$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: SvKKj5ytNqsGSB8qfP2rh1sLi5YPTJEoCtrePLAIfKs= Subject key identifier: DC:13:D0:8F:E4:85:66:29:B9:C6:06:07:DE:2E:D7:EE:41:4D:E9:C2 Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1E1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1E06 Signing time: Tue 18 Aug 2026 16:12:04 +0000 Manifest this update: Tue 18 Aug 2026 16:12:03 +0000 Manifest next update: Tue 25 Aug 2026 16:12:03 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: TnN8cPQwv9ES9k5lqCxeADu601demVWW1sTsHUPQGiI=) 2: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: y589PiSSMhNrGOrnncCafxxVdSHTLvTbZSYrRDFCPDk=) 3: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: rD0K63hEtFRbmUFMwp16mvboZk+CtCmdJfPRvsaFveU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7707 (0x1e1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: Aug 18 16:12:03 2026 GMT Not After : Aug 25 16:12:03 2026 GMT Subject: CN=6a848454-d7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:1f:84:f3:99:87:85:6d:5a:78:e6:a6:46: 76:c1:31:c4:c9:89:2b:7f:11:42:4a:d8:0e:5d:63: 08:77:4b:3d:f8:23:57:13:15:d9:bf:09:ce:42:5d: 9b:98:69:e0:43:d1:e1:53:28:33:8f:77:0d:60:20: c4:d8:f5:50:ff:0a:a1:f5:2b:e6:b4:68:a1:71:fa: a0:cd:c0:a0:23:57:c1:ca:d3:d9:b9:78:7b:65:2e: 94:9f:3f:54:a1:fe:63:bd:98:43:01:8b:ea:07:f9: 37:33:2b:7c:b5:3e:89:b3:90:00:a8:a7:f9:77:6c: a5:33:ac:26:aa:ea:32:6d:13:a8:af:36:36:34:33: 02:20:21:96:39:ff:19:96:ba:a8:c6:99:8b:2c:5f: d2:3b:1a:31:e9:cf:45:a8:17:34:34:82:d7:a1:0f: a9:83:b7:fc:36:a6:31:44:68:f9:15:5f:5a:5d:b4: 70:b7:7e:27:8a:71:02:f1:8b:0e:1e:f4:49:9c:4c: 72:b8:fd:a9:7d:37:fb:61:9b:b2:96:6c:e4:4f:d9: 82:61:48:f8:7e:0c:0c:03:44:1a:75:93:d9:fe:b9: 1c:4d:2b:d3:bc:0f:08:0d:2d:ce:4d:5a:02:41:bf: 0a:ca:e8:df:5a:5d:b4:cd:ed:43:4e:29:7d:34:dd: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:13:D0:8F:E4:85:66:29:B9:C6:06:07:DE:2E:D7:EE:41:4D:E9:C2 X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d5:de:57:bb:ef:95:16:5e:ff:a6:e2:19:f7:51:19:c2:29: d5:72:fd:70:17:e2:8e:bb:3b:77:83:e3:95:21:7f:b1:de:33: a6:ea:18:c7:9e:90:50:42:ac:be:90:8e:15:fc:aa:f8:00:c3: 0d:2d:68:f5:93:46:5c:c9:45:3d:0f:7f:65:45:84:3b:0c:1b: eb:6a:37:a6:c8:d0:87:47:d9:7b:ca:11:f6:86:4f:02:88:06: 07:93:af:d5:95:79:00:f6:e2:69:8d:7d:c0:8b:85:26:ff:e3: 5c:38:59:4e:05:27:e0:62:2f:17:43:84:9a:cb:5a:73:25:9c: 84:4c:05:e6:0d:24:35:cd:0d:ca:f0:e3:3f:8d:df:a6:5e:22: a7:36:ae:dc:4b:68:62:2d:79:40:e6:3e:d4:14:22:10:c0:ef: 6d:8d:fe:46:dd:4f:36:be:be:8d:a9:9f:a6:04:65:ca:f5:cc: 1f:8f:25:e3:b7:44:6e:e5:a4:ea:92:40:fd:0b:de:b4:4c:28: 1c:8c:79:16:a6:db:5f:24:43:ca:ce:f5:02:33:fe:37:30:c6: 4a:f5:dc:3a:6c:67:75:98:2f:80:01:33:79:05:c2:6e:c4:1b: 52:c5:62:40:31:2f:58:af:cf:5f:2f:69:42:1a:92:5e:bf:b1: f5:1a:7b:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjYwODE4MTYxMjAzWhcNMjYwODI1MTYxMjAzWjAYMRYwFAYD VQQDEw02YTg0ODQ1NC1kN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20AfhPOZh4VtWnjmpkZ2wTHEyYkrfxFCStgOXWMId0s9+CNXExXZvwnOQl2b mGngQ9HhUygzj3cNYCDE2PVQ/wqh9SvmtGihcfqgzcCgI1fBytPZuXh7ZS6Unz9U of5jvZhDAYvqB/k3Myt8tT6Js5AAqKf5d2ylM6wmquoybROorzY2NDMCICGWOf8Z lrqoxpmLLF/SOxox6c9FqBc0NILXoQ+pg7f8NqYxRGj5FV9aXbRwt34ninEC8YsO HvRJnExyuP2pfTf7YZuylmzkT9mCYUj4fgwMA0QadZPZ/rkcTSvTvA8IDS3OTVoC Qb8KyujfWl20ze1DTil9NN2JFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwT0I/k hWYpucYGB94u1+5BTenCMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJNXeV7vvlRZe/6biGfdRGcIp1XL9cBfijrs7d4PjlSF/sd4zpuoYx56QUEKs vpCOFfyq+ADDDS1o9ZNGXMlFPQ9/ZUWEOwwb62o3psjQh0fZe8oR9oZPAogGB5Ov 1ZV5APbiaY19wIuFJv/jXDhZTgUn4GIvF0OEmstacyWchEwF5g0kNc0NyvDjP43f pl4ipzau3EtoYi15QOY+1BQiEMDvbY3+Rt1PNr6+jamfpgRlyvXMH48l47dEbuWk 6pJA/QvetEwoHIx5FqbbXyRDys71AjP+NzDGSvXcOmxndZgvgAEzeQXCbsQbUsVi QDEvWK/PXy9pQhqSXr+x9Rp7zg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:32 2026 by rpki-client