$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json) Hash identifier: WSxDsG4QvZrrF7ufv++Aw/6uc3P6yhwhxp9tWZa+WTI= Subject key identifier: A0:4F:B9:21:94:CE:0C:86:27:78:73:2E:1A:3A:12:DD:C8:40:E0:DE Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Certificate serial: 05DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft Manifest number: 05CA Signing time: Tue 18 Aug 2026 23:24:37 +0000 Manifest this update: Tue 18 Aug 2026 23:24:37 +0000 Manifest next update: Tue 25 Aug 2026 23:24:37 +0000 Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: AGcqucA3XBh//6jWND+k2xzWdadR8FI4dGq6ywIMof0=) 2: F719961A1A8611ECB908E939C4F9AE02.roa (hash: 6Zu4L1ezgqlBaAtZaZeJDXKxjpiSp79xQrfuVaBXNZ8=) 3: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: mFoBkWfLh0LGrOinTzXA38KoXXGaCtnMvz2q3N7gfu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1501 (0x5dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Validity Not Before: Aug 18 23:24:37 2026 GMT Not After : Aug 25 23:24:37 2026 GMT Subject: CN=6a84e9b5-a2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a1:c9:96:66:ba:71:b0:5e:b1:c0:2a:08:41: 8e:c1:42:4c:7d:28:d0:b1:5e:b5:4f:ca:81:e7:4a: 2c:b7:cf:a9:62:06:0e:2e:36:46:e0:c1:37:05:7f: 16:81:97:ad:39:6c:06:71:c8:5b:ad:1d:3c:43:66: 38:17:f9:f4:05:4c:fd:de:f4:a1:55:2a:93:2f:29: bb:3a:6f:33:51:02:7a:43:ea:67:ae:bf:e1:36:f2: 66:18:e7:44:30:b2:bc:61:a1:2a:45:20:77:33:e2: 93:c5:22:d3:8f:21:1e:83:4d:ce:bd:dd:97:e9:ea: 04:c2:83:f4:89:e1:8f:a7:3b:6d:6f:f9:74:4a:ec: b3:9c:2f:f1:a2:86:7f:70:86:a9:e8:70:b8:b3:b8: b8:ba:59:1b:58:5d:4a:43:a4:55:32:be:83:f8:df: f9:35:c6:e2:5a:7d:3d:e0:c4:60:0e:20:0d:8e:ff: 5a:f6:1b:c7:84:43:5e:a2:c4:e9:9e:11:ce:e3:d3: 82:9b:2d:47:e5:4c:f3:17:29:a4:14:8d:fc:94:52: cb:9a:db:9c:64:41:af:b9:55:95:04:7e:58:a6:1d: 54:ad:3f:d4:e9:77:e5:b0:cf:3a:7f:a1:06:a3:3f: 2b:98:9d:b7:e1:4a:75:64:ac:c9:ac:8d:f1:19:04: 18:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4F:B9:21:94:CE:0C:86:27:78:73:2E:1A:3A:12:DD:C8:40:E0:DE X509v3 Authority Key Identifier: keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:12:e2:47:ff:ec:61:f6:3f:d8:62:b3:ff:cc:54:57:fc:0e: a1:13:c7:1d:14:e4:61:c0:5a:98:aa:64:04:77:82:ad:09:69: 03:bf:a2:ab:ea:c1:42:8a:f4:1b:25:7e:58:a2:38:a3:80:6a: d3:db:62:cb:5f:b3:b1:0d:50:39:6f:a0:47:69:0e:aa:6f:f2: 72:10:25:b0:21:4d:98:2f:c6:28:64:1b:81:7d:c3:67:5a:a1: f1:f6:4e:74:d6:f1:a4:dd:6e:0a:d8:aa:34:4b:77:a7:2a:de: b4:fa:4a:8f:68:80:34:8f:e5:56:03:dc:32:d4:36:ed:8d:49: fc:38:d6:52:98:f8:11:06:e3:07:21:68:21:8c:bc:42:da:56: 1c:51:c4:65:a4:8b:fd:c7:01:de:f6:5b:b2:4a:f2:7b:be:cc: fb:ad:32:0b:ab:be:fb:38:e3:e9:9a:56:66:51:d3:5f:cd:ff: 3f:a3:7f:64:4a:ec:51:75:18:5c:30:a4:c7:f8:b3:6c:09:3a: 50:ca:6d:21:6c:8f:61:ec:f8:1a:59:29:87:af:be:17:f7:9a: e3:e4:aa:79:b9:d1:a7:2a:73:ef:ce:42:f5:c7:74:94:98:54: 31:d5:df:98:17:41:f9:b2:7b:db:6b:51:78:e6:82:34:1b:d8: 17:84:f5:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2 MTg3N0FEOUYwHhcNMjYwODE4MjMyNDM3WhcNMjYwODI1MjMyNDM3WjAYMRYwFAYD VQQDEw02YTg0ZTliNS1hMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qHJlma6cbBescAqCEGOwUJMfSjQsV61T8qB50ost8+pYgYOLjZG4ME3BX8W gZetOWwGcchbrR08Q2Y4F/n0BUz93vShVSqTLym7Om8zUQJ6Q+pnrr/hNvJmGOdE MLK8YaEqRSB3M+KTxSLTjyEeg03Ovd2X6eoEwoP0ieGPpzttb/l0SuyznC/xooZ/ cIap6HC4s7i4ulkbWF1KQ6RVMr6D+N/5NcbiWn094MRgDiANjv9a9hvHhENeosTp nhHO49OCmy1H5UzzFymkFI38lFLLmtucZEGvuVWVBH5Yph1UrT/U6XflsM86f6EG oz8rmJ234Up1ZKzJrI3xGQQYTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBPuSGU zgyGJ3hzLho6Et3IQODeMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQxQi82OUY2QjdERTFBODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJL NExkdkVlQTNMT2xoaDNyWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUBLiR//sYfY/2GKz/8xUV/wOoRPHHRTkYcBamKpkBHeCrQlpA7+iq+rBQor0 GyV+WKI4o4Bq09tiy1+zsQ1QOW+gR2kOqm/ychAlsCFNmC/GKGQbgX3DZ1qh8fZO dNbxpN1uCtiqNEt3pyretPpKj2iANI/lVgPcMtQ27Y1J/DjWUpj4EQbjByFoIYy8 QtpWHFHEZaSL/ccB3vZbskrye77M+60yC6u++zjj6ZpWZlHTX83/P6N/ZErsUXUY XDCkx/izbAk6UMptIWyPYez4Glkph6++F/ea4+SqebnRpypz785C9cd0lJhUMdXf mBdB+bJ722tReOaCNBvYF4T1Aw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:02 2026 by rpki-client