$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft File: T8X9jSdo5Al3QhkY-xOcM12_g4A.mft (raw, json) Hash identifier: VY7tZ1n+YZfVH5YHMreGt/vaZwXQ6JVJStF7+EBZrdo= Subject key identifier: D8:AA:A0:55:65:8C:BA:62:68:A2:A8:5A:3B:42:15:6D:8A:DA:DF:8E Authority key identifier: 4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80 Certificate issuer: /CN=A91B539C/serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft Manifest number: 25 Signing time: Tue 25 Aug 2026 08:43:54 +0000 Manifest this update: Tue 25 Aug 2026 08:43:54 +0000 Manifest next update: Tue 01 Sep 2026 08:43:54 +0000 Files and hashes: 1: T8X9jSdo5Al3QhkY-xOcM12_g4A.crl (hash: 7iSxumsMY5vpWJ26zmF8HnlIrLwi4rQ3fGPSsTLkm6g=) 2: DB14F0D8688611F19B84FAD56C47A888.roa (hash: 74bk58//l9arlYq1z7u+T+hfveHOzEv+5Ygge/tEw9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B539C, serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380 Validity Not Before: Aug 25 08:43:54 2026 GMT Not After : Sep 1 08:43:54 2026 GMT Subject: CN=6a8d55ca-c742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:be:92:bc:24:80:da:59:23:2b:f0:36:e1: 6f:a2:28:94:7e:87:a4:bb:75:e2:2a:23:a5:0a:27: 59:1c:65:a7:51:01:25:9d:d7:83:a6:ca:4a:3c:12: 26:ee:bb:b2:9d:66:30:9d:3d:87:cd:5a:31:de:6e: e9:93:32:3d:f8:a1:27:9e:f5:b3:11:3d:98:55:c5: 72:66:8d:8d:53:e1:56:0a:a4:71:24:fb:6a:0c:97: 45:56:3b:de:19:bb:2f:99:92:ff:9f:5f:5e:36:fe: 1b:8e:d4:d3:81:28:64:f3:97:83:e6:0a:9f:e4:6e: 4b:3a:72:96:40:24:c4:c9:a2:2f:97:d6:ec:5c:04: 07:15:45:9a:52:f0:5b:35:a9:09:56:8f:4d:ce:30: 91:d5:42:47:ac:2a:82:1a:33:b5:10:86:67:9d:57: d8:9f:86:b3:fa:5f:18:9f:1d:f4:00:17:ca:e3:bb: 0c:18:97:41:62:72:51:d1:23:3f:3a:66:9f:36:50: 40:fb:66:c5:5e:f5:36:17:e6:be:50:eb:be:51:b2: 32:30:4a:f2:86:70:91:d5:e5:66:ab:2a:48:e8:0d: a9:c8:8c:9c:cd:cb:24:82:1f:ea:88:42:05:06:f2: bc:7a:7b:8a:5d:8b:68:2f:27:7e:65:d2:ce:30:df: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AA:A0:55:65:8C:BA:62:68:A2:A8:5A:3B:42:15:6D:8A:DA:DF:8E X509v3 Authority Key Identifier: keyid:4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8e:6f:50:c4:76:27:76:bc:f2:97:d0:f4:4e:36:39:fe:b5: 32:3a:8d:19:d1:e7:d2:16:93:d3:60:a0:8d:04:01:76:a9:45: 4c:15:31:a5:d8:03:7f:5f:53:f6:5c:ba:a1:a6:57:3f:b9:ea: 3a:4d:5c:99:bd:b2:bc:d2:d2:07:3e:b9:e2:2b:f8:ab:97:46: 0d:ee:3a:35:a9:4d:4c:d6:89:59:c7:de:12:45:8b:ab:77:e4: cd:f0:ca:cd:e5:22:f3:9d:24:18:c5:04:de:8b:34:19:20:64: d4:bf:b3:bd:b3:14:7b:2b:64:79:25:0f:e9:4b:dd:e9:e2:4a: 63:ea:8a:1a:0c:a7:37:1b:64:db:cb:49:b5:01:15:90:06:36: f2:de:3c:2b:37:ac:c7:67:a4:9c:eb:a7:fd:60:30:65:9a:2c: ed:80:b1:d3:b4:f8:50:45:df:6b:f4:73:27:3e:0f:8b:85:d5: b8:ef:c8:14:7a:89:e5:2c:f2:b1:81:8a:96:ef:18:09:cc:db: 9b:b5:d1:7d:61:61:32:85:53:03:1f:3f:47:ba:d9:c3:ad:d2: 1c:3b:7f:7b:7f:7c:d8:48:37:a9:93:13:09:bf:9b:b7:39:19: 5c:4c:81:76:ca:d3:b7:6d:69:2d:98:10:ab:cb:98:21:32:e4: 45:ad:91:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTM5QzExMC8GA1UEBRMoNEZDNUZEOEQyNzY4RTQwOTc3NDIxOTE4RkIxMzlDMzM1 REJGODM4MDAeFw0yNjA4MjUwODQzNTRaFw0yNjA5MDEwODQzNTRaMBgxFjAUBgNV BAMTDTZhOGQ1NWNhLWM3NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrNb6SvCSA2lkjK/A24W+iKJR+h6S7deIqI6UKJ1kcZadRASWd14Omyko8Eibu u7KdZjCdPYfNWjHebumTMj34oSee9bMRPZhVxXJmjY1T4VYKpHEk+2oMl0VWO94Z uy+Zkv+fX142/huO1NOBKGTzl4PmCp/kbks6cpZAJMTJoi+X1uxcBAcVRZpS8Fs1 qQlWj03OMJHVQkesKoIaM7UQhmedV9ifhrP6XxifHfQAF8rjuwwYl0FiclHRIz86 Zp82UED7ZsVe9TYX5r5Q675RsjIwSvKGcJHV5WarKkjoDanIjJzNyySCH+qIQgUG 8rx6e4pdi2gvJ35l0s4w3x/ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2KqgVWWM umJooqhaO0IVbYra344wHwYDVR0jBBgwFoAUT8X9jSdo5Al3QhkY+xOcM12/g4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1MzlDLzYzQzhFNTUyNjg4 NjExRjFBOUREMzBDRTZDNDdBODg4L1Q4WDlqU2RvNUFsM1Foa1kteE9jTTEyX2c0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVDhYOWpTZG81QWwzUWhrWS14T2NNMTJfZzRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 MzlDLzYzQzhFNTUyNjg4NjExRjFBOUREMzBDRTZDNDdBODg4L1Q4WDlqU2RvNUFs M1Foa1kteE9jTTEyX2c0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCOjm9QxHYndrzyl9D0TjY5/rUyOo0Z0efSFpPTYKCNBAF2qUVMFTGl2AN/X1P2 XLqhplc/ueo6TVyZvbK80tIHPrniK/irl0YN7jo1qU1M1olZx94SRYurd+TN8MrN 5SLznSQYxQTeizQZIGTUv7O9sxR7K2R5JQ/pS93p4kpj6ooaDKc3G2Tby0m1ARWQ Bjby3jwrN6zHZ6Sc66f9YDBlmiztgLHTtPhQRd9r9HMnPg+LhdW478gUeonlLPKx gYqW7xgJzNubtdF9YWEyhVMDHz9HutnDrdIcO397f3zYSDepkxMJv5u3ORlcTIF2 ytO3bWktmBCry5ghMuRFrZFo -----END CERTIFICATE-----Generated at Thu Aug 27 06:21:43 2026 by rpki-client