$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: 5hWMc1sNzEevANAEat6VUJW/nmD34CGrr0j7ND+UYOo= Subject key identifier: 21:60:BF:60:C3:81:3A:54:A0:21:76:64:2F:1B:FB:1F:15:B7:BF:F1 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 023E Signing time: Wed 19 Aug 2026 03:06:15 +0000 Manifest this update: Wed 19 Aug 2026 03:06:15 +0000 Manifest next update: Wed 26 Aug 2026 03:06:15 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: 3a/9IA5gIOZYoXBvVMAXgJxt+ShYNa4n1PDryS0oCOA=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: G4c9qIHjh7jRuzT8uRtPVyKbehGwTJD3pzh2RMSA5FQ=) 3: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: /Ca02zsxpAL8gcjil39VFFafzNLGZS+o8ZdBBpzgYJE=) 4: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: kQlooTOYF7DNmDZKuzweY7EEd5/y9UZLGCRSSGQFlGE=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: +ktnd6zho24yZwUVIDb8JpM0wNDX8OLmDRgr8JefA9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Aug 19 03:06:15 2026 GMT Not After : Aug 26 03:06:15 2026 GMT Subject: CN=6a851da7-f4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:e2:9c:14:ec:2b:62:ff:f8:0a:57:ba:79: bf:3a:6f:bf:cd:cc:47:ec:04:69:68:07:76:83:d0: 31:58:a4:17:5e:5d:8d:0f:6f:2f:a7:cd:23:6d:49: a2:d1:54:92:3f:f0:bb:c6:97:6a:ef:c2:fd:16:e0: 05:40:77:84:df:4b:1b:5f:07:41:67:1b:bf:a4:fe: 03:33:52:13:0c:08:43:e1:76:23:76:38:60:60:e5: 34:45:5f:b4:02:cb:fb:90:e9:e3:6d:26:22:aa:d3: 64:6b:8a:76:31:38:de:f4:71:06:cf:3f:6a:1f:e0: 4e:82:ce:f1:a7:57:e3:a9:cd:89:6a:20:4f:68:6e: 5e:b1:49:d4:eb:ad:5c:58:b7:88:0b:a2:d5:1f:d8: c2:df:8b:b4:25:c9:c8:7c:bd:27:05:d4:2d:a9:89: 60:84:a9:26:80:c4:9e:05:61:bf:dc:f8:24:be:39: ab:c3:d0:fe:5d:6b:74:68:77:87:bb:1c:07:e6:57: ec:27:5e:62:ef:0e:51:8d:0c:98:88:0a:b7:2a:c9: b6:36:df:e0:f3:2f:2c:0f:90:2e:e9:ff:ec:d0:0a: 01:b7:be:71:98:e6:d1:67:58:02:14:3d:7f:b0:49: c3:58:78:13:d1:72:21:78:de:d7:54:7c:fd:0e:b9: 06:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:BF:60:C3:81:3A:54:A0:21:76:64:2F:1B:FB:1F:15:B7:BF:F1 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:27:2b:16:82:39:d9:50:42:09:bf:4e:ff:61:e8:f1:c3:b6: 23:82:52:49:43:e7:c1:43:77:d5:d0:49:c8:2a:f0:a0:53:1e: b9:2e:3f:47:35:a2:9b:56:b8:1c:53:e9:53:af:fd:07:55:ad: 54:a7:af:95:c6:18:6e:26:48:e3:c0:d2:d4:90:d9:c9:94:73: 59:f2:c9:ac:9f:90:4e:ea:a5:01:03:fc:99:d0:02:e4:67:b8: 7f:2d:28:de:fd:c2:e8:89:14:41:62:bd:49:15:7e:f4:4a:a7: 99:42:a5:b2:a1:15:bc:3e:82:6c:6b:18:6e:1e:5a:20:5b:65: ca:dd:91:f7:d2:b1:5a:f9:99:00:8b:ce:76:53:2e:62:bf:ac: 2f:51:e6:e9:70:48:a7:ac:3d:97:a4:b3:3e:f3:32:27:6f:d1: b4:ff:52:20:c8:39:a7:95:b7:38:52:70:65:80:8b:b7:45:67: e7:73:99:52:06:e0:cc:c6:57:0c:d8:87:3c:8e:7b:cb:07:11: a3:10:9c:bf:9a:41:95:72:f3:13:f9:41:7a:b0:e8:e8:cf:83: 2c:7c:64:04:c5:80:fa:d6:51:99:5a:0a:5d:32:e6:5d:f4:a0: b7:d0:a5:bc:11:8f:9d:d7:41:dc:df:09:16:7d:e5:d9:06:72: bc:d9:ba:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjYwODE5MDMwNjE1WhcNMjYwODI2MDMwNjE1WjAYMRYwFAYD VQQDEw02YTg1MWRhNy1mNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjninBTsK2L/+ApXunm/Om+/zcxH7ARpaAd2g9AxWKQXXl2ND28vp80jbUmi 0VSSP/C7xpdq78L9FuAFQHeE30sbXwdBZxu/pP4DM1ITDAhD4XYjdjhgYOU0RV+0 Asv7kOnjbSYiqtNka4p2MTje9HEGzz9qH+BOgs7xp1fjqc2JaiBPaG5esUnU661c WLeIC6LVH9jC34u0JcnIfL0nBdQtqYlghKkmgMSeBWG/3Pgkvjmrw9D+XWt0aHeH uxwH5lfsJ15i7w5RjQyYiAq3Ksm2Nt/g8y8sD5Au6f/s0AoBt75xmObRZ1gCFD1/ sEnDWHgT0XIheN7XVHz9DrkGpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFgv2DD gTpUoCF2ZC8b+x8Vt7/xMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiCcrFoI52VBCCb9O/2Ho8cO2I4JSSUPnwUN31dBJyCrwoFMeuS4/RzWim1a4 HFPpU6/9B1WtVKevlcYYbiZI48DS1JDZyZRzWfLJrJ+QTuqlAQP8mdAC5Ge4fy0o 3v3C6IkUQWK9SRV+9EqnmUKlsqEVvD6CbGsYbh5aIFtlyt2R99KxWvmZAIvOdlMu Yr+sL1Hm6XBIp6w9l6SzPvMyJ2/RtP9SIMg5p5W3OFJwZYCLt0Vn53OZUgbgzMZX DNiHPI57ywcRoxCcv5pBlXLzE/lBerDo6M+DLHxkBMWA+tZRmVoKXTLmXfSgt9Cl vBGPnddB3N8JFn3l2QZyvNm64w== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:24 2026 by rpki-client