$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: EoA68VHSFCOuIp1Y1biyQRrQkpJdO2SZ1zAiaiQvMVI= Subject key identifier: EC:58:62:47:DD:DB:A6:2A:7B:AD:ED:D5:C8:EF:B6:C6:E2:F4:87:8D Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0B32 Signing time: Tue 18 Aug 2026 20:27:53 +0000 Manifest this update: Tue 18 Aug 2026 20:27:52 +0000 Manifest next update: Tue 25 Aug 2026 20:27:52 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: uFCE7FQINdozDk0n16+tXYKaYDrPrxuIXV8wIoDiTfc=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: 39L0tuk++HvgBqoCLQnzcqUrTZqQJu3YDe0GGFe9LNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Aug 18 20:27:52 2026 GMT Not After : Aug 25 20:27:52 2026 GMT Subject: CN=6a84c049-b2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:d2:c6:92:c6:0f:ba:1f:00:6f:38:66:d4: 3b:da:2b:98:ab:12:70:8c:b0:6b:f8:49:d5:aa:fc: 7c:50:ab:ca:0f:7c:8f:21:53:c3:f3:c7:f6:bd:3a: f2:76:37:dd:fb:dc:d1:e1:36:92:a9:5a:27:0d:f6: 76:55:33:c6:98:c1:2b:95:72:5e:23:4c:1c:b9:ac: 09:04:70:ea:33:8e:a6:5e:e1:c1:88:35:1d:f7:a2: d6:9d:98:9d:92:9e:c7:f7:57:22:62:54:49:6d:aa: be:d3:1a:18:36:c3:3c:3c:ce:31:fc:a7:37:fc:32: 50:68:6f:d5:d0:ef:43:01:81:a3:f7:cd:ce:21:7e: af:a2:16:ca:be:04:18:8f:5f:f3:1b:3d:c4:ed:9e: 46:c1:31:b4:7f:6c:7f:d3:51:0c:9f:87:9d:23:b8: 65:de:13:ef:14:ff:91:c2:35:22:f0:61:1d:9a:7b: a7:8b:30:35:0c:af:fa:ca:5a:36:d8:29:85:bb:a6: 70:8e:f3:a2:39:c3:7e:7d:2c:c1:f4:7d:78:89:ad: 9c:36:e2:e2:ce:ab:fa:bf:4e:ba:f6:cf:e0:66:f1: fd:c7:a9:23:bb:58:24:85:a4:c3:77:b3:fb:ad:2b: b6:e0:f1:00:fe:72:9e:31:0a:a6:dd:53:62:dc:ca: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:58:62:47:DD:DB:A6:2A:7B:AD:ED:D5:C8:EF:B6:C6:E2:F4:87:8D X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:2a:6e:79:86:a6:2f:e4:8e:93:02:04:42:6d:70:0a:45:a3: fa:45:05:61:8a:df:6a:a3:4a:a8:2f:df:2a:77:1a:85:04:7e: be:93:08:92:6b:ad:cf:f7:2c:0c:22:73:4a:6f:17:4a:59:9e: 43:ed:0c:87:dd:e4:9f:a0:b8:8b:db:b9:f9:c6:47:b2:25:d2: 98:b5:6b:ec:f1:47:4c:83:f4:87:90:52:db:4b:16:46:2f:e6: 70:1e:53:af:a2:e8:4d:22:a4:08:3e:a9:d1:f7:6d:45:0c:fb: cb:85:a5:d2:14:9c:f0:68:ad:bf:67:4d:6c:0c:ae:b9:b2:25: e8:0c:26:ac:3c:ca:27:d4:17:16:bf:e3:04:86:17:72:00:1a: 57:b9:f1:8d:36:be:3a:31:7f:c6:07:f7:4d:c1:4c:ef:e2:03: 2d:cb:d6:a1:50:b9:6a:9b:b1:d5:da:f9:f1:aa:61:c7:64:28: a0:f5:b6:0c:97:8f:c1:44:c5:ee:a0:4c:7c:c1:c9:c0:cc:3a: f0:ab:27:be:16:ed:93:03:c3:36:97:c6:b6:ee:5e:e1:ed:14: ed:9d:53:0a:14:ad:ec:88:87:c6:30:cd:86:34:90:57:2c:a9: 32:f1:80:c5:67:fb:31:ae:3c:a0:66:c9:37:fd:ba:c0:ca:a9: be:89:c1:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjYwODE4MjAyNzUyWhcNMjYwODI1MjAyNzUyWjAYMRYwFAYD VQQDEw02YTg0YzA0OS1iMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+DSxpLGD7ofAG84ZtQ72iuYqxJwjLBr+EnVqvx8UKvKD3yPIVPD88f2vTry djfd+9zR4TaSqVonDfZ2VTPGmMErlXJeI0wcuawJBHDqM46mXuHBiDUd96LWnZid kp7H91ciYlRJbaq+0xoYNsM8PM4x/Kc3/DJQaG/V0O9DAYGj983OIX6vohbKvgQY j1/zGz3E7Z5GwTG0f2x/01EMn4edI7hl3hPvFP+RwjUi8GEdmnunizA1DK/6ylo2 2CmFu6ZwjvOiOcN+fSzB9H14ia2cNuLizqv6v0669s/gZvH9x6kju1gkhaTDd7P7 rSu24PEA/nKeMQqm3VNi3MoDjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxYYkfd 26Yqe63t1cjvtsbi9IeNMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIipueYamL+SOkwIEQm1wCkWj+kUFYYrfaqNKqC/fKncahQR+vpMIkmutz/cs DCJzSm8XSlmeQ+0Mh93kn6C4i9u5+cZHsiXSmLVr7PFHTIP0h5BS20sWRi/mcB5T r6LoTSKkCD6p0fdtRQz7y4Wl0hSc8Gitv2dNbAyuubIl6AwmrDzKJ9QXFr/jBIYX cgAaV7nxjTa+OjF/xgf3TcFM7+IDLcvWoVC5apux1dr58aphx2QooPW2DJePwUTF 7qBMfMHJwMw68KsnvhbtkwPDNpfGtu5e4e0U7Z1TChSt7IiHxjDNhjSQVyypMvGA xWf7Ma48oGbJN/26wMqpvonBDA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:44:41 2026 by rpki-client