$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft File: hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json) Hash identifier: SNELWt/Df1d1XOM2KrkuBEbjU6MiJAm9Czhw17r/K9o= Subject key identifier: 58:2A:F8:14:36:B2:99:09:4D:27:95:4D:89:18:14:5A:61:77:02:38 Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Certificate issuer: /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft Manifest number: 8A Signing time: Wed 19 Aug 2026 08:13:01 +0000 Manifest this update: Wed 19 Aug 2026 08:13:00 +0000 Manifest next update: Wed 26 Aug 2026 08:13:00 +0000 Files and hashes: 1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: BBfh6jFKzo88uNjpd47xzMTAvXJ6HrxmEeITSP6gxbA=) 2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Validity Not Before: Aug 19 08:13:00 2026 GMT Not After : Aug 26 08:13:00 2026 GMT Subject: CN=6a85658c-b0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:d7:2e:c1:ac:40:d2:9f:73:d9:e2:be:32: b9:30:96:64:33:5b:f1:13:4a:e3:ea:0c:76:60:99: 77:56:3c:9f:01:97:f6:a3:19:57:86:69:ed:b4:ae: d3:60:bd:c2:d2:88:60:dd:2a:af:e7:ac:6b:9a:9b: 75:a1:90:2f:54:72:b7:5d:51:54:1d:76:7f:0f:45: 0c:1e:2e:db:b2:0d:56:0c:9d:9f:fd:3b:df:a7:f3: a4:37:8a:26:e7:a0:43:9f:14:30:8c:1e:ee:30:66: b0:7e:fd:11:26:a5:55:53:83:58:6b:6a:77:e0:a7: a6:35:af:4a:c7:e8:40:d3:15:1e:c1:9a:ba:7d:d8: 8a:ae:d4:ea:41:11:7b:69:17:88:c5:89:ca:46:6a: 70:7d:5b:93:3e:d2:d2:d7:7a:7b:30:80:4f:36:dc: 18:dc:d1:0b:9d:6d:84:df:c1:f8:9f:3a:1c:27:5a: d5:84:fc:40:d2:55:76:5a:be:ad:5c:80:ca:78:a8: 3a:07:5c:81:48:db:2e:1d:4f:5c:cf:49:97:63:03: 2e:69:cc:f2:96:95:23:00:b1:fa:c5:b6:7a:f0:73: d7:7f:4d:de:9a:60:f5:f4:43:9a:ab:34:73:e8:50: f8:f0:39:8a:fd:d6:1f:ba:a5:ff:f7:2a:52:63:23: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:F8:14:36:B2:99:09:4D:27:95:4D:89:18:14:5A:61:77:02:38 X509v3 Authority Key Identifier: keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5b:cc:f5:0b:f0:d5:87:be:75:52:d9:3c:23:b3:95:39:bd: 71:37:6a:60:86:fe:03:36:26:96:8e:ca:4d:32:3e:ba:57:60: b8:b0:7d:95:5e:3c:c6:b1:86:01:b6:93:83:86:d7:2b:98:72: 33:05:c5:53:f4:44:e1:47:36:f1:8e:e0:51:7b:65:5f:76:b7: 5a:73:14:c3:3f:64:09:28:f3:9f:7a:14:96:07:2a:65:01:82: 5d:e4:82:0b:82:80:14:48:b1:05:25:ab:13:13:8c:03:c7:32: c0:00:14:93:a7:ba:2b:d3:d4:b5:99:de:15:e9:6e:23:f5:1c: 48:af:32:99:49:20:7e:b0:d7:cc:8e:47:f8:b0:c3:f3:aa:5e: 85:ce:4e:91:ad:25:12:3b:bf:04:f4:c7:a9:15:b3:41:0a:aa: d7:5c:03:4f:61:6a:b6:7b:07:00:7a:39:26:73:bc:89:06:fb: 69:ed:9c:d0:14:93:fb:3a:40:14:82:72:14:9d:47:15:23:d0: 6f:35:07:79:0c:82:a6:b9:b7:c8:ae:d3:28:16:18:5e:7b:7f: 38:51:75:b5:3e:fc:89:fd:35:be:c2:de:34:0e:74:d9:6d:e8: 2c:7b:8f:d2:ac:6e:39:4e:7a:36:3c:f3:f0:07:14:ce:ed:d0: 0e:e6:57:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyRTExMTAvBgNVBAUTKDg1QjdFREI1QTY4NEJFM0Q5QTYyOTc1OTkwQTcxRDk5 OERFRjUxOEIwHhcNMjYwODE5MDgxMzAwWhcNMjYwODI2MDgxMzAwWjAYMRYwFAYD VQQDEw02YTg1NjU4Yy1iMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvnXLsGsQNKfc9nivjK5MJZkM1vxE0rj6gx2YJl3VjyfAZf2oxlXhmnttK7T YL3C0ohg3Sqv56xrmpt1oZAvVHK3XVFUHXZ/D0UMHi7bsg1WDJ2f/Tvfp/OkN4om 56BDnxQwjB7uMGawfv0RJqVVU4NYa2p34KemNa9Kx+hA0xUewZq6fdiKrtTqQRF7 aReIxYnKRmpwfVuTPtLS13p7MIBPNtwY3NELnW2E38H4nzocJ1rVhPxA0lV2Wr6t XIDKeKg6B1yBSNsuHU9cz0mXYwMuaczylpUjALH6xbZ68HPXf03emmD19EOaqzRz 6FD48DmK/dYfuqX/9ypSYyPsNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgq+BQ2 spkJTSeVTYkYFFphdwI4MB8GA1UdIwQYMBaAFIW37bWmhL49mmKXWZCnHZmN71GL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJFMS8wQUJCMzU2OEM4 RTYxMUYwQUEwQzVCNDdDNEY5QUUwMi9oYmZ0dGFhRXZqMmFZcGRaa0tjZG1ZM3ZV WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiZnR0YWFFdmoyYVlwZFprS2NkbVkzdlVZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJFMS8wQUJCMzU2OEM4RTYxMUYwQUEwQzVCNDdDNEY5QUUwMi9oYmZ0dGFhRXZq MmFZcGRaa0tjZG1ZM3ZVWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOlvM9Qvw1Ye+dVLZPCOzlTm9cTdqYIb+AzYmlo7KTTI+uldguLB9lV48xrGG AbaTg4bXK5hyMwXFU/RE4Uc28Y7gUXtlX3a3WnMUwz9kCSjzn3oUlgcqZQGCXeSC C4KAFEixBSWrExOMA8cywAAUk6e6K9PUtZneFeluI/UcSK8ymUkgfrDXzI5H+LDD 86pehc5Oka0lEju/BPTHqRWzQQqq11wDT2FqtnsHAHo5JnO8iQb7ae2c0BST+zpA FIJyFJ1HFSPQbzUHeQyCprm3yK7TKBYYXnt/OFF1tT78if01vsLeNA502W3oLHuP 0qxuOU56Njzz8AcUzu3QDuZXdQ== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:49 2026 by rpki-client