$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: R+mfSig9/lOlwiirECwgqhnOjHmcYnqsuTeRFnWs9xg= Subject key identifier: DD:18:B5:19:4E:E3:8D:02:71:BF:2E:70:1E:05:42:4F:0C:38:76:DE Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 0207 Signing time: Wed 19 Aug 2026 03:38:31 +0000 Manifest this update: Wed 19 Aug 2026 03:38:30 +0000 Manifest next update: Wed 26 Aug 2026 03:38:30 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: jumL9LnMV40MkPsbh9uqZ4lIDdGkM3bznePRUUtPBv0=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: jhhoPKCQJggjIDVtaSW5EvrcG1nzgk+baXw2VG2NBWg=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: O6fMeAHfmA8sNvhbsQlGasdy3CAaIHGwFKK0ajItLH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Aug 19 03:38:30 2026 GMT Not After : Aug 26 03:38:30 2026 GMT Subject: CN=6a852537-0a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:c2:fa:3d:19:23:f2:ec:cd:5d:37:1e:44: c9:64:4d:3d:13:0b:81:e8:5d:27:3f:3b:2f:cf:9f: a6:50:8d:15:04:b2:0f:36:2a:47:6d:4d:f6:28:39: c2:fa:da:68:46:0e:65:72:2f:e5:1f:cb:17:a8:85: dd:a1:c3:93:1b:96:0f:53:83:c4:d3:82:54:6b:30: 62:9d:c2:f4:23:0f:37:fc:9f:3a:f6:fd:0f:14:cb: bd:3b:83:73:39:68:37:f0:72:70:97:6d:6f:98:93: cd:0d:58:06:9f:4d:c9:70:3b:88:cf:69:21:15:a0: 93:0f:46:06:e6:81:1c:d5:11:b9:7d:4f:eb:1c:45: 6b:e8:ce:86:b9:06:b0:65:6e:ad:6b:81:0e:71:a3: 99:d8:8f:df:6f:e8:c2:d3:a5:0a:9d:3f:55:6e:c3: c4:bf:d9:51:fe:81:c3:e3:46:f7:d1:46:13:d5:a8: c7:90:e9:b3:22:cd:d4:4c:be:6f:e6:ca:30:ee:64: c2:b1:fb:d3:3d:87:a2:cf:11:62:ab:84:e4:ab:0a: 94:7a:28:26:8a:f5:c8:b3:a2:0b:c0:59:94:d4:18: 0a:33:31:53:2c:8a:83:09:06:96:01:4f:a3:40:ef: 3b:72:68:be:1c:b1:94:54:c5:fa:82:a5:c7:98:ce: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:18:B5:19:4E:E3:8D:02:71:BF:2E:70:1E:05:42:4F:0C:38:76:DE X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:b2:ed:ce:51:94:27:72:a7:03:74:58:71:a6:cc:d6:23:66: fd:3d:ea:d0:40:28:9b:cb:ff:38:6c:42:d4:5c:a5:e3:b0:e6: e2:e3:f2:dc:c2:20:d8:9c:06:e2:18:ad:b5:b2:27:28:32:06: 70:f7:ca:20:26:c1:61:0a:ce:2f:e6:f6:4b:31:f7:aa:20:a0: e6:ab:42:3a:b4:2f:66:c9:c1:8f:80:81:94:d5:f4:3b:ee:98: c2:99:40:46:32:5b:9d:87:b7:47:a7:16:58:a8:c0:38:5e:46: 3e:45:a9:95:24:9e:a6:b6:91:a1:26:84:f8:46:c6:02:ef:a0: e1:50:87:d0:e7:10:11:cd:6e:4f:6f:5d:40:b5:2f:9b:c2:43: d4:e2:62:5d:c4:76:a8:7d:78:f5:c5:e2:5c:53:9f:60:7d:67: 8c:6e:f3:85:3d:05:21:01:9a:ea:03:0b:59:10:f6:48:74:57: 88:60:38:68:3e:9d:85:64:85:b6:cf:05:cb:bd:35:e8:33:a3: 0d:16:b0:ab:a3:19:4a:1f:67:d8:35:6b:e8:ee:24:b8:ae:77: 41:cf:ca:6e:c0:65:87:1e:b5:2c:c7:83:83:13:5b:c9:9d:0f: 4a:35:8a:76:bb:60:0c:47:d6:f1:94:8e:63:71:33:be:cb:e9: ac:b8:97:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYwODE5MDMzODMwWhcNMjYwODI2MDMzODMwWjAYMRYwFAYD VQQDEw02YTg1MjUzNy0wYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssTC+j0ZI/LszV03HkTJZE09EwuB6F0nPzsvz5+mUI0VBLIPNipHbU32KDnC +tpoRg5lci/lH8sXqIXdocOTG5YPU4PE04JUazBincL0Iw83/J869v0PFMu9O4Nz OWg38HJwl21vmJPNDVgGn03JcDuIz2khFaCTD0YG5oEc1RG5fU/rHEVr6M6GuQaw ZW6ta4EOcaOZ2I/fb+jC06UKnT9VbsPEv9lR/oHD40b30UYT1ajHkOmzIs3UTL5v 5sow7mTCsfvTPYeizxFiq4TkqwqUeigmivXIs6ILwFmU1BgKMzFTLIqDCQaWAU+j QO87cmi+HLGUVMX6gqXHmM78TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0YtRlO 440Ccb8ucB4FQk8MOHbeMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARbLtzlGUJ3KnA3RYcabM1iNm/T3q0EAom8v/OGxC1Fyl47Dm4uPy3MIg2JwG 4hittbInKDIGcPfKICbBYQrOL+b2SzH3qiCg5qtCOrQvZsnBj4CBlNX0O+6YwplA RjJbnYe3R6cWWKjAOF5GPkWplSSepraRoSaE+EbGAu+g4VCH0OcQEc1uT29dQLUv m8JD1OJiXcR2qH149cXiXFOfYH1njG7zhT0FIQGa6gMLWRD2SHRXiGA4aD6dhWSF ts8Fy7016DOjDRawq6MZSh9n2DVr6O4kuK53Qc/KbsBlhx61LMeDgxNbyZ0PSjWK drtgDEfW8ZSOY3EzvsvprLiXQQ== -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:22 2026 by rpki-client