$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: IwLUwmUoaExO4zl7y/yZmAKaJorgEczt/McXnuwLm6w= Subject key identifier: 0A:08:F2:82:53:B1:68:05:55:CE:FC:E1:A5:35:1D:C0:B7:89:0D:31 Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0C31 Signing time: Wed 26 Aug 2026 18:44:16 +0000 Manifest this update: Wed 26 Aug 2026 18:44:16 +0000 Manifest next update: Wed 02 Sep 2026 18:44:16 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: x3HgfY4RFid79V71RIgRF3jLy+ZW8Io0EQbU39X5CS8=) 2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: ZdWgxsTDmp2SCgpKV/pUzjdMnUTtasFIwHsMjvPLzoQ=) 3: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: qP73CAez9BA/Kxf0LXcrxOa4cBuTk6ek4TGHHpeWEII=) 4: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kq7sx+cXw+m9S0qiyAa+VcKr/WKvuChbXwIbeJRy3rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 18:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Aug 26 18:44:16 2026 GMT Not After : Sep 2 18:44:16 2026 GMT Subject: CN=6a8f3400-b1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:53:0b:64:10:9d:db:7e:24:23:67:8f:8a: 12:3c:8f:83:31:d4:e7:ec:96:93:66:b8:99:b5:5f: aa:69:c5:37:56:9c:3c:22:22:3f:00:52:0e:89:86: 64:33:12:5c:fa:2c:94:3a:9f:e4:bb:57:18:31:b0: af:a7:05:2d:3e:05:98:9c:92:6d:1f:ab:c8:83:2c: 6a:c1:2a:1c:c8:34:3c:4f:66:67:97:e0:c1:0b:c7: e1:10:73:a3:ae:80:15:37:41:27:aa:ca:a1:27:06: f8:c7:1b:18:b7:4b:6a:f5:98:e1:cc:44:c6:e7:87: 49:ad:53:e6:47:55:56:ab:3d:d6:9b:08:32:c8:12: 59:7c:15:14:7b:57:bb:96:89:62:5d:46:8a:89:bc: 63:4f:c6:6e:4c:08:ca:49:47:58:ef:1d:6a:c7:64: 1b:8d:4a:53:cd:52:3b:29:61:0d:a2:75:83:f3:8e: c6:38:b0:83:d3:1f:22:7b:90:3c:dd:39:2f:17:f3: 30:50:4e:8d:c3:d5:63:c0:4d:a6:33:c6:7b:12:8f: 88:bc:5d:4b:6f:2d:14:c7:30:32:2f:e2:77:a8:64: 58:df:00:b4:a3:75:a9:38:a4:89:c8:59:13:7c:cb: 2f:0a:96:07:84:a1:1c:bb:6f:8a:bf:8d:59:55:ff: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:08:F2:82:53:B1:68:05:55:CE:FC:E1:A5:35:1D:C0:B7:89:0D:31 X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b7:52:a1:d6:fb:22:77:4d:78:0e:79:ca:b0:cd:d7:57:02: bd:f9:d9:3d:f2:83:4d:8c:39:92:be:e4:51:2e:0a:7b:5d:a2: 15:39:92:34:69:63:40:f3:64:45:8e:a9:37:04:5d:9d:87:5a: 66:60:b2:e5:73:f5:d9:e9:4c:cd:59:64:70:5a:00:45:04:a6: 46:25:39:e2:f8:59:23:d4:e3:b2:cc:49:21:6b:6b:e7:5c:3c: 22:34:c8:5c:e4:af:65:ae:a4:3d:42:93:40:1f:60:6f:a5:c4: 83:76:7e:50:d6:bf:9a:3f:3c:4d:9f:a2:28:d9:32:93:58:68: 4f:0c:fa:c5:1f:1d:f8:18:59:e4:24:0e:7b:6f:65:a4:84:f6: fe:3a:5f:0b:1d:20:a0:7c:df:ef:58:de:df:82:22:fb:ea:94: 21:7a:9d:b7:82:4f:63:7c:09:3c:ee:b8:58:f0:d7:ae:03:6c: c7:99:56:b1:85:31:05:ec:cc:de:97:72:a1:e1:77:a4:4b:fb: f9:a2:be:29:63:a0:ee:b4:15:e1:2c:43:42:27:c2:52:d0:74: a8:ea:d1:3f:f0:5f:8f:dd:23:bf:3c:c4:79:3e:7f:1b:48:10: 23:b0:7f:a5:2b:c5:da:60:a0:b3:b2:45:08:83:e2:fd:c8:bd: 97:62:7d:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjYwODI2MTg0NDE2WhcNMjYwOTAyMTg0NDE2WjAYMRYwFAYD VQQDEw02YThmMzQwMC1iMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyBTC2QQndt+JCNnj4oSPI+DMdTn7JaTZriZtV+qacU3Vpw8IiI/AFIOiYZk MxJc+iyUOp/ku1cYMbCvpwUtPgWYnJJtH6vIgyxqwSocyDQ8T2Znl+DBC8fhEHOj roAVN0EnqsqhJwb4xxsYt0tq9ZjhzETG54dJrVPmR1VWqz3WmwgyyBJZfBUUe1e7 loliXUaKibxjT8ZuTAjKSUdY7x1qx2QbjUpTzVI7KWENonWD847GOLCD0x8ie5A8 3TkvF/MwUE6Nw9VjwE2mM8Z7Eo+IvF1Lby0UxzAyL+J3qGRY3wC0o3WpOKSJyFkT fMsvCpYHhKEcu2+Kv41ZVf/UiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoI8oJT sWgFVc784aU1HcC3iQ0xMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMbdSodb7IndNeA55yrDN11cCvfnZPfKDTYw5kr7kUS4Ke12iFTmSNGljQPNk RY6pNwRdnYdaZmCy5XP12elMzVlkcFoARQSmRiU54vhZI9TjssxJIWtr51w8IjTI XOSvZa6kPUKTQB9gb6XEg3Z+UNa/mj88TZ+iKNkyk1hoTwz6xR8d+BhZ5CQOe29l pIT2/jpfCx0goHzf71je34Ii++qUIXqdt4JPY3wJPO64WPDXrgNsx5lWsYUxBezM 3pdyoeF3pEv7+aK+KWOg7rQV4SxDQifCUtB0qOrRP/Bfj90jvzzEeT5/G0gQI7B/ pSvF2mCgs7JFCIPi/ci9l2J9eQ== -----END CERTIFICATE-----Generated at Thu Aug 27 00:04:05 2026 by rpki-client