$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: 726zMyvfAx72+jnMZm1sqAWHk6mazOgH2Im7h79yepo= Subject key identifier: D0:12:4C:CB:37:BE:89:FF:74:6F:7E:DB:2F:86:3B:51:BB:2B:1F:AF Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 155C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 152F Signing time: Sat 22 Aug 2026 16:46:05 +0000 Manifest this update: Sat 22 Aug 2026 16:46:04 +0000 Manifest next update: Sat 29 Aug 2026 16:46:04 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: 0TysEuQIDsaMLKEh1n65u73LkgTSG1PrNtKmqFbab6A=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: 8O8JY2NXJlU6iXynIm/TOWGZDFkAjSbZghW1iOqNz4A=) 3: 3A6D0CE4FF3E11F08F73BB4E4C6F56BC.roa (hash: bwrfuXri/6S2vLj8S0q4zXoQ8Drj4P8QgwFZbjgS9OM=) 4: 89567AD686F011F19E006003A7EE528E.roa (hash: dUSLzMUqDsxRAiIEeaK8+FCiCh/s3L2CzoYAjuY8X34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5468 (0x155c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Aug 22 16:46:04 2026 GMT Not After : Aug 29 16:46:04 2026 GMT Subject: CN=6a89d24d-5457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:b7:02:bd:f8:89:53:cb:c4:93:5a:3a:d4: 02:fc:79:f0:a0:a6:02:9c:7e:a3:f1:f7:61:c2:1b: df:51:1e:da:63:c0:d9:ac:aa:86:0e:71:1a:f4:1c: 33:63:c6:c4:a6:e6:98:5e:ad:77:d7:1d:44:eb:37: 86:0c:04:d2:c6:f6:71:f9:c9:c2:a7:27:79:85:79: fe:59:98:1e:26:ad:7c:b7:39:76:01:d1:a6:e7:ac: 8a:13:16:2d:b0:d4:f5:0e:e8:1b:51:e2:d5:73:5d: b5:ef:98:18:27:9c:6b:4e:ff:80:2c:2c:6d:31:15: d2:84:69:ec:ec:f7:8c:62:53:dc:02:d1:01:7c:08: 14:54:56:7b:41:d4:f0:79:4a:4e:87:a9:9a:22:1d: 29:e2:1f:46:da:03:28:b7:9c:20:71:32:82:86:ea: b7:57:13:a2:bb:40:fa:a1:14:cf:74:1e:b7:a3:1c: 2b:c6:0a:0f:b5:b4:8b:2d:19:8f:e7:13:bf:fc:71: 15:16:58:15:66:3d:2f:ae:fe:ad:32:c3:5b:17:02: 35:92:c5:f6:28:f7:73:04:6b:bf:9d:de:53:08:aa: bf:e5:02:15:a7:19:19:2f:2c:88:c9:08:ec:c1:f8: 84:2d:2c:2a:5a:c8:71:95:4a:36:c1:fa:20:7f:06: d5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:12:4C:CB:37:BE:89:FF:74:6F:7E:DB:2F:86:3B:51:BB:2B:1F:AF X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:76:a1:4f:31:0e:19:9c:4c:b5:b2:5f:b7:ad:54:0f:0c:d1: 73:96:6d:3b:22:b6:c4:8c:67:45:c6:e7:0e:dc:91:6d:c3:c6: c4:65:f7:a4:48:59:df:5f:96:00:c9:eb:ef:b3:5d:fe:ac:63: 88:df:f1:b7:04:2e:4f:ef:b9:3b:04:b6:4c:c5:d1:8a:ac:b7: ac:57:ca:7b:4b:c5:a4:85:ef:2b:dd:e8:17:0c:a2:7d:61:15: 27:da:8f:ef:d9:d0:4d:91:2e:f9:25:2b:84:1a:d6:6a:92:62: aa:bd:d4:26:16:66:f8:4e:78:12:c2:c2:c5:b1:d5:46:e4:2e: 2b:d7:8e:6c:ca:a7:99:22:e5:03:d4:16:9f:3d:db:9e:b1:01: 47:c8:67:b7:39:4c:87:7d:f8:27:f8:1e:0a:eb:9f:41:27:17: 91:af:ef:00:41:a1:76:bd:6a:41:8e:f0:b5:48:fe:88:0a:cb: 05:1b:ea:9c:05:71:6b:8a:76:93:f2:f3:91:c9:5f:c7:01:12: 45:86:1b:6d:5f:cc:56:96:c8:79:d8:83:9e:2a:8b:5d:cc:67: a2:a9:2a:04:db:88:91:b5:4b:37:44:43:86:41:c0:7e:cb:68: e1:15:89:ae:ce:71:83:39:88:06:4b:2e:08:91:2b:59:b1:67: 63:72:b3:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjYwODIyMTY0NjA0WhcNMjYwODI5MTY0NjA0WjAYMRYwFAYD VQQDEw02YTg5ZDI0ZC01NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzy3Ar34iVPLxJNaOtQC/HnwoKYCnH6j8fdhwhvfUR7aY8DZrKqGDnEa9Bwz Y8bEpuaYXq131x1E6zeGDATSxvZx+cnCpyd5hXn+WZgeJq18tzl2AdGm56yKExYt sNT1DugbUeLVc12175gYJ5xrTv+ALCxtMRXShGns7PeMYlPcAtEBfAgUVFZ7QdTw eUpOh6maIh0p4h9G2gMot5wgcTKChuq3VxOiu0D6oRTPdB63oxwrxgoPtbSLLRmP 5xO//HEVFlgVZj0vrv6tMsNbFwI1ksX2KPdzBGu/nd5TCKq/5QIVpxkZLyyIyQjs wfiELSwqWshxlUo2wfogfwbVzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNASTMs3 von/dG9+2y+GO1G7Kx+vMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAknahTzEOGZxMtbJft61UDwzRc5ZtOyK2xIxnRcbnDtyRbcPGxGX3pEhZ31+W AMnr77Nd/qxjiN/xtwQuT++5OwS2TMXRiqy3rFfKe0vFpIXvK93oFwyifWEVJ9qP 79nQTZEu+SUrhBrWapJiqr3UJhZm+E54EsLCxbHVRuQuK9eObMqnmSLlA9QWnz3b nrEBR8hntzlMh334J/geCuufQScXka/vAEGhdr1qQY7wtUj+iArLBRvqnAVxa4p2 k/LzkclfxwESRYYbbV/MVpbIediDniqLXcxnoqkqBNuIkbVLN0RDhkHAfsto4RWJ rs5xgzmIBksuCJErWbFnY3KzRQ== -----END CERTIFICATE-----Generated at Sat Aug 22 23:38:33 2026 by rpki-client