$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft File: afotkTN0HoMAQ-tA5A0ivzU4684.mft (raw, json) Hash identifier: T6dlqddezYie0DcD+Q8roViJuhmK+2MqrFtazT3DNaU= Subject key identifier: 06:CE:61:E5:FB:A4:AB:C7:E3:16:17:1B:82:9A:D9:E8:37:6C:19:DE Authority key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE Certificate issuer: /CN=A91CCB81/serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft Manifest number: 71 Signing time: Wed 19 Aug 2026 08:38:50 +0000 Manifest this update: Wed 19 Aug 2026 08:38:49 +0000 Manifest next update: Wed 26 Aug 2026 08:38:49 +0000 Files and hashes: 1: afotkTN0HoMAQ-tA5A0ivzU4684.crl (hash: eA3FhCmixfXUWQ5hmNhe74+o1VHBl68qnN3WpVHWKn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Validity Not Before: Aug 19 08:38:49 2026 GMT Not After : Aug 26 08:38:49 2026 GMT Subject: CN=6a856b9a-feba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2e:a4:4b:a1:11:ce:15:04:1f:31:ff:8e:94: b0:44:bc:c9:48:75:ad:13:3a:04:05:a3:a8:3c:84: 08:21:37:3c:e0:01:2a:d2:29:b5:ea:88:cd:6e:b1: 3d:60:3d:d0:35:1a:12:80:2a:11:0c:b5:68:8d:59: 65:0b:02:19:56:cc:6f:03:55:e4:de:63:c7:1c:90: 43:b3:0b:3a:8f:a6:06:6d:60:31:5f:98:2f:3b:be: 52:54:e1:82:9a:d3:2c:6d:aa:cc:f3:af:a9:5d:e5: da:ee:80:61:8e:7f:01:d2:6d:c9:1f:88:91:a7:ae: 9c:5a:97:f9:2f:c4:09:37:84:0a:39:42:ca:11:db: fa:8b:09:d0:75:ef:f5:61:de:06:03:39:af:20:01: 3c:97:e1:50:f8:9b:ba:c9:54:6b:33:38:18:d8:23: 79:3d:9d:8a:2c:ea:78:23:43:6e:dc:77:2e:f5:6a: 6d:6b:f8:6e:e0:ce:d7:d9:88:de:72:11:3e:1f:ca: bf:ee:1f:ba:2d:f4:60:a8:26:8b:6f:2f:4e:b8:85: 93:44:c3:b9:bd:60:d8:f3:08:d2:bb:98:4c:c8:1a: f7:28:e1:ae:79:ed:4d:83:14:a5:8c:bb:1a:27:0f: e1:9b:32:af:eb:45:8a:f0:5a:41:32:82:2e:d5:e0: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CE:61:E5:FB:A4:AB:C7:E3:16:17:1B:82:9A:D9:E8:37:6C:19:DE X509v3 Authority Key Identifier: keyid:69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:06:61:fc:02:2e:14:81:75:be:76:6d:a3:f1:46:a6:2a:a5: 5b:00:8a:af:dd:5e:4d:9f:cc:0d:85:4f:a7:58:84:9b:73:cf: 90:f0:76:d1:f0:1a:95:5b:91:00:a1:b9:92:62:c5:01:6e:f4: ea:74:69:0c:b5:f1:4e:a2:79:4e:17:b8:d5:11:0b:13:fb:c5: c6:3b:36:72:2e:25:fc:9f:c7:06:65:a6:8a:df:ab:d6:b3:c0: 5a:da:97:a8:4a:e9:6c:05:29:31:fa:06:51:69:3e:da:6e:dc: cf:ac:eb:92:0a:55:87:e4:1a:38:03:9c:cc:0b:e4:bf:0d:e5: 4c:ab:77:6e:f3:37:0b:d5:62:4e:2f:f1:f7:60:4c:a3:71:45: 76:31:34:19:35:81:09:f1:b3:93:ae:ba:4c:9e:b2:46:e2:1c: a0:b2:40:e9:fe:94:58:26:df:58:83:05:2f:fb:f7:9f:01:0e: ae:f5:dc:47:81:9c:9e:07:81:92:f8:99:b2:ab:b3:95:f4:9f: e0:e4:ca:32:a2:37:9f:50:79:2f:67:b7:5e:cb:d6:f7:07:a6: 15:97:4f:23:1a:ae:75:df:6e:79:71:b4:bb:fe:61:60:3a:31: e5:2d:02:7a:d2:08:8e:55:c7:21:26:89:16:1a:8b:18:a3:30: 10:73:cd:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0I4MTExMC8GA1UEBRMoNjlGQTJEOTEzMzc0MUU4MzAwNDNFQjQwRTQwRDIyQkYz NTM4RUJDRTAeFw0yNjA4MTkwODM4NDlaFw0yNjA4MjYwODM4NDlaMBgxFjAUBgNV BAMTDTZhODU2YjlhLWZlYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbLqRLoRHOFQQfMf+OlLBEvMlIda0TOgQFo6g8hAghNzzgASrSKbXqiM1usT1g PdA1GhKAKhEMtWiNWWULAhlWzG8DVeTeY8cckEOzCzqPpgZtYDFfmC87vlJU4YKa 0yxtqszzr6ld5drugGGOfwHSbckfiJGnrpxal/kvxAk3hAo5QsoR2/qLCdB17/Vh 3gYDOa8gATyX4VD4m7rJVGszOBjYI3k9nYos6ngjQ27cdy71am1r+G7gztfZiN5y ET4fyr/uH7ot9GCoJotvL064hZNEw7m9YNjzCNK7mEzIGvco4a557U2DFKWMuxon D+GbMq/rRYrwWkEygi7V4CVPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBs5h5fuk q8fjFhcbgprZ6DdsGd4wHwYDVR0jBBgwFoAUafotkTN0HoMAQ+tA5A0ivzU4684w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzI4NjFFNDk2Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDL2Fmb3RrVE4wSG9NQVEtdEE1QTBpdnpVNDY4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWZvdGtUTjBIb01BUS10QTVBMGl2elU0Njg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzI4NjFFNDk2Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDL2Fmb3RrVE4wSG9N QVEtdEE1QTBpdnpVNDY4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3BmH8Ai4UgXW+dm2j8UamKqVbAIqv3V5Nn8wNhU+nWISbc8+Q8HbR8BqVW5EA obmSYsUBbvTqdGkMtfFOonlOF7jVEQsT+8XGOzZyLiX8n8cGZaaK36vWs8Ba2peo SulsBSkx+gZRaT7abtzPrOuSClWH5Bo4A5zMC+S/DeVMq3du8zcL1WJOL/H3YEyj cUV2MTQZNYEJ8bOTrrpMnrJG4hygskDp/pRYJt9YgwUv+/efAQ6u9dxHgZyeB4GS +Jmyq7OV9J/g5MoyojefUHkvZ7dey9b3B6YVl08jGq513255cbS7/mFgOjHlLQJ6 0giOVcchJokWGosYozAQc82w -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:53 2026 by rpki-client