$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft File: o9wYjy1VW0FacV8lkDahpg_8uNk.mft (raw, json) Hash identifier: ozCtITeUpZRbBtVpGPCopQw1oFi0ZLTg6jl0Wxo83Ig= Subject key identifier: B8:3E:D9:72:DE:9E:EE:4C:2D:17:0C:C1:3C:77:91:B6:F0:52:D9:92 Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 Certificate issuer: /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft Manifest number: 02EC Signing time: Wed 19 Aug 2026 01:35:10 +0000 Manifest this update: Wed 19 Aug 2026 01:35:10 +0000 Manifest next update: Wed 26 Aug 2026 01:35:10 +0000 Files and hashes: 1: o9wYjy1VW0FacV8lkDahpg_8uNk.crl (hash: 09I0WrdlrCQ1tEIIOMm2fI/DKlwg+CZiuam/CMIoMAo=) 2: 2A766EA23A3411EDA1B7D863C4F9AE02.roa (hash: 4HjNDDfKFJrgWK5K6rpjz8dvflAC5Isd+SEG9GMgXhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Validity Not Before: Aug 19 01:35:10 2026 GMT Not After : Aug 26 01:35:10 2026 GMT Subject: CN=6a85084e-4687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:1a:fb:f9:e9:90:23:f6:52:e2:f2:df:bc: f6:bc:82:b0:58:ab:05:7f:b5:e3:b9:56:06:1f:2b: 25:d2:94:8d:90:de:04:78:ff:7a:56:06:46:8f:8d: c3:62:cc:7c:e2:f7:8f:57:7d:7d:cd:27:b3:1d:cb: 72:cd:73:6a:22:24:0c:db:b6:0a:39:91:ea:e1:51: 88:38:1c:b7:65:8c:db:22:77:5f:3a:a2:48:74:cf: a2:5f:a3:93:b8:22:c9:47:49:24:39:a5:aa:4a:56: ea:39:2b:cd:b4:2b:ab:96:2e:a9:7a:5a:60:92:a8: cc:a5:43:46:e1:a7:2b:72:d7:fa:70:62:7a:18:29: 2c:c4:d5:42:0a:29:f9:c8:60:06:1d:9f:88:b3:5a: 8e:28:37:15:31:ac:33:af:29:e1:30:11:b9:07:0e: 6a:a7:7a:30:f0:57:11:e9:3e:da:0d:77:23:dc:2a: 9b:80:51:18:79:f8:2d:9e:15:c3:18:42:80:51:d8: ea:b8:3e:2e:59:8c:5e:34:a2:35:87:76:f0:09:87: 62:8e:4a:05:c6:a0:3b:03:cc:3a:59:9a:16:f9:ea: 39:4a:68:c3:70:60:b0:63:7f:0f:5f:cb:47:61:76: 1f:44:0e:2a:92:06:00:78:35:a3:93:08:4f:f6:3b: 00:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3E:D9:72:DE:9E:EE:4C:2D:17:0C:C1:3C:77:91:B6:F0:52:D9:92 X509v3 Authority Key Identifier: keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:26:56:82:c6:c4:6f:f3:d2:2c:3d:82:fd:37:ff:92:6e:50: 77:cd:c6:d5:64:39:bb:7d:69:4c:b2:85:7e:bb:17:93:77:e8: b1:4f:2f:64:c8:e1:26:39:e6:0f:cd:ac:54:7d:26:1c:81:e4: 40:a3:21:5a:69:33:27:81:6d:e8:3e:e8:e2:f4:1a:c9:a9:c4: 6a:af:98:38:77:b0:0a:5a:5c:dc:b7:e9:52:bd:20:07:db:f1: 8b:6c:21:dd:2c:66:69:54:6e:5c:4d:de:7a:63:67:28:4a:a4: 34:ca:b8:07:a2:dd:e9:4b:cb:b5:11:4e:9e:8f:26:85:8d:43: 91:72:53:f5:f2:d7:cb:3c:a6:4a:37:c9:bb:8b:9d:52:5a:92: bf:af:37:f1:d5:a3:6c:40:05:e0:65:31:a4:f0:4b:da:c4:51: 66:e7:e3:ef:8f:b6:76:8e:19:4d:d9:66:13:d0:fd:18:33:27: 28:2a:e9:80:f5:4a:c3:ca:e9:29:dd:e3:67:1f:1f:5f:b4:0b: 2f:ab:69:d5:dc:ee:6c:a1:fc:14:f8:88:83:db:44:26:6e:e8: 36:86:3b:7b:90:40:54:c4:ca:be:fd:40:16:7d:17:65:05:e8: 84:82:26:88:78:5b:1f:75:bb:2e:c9:91:f2:dc:7d:4b:27:1f: ae:8b:6b:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGNjgxMTAvBgNVBAUTKEEzREMxODhGMkQ1NTVCNDE1QTcxNUYyNTkwMzZBMUE2 MEZGQ0I4RDkwHhcNMjYwODE5MDEzNTEwWhcNMjYwODI2MDEzNTEwWjAYMRYwFAYD VQQDEw02YTg1MDg0ZS00Njg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKoa+/npkCP2UuLy37z2vIKwWKsFf7XjuVYGHysl0pSNkN4EeP96VgZGj43D Ysx84vePV319zSezHctyzXNqIiQM27YKOZHq4VGIOBy3ZYzbIndfOqJIdM+iX6OT uCLJR0kkOaWqSlbqOSvNtCurli6pelpgkqjMpUNG4acrctf6cGJ6GCksxNVCCin5 yGAGHZ+Is1qOKDcVMawzrynhMBG5Bw5qp3ow8FcR6T7aDXcj3CqbgFEYefgtnhXD GEKAUdjquD4uWYxeNKI1h3bwCYdijkoFxqA7A8w6WZoW+eo5SmjDcGCwY38PX8tH YXYfRA4qkgYAeDWjkwhP9jsAiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLg+2XLe nu5MLRcMwTx3kbbwUtmSMB8GA1UdIwQYMBaAFKPcGI8tVVtBWnFfJZA2oaYP/LjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEY2OC82QjYwQkZCQTNB MzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcwRmFjVjhsa0RhaHBnXzh1 TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285d1lqeTFWVzBGYWNWOGxrRGFocGdfOHVOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEY2OC82QjYwQkZCQTNBMzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcw RmFjVjhsa0RhaHBnXzh1TmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUiZWgsbEb/PSLD2C/Tf/km5Qd83G1WQ5u31pTLKFfrsXk3fosU8vZMjhJjnm D82sVH0mHIHkQKMhWmkzJ4Ft6D7o4vQayanEaq+YOHewClpc3LfpUr0gB9vxi2wh 3SxmaVRuXE3eemNnKEqkNMq4B6Ld6UvLtRFOno8mhY1DkXJT9fLXyzymSjfJu4ud UlqSv6838dWjbEAF4GUxpPBL2sRRZufj74+2do4ZTdlmE9D9GDMnKCrpgPVKw8rp Kd3jZx8fX7QLL6tp1dzubKH8FPiIg9tEJm7oNoY7e5BAVMTKvv1AFn0XZQXohIIm iHhbH3W7LsmR8tx9Sycfrotr4A== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:10 2026 by rpki-client