$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json) Hash identifier: Xuk4QfNhh5kXQFpC4K12J3KPhZ54lPn5mySM4ZAHuL4= Subject key identifier: 2A:43:6F:DD:D0:3E:C8:57:C2:09:46:DA:BE:01:B7:FA:1A:CC:0D:25 Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft Manifest number: 057D Signing time: Tue 18 Aug 2026 23:44:09 +0000 Manifest this update: Tue 18 Aug 2026 23:44:08 +0000 Manifest next update: Tue 25 Aug 2026 23:44:08 +0000 Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: QlC2geKDQcSzwyDzFQTdqkxFB4peIQ5xBWeN3Ct47ME=) 2: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=) 3: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=) 4: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Aug 18 23:44:08 2026 GMT Not After : Aug 25 23:44:08 2026 GMT Subject: CN=6a84ee49-6491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:27:a3:66:ed:1c:9e:22:5c:ba:c9:6a:e2:c9: e9:42:31:fd:a0:c7:99:05:56:6b:84:f3:2f:b0:07: c9:cd:3f:63:77:b5:70:65:aa:20:25:cf:70:70:f2: de:38:17:5e:04:1e:8e:63:5e:18:24:af:65:ba:5f: a4:26:68:95:3c:19:00:c2:c2:cd:19:27:d3:46:2c: 15:d6:7a:9c:8e:82:6e:4f:a1:cf:31:22:3e:99:0f: 17:f9:9c:65:6a:81:84:74:81:3d:cd:d0:2d:11:91: 43:c0:80:fd:73:94:03:60:c7:6f:99:4c:86:94:2c: 04:3f:04:9a:f7:f4:80:a7:04:35:e0:ab:27:fd:a0: 64:60:b5:70:0f:53:43:17:3b:fe:90:73:d8:2a:1c: 3b:48:aa:06:4d:17:e4:c2:ac:8c:77:00:60:5f:c5: 78:58:32:9e:3e:12:b5:fd:15:e7:e2:b3:95:f4:b0: c6:ae:d5:70:b6:f7:0b:21:6d:f5:92:98:8e:3e:d2: 7d:3d:c3:87:34:6a:82:ce:4c:c3:bd:56:55:7f:33: 81:03:10:8b:09:50:83:51:59:d4:db:4c:ae:db:da: 3e:f1:d6:f8:4a:5c:68:d4:20:24:86:99:31:7e:80: 04:58:e0:ed:62:eb:58:ac:f2:c6:22:fd:3a:f7:09: ba:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:43:6F:DD:D0:3E:C8:57:C2:09:46:DA:BE:01:B7:FA:1A:CC:0D:25 X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e0:8d:03:84:0b:e3:a5:2d:30:be:bd:f0:e3:e5:9a:5f:f2: 99:cd:cd:f3:45:61:9d:b3:aa:28:ac:0f:6d:69:ff:ae:94:bb: b8:61:a4:58:26:cd:72:0d:00:f3:3b:5c:98:c4:98:d9:9b:21: 31:0f:0f:25:f1:e1:c8:94:d7:d8:22:2e:68:83:dc:3e:74:67: 4d:f2:aa:97:3b:06:a8:46:1a:89:13:5a:5f:10:db:3d:90:6f: 95:bb:49:63:18:12:2f:89:b5:b1:b5:88:2d:03:f0:20:81:86: 15:a1:ec:c1:eb:c3:8c:f2:f8:60:7b:d8:64:fd:49:cc:8a:54: ce:28:8f:af:df:04:aa:06:ca:bc:eb:13:b3:cc:e2:2c:56:4d: 02:9b:b7:e2:0d:45:31:dc:06:2e:e3:97:2d:74:aa:23:c6:2e: d4:10:36:e2:04:b8:75:ee:a7:5d:12:24:ba:b8:7e:dc:6f:05: af:e3:64:4b:a5:82:82:dc:3b:e3:54:f7:26:eb:bb:6d:4f:26: c6:f6:09:db:87:bf:70:e5:24:ce:34:de:6d:07:20:53:62:17: 26:64:0a:21:b7:16:a3:17:55:98:e7:d3:b8:54:d1:2b:fa:c8: 46:fb:5d:9c:82:d7:43:1d:ef:dc:3c:4f:ed:4b:d9:d5:e9:f0: a5:62:33:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjYwODE4MjM0NDA4WhcNMjYwODI1MjM0NDA4WjAYMRYwFAYD VQQDEw02YTg0ZWU0OS02NDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziejZu0cniJcuslq4snpQjH9oMeZBVZrhPMvsAfJzT9jd7VwZaogJc9wcPLe OBdeBB6OY14YJK9lul+kJmiVPBkAwsLNGSfTRiwV1nqcjoJuT6HPMSI+mQ8X+Zxl aoGEdIE9zdAtEZFDwID9c5QDYMdvmUyGlCwEPwSa9/SApwQ14Ksn/aBkYLVwD1ND Fzv+kHPYKhw7SKoGTRfkwqyMdwBgX8V4WDKePhK1/RXn4rOV9LDGrtVwtvcLIW31 kpiOPtJ9PcOHNGqCzkzDvVZVfzOBAxCLCVCDUVnU20yu29o+8db4Slxo1CAkhpkx foAEWODtYutYrPLGIv069wm6nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCpDb93Q PshXwglG2r4Bt/oazA0lMB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK WFUyVFNJcVFBVkd1T2xuZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdeCNA4QL46UtML698OPlml/ymc3N80VhnbOqKKwPbWn/rpS7uGGkWCbNcg0A 8ztcmMSY2ZshMQ8PJfHhyJTX2CIuaIPcPnRnTfKqlzsGqEYaiRNaXxDbPZBvlbtJ YxgSL4m1sbWILQPwIIGGFaHswevDjPL4YHvYZP1JzIpUziiPr98EqgbKvOsTs8zi LFZNApu34g1FMdwGLuOXLXSqI8Yu1BA24gS4de6nXRIkurh+3G8Fr+NkS6WCgtw7 41T3Juu7bU8mxvYJ24e/cOUkzjTebQcgU2IXJmQKIbcWoxdVmOfTuFTRK/rIRvtd nILXQx3v3DxP7UvZ1enwpWIzlA== -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:48 2026 by rpki-client