$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft File: sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json) Hash identifier: 72IFDGUFGgejO03/GZ1dxI9BTetEYkUt7maJ7oZdsic= Subject key identifier: F9:D5:94:25:0D:4B:AD:84:D8:0C:84:7D:15:29:C3:14:49:48:66:7B Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED Certificate issuer: /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft Manifest number: 0868 Signing time: Tue 18 Aug 2026 21:12:44 +0000 Manifest this update: Tue 18 Aug 2026 21:12:43 +0000 Manifest next update: Tue 25 Aug 2026 21:12:43 +0000 Files and hashes: 1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: PSnUgdlw4ILoDHEfbFTowh/x0vxV0Yy7AUlq1I9GQD8=) 2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: xQ5Osl/g5IBEyHi+z/+JpV9FYOt4yj/DoqbHsRmNM28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 21:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED Validity Not Before: Aug 18 21:12:43 2026 GMT Not After : Aug 25 21:12:43 2026 GMT Subject: CN=6a84cacb-5a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:00:91:9d:10:45:0f:cf:8b:22:cc:bd:86:f7: f3:53:a0:c0:f6:35:15:6e:04:30:83:0f:3f:08:c2: b3:1b:be:ec:81:49:69:ab:dc:95:d9:9e:c0:ca:29: ef:9a:3a:07:c6:3a:1c:bc:ac:d8:67:27:62:41:53: 12:b4:85:b5:dd:45:70:bd:4b:f5:20:7d:51:69:2b: 98:ac:7e:7e:64:1e:a0:92:68:68:2d:5d:af:b9:d3: 50:44:9e:0c:01:87:7d:95:aa:36:65:61:ca:73:07: 03:1c:2f:e0:1c:8d:20:f7:71:ff:b1:44:a4:22:ef: de:4a:8a:a3:6e:aa:e1:4b:3e:33:f7:45:51:39:11: 2d:6b:47:cf:5f:1c:32:5f:7b:45:05:47:89:f3:6f: ac:8a:bf:7d:2c:33:47:14:55:3f:49:a7:3d:f9:a1: 47:33:d4:06:6e:cc:ed:2c:d8:40:1a:90:b6:8c:5b: 8e:af:aa:b2:a9:ab:0b:e3:4d:fe:40:1a:49:69:f1: 10:59:5a:1d:55:5a:4b:33:a7:88:af:6d:12:ab:3d: f3:f5:ef:9e:0d:e2:ca:f5:45:2e:39:51:c5:68:15: 66:9d:d2:39:da:6e:86:d1:26:d1:a9:73:c3:41:07: 79:5d:e6:14:a7:d0:c8:8b:2b:91:c7:d4:f3:e7:d9: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D5:94:25:0D:4B:AD:84:D8:0C:84:7D:15:29:C3:14:49:48:66:7B X509v3 Authority Key Identifier: keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:08:15:f0:fa:75:64:86:5c:bf:7a:d2:dc:57:a1:b0:3a:f2: 6d:9a:ac:2c:cb:13:70:d3:2c:ba:01:46:c3:f3:e8:1e:e5:4a: 48:8e:3c:fd:e8:db:96:a3:fe:58:98:7d:3f:a7:25:ce:4f:da: 8f:aa:22:c9:9d:d6:c6:00:44:7e:b0:0f:9a:07:8f:f4:f1:dd: 4c:e6:93:56:4a:aa:5c:f6:54:a0:00:3a:ba:d2:f3:1c:ff:0a: 8f:0c:02:b2:73:ff:4b:6a:cc:3e:91:2b:a5:24:9c:e9:09:1d: 87:b1:cf:3b:e8:9a:a2:e8:8e:41:8d:7a:ec:7b:4b:c9:8b:55: 90:61:ca:ca:43:8c:e8:0a:b2:95:ed:39:7d:33:94:61:24:d1: 47:38:1d:c6:a4:3d:42:2f:49:92:3a:b7:fb:72:42:a6:e6:7a: 3c:4b:cf:97:f7:07:56:a4:e1:56:3f:74:86:61:e2:ce:74:3d: 3d:c2:fe:8d:12:0b:7a:33:18:5e:a3:c6:0f:05:b4:a8:4d:17: e0:42:05:30:27:0d:65:4a:6a:07:3a:86:ff:49:dc:e7:4a:23: af:58:bf:fa:02:09:2a:1a:85:53:d0:96:57:3f:93:95:04:15: 7e:62:b0:9c:e0:47:7f:51:65:c8:7b:16:46:49:8d:7c:cc:60: 18:31:54:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCODUxMTAvBgNVBAUTKEIyMDc3RDVEMzkwQUM3MkUzQkQ4ODVCMTFGM0FFNkQy QTUyNkE5RUQwHhcNMjYwODE4MjExMjQzWhcNMjYwODI1MjExMjQzWjAYMRYwFAYD VQQDEw02YTg0Y2FjYi01YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wCRnRBFD8+LIsy9hvfzU6DA9jUVbgQwgw8/CMKzG77sgUlpq9yV2Z7Ayinv mjoHxjocvKzYZydiQVMStIW13UVwvUv1IH1RaSuYrH5+ZB6gkmhoLV2vudNQRJ4M AYd9lao2ZWHKcwcDHC/gHI0g93H/sUSkIu/eSoqjbqrhSz4z90VROREta0fPXxwy X3tFBUeJ82+sir99LDNHFFU/Sac9+aFHM9QGbsztLNhAGpC2jFuOr6qyqasL403+ QBpJafEQWVodVVpLM6eIr20Sqz3z9e+eDeLK9UUuOVHFaBVmndI52m6G0SbRqXPD QQd5XeYUp9DIiyuRx9Tz59lhzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPnVlCUN S62E2AyEfRUpwxRJSGZ7MB8GA1UdIwQYMBaAFLIHfV05CscuO9iFsR865tKlJqnt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUI4NS80MkQ3QzAwQzEy Q0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5NDcySVd4SHpybTBxVW1x ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnZDlYVGtLeHk0NzJJV3hIenJtMHFVbXFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUI4NS80MkQ3QzAwQzEyQ0UxMUVCOTUzMzE5MzdDNEY5QUUwMi9zZ2Q5WFRrS3h5 NDcySVd4SHpybTBxVW1xZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArQgV8Pp1ZIZcv3rS3FehsDrybZqsLMsTcNMsugFGw/PoHuVKSI48/ejblqP+ WJh9P6clzk/aj6oiyZ3WxgBEfrAPmgeP9PHdTOaTVkqqXPZUoAA6utLzHP8KjwwC snP/S2rMPpErpSSc6Qkdh7HPO+iaouiOQY167HtLyYtVkGHKykOM6Aqyle05fTOU YSTRRzgdxqQ9Qi9Jkjq3+3JCpuZ6PEvPl/cHVqThVj90hmHiznQ9PcL+jRILejMY XqPGDwW0qE0X4EIFMCcNZUpqBzqG/0nc50ojr1i/+gIJKhqFU9CWVz+TlQQVfmKw nOBHf1FlyHsWRkmNfMxgGDFUHA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:47:00 2026 by rpki-client