$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft File: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json) Hash identifier: BPdWLmMnve/ccAg8QkZD2+Fw+jWbXNsdcwTCRI6ssbc= Subject key identifier: 28:DC:6E:00:38:3E:1A:8E:44:10:8F:59:33:DE:8C:A8:DC:B0:F0:22 Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft Manifest number: 159A Signing time: Wed 26 Aug 2026 18:16:07 +0000 Manifest this update: Wed 26 Aug 2026 18:16:07 +0000 Manifest next update: Wed 02 Sep 2026 18:16:07 +0000 Files and hashes: 1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: pONr4P1hRZPU2ir4X2I+aKOIYFETQQZiC92LWfeEfDA=) 2: 44AD0AB263D211F1A27E15F18247A888.roa (hash: NOPqNgzwoZhzP8UCyU95NsNjHRRM8OGqQrXDCqM3uPw=) 3: 7C0FB3666B7F11F0A9B64752C4F9AE02.roa (hash: nHHzFrXJRcXIb2I9fczhxDS1jU+m1O4shauWLpm0dzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 18:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Validity Not Before: Aug 26 18:16:07 2026 GMT Not After : Sep 2 18:16:07 2026 GMT Subject: CN=6a8f2d67-3285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:84:d7:5d:74:83:72:8b:ca:09:e9:c2:1b:78: 6b:f5:e3:0e:ec:f7:d2:e4:59:49:e1:14:47:b3:ea: 3f:06:eb:63:1c:ef:39:be:a7:22:ef:9a:66:b0:60: 3d:26:9d:62:86:89:be:6b:ad:8d:a9:ae:0c:83:7b: 4e:00:39:04:86:86:86:2d:5c:67:27:0b:68:0e:79: 71:68:4a:49:89:59:37:20:b3:7c:88:f5:b5:3b:f9: 62:ba:35:59:54:a5:dc:c5:fd:40:f5:e9:84:68:37: f8:ad:48:0c:1b:14:40:d4:53:21:52:82:c1:19:f4: d7:5f:3f:fe:4b:90:e8:76:e8:fe:b7:b3:39:8a:06: 99:64:4f:9a:18:47:12:83:21:90:7c:84:ea:1b:f2: ed:1c:05:4b:61:b1:2e:e2:23:ed:1e:79:16:96:64: cb:f4:f8:f6:39:59:5f:1b:4a:91:78:57:31:26:b5: 9a:29:3a:b8:7f:48:43:3b:06:84:eb:bf:dd:e8:11: 82:f0:eb:8b:e3:75:0f:da:3f:bc:63:b7:e3:8f:e3: ed:03:e3:81:f6:e6:20:a5:86:bc:3d:b9:a1:8b:0c: c1:7c:ef:1d:65:6f:36:55:e9:bd:54:08:0a:f2:f3: c6:fd:d2:a8:ec:e3:34:42:5f:53:96:69:94:98:93: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DC:6E:00:38:3E:1A:8E:44:10:8F:59:33:DE:8C:A8:DC:B0:F0:22 X509v3 Authority Key Identifier: keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9c:ea:76:ed:97:50:b0:39:00:f7:38:9f:71:5e:42:f8:66: 11:f1:82:66:38:be:cb:15:b0:e5:fa:b6:45:24:e5:3c:b1:a4: 64:26:02:22:31:5a:ef:a9:5b:7a:e2:bd:f1:16:61:3d:c6:c5: c0:bb:fb:09:43:70:9c:01:5c:a7:74:5a:3b:eb:d3:fb:33:16: 74:d5:69:1f:c6:c2:4c:07:d3:aa:81:21:90:e8:44:3d:39:f7: b2:cc:46:48:9d:4f:c3:1d:ba:9d:98:fb:41:16:8c:a3:5e:b7: d7:68:37:12:13:2d:ce:f3:fe:6a:0a:51:13:77:00:d9:49:14: 4a:2e:89:fe:7d:e1:f6:59:5c:0d:68:1d:55:a5:ed:3c:cb:3f: 65:5a:89:66:4d:be:a4:d5:34:fc:24:d7:95:b4:31:a3:7d:14: 07:8f:84:10:35:0f:46:5b:20:7d:01:39:a3:fa:80:ef:80:8b: 07:04:82:dc:4a:7f:18:6f:ee:1b:a6:29:2f:4c:49:ae:86:28: 7d:ba:a7:12:3a:8e:18:09:0f:7a:16:2a:54:26:de:3c:fc:5a: d5:38:72:ec:b5:6c:fe:12:79:9e:28:76:f9:b6:05:50:9c:91: ac:36:df:21:e3:03:02:eb:78:1d:a8:55:59:67:aa:34:87:94: 04:71:b7:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEJFQTdFOThDNUEzRkI1RkJEODMwQTQzNTk0NDFCNDIy NDcyN0M3MkQwHhcNMjYwODI2MTgxNjA3WhcNMjYwOTAyMTgxNjA3WjAYMRYwFAYD VQQDEw02YThmMmQ2Ny0zMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoITXXXSDcovKCenCG3hr9eMO7PfS5FlJ4RRHs+o/ButjHO85vqci75pmsGA9 Jp1ihom+a62Nqa4Mg3tOADkEhoaGLVxnJwtoDnlxaEpJiVk3ILN8iPW1O/liujVZ VKXcxf1A9emEaDf4rUgMGxRA1FMhUoLBGfTXXz/+S5Doduj+t7M5igaZZE+aGEcS gyGQfITqG/LtHAVLYbEu4iPtHnkWlmTL9Pj2OVlfG0qReFcxJrWaKTq4f0hDOwaE 67/d6BGC8OuL43UP2j+8Y7fjj+PtA+OB9uYgpYa8PbmhiwzBfO8dZW82Vem9VAgK 8vPG/dKo7OM0Ql9TlmmUmJMwhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjcbgA4 PhqORBCPWTPejKjcsPAiMB8GA1UdIwQYMBaAFL6n6YxaP7X72DCkNZRBtCJHJ8ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi92cWZwakZvX3RmdllNS1ExbEVHMElrY254 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZxZnBqRm9fdGZ2WU1LUTFsRUcwSWtjbnh5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi92cWZwakZvX3Rm dllNS1ExbEVHMElrY254eTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOpzqdu2XULA5APc4n3FeQvhmEfGCZji+yxWw5fq2RSTlPLGkZCYCIjFa76lb euK98RZhPcbFwLv7CUNwnAFcp3RaO+vT+zMWdNVpH8bCTAfTqoEhkOhEPTn3ssxG SJ1Pwx26nZj7QRaMo16312g3EhMtzvP+agpRE3cA2UkUSi6J/n3h9llcDWgdVaXt PMs/ZVqJZk2+pNU0/CTXlbQxo30UB4+EEDUPRlsgfQE5o/qA74CLBwSC3Ep/GG/u G6YpL0xJroYofbqnEjqOGAkPehYqVCbePPxa1Thy7LVs/hJ5nih2+bYFUJyRrDbf IeMDAut4HahVWWeqNIeUBHG3DA== -----END CERTIFICATE-----Generated at Thu Aug 27 03:10:25 2026 by rpki-client