$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json) Hash identifier: Aah/ok+0u9w3E2lbixb3K/wqdBVJPg++skG3VNfFHcw= Subject key identifier: D0:4F:C1:DF:41:4F:69:DC:F6:AF:48:45:65:EF:44:FF:F5:E6:90:76 Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Certificate serial: 1C37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft Manifest number: 1C2B Signing time: Tue 18 Aug 2026 16:20:11 +0000 Manifest this update: Tue 18 Aug 2026 16:20:11 +0000 Manifest next update: Tue 25 Aug 2026 16:20:11 +0000 Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: rIsS2767ynFudDn1RyVuW8aj/lTs4DNaQaIjhm+Wu28=) 2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7223 (0x1c37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Validity Not Before: Aug 18 16:20:11 2026 GMT Not After : Aug 25 16:20:11 2026 GMT Subject: CN=6a84863b-3ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7a:6e:13:a3:29:d1:45:20:6b:61:d0:10:36: 2f:ae:07:54:d7:9d:41:2f:08:6d:21:7a:cc:1b:94: c5:68:4a:2e:d6:e6:70:cf:50:36:7e:c4:e3:74:a1: 5e:de:92:0e:7c:96:7a:11:63:a2:58:f7:1f:20:ef: b3:4b:f7:e0:f7:a5:ad:3e:a3:1a:ec:7f:a1:8f:b4: f9:00:89:03:ae:00:e2:e6:50:2a:d0:25:07:83:88: 7d:b1:db:7f:f7:52:a3:c0:33:54:33:38:c9:54:5f: f7:19:56:87:5b:e7:98:af:c7:34:f9:20:21:58:fa: 93:8f:dc:e6:af:a9:5e:08:f7:b1:f6:a7:5f:81:e9: 45:b6:5e:fa:ac:0d:aa:da:22:ef:e5:64:86:38:c2: bf:98:5c:fb:32:e6:73:bd:e9:44:cd:55:12:56:6d: b7:42:e0:16:44:9d:ee:7c:52:a3:4f:4b:4e:07:d5: be:fb:44:53:c6:51:b4:72:2a:3f:1f:1f:13:1c:ce: 82:4a:b8:a3:ec:8c:fd:58:28:cf:ef:00:49:3e:05: 62:d0:8a:9a:ce:51:ad:50:dd:bf:90:ff:44:ed:97: 89:ac:65:29:66:59:46:23:cc:47:f6:da:79:17:fa: 32:ea:68:a8:e0:16:8a:e6:7e:bf:2f:25:fa:3b:da: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4F:C1:DF:41:4F:69:DC:F6:AF:48:45:65:EF:44:FF:F5:E6:90:76 X509v3 Authority Key Identifier: keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:76:db:14:bf:a9:c1:41:fa:75:70:0b:b5:2d:42:df:fc:65: 52:55:6c:c1:14:67:ea:83:ce:0d:99:35:8a:72:aa:9c:64:a7: 0c:b8:50:7e:d4:b8:35:a3:ba:bb:28:57:7c:4b:f8:23:bb:d7: 0d:58:a3:9d:81:60:5c:8b:9b:33:db:74:de:5b:b5:57:86:eb: 6e:ba:e2:9c:77:17:86:58:c0:6c:8b:a2:dd:c4:71:e0:df:e3: 97:0e:2c:8d:19:cf:2a:21:3e:82:2e:a2:48:6a:78:aa:67:d1: 9d:40:c7:32:ab:e5:b2:5f:71:ad:dc:2b:30:67:01:c3:65:fa: c0:05:d8:3c:89:99:e0:f9:b7:18:8c:e3:b3:ad:b6:22:2c:34: cb:eb:20:f2:dc:68:1e:91:0a:c0:c4:5f:7c:5d:25:9a:d9:65: 22:9a:a8:33:2f:d9:4f:85:0d:29:8a:b5:5a:4a:ac:03:b0:fe: ee:39:ee:7a:78:f2:80:bb:34:c3:eb:71:c8:5e:60:49:b2:48: a6:94:59:25:fb:9d:b5:14:2c:c3:6c:59:42:cf:b4:a2:d5:e5: e7:42:7c:d9:16:11:c0:5a:0d:9e:b8:84:9c:be:87:c8:64:bc: 35:f8:be:27:71:2f:78:f6:55:e0:57:ed:a4:67:c3:38:cc:7c: ff:4b:b1:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhERDUxMTAvBgNVBAUTKEQ2QzNGODEzNzhFODU0MDA3OEJBNzk5NDQyRUVEQkVD NzgwRTBGN0IwHhcNMjYwODE4MTYyMDExWhcNMjYwODI1MTYyMDExWjAYMRYwFAYD VQQDEw02YTg0ODYzYi0zYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83puE6Mp0UUga2HQEDYvrgdU151BLwhtIXrMG5TFaEou1uZwz1A2fsTjdKFe 3pIOfJZ6EWOiWPcfIO+zS/fg96WtPqMa7H+hj7T5AIkDrgDi5lAq0CUHg4h9sdt/ 91KjwDNUMzjJVF/3GVaHW+eYr8c0+SAhWPqTj9zmr6leCPex9qdfgelFtl76rA2q 2iLv5WSGOMK/mFz7MuZzvelEzVUSVm23QuAWRJ3ufFKjT0tOB9W++0RTxlG0cio/ Hx8THM6CSrij7Iz9WCjP7wBJPgVi0IqazlGtUN2/kP9E7ZeJrGUpZllGI8xH9tp5 F/oy6mio4BaK5n6/LyX6O9pg+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBPwd9B T2nc9q9IRWXvRP/15pB2MB8GA1UdIwQYMBaAFNbD+BN46FQAeLp5lELu2+x4Dg97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOERENS9ENUExQTFDNjEy QTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZBQjR1bm1VUXU3YjdIZ09E M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzUDRFM2pvVkFCNHVubVVRdTdiN0hnT0Qzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OERENS9ENUExQTFDNjEyQTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZB QjR1bm1VUXU3YjdIZ09EM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgXbbFL+pwUH6dXALtS1C3/xlUlVswRRn6oPODZk1inKqnGSnDLhQftS4NaO6 uyhXfEv4I7vXDVijnYFgXIubM9t03lu1V4brbrrinHcXhljAbIui3cRx4N/jlw4s jRnPKiE+gi6iSGp4qmfRnUDHMqvlsl9xrdwrMGcBw2X6wAXYPImZ4Pm3GIzjs622 Iiw0y+sg8txoHpEKwMRffF0lmtllIpqoMy/ZT4UNKYq1WkqsA7D+7jnuenjygLs0 w+txyF5gSbJIppRZJfudtRQsw2xZQs+0otXl50J82RYRwFoNnriEnL6HyGS8Nfi+ J3EvePZV4FftpGfDOMx8/0uxMg== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:26 2026 by rpki-client