$ rpki-client -vvf rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft File: T0h-_rfHeWiBVy2X1iVPot21qHw.mft (raw, json) Hash identifier: Mc4KdbD6PRFh8HK70/eaENngJyXT73gPkEj6T2rHrFc= Subject key identifier: 43:50:A6:BC:69:0D:3E:C4:8B:9A:42:0B:0C:F9:71:CC:F9:54:3C:30 Authority key identifier: 4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C Certificate issuer: /CN=A91C32D9/serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft Manifest number: 68 Signing time: Wed 19 Aug 2026 08:43:02 +0000 Manifest this update: Wed 19 Aug 2026 08:43:01 +0000 Manifest next update: Wed 26 Aug 2026 08:43:01 +0000 Files and hashes: 1: T0h-_rfHeWiBVy2X1iVPot21qHw.crl (hash: SU4FkTC4T9G3H57YY02v9dWpw7C+xZKJY9ZzTIjMrXg=) 2: 9DD3FFC6001111F18C67D2A9406F56BC.roa (hash: l4S9gMbXi+gUDu4apCdlLMULJuB61B4wV3lZ30Od2K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C32D9, serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C Validity Not Before: Aug 19 08:43:01 2026 GMT Not After : Aug 26 08:43:01 2026 GMT Subject: CN=6a856c95-2039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:d0:a6:c3:79:3f:51:c6:06:78:ec:89:af: 03:23:c4:e9:a1:2d:c3:cc:a0:c1:e6:76:03:65:7b: c4:8a:0b:38:88:40:fc:4f:30:cb:d5:15:e3:c4:a6: 0b:c2:fa:ab:7b:45:ba:4a:b5:47:f4:a5:da:90:e0: 06:57:30:17:d4:ce:b1:ff:64:8b:71:3c:e2:f5:b2: ac:b5:bb:e1:d8:fd:9f:1e:fc:0b:c2:ea:11:25:a0: d5:05:4e:dc:1a:4c:67:f1:d4:cc:9a:47:0e:4c:4e: 63:8b:fb:dd:3e:08:aa:e3:58:5a:da:d9:50:3d:b7: 6f:a1:b0:60:b1:25:94:ec:08:7e:58:96:d8:2c:d6: 59:5f:55:ae:0a:50:29:8c:10:b7:86:63:fd:37:c6: a4:fb:3f:cc:d7:d0:98:e3:9e:66:7a:9b:76:85:94: 6d:23:a9:0c:a5:e8:8b:76:34:3a:a8:bf:25:8c:8e: bd:51:0b:c9:e0:94:30:8a:c4:ff:b8:af:1d:db:76: dc:cb:ea:c1:55:8e:1c:e0:1d:5d:3d:c9:18:48:a8: cc:de:a7:f9:c9:cb:78:92:11:e4:df:b4:3e:d2:05: 8d:e8:eb:68:66:dd:fd:69:12:e6:c4:3b:00:9c:0f: 89:02:a0:8b:59:54:99:5a:6d:81:66:03:56:5e:8c: 13:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:50:A6:BC:69:0D:3E:C4:8B:9A:42:0B:0C:F9:71:CC:F9:54:3C:30 X509v3 Authority Key Identifier: keyid:4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:04:d8:a3:ce:7f:b0:80:1f:a6:78:68:71:ac:c2:60:6d:74: 88:da:d9:22:82:48:a9:99:05:17:04:fc:15:9a:b4:e9:4d:86: 4b:70:b3:23:b6:f6:c5:65:3d:df:ce:52:09:b2:0f:54:b4:0a: f7:8b:a7:ea:8f:a2:33:44:cf:b1:92:a4:73:52:7a:32:e0:03: 5d:1a:65:35:86:e6:7e:a0:a8:3b:1d:23:1b:23:e5:7b:90:6d: 1f:24:bd:90:bd:58:f2:6f:57:12:d8:70:92:de:df:b3:ac:bb: c2:95:58:d4:4c:d5:9d:e4:cc:e2:9e:e2:6d:4b:0b:7a:be:26: 6c:03:90:48:d5:aa:85:e9:93:18:df:0e:9c:61:72:c2:49:70: 8b:cb:f9:b0:6d:b2:e7:33:c6:c6:03:3d:22:cd:24:c0:40:15: 5e:86:44:be:2c:19:ba:43:29:ce:2d:59:ab:23:23:42:d1:b6: 48:bc:9b:a1:d4:dc:47:4e:81:e4:8f:90:f3:4f:fd:3d:f1:97: 28:3c:ad:be:e0:ec:d2:12:8f:ac:30:4e:17:d2:23:b7:60:21: 9b:43:ab:16:a8:bc:02:02:94:a0:e5:68:fe:23:9d:39:21:e5: d4:75:90:ed:41:77:dc:63:16:28:0e:d9:3c:6e:f7:e0:ae:55: e7:bf:e6:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzJEOTExMC8GA1UEBRMoNEY0ODdFRkVCN0M3Nzk2ODgxNTcyRDk3RDYyNTRGQTJE REI1QTg3QzAeFw0yNjA4MTkwODQzMDFaFw0yNjA4MjYwODQzMDFaMBgxFjAUBgNV BAMTDTZhODU2Yzk1LTIwMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYn9Cmw3k/UcYGeOyJrwMjxOmhLcPMoMHmdgNle8SKCziIQPxPMMvVFePEpgvC +qt7RbpKtUf0pdqQ4AZXMBfUzrH/ZItxPOL1sqy1u+HY/Z8e/AvC6hEloNUFTtwa TGfx1MyaRw5MTmOL+90+CKrjWFra2VA9t2+hsGCxJZTsCH5Yltgs1llfVa4KUCmM ELeGY/03xqT7P8zX0JjjnmZ6m3aFlG0jqQyl6It2NDqovyWMjr1RC8nglDCKxP+4 rx3bdtzL6sFVjhzgHV09yRhIqMzep/nJy3iSEeTftD7SBY3o62hm3f1pEubEOwCc D4kCoItZVJlabYFmA1ZejBMDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQ1CmvGkN PsSLmkILDPlxzPlUPDAwHwYDVR0jBBgwFoAUT0h+/rfHeWiBVy2X1iVPot21qHww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzMkQ5LzY0REYxMzJDMDAx MTExRjFBQjI3RUQ4MDQwNkY1NkJDL1QwaC1fcmZIZVdpQlZ5MlgxaVZQb3QyMXFI dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVDBoLV9yZkhlV2lCVnkyWDFpVlBvdDIxcUh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz MkQ5LzY0REYxMzJDMDAxMTExRjFBQjI3RUQ4MDQwNkY1NkJDL1QwaC1fcmZIZVdp QlZ5MlgxaVZQb3QyMXFIdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9BNijzn+wgB+meGhxrMJgbXSI2tkigkipmQUXBPwVmrTpTYZLcLMjtvbFZT3f zlIJsg9UtAr3i6fqj6IzRM+xkqRzUnoy4ANdGmU1huZ+oKg7HSMbI+V7kG0fJL2Q vVjyb1cS2HCS3t+zrLvClVjUTNWd5MzinuJtSwt6viZsA5BI1aqF6ZMY3w6cYXLC SXCLy/mwbbLnM8bGAz0izSTAQBVehkS+LBm6QynOLVmrIyNC0bZIvJuh1NxHToHk j5DzT/098ZcoPK2+4OzSEo+sME4X0iO3YCGbQ6sWqLwCApSg5Wj+I505IeXUdZDt QXfcYxYoDtk8bvfgrlXnv+ZQ -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:48 2026 by rpki-client