$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: v+AF/sGnJAlh1ZTBtc/a7Nl8bx7s307ldhbNyeorP8g= Subject key identifier: 3B:98:FB:CF:77:D4:B5:C5:BE:57:7A:56:8C:69:87:91:73:73:12:4E Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: 0173 Signing time: Tue 25 Aug 2026 04:44:58 +0000 Manifest this update: Tue 25 Aug 2026 04:44:57 +0000 Manifest next update: Tue 01 Sep 2026 04:44:57 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: yAf0bCYaXN+mYTXlLPmO8XaByGuvQy5RdkyFnsPXcCY=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 04:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Aug 25 04:44:57 2026 GMT Not After : Sep 1 04:44:57 2026 GMT Subject: CN=6a8d1dca-52a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ea:de:23:e2:3e:4e:47:4d:70:bd:68:9a:a2: 13:80:07:70:31:7f:ae:3b:fd:dd:32:21:53:9b:83: 5c:24:29:86:e6:e4:49:c6:bd:6c:3b:ef:ed:c7:69: de:6f:ce:22:a5:5d:f6:09:c4:0b:a8:5b:1b:42:cf: 6b:b3:ce:30:52:42:4b:4e:ec:9d:8a:49:c4:4b:92: 61:fb:f1:c7:6d:04:fd:9d:76:59:25:30:f0:a5:6e: 10:06:29:aa:6c:4c:e9:16:78:a5:eb:b3:c1:78:9f: 4e:23:da:67:d1:a7:eb:f3:d0:3d:1d:a3:f6:a5:96: 5a:ea:68:0b:cf:d1:d9:d7:50:83:f5:34:68:18:88: b8:a7:fe:cc:88:b5:d7:b4:d0:f0:59:1d:ed:40:e6: f9:98:6f:86:6e:40:21:3d:a9:21:7d:cf:a6:c4:c0: 08:e9:ce:34:96:2c:df:00:8a:30:2d:13:a1:a7:93: 3c:c0:aa:3f:04:40:5b:eb:0b:c3:76:a9:09:7d:b4: 50:43:9f:bf:13:b0:32:c0:17:c1:ac:a4:44:d5:1b: e8:aa:62:29:b6:1f:0a:78:0f:0a:84:37:08:5d:5b: 72:56:ce:4a:00:b8:42:c4:e1:f3:61:68:a7:e2:8d: 6a:d2:b8:7c:4b:08:b3:ee:4b:93:99:2f:0b:6c:c6: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:FB:CF:77:D4:B5:C5:BE:57:7A:56:8C:69:87:91:73:73:12:4E X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:95:12:e6:a4:53:df:32:a1:4a:c5:b4:65:41:24:5e:5e:9e: 57:58:1c:8d:55:be:f8:72:d2:66:a0:cb:81:fe:f9:56:cb:53: f9:bc:a9:44:18:76:7a:24:22:57:1a:2b:cc:47:4c:e4:62:a0: e5:84:3d:2d:70:a9:30:40:ec:f5:60:47:dc:01:1b:04:55:fc: 7c:ae:e6:13:ff:61:19:f9:ca:73:48:1b:86:2d:bc:25:96:23: 42:31:b9:fb:af:90:ee:8e:00:5f:dc:c7:8b:41:96:f5:89:25: fa:4a:c8:b9:0c:fd:72:f5:b8:ea:3d:5f:c8:e5:f1:f7:78:1d: d1:6c:1c:22:b2:0e:bb:40:d7:5b:91:21:90:56:1d:bb:2e:c6: 44:4b:20:92:52:59:0b:29:fc:a5:6a:c8:b0:05:c6:91:c7:fd: b3:aa:40:f2:55:5c:40:e7:43:90:f7:e0:45:b8:8e:85:51:c3: f1:63:ab:e0:05:cb:a0:cb:5e:66:58:a6:9c:04:4e:49:41:75: a2:5f:c0:95:23:12:7c:b9:fd:eb:4a:78:f3:13:26:c6:02:19: 4f:32:36:5f:f2:29:ad:ef:3a:9a:4c:51:d8:52:b3:b1:9b:78: 11:c0:49:d8:fd:6d:59:a5:92:ee:7c:39:41:6e:27:c2:92:a9: e9:7f:c4:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG NzcwQTA2MzgwHhcNMjYwODI1MDQ0NDU3WhcNMjYwOTAxMDQ0NDU3WjAYMRYwFAYD VQQDEw02YThkMWRjYS01MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ureI+I+TkdNcL1omqITgAdwMX+uO/3dMiFTm4NcJCmG5uRJxr1sO+/tx2ne b84ipV32CcQLqFsbQs9rs84wUkJLTuydiknES5Jh+/HHbQT9nXZZJTDwpW4QBimq bEzpFnil67PBeJ9OI9pn0afr89A9HaP2pZZa6mgLz9HZ11CD9TRoGIi4p/7MiLXX tNDwWR3tQOb5mG+GbkAhPakhfc+mxMAI6c40lizfAIowLROhp5M8wKo/BEBb6wvD dqkJfbRQQ5+/E7AywBfBrKRE1RvoqmIpth8KeA8KhDcIXVtyVs5KALhCxOHzYWin 4o1q0rh8Swiz7kuTmS8LbMZCBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuY+893 1LXFvld6Voxph5FzcxJOMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW OUxwSkFxb2d1VUQzY0tCamcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcZUS5qRT3zKhSsW0ZUEkXl6eV1gcjVW++HLSZqDLgf75VstT+bypRBh2eiQi VxorzEdM5GKg5YQ9LXCpMEDs9WBH3AEbBFX8fK7mE/9hGfnKc0gbhi28JZYjQjG5 +6+Q7o4AX9zHi0GW9Ykl+krIuQz9cvW46j1fyOXx93gd0WwcIrIOu0DXW5EhkFYd uy7GREsgklJZCyn8pWrIsAXGkcf9s6pA8lVcQOdDkPfgRbiOhVHD8WOr4AXLoMte ZlimnAROSUF1ol/AlSMSfLn960p48xMmxgIZTzI2X/Ipre86mkxR2FKzsZt4EcBJ 2P1tWaWS7nw5QW4nwpKp6X/Eow== -----END CERTIFICATE-----Generated at Wed Aug 26 22:34:34 2026 by rpki-client