$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: KbPbUgPyIh5BtSi4Ec2C2+UYvH2www5l1mfFIVlECVA= Subject key identifier: 26:75:8C:2B:3D:A2:B2:03:5C:76:EB:43:15:9A:2D:F2:EF:FB:EC:9F Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1C6B Signing time: Sat 22 Aug 2026 16:09:22 +0000 Manifest this update: Sat 22 Aug 2026 16:09:21 +0000 Manifest next update: Sat 29 Aug 2026 16:09:21 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: 7s4O89w+dMjNzLqapbIAaAma0bQz3cxnfBxs7lvt9BA=) 2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=) 3: EB6B3FFA86EF11F19E006003A7EE528E.roa (hash: DAeAFcyF/YNOKPuEFYrJ40g8SH0qo3OoC9C6ggkgmKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7305 (0x1c89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Aug 22 16:09:21 2026 GMT Not After : Aug 29 16:09:21 2026 GMT Subject: CN=6a89c9b2-eb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:0f:e6:81:ab:bf:75:91:f1:81:b2:74:b1: fe:11:2b:1f:b4:cf:cb:51:7c:df:07:b3:5d:ca:6b: 68:74:71:14:b5:aa:a1:4f:72:ac:52:1b:77:88:ce: 0d:14:b9:25:82:0c:ba:33:6d:fc:49:48:2d:f1:23: 44:e6:87:72:51:10:7a:27:b5:79:f2:bb:fa:63:6e: df:25:0e:17:6c:23:a8:29:d6:35:f8:5f:e8:93:7e: a2:20:31:fe:bd:92:da:e2:9a:7e:8f:1b:ca:6f:af: 87:cd:61:3a:4f:e3:c9:85:aa:4f:d5:21:01:6c:0a: 29:2d:36:3a:ee:3e:52:6d:31:95:dd:50:d9:4d:0c: 6a:17:7d:5b:c2:a3:0e:64:e5:9e:2d:cf:9d:b8:72: a6:44:d5:10:d8:b1:ab:97:85:ae:dd:96:04:b9:8b: fd:90:a6:b0:f6:dc:2b:4e:21:cc:61:78:6c:05:5f: ad:60:8f:f9:1b:15:ee:2c:3b:ae:d7:42:0c:e0:df: 75:fc:e1:56:49:39:f6:54:f5:71:e1:be:63:05:75: ab:dc:4b:e9:e6:00:52:da:29:9c:03:18:f3:7d:e6: 05:ff:fd:cb:0e:bd:d9:a3:7c:9e:44:b5:53:9b:b0: 95:5f:0c:4e:c2:92:c4:9c:1d:00:d6:1b:b8:28:58: 24:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:75:8C:2B:3D:A2:B2:03:5C:76:EB:43:15:9A:2D:F2:EF:FB:EC:9F X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:95:1a:fc:92:37:b6:14:ba:b0:15:a3:cd:4d:db:a7:ea:d9: 2c:fe:82:df:fa:5d:aa:d7:0d:b7:26:84:2b:4e:57:6e:71:76: d0:63:ca:ea:f4:d1:f5:8f:62:66:53:77:0f:7f:d5:43:32:9c: 92:b4:47:38:ea:bb:0e:b1:df:e9:a0:f5:36:b9:92:4d:91:6d: 01:37:64:77:1e:5e:03:90:ad:07:ce:ec:62:e3:9b:81:26:b4: 0b:bb:47:f5:ef:e6:a1:af:f2:51:a1:e5:92:31:c0:ad:b5:c8: 32:76:62:2a:cd:c1:49:d8:d5:80:54:49:da:03:97:a8:97:a8: 6d:79:1a:ca:04:10:56:a6:b4:df:d4:53:d9:e7:c7:24:c5:86: f1:7c:7e:01:85:62:de:f9:6e:10:ff:00:98:a2:f7:5f:a7:60: 94:36:19:6b:5e:f7:45:f9:4c:43:cb:c6:78:0f:1b:2c:da:f3: ec:b8:54:2c:34:52:fc:fe:aa:09:59:2b:0f:b5:e8:a7:6f:66: 7a:e6:81:db:94:1c:45:ef:ac:d5:7e:21:b0:6f:ad:fd:b3:2f: 36:35:be:e1:cf:81:44:90:02:62:43:46:29:1c:27:4c:25:ce: dd:2f:52:f1:f5:d2:75:11:ec:89:fb:0f:54:46:de:c4:b1:3c: 96:8e:e6:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjYwODIyMTYwOTIxWhcNMjYwODI5MTYwOTIxWjAYMRYwFAYD VQQDEw02YTg5YzliMi1lYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbMP5oGrv3WR8YGydLH+ESsftM/LUXzfB7NdymtodHEUtaqhT3KsUht3iM4N FLklggy6M238SUgt8SNE5odyURB6J7V58rv6Y27fJQ4XbCOoKdY1+F/ok36iIDH+ vZLa4pp+jxvKb6+HzWE6T+PJhapP1SEBbAopLTY67j5SbTGV3VDZTQxqF31bwqMO ZOWeLc+duHKmRNUQ2LGrl4Wu3ZYEuYv9kKaw9twrTiHMYXhsBV+tYI/5GxXuLDuu 10IM4N91/OFWSTn2VPVx4b5jBXWr3Evp5gBS2imcAxjzfeYF//3LDr3Zo3yeRLVT m7CVXwxOwpLEnB0A1hu4KFgkRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCZ1jCs9 orIDXHbrQxWaLfLv++yfMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADZUa/JI3thS6sBWjzU3bp+rZLP6C3/pdqtcNtyaEK05XbnF20GPK6vTR9Y9i ZlN3D3/VQzKckrRHOOq7DrHf6aD1NrmSTZFtATdkdx5eA5CtB87sYuObgSa0C7tH 9e/moa/yUaHlkjHArbXIMnZiKs3BSdjVgFRJ2gOXqJeobXkaygQQVqa039RT2efH JMWG8Xx+AYVi3vluEP8AmKL3X6dglDYZa173RflMQ8vGeA8bLNrz7LhULDRS/P6q CVkrD7Xop29meuaB25QcRe+s1X4hsG+t/bMvNjW+4c+BRJACYkNGKRwnTCXO3S9S 8fXSdRHsifsPVEbexLE8lo7maw== -----END CERTIFICATE-----Generated at Sat Aug 22 19:36:06 2026 by rpki-client