$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: opRtHf421P3eCFQqgw+fvgyDzulikI0i4MJQe836WUY= Subject key identifier: AA:DE:FB:D7:C6:07:F8:24:8D:96:A4:B4:6C:F1:01:E9:1C:8B:E2:88 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 097A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 0966 Signing time: Thu 20 Aug 2026 20:02:38 +0000 Manifest this update: Thu 20 Aug 2026 20:02:37 +0000 Manifest next update: Thu 27 Aug 2026 20:02:37 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: GHCWEr2Mp2FQl79KpWoeMXG6clI2hJLEVO3MFiLsrng=) 2: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: OerNxvvq3phHMkXzM6uc+sc+f5PWAHWyBJri0cIQ79g=) 3: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: 00gQhpdm0DGJO/AQ/2cxeV1F7zOqgqX/nHAnGUfY5fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2426 (0x97a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Aug 20 20:02:37 2026 GMT Not After : Aug 27 20:02:37 2026 GMT Subject: CN=6a875d5e-2b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8c:00:88:66:49:68:b3:ec:49:dc:ca:e3:c8: e8:29:5a:ab:27:dc:60:5e:06:41:b5:e1:86:a8:3e: 5b:b7:97:d9:d9:5e:3c:67:b3:91:b8:e7:18:d9:f3: 20:99:d9:44:38:2a:50:93:c5:ae:08:e8:c4:85:7d: 6b:23:42:06:c2:1c:e0:c9:97:61:75:2e:e4:a7:4a: fb:42:e8:5a:30:b3:05:60:49:83:e4:de:1e:43:1b: 69:7d:87:eb:a4:d5:15:6a:8c:47:87:73:69:c4:e2: d1:d2:1e:22:51:c0:c9:8d:29:f9:d1:4e:53:35:da: 54:89:f7:97:68:28:d4:a9:ae:cb:e0:13:fa:35:cb: 0d:cd:18:52:69:78:84:64:93:43:52:bb:46:14:88: 9b:67:76:7d:25:63:5b:54:37:ed:66:4b:e7:3e:60: 78:cc:79:f2:83:9f:02:5a:e9:f9:9f:ac:33:55:6b: bb:fa:ca:f3:c9:1e:6f:75:f4:9c:73:e3:51:d9:83: 6b:20:23:ed:e6:84:66:30:9c:70:f8:ae:95:c8:f6: 1e:36:c3:a0:7a:44:99:ca:5c:23:37:fb:0e:66:92: 8e:c7:07:47:23:fe:72:ac:61:b3:fd:5c:47:fa:a0: 6f:bc:2f:c1:01:52:1a:96:89:f3:c0:08:e3:35:64: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DE:FB:D7:C6:07:F8:24:8D:96:A4:B4:6C:F1:01:E9:1C:8B:E2:88 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d1:c9:c5:f5:dd:0e:b6:a7:c6:83:a8:dc:51:46:bf:33:d2: 75:57:41:31:5a:a2:28:42:d4:36:ae:85:d4:67:68:4f:12:af: 98:4b:2c:a6:fe:0b:0e:81:09:6f:38:e6:35:f0:e7:6b:da:6a: 31:97:3b:37:6d:e4:9a:61:71:96:00:07:2f:82:98:3a:fe:12: bc:8e:61:6e:fd:a0:d7:98:a5:b6:be:3b:59:81:dd:06:af:e6: 6e:d8:ce:15:9c:be:38:63:3c:35:0e:cb:b7:70:3d:33:2e:da: a3:6a:eb:5f:b7:29:7c:28:52:41:3b:da:e5:70:33:82:70:cc: f3:45:02:d2:dc:9b:51:9d:60:b2:80:c3:05:bb:27:43:e5:31: 09:c4:05:a3:da:cb:8b:cb:c4:5c:4f:00:05:5a:27:7d:a2:08: b3:74:68:26:e2:4c:93:f0:d4:ad:ff:40:c2:2c:10:5b:da:1c: 90:1a:74:a6:15:65:49:8b:74:3a:c3:13:a2:7b:1f:8c:bc:4e: c5:d3:e9:65:c2:eb:69:58:f0:07:e1:e2:29:3a:96:1a:88:ca: a5:09:54:23:90:7f:f1:d0:c8:03:29:d7:a2:cf:7a:c2:c8:2a: 38:9e:35:25:f4:e6:f9:91:bd:09:91:f6:43:da:1d:8b:d7:e5: b2:40:a0:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjYwODIwMjAwMjM3WhcNMjYwODI3MjAwMjM3WjAYMRYwFAYD VQQDEw02YTg3NWQ1ZS0yYjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34wAiGZJaLPsSdzK48joKVqrJ9xgXgZBteGGqD5bt5fZ2V48Z7ORuOcY2fMg mdlEOCpQk8WuCOjEhX1rI0IGwhzgyZdhdS7kp0r7QuhaMLMFYEmD5N4eQxtpfYfr pNUVaoxHh3NpxOLR0h4iUcDJjSn50U5TNdpUifeXaCjUqa7L4BP6NcsNzRhSaXiE ZJNDUrtGFIibZ3Z9JWNbVDftZkvnPmB4zHnyg58CWun5n6wzVWu7+srzyR5vdfSc c+NR2YNrICPt5oRmMJxw+K6VyPYeNsOgekSZylwjN/sOZpKOxwdHI/5yrGGz/VxH +qBvvC/BAVIalonzwAjjNWRyeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKre+9fG B/gkjZaktGzxAekci+KIMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYtHJxfXdDranxoOo3FFGvzPSdVdBMVqiKELUNq6F1GdoTxKvmEsspv4LDoEJ bzjmNfDna9pqMZc7N23kmmFxlgAHL4KYOv4SvI5hbv2g15iltr47WYHdBq/mbtjO FZy+OGM8NQ7Lt3A9My7ao2rrX7cpfChSQTva5XAzgnDM80UC0tybUZ1gsoDDBbsn Q+UxCcQFo9rLi8vEXE8ABVonfaIIs3RoJuJMk/DUrf9AwiwQW9ockBp0phVlSYt0 OsMTonsfjLxOxdPpZcLraVjwB+HiKTqWGojKpQlUI5B/8dDIAynXos96wsgqOJ41 JfTm+ZG9CZH2Q9odi9flskCgdg== -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:59 2026 by rpki-client