$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: rCxRuB+yy2/o6Fd4F9zW5ZahuSnbCJTOd34laDXuLCQ= Subject key identifier: E7:63:25:35:6F:FF:E4:91:06:D6:4C:73:90:DD:9D:B1:90:FD:4F:AF Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 0156 Signing time: Wed 19 Aug 2026 05:47:22 +0000 Manifest this update: Wed 19 Aug 2026 05:47:21 +0000 Manifest next update: Wed 26 Aug 2026 05:47:21 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: XV/YeqERJHqS7IMElEGkcTs7Dg8zeUy9gbHxoFVA27Y=) 2: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: nelUbxnLDLGVDrJHYxOmJHcdHhK23+JstFe8bl+1cNY=) 3: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: MMlCyL0Z5gXZRhtwZCT1rQU/h+kkk4XV7uk2akYMz9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 05:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Aug 19 05:47:21 2026 GMT Not After : Aug 26 05:47:21 2026 GMT Subject: CN=6a85436a-a67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:44:25:0d:d5:62:6e:26:0b:5f:db:31:cf: 58:6a:48:b4:8c:59:9d:e3:d0:c9:9a:bf:9b:b0:d9: 2a:57:45:16:21:d6:c9:50:3b:eb:75:ed:c5:32:0c: 26:9a:1c:d5:0f:6c:d5:06:6e:d2:c9:66:df:25:4e: e9:0a:ec:f5:64:9a:ab:04:99:0b:2f:88:88:dc:62: 17:f2:cc:d7:ff:d7:97:6e:b1:38:84:25:b5:95:31: da:d7:47:61:a6:64:24:2f:4f:cc:29:6a:06:25:59: b2:7c:40:51:c7:0c:eb:84:8e:aa:e5:2b:c6:88:88: 0c:79:3d:7c:e6:c7:36:8a:ab:5a:fa:89:43:b4:76: 9b:18:78:83:4b:04:ec:d9:1c:73:a2:88:be:46:b7: 37:30:3e:c5:d1:ea:c3:f4:44:41:2a:2e:a4:37:78: 8c:f3:55:2d:fa:3e:88:fe:33:7b:5d:fb:b6:22:7a: e7:8e:ac:9c:01:8f:8b:a7:36:c1:15:d1:6c:04:ed: 67:78:34:b9:f3:4b:83:6a:e6:1a:ff:e7:12:1d:5f: c1:3b:71:bd:5b:62:2e:4c:11:05:03:bb:e9:ac:41: 37:0f:43:ee:c7:76:42:2b:54:04:eb:81:97:f1:aa: 4b:41:a8:05:30:af:28:87:0c:55:9a:66:00:3d:8a: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:63:25:35:6F:FF:E4:91:06:D6:4C:73:90:DD:9D:B1:90:FD:4F:AF X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:cf:c1:43:96:50:f3:10:15:15:c0:18:7f:d1:f7:3f:fc:82: e8:9b:94:41:52:8e:8e:11:3a:28:be:05:05:0c:39:13:1c:2e: 63:7b:ef:26:e0:d9:52:aa:81:ce:ea:b5:33:e3:f8:56:0f:7a: 8c:2a:67:49:52:c8:24:fd:11:fc:f8:15:b1:f7:e2:e3:c7:d4: 3a:07:a1:c5:d8:7b:0a:b3:87:71:37:3d:b5:d8:bc:4a:34:76: 05:30:86:ef:f5:61:a3:60:e5:c6:cc:63:bb:86:2a:7c:44:45: ea:59:c8:81:b0:56:ce:07:41:94:2f:c8:d9:05:35:80:8a:24: 23:59:89:19:66:95:f5:db:ca:f1:56:f2:7c:71:0f:02:8f:12: 21:6c:e8:24:0e:5f:a1:3d:34:7d:fc:98:43:49:fc:9c:da:9e: 23:fd:e7:cb:e3:a5:82:a0:74:56:1a:0e:91:9c:20:81:a9:5a: fc:3c:95:e1:92:72:46:9e:93:98:7b:c4:f2:cd:d0:e5:01:fd: 4c:fa:90:08:bc:a4:42:c4:d3:02:3b:48:d1:6b:11:4b:3f:8c: 0b:ad:22:2e:42:f9:3f:5a:60:5e:34:41:52:60:f3:06:56:0f: 42:d9:eb:a9:8c:d2:11:8b:49:8d:cb:9b:3f:a1:9a:d4:59:b7: 21:d5:39:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjYwODE5MDU0NzIxWhcNMjYwODI2MDU0NzIxWjAYMRYwFAYD VQQDEw02YTg1NDM2YS1hNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28FEJQ3VYm4mC1/bMc9Yaki0jFmd49DJmr+bsNkqV0UWIdbJUDvrde3FMgwm mhzVD2zVBm7SyWbfJU7pCuz1ZJqrBJkLL4iI3GIX8szX/9eXbrE4hCW1lTHa10dh pmQkL0/MKWoGJVmyfEBRxwzrhI6q5SvGiIgMeT185sc2iqta+olDtHabGHiDSwTs 2Rxzooi+Rrc3MD7F0erD9ERBKi6kN3iM81Ut+j6I/jN7Xfu2InrnjqycAY+LpzbB FdFsBO1neDS580uDauYa/+cSHV/BO3G9W2IuTBEFA7vprEE3D0Pux3ZCK1QE64GX 8apLQagFMK8ohwxVmmYAPYqqJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOdjJTVv /+SRBtZMc5DdnbGQ/U+vMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASs/BQ5ZQ8xAVFcAYf9H3P/yC6JuUQVKOjhE6KL4FBQw5ExwuY3vvJuDZUqqB zuq1M+P4Vg96jCpnSVLIJP0R/PgVsffi48fUOgehxdh7CrOHcTc9tdi8SjR2BTCG 7/Vho2Dlxsxju4YqfERF6lnIgbBWzgdBlC/I2QU1gIokI1mJGWaV9dvK8VbyfHEP Ao8SIWzoJA5foT00ffyYQ0n8nNqeI/3ny+OlgqB0VhoOkZwggala/DyV4ZJyRp6T mHvE8s3Q5QH9TPqQCLykQsTTAjtI0WsRSz+MC60iLkL5P1pgXjRBUmDzBlYPQtnr qYzSEYtJjcubP6Ga1Fm3IdU5xw== -----END CERTIFICATE-----Generated at Fri Aug 21 02:02:22 2026 by rpki-client