$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json) Hash identifier: 4gRnp+8qj7iqU7TD+yF6RfrkFhLKaMALSDs5vLQtt0I= Subject key identifier: 0B:B3:B7:F1:E5:99:50:86:63:E1:4C:F1:67:56:C3:CF:FD:31:69:AD Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0D02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft Manifest number: 0CF6 Signing time: Tue 18 Aug 2026 18:39:01 +0000 Manifest this update: Tue 18 Aug 2026 18:39:00 +0000 Manifest next update: Tue 25 Aug 2026 18:39:00 +0000 Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: nmPdYwn6UrZ1q1ubcPrbOyg6xgrrYHuNe92IrcPjQsk=) 2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: P3cA4Ey/V8rl3zAePZZSJQ01VWq57x0zCe1ptcZIm4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Aug 18 18:39:00 2026 GMT Not After : Aug 25 18:39:00 2026 GMT Subject: CN=6a84a6c5-c24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:2c:b5:bb:a6:67:6b:29:73:01:cc:a2:5a: 8b:f5:bd:a7:99:56:a5:26:ee:e2:4e:ab:00:a7:e3: cc:1f:af:05:8c:5c:4a:d4:58:4b:d2:70:be:48:93: 91:f0:3e:c0:ef:fc:c6:5a:0c:cd:67:c4:5b:4a:fd: 93:02:63:7a:10:0a:50:69:58:10:d8:bc:f9:f6:89: 22:75:b5:b5:2e:97:be:4c:11:3e:e2:d9:8d:68:c3: 03:e2:6b:19:a2:81:be:93:25:4a:8d:66:10:3a:4d: a1:ab:88:16:07:ef:3b:0e:1c:a2:0e:f2:5f:d6:16: 74:3b:7b:f3:ea:cf:7a:2c:95:fe:22:bc:21:14:39: fc:03:4b:84:32:58:6b:ba:a8:90:a5:4c:bd:6f:28: 50:f9:5c:9d:fa:d9:60:7a:69:47:d5:bc:43:64:e0: e4:1a:52:49:f4:44:f7:15:a3:cd:df:2d:a1:1d:d1: 11:c7:f2:ab:32:ed:c7:62:bb:d0:2b:15:76:09:88: 3d:bf:49:1e:88:20:fd:72:9e:62:0f:53:da:ce:f0: f5:8d:ef:3e:65:eb:39:53:e1:0b:c1:90:6c:d9:34: bc:f9:23:8d:7f:a5:91:b0:7e:21:6e:5f:be:51:77: 8c:3a:6f:f5:78:36:a7:3f:00:49:d2:f3:33:dd:b8: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B3:B7:F1:E5:99:50:86:63:E1:4C:F1:67:56:C3:CF:FD:31:69:AD X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ce:c0:52:f9:5f:43:36:df:cf:fc:60:67:ac:1f:a3:4d:60: 47:f0:2f:c5:25:31:3c:29:ab:6f:c9:7d:b8:1c:be:7c:21:07: bf:3d:22:39:99:e8:23:5e:56:c8:08:c4:ca:5b:ca:00:21:14: a9:24:02:31:b4:72:3e:50:b7:52:8b:22:22:4f:31:1d:3c:bc: fb:fb:58:a1:fa:23:be:6e:96:15:36:01:33:75:2f:e1:01:28: 12:57:ea:d7:2a:96:66:6d:73:c1:24:c8:77:9b:df:1e:b2:84: 32:9d:d5:19:c4:c7:68:87:7f:de:cd:10:53:cc:06:e2:8a:64: 2e:ab:a9:37:f1:50:6a:c2:a9:43:0f:e1:0a:b3:20:c3:e5:9e: b3:0a:0d:3a:dc:8c:5b:0a:43:60:6d:d0:cf:3c:c7:83:14:37: 32:c2:c2:4e:43:ea:1e:0d:20:88:da:71:6c:d7:ef:a7:d3:f4: 88:02:b1:d1:f1:bf:95:2f:5c:df:d0:69:b4:99:ec:41:a2:5d: 88:5d:c3:2e:2c:36:fc:d6:9a:f4:2a:2f:6a:d5:54:71:65:e8: c7:4f:f0:9b:37:b4:80:75:f0:fd:60:4c:42:69:e5:70:34:5d: 3f:0d:d8:28:28:11:bf:af:96:78:72:39:fe:bd:95:08:c4:3b: 18:6a:79:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjYwODE4MTgzOTAwWhcNMjYwODI1MTgzOTAwWjAYMRYwFAYD VQQDEw02YTg0YTZjNS1jMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRYstbumZ2spcwHMolqL9b2nmValJu7iTqsAp+PMH68FjFxK1FhL0nC+SJOR 8D7A7/zGWgzNZ8RbSv2TAmN6EApQaVgQ2Lz59okidbW1Lpe+TBE+4tmNaMMD4msZ ooG+kyVKjWYQOk2hq4gWB+87DhyiDvJf1hZ0O3vz6s96LJX+IrwhFDn8A0uEMlhr uqiQpUy9byhQ+Vyd+tlgemlH1bxDZODkGlJJ9ET3FaPN3y2hHdERx/KrMu3HYrvQ KxV2CYg9v0keiCD9cp5iD1PazvD1je8+Zes5U+ELwZBs2TS8+SONf6WRsH4hbl++ UXeMOm/1eDanPwBJ0vMz3bhOwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAuzt/Hl mVCGY+FM8WdWw8/9MWmtMB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVu SG84eHJnUGp6SnJFWmcyVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqs7AUvlfQzbfz/xgZ6wfo01gR/AvxSUxPCmrb8l9uBy+fCEHvz0iOZnoI15W yAjEylvKACEUqSQCMbRyPlC3UosiIk8xHTy8+/tYofojvm6WFTYBM3Uv4QEoElfq 1yqWZm1zwSTId5vfHrKEMp3VGcTHaId/3s0QU8wG4opkLqupN/FQasKpQw/hCrMg w+WeswoNOtyMWwpDYG3QzzzHgxQ3MsLCTkPqHg0giNpxbNfvp9P0iAKx0fG/lS9c 39BptJnsQaJdiF3DLiw2/Naa9CovatVUcWXox0/wmze0gHXw/WBMQmnlcDRdPw3Y KCgRv6+WeHI5/r2VCMQ7GGp5SA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:47:08 2026 by rpki-client