$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft File: hrHxHRgdpsydsDI95DvJbFkJZeE.mft (raw, json) Hash identifier: za+Wmt44DCZbUmjnbvzvWywVa2ZEsQUmbkjN6IkVylw= Subject key identifier: 80:30:A5:F7:71:DC:1E:46:65:B5:53:07:5A:25:9E:76:97:C6:B0:E2 Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft Manifest number: 0C98 Signing time: Tue 18 Aug 2026 18:53:55 +0000 Manifest this update: Tue 18 Aug 2026 18:53:54 +0000 Manifest next update: Tue 25 Aug 2026 18:53:54 +0000 Files and hashes: 1: hrHxHRgdpsydsDI95DvJbFkJZeE.crl (hash: Sbmu5eW/pN7+GtWeJ6mSvPg39RN4YKa+1oRn9GsDjbM=) 2: FD765464FCFC11F0AF0D3BB7376F56BC.roa (hash: eJofnUMCGktsGrjmk9qmZtR4EvsLnOuTHY31f/qnkIQ=) 3: B4E988F2FCFB11F092E222F9366F56BC.roa (hash: V71zoGKhD0nD0XhT5mIn0o19zRnPhSQ5QYxo5yVpxak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Validity Not Before: Aug 18 18:53:54 2026 GMT Not After : Aug 25 18:53:54 2026 GMT Subject: CN=6a84aa42-aec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:0d:e6:ed:ed:6e:a8:f7:50:bf:45:40:fa: 81:82:18:79:b3:77:78:85:24:15:82:fc:3e:97:a5: 02:53:41:d5:4a:47:fe:54:f8:9e:19:66:a8:ae:47: 87:5a:0d:fb:db:9b:c4:17:0e:3d:b0:17:6e:99:10: c9:6e:bb:a2:f7:5d:41:76:72:54:92:59:6d:45:88: 8e:ba:bb:46:82:f0:0a:87:d8:d1:b6:9d:13:60:69: 71:72:60:c7:2c:c0:66:1d:bd:fe:29:d6:fe:6b:3f: a6:65:10:26:32:33:88:cd:69:46:35:9f:14:fa:60: aa:aa:2c:bb:64:b8:d7:6b:c9:c8:24:af:be:7a:a7: d8:bf:e2:86:e7:45:30:13:f6:5e:f9:13:c2:87:1d: 98:ac:6f:02:b0:2d:3b:5f:5a:b6:7b:bb:46:12:1d: 97:80:2d:99:2e:67:ba:b4:c2:28:87:46:fd:ca:20: 4b:35:16:25:d6:9f:bb:e1:33:0a:cc:dd:07:8c:ac: cf:25:bd:89:d7:de:f1:5a:ff:0b:f1:06:de:1e:0e: d7:81:03:98:4f:00:c5:b0:df:bb:0c:43:82:c5:94: b4:31:35:56:a4:ac:f1:e4:eb:85:4b:1b:ec:56:ba: b8:45:5c:20:be:65:1b:97:5b:57:02:7b:03:a8:9a: d9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:30:A5:F7:71:DC:1E:46:65:B5:53:07:5A:25:9E:76:97:C6:B0:E2 X509v3 Authority Key Identifier: keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:56:df:5d:f2:9e:f3:fd:9c:52:b0:b0:5f:c9:64:f4:29:30: 91:8a:07:b3:57:21:8d:71:e0:a8:20:5b:30:e2:85:33:84:4b: 96:7f:a3:cc:03:a5:0a:5c:0b:d3:71:b4:b1:d4:cd:7c:33:71: 15:50:a6:21:31:9b:1c:1e:28:62:48:e2:e0:a6:27:0e:2e:e1: 55:6b:98:f5:f8:70:63:b9:ce:f2:4b:08:2c:89:c6:a2:01:50: 1b:6f:71:08:2f:ce:50:83:82:cb:21:e5:3a:1e:48:28:92:34: 7a:17:f8:d8:8a:cc:6a:fb:f6:45:00:d2:b2:a8:da:af:d3:ce: 89:40:2c:e7:eb:0a:9e:eb:b8:f2:8b:5e:1b:2b:e1:f4:63:c6: ac:82:12:86:d0:b5:65:0f:cf:01:74:cb:93:0f:62:16:0b:14: a1:e2:1b:6d:8f:e2:7f:a3:8f:42:fb:c2:ff:78:90:0b:98:79: 01:ba:bd:da:a0:c5:7a:5b:69:e0:80:63:71:bf:7a:d6:18:90: c3:94:07:f4:21:6d:04:43:ff:af:05:15:03:95:39:b3:29:2c: 60:33:49:44:07:0b:15:aa:6a:e7:8a:fa:df:2a:f3:a7:8e:de: 1d:be:66:57:7b:7c:67:77:98:05:51:ea:21:88:38:5d:39:ee: 0f:af:6e:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD NTkwOTY1RTEwHhcNMjYwODE4MTg1MzU0WhcNMjYwODI1MTg1MzU0WjAYMRYwFAYD VQQDEw02YTg0YWE0Mi1hZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlKIN5u3tbqj3UL9FQPqBghh5s3d4hSQVgvw+l6UCU0HVSkf+VPieGWaorkeH Wg3725vEFw49sBdumRDJbrui911BdnJUklltRYiOurtGgvAKh9jRtp0TYGlxcmDH LMBmHb3+Kdb+az+mZRAmMjOIzWlGNZ8U+mCqqiy7ZLjXa8nIJK++eqfYv+KG50Uw E/Ze+RPChx2YrG8CsC07X1q2e7tGEh2XgC2ZLme6tMIoh0b9yiBLNRYl1p+74TMK zN0HjKzPJb2J197xWv8L8QbeHg7XgQOYTwDFsN+7DEOCxZS0MTVWpKzx5OuFSxvs Vrq4RVwgvmUbl1tXAnsDqJrZQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAwpfdx 3B5GZbVTB1olnnaXxrDiMB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0 OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkZDRi85NTYzOUJGMDI0OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBz eWRzREk5NUR2SmJGa0paZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhVbfXfKe8/2cUrCwX8lk9CkwkYoHs1chjXHgqCBbMOKFM4RLln+jzAOlClwL 03G0sdTNfDNxFVCmITGbHB4oYkji4KYnDi7hVWuY9fhwY7nO8ksILInGogFQG29x CC/OUIOCyyHlOh5IKJI0ehf42IrMavv2RQDSsqjar9POiUAs5+sKnuu48oteGyvh 9GPGrIIShtC1ZQ/PAXTLkw9iFgsUoeIbbY/if6OPQvvC/3iQC5h5Abq92qDFeltp 4IBjcb961hiQw5QH9CFtBEP/rwUVA5U5syksYDNJRAcLFapq54r63yrzp47eHb5m V3t8Z3eYBVHqIYg4XTnuD69uGg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:51:43 2026 by rpki-client