$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: d0kY2C73vhWikI9ToaNkTQt7aN0J/Xlmx2jYYh9PgP0= Subject key identifier: A8:C5:2D:0D:D8:C3:C9:51:C0:91:04:96:F2:BC:52:F8:E1:5A:AD:A4 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 025F Signing time: Wed 19 Aug 2026 02:43:01 +0000 Manifest this update: Wed 19 Aug 2026 02:43:01 +0000 Manifest next update: Wed 26 Aug 2026 02:43:01 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: DAdBXTgpcAkTxug8K2Sv/MczqW8hYgAW9bYg/dsIuC8=) 2: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: DAgB41BSoNhh0yFXjuFcNCWHBOk0V20tJ49xk0mHkPA=) 3: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: jxIjxLYPAa1qnB0jFN6nM/shPAzKUb5KsBQXc5gos7U=) 4: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: rm62Zobf+vSIv757GLuOQnassUi+6YwaOUBaAetb62A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Aug 19 02:43:01 2026 GMT Not After : Aug 26 02:43:01 2026 GMT Subject: CN=6a851835-0850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:77:91:3c:40:e8:2b:6b:0d:ca:31:45:25: 54:b6:ed:c6:2c:31:19:12:52:42:0e:bf:10:62:a6: d2:77:16:bc:e8:cd:19:ad:13:09:73:31:1f:c2:31: 24:ea:f7:28:fb:8d:80:1c:af:91:6e:95:35:6e:95: 14:fc:30:67:13:7f:58:5c:54:30:2e:c7:7e:dd:a3: e8:ab:1f:f6:30:3a:ac:c2:24:a4:97:bd:18:24:2e: f2:d5:5d:d4:15:f9:3e:fb:9f:11:da:38:7e:49:65: 8a:0d:4d:11:75:a7:02:dd:ee:aa:3f:ba:69:99:77: fa:3e:3e:92:4d:e5:dd:8f:f9:17:19:03:45:67:43: f1:0c:cf:4b:70:24:9a:e9:2e:b1:a2:d8:e9:49:77: 7a:39:6c:00:81:aa:9c:68:4c:74:68:9b:93:53:56: 4a:e8:bc:bd:bf:45:a5:26:d0:40:da:eb:b4:c6:5c: 97:5c:6a:18:38:04:90:52:d6:fe:8e:d8:24:ae:6a: 8a:a6:05:eb:de:f8:64:39:42:14:52:ce:51:53:52: 6f:ff:1d:fb:4a:6e:dd:2d:25:18:ec:b4:0c:83:49: c5:4f:87:6c:96:ab:0e:f8:a7:80:4d:d9:4a:1a:05: 2d:0b:4b:1d:b3:22:06:07:86:a6:0d:8a:f8:b5:c8: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C5:2D:0D:D8:C3:C9:51:C0:91:04:96:F2:BC:52:F8:E1:5A:AD:A4 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:87:fc:63:84:52:aa:f5:aa:8a:b8:4f:a1:2a:05:91:c3:87: 59:51:e2:97:fa:6e:37:6f:be:48:9e:b9:6e:49:e8:07:8e:24: 44:77:e6:9f:c4:b3:17:5c:01:37:15:6e:aa:96:d3:2b:1d:44: 8d:ca:55:e3:69:89:9d:c6:66:e1:d2:7d:ae:52:66:88:13:b0: d5:9e:29:e8:e0:3c:e2:b2:11:48:da:57:fb:69:77:66:be:fd: 1a:1c:f2:38:c1:12:10:bb:67:5c:fd:52:2d:98:4d:b2:b4:bc: c6:de:d9:c6:50:7d:4a:fe:2c:2d:af:ee:6c:a6:60:fc:c3:63: 9b:29:92:c1:ac:de:c9:24:71:39:6c:b6:a5:c6:c2:17:39:22: cd:bd:bf:cc:07:00:73:99:2f:83:83:14:51:f7:ed:eb:32:9d: 3e:15:73:12:3b:a3:5f:0a:9a:b5:ab:a2:af:ac:ee:0a:44:db: 6b:78:cd:46:d5:f7:87:8b:8c:c3:9e:39:f1:4d:97:4e:01:f1: 65:d9:cc:cf:f3:6d:50:ca:e7:9f:07:60:83:01:a2:ae:71:1f: 05:b1:e3:1d:07:0a:be:74:47:4b:0e:60:5e:9e:56:e9:4b:82: af:71:d8:db:fe:65:56:b0:c0:9e:68:82:5d:20:f7:c3:fa:f7: 50:86:e3:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwODE5MDI0MzAxWhcNMjYwODI2MDI0MzAxWjAYMRYwFAYD VQQDEw02YTg1MTgzNS0wODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlDt3kTxA6CtrDcoxRSVUtu3GLDEZElJCDr8QYqbSdxa86M0ZrRMJczEfwjEk 6vco+42AHK+RbpU1bpUU/DBnE39YXFQwLsd+3aPoqx/2MDqswiSkl70YJC7y1V3U Ffk++58R2jh+SWWKDU0RdacC3e6qP7ppmXf6Pj6STeXdj/kXGQNFZ0PxDM9LcCSa 6S6xotjpSXd6OWwAgaqcaEx0aJuTU1ZK6Ly9v0WlJtBA2uu0xlyXXGoYOASQUtb+ jtgkrmqKpgXr3vhkOUIUUs5RU1Jv/x37Sm7dLSUY7LQMg0nFT4dslqsO+KeATdlK GgUtC0sdsyIGB4amDYr4tciyAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjFLQ3Y w8lRwJEElvK8UvjhWq2kMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT4f8Y4RSqvWqirhPoSoFkcOHWVHil/puN2++SJ65bknoB44kRHfmn8SzF1wB NxVuqpbTKx1EjcpV42mJncZm4dJ9rlJmiBOw1Z4p6OA84rIRSNpX+2l3Zr79Ghzy OMESELtnXP1SLZhNsrS8xt7ZxlB9Sv4sLa/ubKZg/MNjmymSwazeySRxOWy2pcbC Fzkizb2/zAcAc5kvg4MUUfft6zKdPhVzEjujXwqatauir6zuCkTba3jNRtX3h4uM w5458U2XTgHxZdnMz/NtUMrnnwdggwGirnEfBbHjHQcKvnRHSw5gXp5W6UuCr3HY 2/5lVrDAnmiCXSD3w/r3UIbjyw== -----END CERTIFICATE-----Generated at Thu Aug 20 23:37:38 2026 by rpki-client