$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft File: Fkl8IIYtsywfe60cEQzGsoBSRXU.mft (raw, json) Hash identifier: dLD3VY0C3JQVf5tTahCb/8cLR1NUYxB2xlOACFYRPLE= Subject key identifier: 45:E0:FA:B0:35:8F:F3:E1:84:77:6B:DD:30:7D:28:E9:8D:88:41:58 Authority key identifier: 16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75 Certificate issuer: /CN=A91BA3E7/serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft Manifest number: 12 Signing time: Tue 25 Aug 2026 08:57:56 +0000 Manifest this update: Tue 25 Aug 2026 08:57:56 +0000 Manifest next update: Tue 01 Sep 2026 08:57:56 +0000 Files and hashes: 1: Fkl8IIYtsywfe60cEQzGsoBSRXU.crl (hash: EjjOc45i9JAWmRTVysb+AOAXoNXo23QXyf1Per4eEiw=) 2: 2C58A8288A3C11F18F5718FE3111F970.roa (hash: SONSYy4tIc7OLfGgQbiSXlMj9cIg5ZBgBiRgNLwC7Qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA3E7, serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575 Validity Not Before: Aug 25 08:57:56 2026 GMT Not After : Sep 1 08:57:56 2026 GMT Subject: CN=6a8d5914-6f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:07:c3:a0:12:8a:4e:9a:60:a4:c6:5d:af: 1e:2f:eb:38:51:6f:1b:ac:79:5c:f0:21:37:c2:11: bd:d6:9b:ba:c3:62:30:27:46:12:d3:cb:f0:35:ec: 34:75:51:09:4f:c7:aa:c7:e7:d6:22:f5:49:7a:5d: 8f:a4:44:e4:26:d6:cb:b9:8b:46:f0:31:14:c7:73: 24:87:5a:c4:1a:4c:9e:4c:c4:94:07:b9:18:66:b1: ce:5c:5f:0d:f7:23:20:34:8c:82:c1:06:2a:d4:06: 2f:11:9b:45:e4:c9:ad:02:45:f7:ad:b8:e5:7c:c5: 53:48:99:7d:7e:e3:fa:9e:72:b1:22:70:ad:de:28: d0:e2:d9:bd:4d:79:e1:b2:b4:bc:42:a0:47:43:5f: 96:8b:b4:bb:e7:12:1f:fd:0c:39:eb:51:e0:4b:af: cd:b9:42:35:d8:6b:1c:7c:5d:a0:1e:28:89:f6:86: e7:03:28:18:33:58:0c:95:9e:41:52:1a:6e:c7:e3: 6b:0f:96:45:2d:34:d9:a2:d4:60:93:ec:8f:ab:ad: 2d:db:79:84:1e:fa:6c:09:35:a1:c8:74:16:c9:6d: a5:b8:28:74:4a:85:d6:b7:e6:d0:0d:dc:7d:da:72: ce:d1:19:51:a0:70:df:3e:5c:41:48:e2:8d:45:0a: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E0:FA:B0:35:8F:F3:E1:84:77:6B:DD:30:7D:28:E9:8D:88:41:58 X509v3 Authority Key Identifier: keyid:16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:06:66:50:df:52:fd:28:2f:95:ac:61:ca:86:e1:07:da:1c: 3d:77:55:50:36:ec:11:ae:5b:de:dc:0a:58:f1:89:88:e7:49: 7a:9f:c3:73:5e:47:35:dc:f4:0d:d5:fb:97:5c:c5:31:13:36: 9b:89:9c:b6:ef:f2:0a:cf:52:7d:83:ed:71:79:cf:28:75:a7: 88:af:0d:11:50:76:1d:2a:7f:df:80:19:7f:72:1a:35:da:5c: 1f:5c:08:4f:7a:53:cf:5c:34:7d:49:7c:07:83:a3:34:2a:d2: c7:7b:f4:7d:db:b8:d5:6d:0a:0e:4e:f2:69:75:06:30:ff:e9: 0d:90:ca:bd:52:e7:1c:e5:5d:c2:dd:37:94:97:3a:f4:23:f9: 38:eb:36:77:68:82:e7:b8:58:d7:48:40:96:11:f1:85:77:c5: c8:6f:c0:da:fe:49:03:32:24:75:d8:bd:78:a8:24:50:39:f0: 26:df:16:67:a8:83:fd:d6:51:46:f4:e6:99:db:da:75:ef:d3: 18:65:9e:5a:15:30:8f:ae:5a:13:e9:0f:28:cc:12:27:3d:f0: 7e:0d:ac:e5:47:db:ed:5f:97:de:08:55:ef:86:a9:60:59:9d: cf:df:74:59:d5:d0:45:b8:13:1c:37:38:77:7d:02:31:fe:31: 10:b9:37:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTNFNzExMC8GA1UEBRMoMTY0OTdDMjA4NjJEQjMyQzFGN0JBRDFDMTEwQ0M2QjI4 MDUyNDU3NTAeFw0yNjA4MjUwODU3NTZaFw0yNjA5MDEwODU3NTZaMBgxFjAUBgNV BAMTDTZhOGQ1OTE0LTZmMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3LgfDoBKKTppgpMZdrx4v6zhRbxuseVzwITfCEb3Wm7rDYjAnRhLTy/A17DR1 UQlPx6rH59Yi9Ul6XY+kROQm1su5i0bwMRTHcySHWsQaTJ5MxJQHuRhmsc5cXw33 IyA0jILBBirUBi8Rm0Xkya0CRfetuOV8xVNImX1+4/qecrEicK3eKNDi2b1NeeGy tLxCoEdDX5aLtLvnEh/9DDnrUeBLr825QjXYaxx8XaAeKIn2hucDKBgzWAyVnkFS Gm7H42sPlkUtNNmi1GCT7I+rrS3beYQe+mwJNaHIdBbJbaW4KHRKhda35tAN3H3a cs7RGVGgcN8+XEFI4o1FCpoFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUReD6sDWP 8+GEd2vdMH0o6Y2IQVgwHwYDVR0jBBgwFoAUFkl8IIYtsywfe60cEQzGsoBSRXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBM0U3LzY0Nzc2QkVFOEEx RjExRjE5RTRFQzdBMTY4MTFGOTcwL0ZrbDhJSVl0c3l3ZmU2MGNFUXpHc29CU1JY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmtsOElJWXRzeXdmZTYwY0VRekdzb0JTUlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB M0U3LzY0Nzc2QkVFOEExRjExRjE5RTRFQzdBMTY4MTFGOTcwL0ZrbDhJSVl0c3l3 ZmU2MGNFUXpHc29CU1JYVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWBmZQ31L9KC+VrGHKhuEH2hw9d1VQNuwRrlve3ApY8YmI50l6n8NzXkc13PQN 1fuXXMUxEzabiZy27/IKz1J9g+1xec8odaeIrw0RUHYdKn/fgBl/cho12lwfXAhP elPPXDR9SXwHg6M0KtLHe/R927jVbQoOTvJpdQYw/+kNkMq9Uucc5V3C3TeUlzr0 I/k46zZ3aILnuFjXSECWEfGFd8XIb8Da/kkDMiR12L14qCRQOfAm3xZnqIP91lFG 9OaZ29p179MYZZ5aFTCPrloT6Q8ozBInPfB+DazlR9vtX5feCFXvhqlgWZ3P33RZ 1dBFuBMcNzh3fQIx/jEQuTfL -----END CERTIFICATE-----Generated at Wed Aug 26 17:24:27 2026 by rpki-client