$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft File: OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json) Hash identifier: 8H98eeLRiatOR//4E7eT7h80zGTsK42w/BlPPZsWA1o= Subject key identifier: 1B:3F:BB:E4:90:EC:04:21:1D:3B:0F:37:85:A3:E8:0B:A6:C2:89:F1 Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 Certificate issuer: /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft Manifest number: 016F Signing time: Tue 25 Aug 2026 04:45:01 +0000 Manifest this update: Tue 25 Aug 2026 04:45:00 +0000 Manifest next update: Tue 01 Sep 2026 04:45:00 +0000 Files and hashes: 1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: q54pxItXDLE/HIl1cmtZ2uxtvNM6dP5KMT2UCzi8Jds=) 2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: 1cWKe61JXoqpcmn6lNJya/Zcn9d/497NYBSEDuJwXJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613 Validity Not Before: Aug 25 04:45:00 2026 GMT Not After : Sep 1 04:45:00 2026 GMT Subject: CN=6a8d1dcd-24fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:71:c5:0d:a5:f3:57:26:0b:56:24:7c:35: 83:e5:19:fc:69:ee:6d:30:7d:bb:65:2f:99:d0:40: a3:0d:f8:eb:7f:29:3b:b5:2a:e3:bf:54:07:81:8d: a9:53:f2:7b:0c:aa:b0:05:99:84:8d:54:11:70:d1: 8f:24:83:dd:5c:32:b1:20:7e:2c:6a:17:87:13:8d: 49:ac:bc:a3:70:f8:da:41:18:9c:83:1e:09:4e:03: 07:c3:43:5e:f0:c2:71:d2:d0:2c:89:7c:ef:1a:7a: 1a:8c:7a:17:1a:66:88:dd:c1:f2:6f:14:32:4c:38: 84:14:b3:e7:3e:72:2f:47:c3:1f:df:46:9d:41:ac: 24:76:22:b5:95:00:b2:67:d4:c2:6f:a2:74:09:d4: 94:c3:eb:64:ef:d5:38:83:53:f7:a8:c5:fc:56:37: 9d:26:62:49:76:53:f4:f1:ee:f3:e1:ad:c8:52:68: fb:25:1a:37:1c:54:a2:60:02:03:c1:c6:9f:dd:4c: 5e:55:a7:ee:b5:df:0a:3d:1b:0a:95:fb:33:f0:0c: c5:3f:20:57:80:57:91:3a:78:77:2a:d1:c9:04:f7: ca:5b:0f:f3:61:f5:d2:26:9b:33:a7:ba:c8:ec:6f: 0f:01:4b:d9:f7:7c:4c:73:43:94:f0:1f:9d:78:06: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3F:BB:E4:90:EC:04:21:1D:3B:0F:37:85:A3:E8:0B:A6:C2:89:F1 X509v3 Authority Key Identifier: keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:37:c5:81:6d:7b:01:e6:af:2f:97:f9:8b:09:92:39:bf:34: 42:23:f3:99:1b:ff:e2:a0:ff:0b:3e:15:7b:82:24:3e:ec:d6: 62:09:d9:94:79:0f:b9:9c:30:87:c2:47:d6:e8:94:aa:90:67: 15:fe:2b:c4:8c:b7:68:04:fa:25:90:c8:a9:a0:b3:f6:b1:29: 3a:50:1a:25:3c:c3:14:54:a0:43:e2:e3:8b:2c:d3:06:29:db: cd:90:66:2b:b8:3a:93:d5:ab:6a:62:48:bc:eb:7c:96:4a:41: 83:0d:83:59:c6:e2:c0:d3:ba:5d:f3:e6:25:36:d6:a7:d0:29: 23:75:b6:8b:fa:98:f0:36:d0:77:ba:ed:b9:14:6d:26:7d:60: 05:f2:8a:0e:4b:28:a8:8d:e6:55:30:d3:97:81:38:a0:bd:49: f8:cb:14:4c:93:41:ae:13:59:10:5a:1a:d6:24:25:e9:1c:48: d2:f7:d7:07:5b:76:22:a1:73:e6:a2:93:e8:a4:fb:ae:d5:33: f0:dd:69:ba:82:19:d8:91:84:41:fb:ec:60:ab:fa:7f:94:ba: 5a:7b:02:30:cf:a9:0e:3a:60:3a:26:75:0d:e8:1b:59:5c:19: d0:66:cb:b0:95:2a:3e:59:07:86:70:8d:f9:94:e4:dc:17:82: 5a:5c:95:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBQjkxMTAvBgNVBAUTKDM4MTdDRkUwMEE1RjFBQ0MzNjNCNDcyRjRGNjlEQTgz QkVCNTY2MTMwHhcNMjYwODI1MDQ0NTAwWhcNMjYwOTAxMDQ0NTAwWjAYMRYwFAYD VQQDEw02YThkMWRjZC0yNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5A9xxQ2l81cmC1YkfDWD5Rn8ae5tMH27ZS+Z0ECjDfjrfyk7tSrjv1QHgY2p U/J7DKqwBZmEjVQRcNGPJIPdXDKxIH4saheHE41JrLyjcPjaQRicgx4JTgMHw0Ne 8MJx0tAsiXzvGnoajHoXGmaI3cHybxQyTDiEFLPnPnIvR8Mf30adQawkdiK1lQCy Z9TCb6J0CdSUw+tk79U4g1P3qMX8VjedJmJJdlP08e7z4a3IUmj7JRo3HFSiYAID wcaf3UxeVafutd8KPRsKlfsz8AzFPyBXgFeROnh3KtHJBPfKWw/zYfXSJpszp7rI 7G8PAUvZ93xMc0OU8B+deAaS5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBs/u+SQ 7AQhHTsPN4Wj6AumwonxMB8GA1UdIwQYMBaAFDgXz+AKXxrMNjtHL09p2oO+tWYT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9EMTE4QzBCQzZF ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdzdzJPMGN2VDJuYWc3NjFa aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CZlA0QXBmR3N3Mk8wY3ZUMm5hZzc2MVpoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFCOS9EMTE4QzBCQzZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi9PQmZQNEFwZkdz dzJPMGN2VDJuYWc3NjFaaE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARTfFgW17AeavL5f5iwmSOb80QiPzmRv/4qD/Cz4Ve4IkPuzWYgnZlHkPuZww h8JH1uiUqpBnFf4rxIy3aAT6JZDIqaCz9rEpOlAaJTzDFFSgQ+LjiyzTBinbzZBm K7g6k9WramJIvOt8lkpBgw2DWcbiwNO6XfPmJTbWp9ApI3W2i/qY8DbQd7rtuRRt Jn1gBfKKDksoqI3mVTDTl4E4oL1J+MsUTJNBrhNZEFoa1iQl6RxI0vfXB1t2IqFz 5qKT6KT7rtUz8N1puoIZ2JGEQfvsYKv6f5S6WnsCMM+pDjpgOiZ1DegbWVwZ0GbL sJUqPlkHhnCN+ZTk3BeCWlyVVw== -----END CERTIFICATE-----Generated at Wed Aug 26 22:36:16 2026 by rpki-client