$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json) Hash identifier: VemoBK4alYulM9h26nqTe/VQEIuEGASnGzju+DusOlw= Subject key identifier: CB:82:C8:3E:B9:F8:5D:97:9C:25:C1:BE:C6:9A:17:28:F0:87:15:6E Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Certificate serial: 0786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft Manifest number: 076C Signing time: Mon 24 Aug 2026 21:36:17 +0000 Manifest this update: Mon 24 Aug 2026 21:36:16 +0000 Manifest next update: Mon 31 Aug 2026 21:36:16 +0000 Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: ws5W31ajhYNSg9rZip7kpwvJ2ivkyEi2ji+lz6QNHxc=) 2: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=) 3: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=) 4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 21:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Validity Not Before: Aug 24 21:36:16 2026 GMT Not After : Aug 31 21:36:16 2026 GMT Subject: CN=6a8cb951-75eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9c:6d:00:7b:f1:7e:cd:55:a0:7d:d4:03:f6: f0:e7:29:6f:d6:90:e7:04:89:8f:96:02:6a:30:9d: 3f:73:3b:0a:e8:d5:e9:9f:79:2b:ed:ea:df:2b:8b: 7e:da:5a:ad:de:d3:d2:21:f8:91:51:bd:ff:a1:6b: 57:19:69:5d:60:48:ac:d2:d8:14:a7:2b:9e:7e:4e: f6:54:1f:6f:6a:d2:95:be:64:b1:93:10:80:29:03: 70:79:80:dd:84:c7:b2:e0:76:e4:34:f3:39:80:09: 74:72:9b:b1:0f:f5:ba:e4:5e:48:14:f6:81:68:d4: a7:38:bc:39:53:c4:7f:a0:ce:05:a5:0e:fa:f0:b0: 2d:5b:f1:7c:dc:5e:29:3d:d6:4f:ca:b4:81:38:6a: b2:19:8d:8e:0b:5a:c1:4f:93:4f:e2:87:0d:f2:d3: 6f:f0:7a:94:bb:e8:6b:c2:e8:ee:a5:20:93:96:cb: 21:ad:39:2a:bb:07:bc:af:64:ec:9b:e3:1d:40:2d: e7:73:4a:a8:e1:ab:44:fa:23:58:e8:1d:35:83:20: 91:ae:81:a0:eb:55:65:15:d7:09:37:34:e1:fe:4d: 73:a7:36:0c:6b:7c:a5:93:4f:6b:94:c2:ff:e8:f0: 6a:c9:d7:20:c1:bd:2c:0c:20:44:a4:66:0d:6e:d9: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:C8:3E:B9:F8:5D:97:9C:25:C1:BE:C6:9A:17:28:F0:87:15:6E X509v3 Authority Key Identifier: keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:71:cb:5e:16:08:e5:c2:4f:93:79:2f:25:61:40:fb:03:96: eb:36:04:33:b8:c9:8b:6e:c1:4d:b6:ca:be:d0:91:6e:10:dc: 83:28:6b:ab:0d:b6:e0:e1:84:ff:1b:82:a6:6b:f5:10:ba:ac: b1:4b:77:6c:b6:eb:ff:99:94:29:88:fb:5d:59:01:5c:eb:6c: bc:86:1f:3f:01:fc:85:00:5d:11:f9:5b:0b:f5:3f:70:1b:91: 83:e6:e9:6d:81:30:b8:c1:f5:d1:ae:f1:be:05:40:81:c6:b2: 72:9b:c4:34:31:1d:d8:90:15:a5:04:bc:2a:d7:92:8f:f8:08: 72:3c:58:1a:7f:67:3d:03:65:a8:45:57:e4:e7:3b:a1:83:9c: b7:31:d2:f8:8f:e6:87:d2:54:f5:d3:ac:31:52:1c:0d:d8:df: 2a:7b:db:fb:be:e3:1a:ef:46:5d:f5:2e:1c:9c:cc:e7:97:0a: fc:1e:90:22:b3:28:5a:02:e2:3b:af:6a:d2:c5:99:85:45:c4: ad:7d:b6:f4:44:72:49:d2:9c:e2:ea:86:ad:69:8c:ba:fc:b9: 7b:70:a7:f9:d0:86:58:d7:84:6a:8d:52:24:b9:f7:18:7c:66: 0c:72:12:84:9b:2d:04:c3:9e:a5:61:32:cf:29:62:97:3f:a6: db:32:95:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1RTYxMTAvBgNVBAUTKDg4NzgyRjgzMUYzNjlFOTZGOTc5QTI1ODVDRjI3M0M5 MTZDN0I0RkQwHhcNMjYwODI0MjEzNjE2WhcNMjYwODMxMjEzNjE2WjAYMRYwFAYD VQQDEw02YThjYjk1MS03NWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5xtAHvxfs1VoH3UA/bw5ylv1pDnBImPlgJqMJ0/czsK6NXpn3kr7erfK4t+ 2lqt3tPSIfiRUb3/oWtXGWldYEis0tgUpyuefk72VB9vatKVvmSxkxCAKQNweYDd hMey4HbkNPM5gAl0cpuxD/W65F5IFPaBaNSnOLw5U8R/oM4FpQ768LAtW/F83F4p PdZPyrSBOGqyGY2OC1rBT5NP4ocN8tNv8HqUu+hrwujupSCTlsshrTkquwe8r2Ts m+MdQC3nc0qo4atE+iNY6B01gyCRroGg61VlFdcJNzTh/k1zpzYMa3ylk09rlML/ 6PBqydcgwb0sDCBEpGYNbtni/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuCyD65 +F2XnCXBvsaaFyjwhxVuMB8GA1UdIwQYMBaAFIh4L4MfNp6W+XmiWFzyc8kWx7T9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVFNi84N0QxRUQwNjdB ODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5wYjVlYUpZWFBKenlSYkh0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lIZ3ZneDgybnBiNWVhSllYUEp6eVJiSHRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVFNi84N0QxRUQwNjdBODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5w YjVlYUpZWFBKenlSYkh0UDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU3HLXhYI5cJPk3kvJWFA+wOW6zYEM7jJi27BTbbKvtCRbhDcgyhrqw224OGE /xuCpmv1ELqssUt3bLbr/5mUKYj7XVkBXOtsvIYfPwH8hQBdEflbC/U/cBuRg+bp bYEwuMH10a7xvgVAgcaycpvENDEd2JAVpQS8KteSj/gIcjxYGn9nPQNlqEVX5Oc7 oYOctzHS+I/mh9JU9dOsMVIcDdjfKnvb+77jGu9GXfUuHJzM55cK/B6QIrMoWgLi O69q0sWZhUXErX229ERySdKc4uqGrWmMuvy5e3Cn+dCGWNeEao1SJLn3GHxmDHIS hJstBMOepWEyzylilz+m2zKV9A== -----END CERTIFICATE-----Generated at Wed Aug 26 22:14:19 2026 by rpki-client