$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft File: I58TWYV0hKnEkCCp2sIKlBl9qw8.mft (raw, json) Hash identifier: dnfE7GohRJoDWfAKLa/TZKscs14yR7SQ+8fcNXUI4sg= Subject key identifier: 42:EA:CD:EE:BA:C9:6E:7E:44:76:1D:C2:EE:2B:89:E2:6C:20:3D:E5 Authority key identifier: 23:9F:13:59:85:74:84:A9:C4:90:20:A9:DA:C2:0A:94:19:7D:AB:0F Certificate issuer: /CN=A91B67D6/serialNumber=239F1359857484A9C49020A9DAC20A94197DAB0F Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I58TWYV0hKnEkCCp2sIKlBl9qw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft Manifest number: 15 Signing time: Tue 25 Aug 2026 08:54:35 +0000 Manifest this update: Tue 25 Aug 2026 08:54:34 +0000 Manifest next update: Tue 01 Sep 2026 08:54:34 +0000 Files and hashes: 1: I58TWYV0hKnEkCCp2sIKlBl9qw8.crl (hash: GmpScUopFUnhq3ZjPiMJ+X2F1KMzoTthYdsF8jjDitg=) 2: 02EDD61E83C711F189BAF24284A30FBC.roa (hash: 3F8WyCXReOkeErmDsnDtVe+2KoBuJVIO2yNSIG3UaX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.crl rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I58TWYV0hKnEkCCp2sIKlBl9qw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D6, serialNumber=239F1359857484A9C49020A9DAC20A94197DAB0F Validity Not Before: Aug 25 08:54:34 2026 GMT Not After : Sep 1 08:54:34 2026 GMT Subject: CN=6a8d584a-e7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b0:ba:e9:a5:3a:c8:d9:05:dd:2f:46:05:5e: aa:63:c9:0d:07:00:cb:cd:d5:30:7e:f9:5d:83:cd: 11:2e:98:2b:51:ab:b3:c9:0d:c4:1e:32:5f:ec:28: 59:f7:8b:ac:b8:7b:ab:1c:d9:92:6f:0b:db:2d:54: de:72:01:cb:1d:4c:a9:64:9f:a0:a6:70:56:03:c1: 59:94:ff:16:99:a2:67:21:db:70:f4:59:42:39:61: 5d:17:8a:3d:a6:35:a3:ba:0e:95:63:17:de:b4:a5: b9:c2:1b:9d:d8:ad:d5:a6:16:3d:3d:c0:50:85:05: 4b:5e:3b:97:85:31:15:f5:df:14:63:a1:88:8a:1f: 05:31:e4:f2:11:fb:f8:8e:c7:2a:20:4d:65:4b:50: fb:e1:fd:79:88:64:c0:52:e5:1f:bf:99:ef:85:df: 40:46:6f:f8:9f:19:1f:1b:70:25:2a:d6:49:36:04: ea:20:3e:f7:46:1d:38:dc:b8:f4:27:4e:9e:ee:9c: 9d:0d:1e:3d:cc:84:30:d3:b1:e7:e2:90:e2:98:8d: bc:74:04:02:38:c5:ed:1c:e0:1e:59:ad:66:d1:90: 4b:96:dc:7c:5c:3e:8d:ed:78:99:9d:85:48:56:74: ca:62:73:35:bb:72:29:46:ab:37:32:35:23:4e:e3: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EA:CD:EE:BA:C9:6E:7E:44:76:1D:C2:EE:2B:89:E2:6C:20:3D:E5 X509v3 Authority Key Identifier: keyid:23:9F:13:59:85:74:84:A9:C4:90:20:A9:DA:C2:0A:94:19:7D:AB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I58TWYV0hKnEkCCp2sIKlBl9qw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D6/77A7027C83C311F1BC885B3F83A30FBC/I58TWYV0hKnEkCCp2sIKlBl9qw8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a3:43:de:5e:38:c1:6d:64:5b:e5:3a:bf:89:8e:1f:b9:8f: 0d:ee:f8:42:03:79:f5:a6:1e:3b:8a:db:71:bb:06:bc:26:a1: 24:f3:fa:ec:bc:7f:90:79:67:29:f1:64:f2:08:08:24:11:c8: d3:93:c1:f7:fb:2c:af:60:d7:cd:28:94:68:08:8a:0d:77:1b: fc:0f:29:18:d1:ee:8f:e1:fd:be:de:a1:31:e6:83:f2:c7:7d: 75:69:8c:ed:04:a1:a7:63:4f:93:3c:ba:6a:fb:8f:5c:82:59: fd:9b:e7:5d:4a:bf:a5:f9:f4:13:78:ab:f0:f0:4e:77:42:54: 0e:16:f1:63:ee:11:3b:3d:d7:1e:97:41:be:6d:1d:ef:d8:1c: e7:46:87:69:c8:81:cd:d2:b3:03:ab:bf:07:5b:f2:4f:97:3b: cf:6d:0d:f9:35:d6:9b:a3:6e:7c:fb:5d:c5:9a:93:db:bf:10: 69:73:c4:e5:05:eb:e0:eb:7e:f4:8b:f0:7b:22:79:58:53:1d: 07:82:ee:8a:89:d3:63:3b:60:1d:c7:27:2a:f5:e2:ad:d3:7a: 3c:f8:4d:5f:ec:93:da:0e:31:81:bb:c1:65:f1:62:84:2e:9a: 6a:be:ad:d5:52:7e:24:23:77:ec:21:b7:0e:c9:87:e9:c3:9e: 62:82:5c:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjdENjExMC8GA1UEBRMoMjM5RjEzNTk4NTc0ODRBOUM0OTAyMEE5REFDMjBBOTQx OTdEQUIwRjAeFw0yNjA4MjUwODU0MzRaFw0yNjA5MDEwODU0MzRaMBgxFjAUBgNV BAMTDTZhOGQ1ODRhLWU3YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpsLrppTrI2QXdL0YFXqpjyQ0HAMvN1TB++V2DzREumCtRq7PJDcQeMl/sKFn3 i6y4e6sc2ZJvC9stVN5yAcsdTKlkn6CmcFYDwVmU/xaZomch23D0WUI5YV0Xij2m NaO6DpVjF960pbnCG53YrdWmFj09wFCFBUteO5eFMRX13xRjoYiKHwUx5PIR+/iO xyogTWVLUPvh/XmIZMBS5R+/me+F30BGb/ifGR8bcCUq1kk2BOogPvdGHTjcuPQn Tp7unJ0NHj3MhDDTsefikOKYjbx0BAI4xe0c4B5ZrWbRkEuW3HxcPo3teJmdhUhW dMpiczW7cilGqzcyNSNO47VdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQurN7rrJ bn5Edh3C7iuJ4mwgPeUwHwYDVR0jBBgwFoAUI58TWYV0hKnEkCCp2sIKlBl9qw8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2N0Q2Lzc3QTcwMjdDODND MzExRjFCQzg4NUIzRjgzQTMwRkJDL0k1OFRXWVYwaEtuRWtDQ3Ayc0lLbEJsOXF3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSTU4VFdZVjBoS25Fa0NDcDJzSUtsQmw5cXc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 N0Q2Lzc3QTcwMjdDODNDMzExRjFCQzg4NUIzRjgzQTMwRkJDL0k1OFRXWVYwaEtu RWtDQ3Ayc0lLbEJsOXF3OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPo0PeXjjBbWRb5Tq/iY4fuY8N7vhCA3n1ph47ittxuwa8JqEk8/rsvH+QeWcp 8WTyCAgkEcjTk8H3+yyvYNfNKJRoCIoNdxv8DykY0e6P4f2+3qEx5oPyx311aYzt BKGnY0+TPLpq+49cgln9m+ddSr+l+fQTeKvw8E53QlQOFvFj7hE7Pdcel0G+bR3v 2BznRodpyIHN0rMDq78HW/JPlzvPbQ35Ndabo258+13FmpPbvxBpc8TlBevg6370 i/B7InlYUx0Hgu6KidNjO2Adxycq9eKt03o8+E1f7JPaDjGBu8Fl8WKELppqvq3V Un4kI3fsIbcOyYfpw55iglx+ -----END CERTIFICATE-----Generated at Wed Aug 26 17:26:09 2026 by rpki-client