$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft File: CB6icKn0s2sOyJai0hSO5Ok-Xys.mft (raw, json) Hash identifier: zxqkVXc6+dg1ruFjYo+WqQXFATVqBLmV5npJhvHPEqU= Subject key identifier: CE:7B:1B:4E:AD:01:D8:73:25:EF:FB:3A:43:7E:8A:53:76:97:1D:A8 Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B Certificate issuer: /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft Manifest number: 0210 Signing time: Wed 19 Aug 2026 03:35:10 +0000 Manifest this update: Wed 19 Aug 2026 03:35:09 +0000 Manifest next update: Wed 26 Aug 2026 03:35:09 +0000 Files and hashes: 1: CB6icKn0s2sOyJai0hSO5Ok-Xys.crl (hash: aGllnj17qnr6Lyy9JGnSTXblP1wRKjUU4lYao6azD7I=) 2: 5A387584756311EEA256FD57C4F9AE02.roa (hash: vSlu+TQyxpav2ADnDaaL7eQcjqlvG5DFjhy5XTFprbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Validity Not Before: Aug 19 03:35:09 2026 GMT Not After : Aug 26 03:35:09 2026 GMT Subject: CN=6a85246e-baf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:68:7e:a4:d0:17:07:06:e5:fa:94:a4:0c: fb:fd:63:a4:dc:48:a9:db:c1:7b:dd:9a:40:15:ec: c1:fa:23:79:c7:27:1e:f2:ca:b8:1f:cb:eb:28:58: 83:02:76:8a:96:75:f8:70:8d:f9:5d:20:08:4d:fa: 8a:ff:0c:9f:16:a5:61:da:d2:91:40:ee:f7:49:f8: ee:3e:2a:ae:c4:f5:23:9e:5b:c9:c6:b1:eb:05:a1: 44:fe:be:37:85:7c:6d:50:31:26:4d:6b:1a:2c:2e: 5b:1b:9e:50:32:3a:02:46:df:f9:cd:51:d2:07:10: 51:f4:86:c0:87:9d:c4:04:97:c0:13:05:70:27:c3: 02:2f:f0:e3:69:94:27:af:a0:1e:da:9b:2d:68:92: e1:a7:3a:5a:73:11:b4:d5:ac:db:e9:65:8b:cf:61: 61:ab:95:13:2a:60:f5:de:23:a4:36:c6:13:bf:7f: 53:2e:5e:72:20:0a:e1:7e:1f:a2:f4:44:6c:ae:59: a1:a2:e6:3c:76:c1:54:46:78:95:46:cd:59:d6:09: d4:01:b5:bd:a3:f7:ab:09:17:04:6f:f4:9f:5c:0d: b4:0d:34:20:f6:e7:db:a0:a7:c1:92:2e:92:de:7d: 31:7f:08:d4:35:c9:fb:bd:e9:91:b7:5e:39:de:56: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7B:1B:4E:AD:01:D8:73:25:EF:FB:3A:43:7E:8A:53:76:97:1D:A8 X509v3 Authority Key Identifier: keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:44:10:39:b4:2a:5d:28:ac:fc:60:c1:ae:12:5a:67:78:58: 45:47:94:a3:46:50:c7:49:e5:e6:16:09:cc:d1:35:b8:fb:52: eb:69:46:9c:b8:eb:7e:66:8f:ca:ee:70:56:f2:48:9f:10:d9: 4a:7c:50:60:a4:59:22:0a:90:6b:f1:62:11:5d:4c:59:2c:5d: 02:18:2a:d6:f9:6f:bc:25:c2:31:3d:6e:78:07:c4:5f:85:46: 5e:04:e2:a4:8d:72:80:b6:5e:fa:02:3b:cd:92:38:5e:df:cb: 55:64:49:81:0b:7f:fb:58:ee:73:8b:9f:44:6a:9b:4d:de:5c: 60:d1:c8:09:e5:4a:38:9e:39:2b:51:85:90:9d:7a:e8:d8:72: ff:9a:6f:fe:32:5f:23:74:19:e5:7e:bb:c8:2d:40:94:81:eb: 02:b3:d2:ee:b3:28:9d:fe:10:4c:d7:53:77:4d:12:45:2f:e0: 65:69:3d:8d:3d:d0:35:45:61:9d:85:48:1f:6f:d2:dc:29:78: f6:38:0e:4d:d8:39:38:3d:c5:38:9b:fc:8f:9e:e7:ab:48:db: 9d:0f:f8:9d:68:d6:b1:43:4c:f7:0e:2a:9c:49:de:bb:81:a5: 0a:21:82:36:d7:13:c2:0d:10:d2:cf:5d:2b:7b:71:89:2e:fa: e5:a0:9f:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5MjExMTAvBgNVBAUTKDA4MUVBMjcwQTlGNEIzNkIwRUM4OTZBMkQyMTQ4RUU0 RTkzRTVGMkIwHhcNMjYwODE5MDMzNTA5WhcNMjYwODI2MDMzNTA5WjAYMRYwFAYD VQQDEw02YTg1MjQ2ZS1iYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsFofqTQFwcG5fqUpAz7/WOk3Eip28F73ZpAFezB+iN5xyce8sq4H8vrKFiD AnaKlnX4cI35XSAITfqK/wyfFqVh2tKRQO73SfjuPiquxPUjnlvJxrHrBaFE/r43 hXxtUDEmTWsaLC5bG55QMjoCRt/5zVHSBxBR9IbAh53EBJfAEwVwJ8MCL/DjaZQn r6Ae2pstaJLhpzpacxG01azb6WWLz2Fhq5UTKmD13iOkNsYTv39TLl5yIArhfh+i 9ERsrlmhouY8dsFURniVRs1Z1gnUAbW9o/erCRcEb/SfXA20DTQg9ufboKfBki6S 3n0xfwjUNcn7vemRt1453laLywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM57G06t AdhzJe/7OkN+ilN2lx2oMB8GA1UdIwQYMBaAFAgeonCp9LNrDsiWotIUjuTpPl8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjkyMS9EREI4RTE0Qzc1 NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMyc095SmFpMGhTTzVPay1Y eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCNmljS24wczJzT3lKYWkwaFNPNU9rLVh5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjkyMS9EREI4RTE0Qzc1NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMy c095SmFpMGhTTzVPay1YeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcUQQObQqXSis/GDBrhJaZ3hYRUeUo0ZQx0nl5hYJzNE1uPtS62lGnLjrfmaP yu5wVvJInxDZSnxQYKRZIgqQa/FiEV1MWSxdAhgq1vlvvCXCMT1ueAfEX4VGXgTi pI1ygLZe+gI7zZI4Xt/LVWRJgQt/+1juc4ufRGqbTd5cYNHICeVKOJ45K1GFkJ16 6Nhy/5pv/jJfI3QZ5X67yC1AlIHrArPS7rMonf4QTNdTd00SRS/gZWk9jT3QNUVh nYVIH2/S3Cl49jgOTdg5OD3FOJv8j57nq0jbnQ/4nWjWsUNM9w4qnEneu4GlCiGC NtcTwg0Q0s9dK3txiS765aCfog== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:00 2026 by rpki-client