$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: pu+yMR+W8R9B+xt/iQnpyvkuox+MTb+2BdF9N2ENZtk= Subject key identifier: 9E:DF:71:DC:18:B8:3F:35:1E:4B:E3:76:56:00:2F:A5:EC:A3:E0:BA Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0DAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0D67 Signing time: Mon 24 Aug 2026 18:08:47 +0000 Manifest this update: Mon 24 Aug 2026 18:08:46 +0000 Manifest next update: Mon 31 Aug 2026 18:08:46 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: UlCGqMaafVDoJSIkbC0W+kqiTPvYqqZbwmLIqfVBEkQ=) 2: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: xoY8l/E5wRhZGsHx91C6s9eN6yf4aMdTOO06Om2k+GE=) 3: 1Tpg7YzcQziHe-csGNB6dRnrmak.asa (hash: sbQuTo/lyfQ4HCZCJQERF/0zsihc9Q3a5ZscI3SwxpQ=) 4: 61865C96599711F1904BB35BB3833773.roa (hash: gDZJAF+J4vmJUn7JgYk0JFg5PWvXINC2m+mUpnyhSCE=) 5: 12561046368911EEA0CB766BC4F9AE02.roa (hash: YI5D+P7yiPBL/gfzmw4F23rfItyHBBhKoDb4UnkvvPE=) 6: ZalB4shFIqzfzkOMiSb08RSiuXk.asa (hash: PYxtm7mxeSPHemXsmYgJ5cLgPaxbB7guU5ug9r5jFKg=) 7: lhlS5_TEJHo3UVrOxBep1TpMUiA.asa (hash: LeBm2quaHok7A5PLZUmdjey6RQlm/dDEh2VyeIlI3tQ=) 8: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: lszQ8yUB/N2uYLH7nBTD6MNw6FLEt393aCgDSU4ngis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 18:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3501 (0xdad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Aug 24 18:08:46 2026 GMT Not After : Aug 31 18:08:46 2026 GMT Subject: CN=6a8c88af-732a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:10:8b:ec:86:86:95:61:1a:63:c1:9a:65:7a: 5a:f3:27:6e:2b:04:ce:58:d7:5c:2c:80:ec:65:07: cb:0d:4e:6e:54:8b:e9:ee:35:e3:e9:ea:ba:c9:00: 25:fc:8b:ea:52:d8:b7:88:52:e3:42:62:31:2d:2f: 0d:f8:9c:3c:a5:5a:a2:af:b9:e4:01:c7:51:88:0f: 0a:cb:31:3a:30:d9:fc:74:88:27:3b:e9:13:23:cf: 8b:f7:bb:ac:7c:f6:5f:b0:d1:b3:bb:bf:e3:0f:44: 37:58:d5:3e:72:e1:de:fa:1e:28:7b:89:75:b4:6d: 7f:76:65:2b:0d:78:1f:10:66:3e:70:13:a7:37:16: 4c:db:c1:69:05:b9:6a:4e:1b:ff:13:61:20:46:b9: 3c:3a:dd:42:25:50:20:6a:fc:60:b3:20:65:09:db: 4f:94:fa:46:e5:fb:25:82:02:2d:1f:2a:2a:9b:af: ba:25:de:3a:e2:04:91:4d:a6:f4:37:78:79:c2:8b: 87:3f:c7:c5:99:e3:51:b6:8d:75:a4:7b:eb:66:0f: 28:c0:bb:b0:5a:5c:fa:9e:96:31:b6:b0:ec:c8:2f: fd:56:fd:85:7e:67:f7:7e:0a:a6:f2:e0:bc:23:d7: 39:19:cf:52:d9:37:9e:76:bc:d3:6f:32:a7:09:f9: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DF:71:DC:18:B8:3F:35:1E:4B:E3:76:56:00:2F:A5:EC:A3:E0:BA X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d6:38:99:2b:c8:c7:77:4d:91:1e:51:9c:c0:61:4a:21:78: 85:c3:b4:28:78:4d:65:4d:ba:0b:40:0a:eb:34:ab:83:92:30: 58:c3:7b:98:eb:8d:26:47:13:79:63:71:c9:c4:b5:87:34:2a: 83:b1:a3:7c:73:f3:77:16:23:f5:7f:ba:41:15:b4:e4:aa:dc: 10:f4:de:42:5f:e5:eb:74:9e:31:99:ae:89:90:cd:d5:ef:ac: 2c:f9:fc:10:b7:60:8d:ca:68:31:87:6f:2a:f7:b0:00:69:02: 4f:75:71:2e:84:8b:c3:67:fc:cd:e5:b6:49:6a:ad:ce:f9:26: d3:eb:1d:62:8c:ae:02:7a:cd:d7:60:5c:3c:c3:33:11:af:38: 65:69:ef:2d:bc:9d:e1:9a:0c:a0:b5:c5:05:f8:6b:6f:13:ec: 68:16:e3:ae:c1:c5:9e:04:e4:74:90:db:02:a4:59:49:cf:71: d0:aa:5a:6d:ca:a5:68:31:85:14:3f:dd:47:2f:1f:47:76:b8: ca:5f:8d:f3:b5:2f:f2:90:fb:77:85:f0:2d:35:47:2a:6a:1b: b0:23:1a:0e:75:d9:98:ed:f3:a5:a2:e7:c9:31:b6:cd:f5:ce: 2d:b2:3e:34:69:38:f7:43:eb:ee:ac:3d:54:28:64:41:f7:73: bb:58:40:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjYwODI0MTgwODQ2WhcNMjYwODMxMTgwODQ2WjAYMRYwFAYD VQQDEw02YThjODhhZi03MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RCL7IaGlWEaY8GaZXpa8yduKwTOWNdcLIDsZQfLDU5uVIvp7jXj6eq6yQAl /IvqUti3iFLjQmIxLS8N+Jw8pVqir7nkAcdRiA8KyzE6MNn8dIgnO+kTI8+L97us fPZfsNGzu7/jD0Q3WNU+cuHe+h4oe4l1tG1/dmUrDXgfEGY+cBOnNxZM28FpBblq Thv/E2EgRrk8Ot1CJVAgavxgsyBlCdtPlPpG5fslggItHyoqm6+6Jd464gSRTab0 N3h5wouHP8fFmeNRto11pHvrZg8owLuwWlz6npYxtrDsyC/9Vv2Ffmf3fgqm8uC8 I9c5Gc9S2TeedrzTbzKnCfmvGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7fcdwY uD81HkvjdlYAL6Xso+C6MB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhdY4mSvIx3dNkR5RnMBhSiF4hcO0KHhNZU26C0AK6zSrg5IwWMN7mOuNJkcT eWNxycS1hzQqg7GjfHPzdxYj9X+6QRW05KrcEPTeQl/l63SeMZmuiZDN1e+sLPn8 ELdgjcpoMYdvKvewAGkCT3VxLoSLw2f8zeW2SWqtzvkm0+sdYoyuAnrN12BcPMMz Ea84ZWnvLbyd4ZoMoLXFBfhrbxPsaBbjrsHFngTkdJDbAqRZSc9x0KpabcqlaDGF FD/dRy8fR3a4yl+N87Uv8pD7d4XwLTVHKmobsCMaDnXZmO3zpaLnyTG2zfXOLbI+ NGk490Pr7qw9VChkQfdzu1hA0A== -----END CERTIFICATE-----Generated at Mon Aug 24 21:01:05 2026 by rpki-client