$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: oThHm8SdX1zqdzHiVc6S38Gfav1BgPl70UUd3RGNS/A= Subject key identifier: 3F:0D:AB:7F:EA:75:3B:FF:CF:AA:1C:1A:20:5E:3F:23:4C:C3:03:F8 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 0235 Signing time: Wed 19 Aug 2026 03:13:49 +0000 Manifest this update: Wed 19 Aug 2026 03:13:48 +0000 Manifest next update: Wed 26 Aug 2026 03:13:48 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: ZXEYLofi6xZjap++mG/JvXZar2SfM6YKxqsHvIISS0E=) 2: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: w4ebJqxqcYTakZgYgczYh31d+UQ4emy9J0fYQLqlsn0=) 3: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: C+zKPU7xS4ZOCm7vmpXaLXUhKiAqHKCATTbpyOC3iPI=) 4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: gcd1uORIwB588IprBp+ptXbcFbF7rS1AehPmjHP27TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Aug 19 03:13:48 2026 GMT Not After : Aug 26 03:13:48 2026 GMT Subject: CN=6a851f6d-16ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:78:69:55:53:c3:10:5d:9b:65:48:a5:57: ef:28:ef:56:a6:34:74:92:42:2f:11:c1:cc:9a:e2: 92:ee:38:39:2b:7d:59:bc:a5:07:82:11:f2:17:6e: 43:4a:0d:7e:51:ce:50:ec:5f:1f:c5:b9:d8:8e:14: a1:25:2f:1c:05:f3:dd:d7:1d:11:e9:78:e0:2c:fc: c2:a5:5b:3e:8c:e3:4c:29:c2:33:8f:62:aa:1a:3e: 29:6b:ea:37:5d:68:b3:37:7e:ee:c7:04:cd:fa:e8: ef:d4:cb:5d:11:85:d9:68:81:8e:55:c7:30:74:86: 8a:f6:3b:30:88:c2:86:cf:10:ce:80:9c:8d:7d:18: 97:76:e0:f1:bf:e0:62:d6:39:6b:fc:70:0f:eb:4a: 05:1e:99:08:6e:6c:04:a2:68:62:66:f4:6f:59:55: 58:e3:5f:43:67:13:c0:9a:a6:78:21:e2:49:06:c7: 7f:07:1d:71:d3:74:c2:12:20:ce:f0:4b:2e:0e:3b: 2c:fc:e9:57:b7:77:6e:b7:06:c7:ae:e3:79:d1:55: 31:af:7c:1f:95:d1:e0:c1:df:5f:78:b0:cb:9a:ca: 1e:4e:af:53:e5:ea:d3:0b:97:5f:91:53:6d:ea:8c: a2:e2:9e:93:41:de:dd:2e:ab:c2:b6:64:ae:48:c5: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0D:AB:7F:EA:75:3B:FF:CF:AA:1C:1A:20:5E:3F:23:4C:C3:03:F8 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:2b:86:ba:15:03:0b:48:27:74:c9:7a:eb:ab:e5:02:dd:6b: 98:76:92:74:31:e7:46:95:32:9b:6b:e9:34:30:45:fa:d5:61: a6:17:09:00:8a:65:95:be:ee:59:94:cb:61:3d:62:9f:ac:9a: 2b:5d:c7:7f:69:8b:f8:03:23:9b:02:64:ea:f9:16:f5:ca:5d: 19:3c:c1:fe:be:2b:90:59:df:6a:f4:83:a1:df:c0:9c:33:b4: d5:c2:08:87:27:33:c6:5a:c3:31:68:e4:b7:75:92:fe:fe:e1: fd:f3:ad:b0:6c:b5:f2:cb:33:2a:0b:4e:aa:5d:28:ae:8f:7e: 9e:8b:30:27:3c:ad:25:ac:aa:93:41:ce:a1:77:f9:c4:16:a9: a3:31:20:43:e4:36:dc:11:2f:e4:cd:8a:7d:33:20:55:a5:94: 05:42:60:38:46:80:b0:fe:08:64:f5:a6:09:5a:7c:aa:48:b7: a7:55:e5:9f:40:5e:64:90:97:ed:9b:45:a4:a8:ea:42:04:48: 9a:f9:ff:67:b3:b2:2f:72:4c:3d:0a:f8:95:f0:28:c0:af:7f: 13:cd:96:d5:53:9c:aa:12:f7:42:43:ba:85:9e:ac:a1:ab:53: 47:50:b3:4f:ce:62:0c:66:fc:46:d8:8c:73:e7:98:8c:d2:66: 03:45:bb:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjYwODE5MDMxMzQ4WhcNMjYwODI2MDMxMzQ4WjAYMRYwFAYD VQQDEw02YTg1MWY2ZC0xNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu54aVVTwxBdm2VIpVfvKO9WpjR0kkIvEcHMmuKS7jg5K31ZvKUHghHyF25D Sg1+Uc5Q7F8fxbnYjhShJS8cBfPd1x0R6XjgLPzCpVs+jONMKcIzj2KqGj4pa+o3 XWizN37uxwTN+ujv1MtdEYXZaIGOVccwdIaK9jswiMKGzxDOgJyNfRiXduDxv+Bi 1jlr/HAP60oFHpkIbmwEomhiZvRvWVVY419DZxPAmqZ4IeJJBsd/Bx1x03TCEiDO 8EsuDjss/OlXt3dutwbHruN50VUxr3wfldHgwd9feLDLmsoeTq9T5erTC5dfkVNt 6oyi4p6TQd7dLqvCtmSuSMWNHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8Nq3/q dTv/z6ocGiBePyNMwwP4MB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiSuGuhUDC0gndMl666vlAt1rmHaSdDHnRpUym2vpNDBF+tVhphcJAIpllb7u WZTLYT1in6yaK13Hf2mL+AMjmwJk6vkW9cpdGTzB/r4rkFnfavSDod/AnDO01cII hyczxlrDMWjkt3WS/v7h/fOtsGy18sszKgtOql0oro9+noswJzytJayqk0HOoXf5 xBapozEgQ+Q23BEv5M2KfTMgVaWUBUJgOEaAsP4IZPWmCVp8qki3p1Xln0BeZJCX 7ZtFpKjqQgRImvn/Z7OyL3JMPQr4lfAowK9/E82W1VOcqhL3QkO6hZ6soatTR1Cz T85iDGb8RtiMc+eYjNJmA0W7Dw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:43 2026 by rpki-client