:06:0d:e8:f8:77:ab:6b:71:85:b2:4a:53:63:de: 5c:63:a6:0e:21:cb:d6:a1:6d:c2:45:13:1d:21:7a: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B8:B5:52:CA:A1:E5:C2:E3:E6:C8:65:4D:D0:C7:7C:93:76:2D:C4 X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b2:4f:2a:fa:43:42:c0:08:0e:76:50:5f:7f:e1:e9:e5:f7: 35:84:22:df:30:ae:fb:30:c5:11:c4:b9:0f:35:3f:7a:f1:7f: 47:40:af:05:8d:04:ad:a4:95:60:cb:50:0a:97:aa:16:c8:3c: 3d:19:c6:f4:41:3a:81:1d:d0:e0:54:a9:a0:65:3b:a8:71:98: 43:0f:83:9e:1a:a7:9d:b5:7b:2d:81:bc:0b:51:2e:5c:d8:7e: a3:68:78:40:76:02:4c:c9:39:a4:24:c8:cb:17:12:51:7e:d8: 02:90:a4:1b:09:e5:2a:e9:57:a8:2b:b5:d7:7a:e2:76:84:cd: 12:55:35:05:a4:89:e8:46:fe:4a:5b:8f:0e:31:77:f3:af:5d: 66:e3:3c:94:c0:cb:9d:95:4f:c9:cd:82:bd:8a:59:91:55:ab: 6b:f2:f9:63:46:81:8b:9f:72:49:08:b0:2d:15:69:07:bb:97: 33:69:f7:97:3d:a9:58:49:d4:77:9a:3c:f9:a6:0e:e9:6b:ea: d6:c7:87:2a:63:9a:75:ad:02:aa:a9:a0:66:73:86:ad:20:b6: 20:a2:c6:d7:91:36:a4:f7:5f:ec:b4:5e:50:63:ee:75:89:cd: e1:40:97:c3:f9:de:fb:59:e1:a1:64:ee:58:b5:c9:dd:e6:5e: 1e:dc:a2:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjYwODI2MjEzMDI3WhcNMjYwOTAyMjEzMDI3WjAYMRYwFAYD VQQDEw02YThmNWFmMy1iNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qBAZPQPXM/4DAYj6sbK8FqsLczFY9Vu/XSL9CzIEMke7SBsVEwIbtIfM9Ra vHmW+0DnNOF/CjlAdJ4oQ+8jIL0fWMG1V//X+SV5B/k1CjA7rN9Bm3Hzm0BOJaM2 JzNCmaWDQSeJq4YokH3CLXCdjMxzT0KJyEt3/2QrHwNcYj/kfPlikso9BnmcQUOs uEFLfIaxJJ34rdopOVb6HujDTcVN7ok6/coWwA5TgQbtImC/au8NfXc66bckruCd 2yOaOKCTgnK7r/diUrw1PJCLQIfE/xA4gK1RP+F6IGR9372rBg3o+Hera3GFskpT Y95cY6YOIcvWoW3CRRMdIXo+eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAS4tVLK oeXC4+bIZU3Qx3yTdi3EMB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDc3Qi8xQzI1NjI3MDcyNTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05L anJoR1BUbFJ3aW8wV0Rlc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7JPKvpDQsAIDnZQX3/h6eX3NYQi3zCu+zDFEcS5DzU/evF/R0CvBY0EraSV YMtQCpeqFsg8PRnG9EE6gR3Q4FSpoGU7qHGYQw+DnhqnnbV7LYG8C1EuXNh+o2h4 QHYCTMk5pCTIyxcSUX7YApCkGwnlKulXqCu113ridoTNElU1BaSJ6Eb+SluPDjF3 869dZuM8lMDLnZVPyc2CvYpZkVWra/L5Y0aBi59ySQiwLRVpB7uXM2n3lz2pWEnU d5o8+aYO6Wvq1seHKmOada0CqqmgZnOGrSC2IKLG15E2pPdf7LReUGPudYnN4UCX w/ne+1nhoWTuWLXJ3eZeHtyiVg== -----END CERTIFICATE-----Generated at Thu Aug 27 07:09:24 2026 by rpki-client