$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft File: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft (raw, json) Hash identifier: IXP9ukor69mkvXbdERSwotbcgh5gSCgJOciSsSGW+Rs= Subject key identifier: 1B:BD:4C:13:47:49:39:C7:00:DA:10:B3:97:34:0E:E9:8E:54:70:2C Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58 Certificate issuer: /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft Manifest number: 39 Signing time: Wed 19 Aug 2026 09:20:19 +0000 Manifest this update: Wed 19 Aug 2026 09:20:19 +0000 Manifest next update: Wed 26 Aug 2026 09:20:19 +0000 Files and hashes: 1: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl (hash: fo4zZmwXePteSIEUhiktbT0iedLRw1OsMiwRRkEfLqE=) 2: 46165CDE490411F1BC93ABE395833773.roa (hash: X96VcqcjafQHkS8RXd769VXGiUvTLL5bk9V9PsYGSzw=) 3: EE42117C927511F18A54FCC54511F970.roa (hash: 4onIQnShgHHglJV/eY63U0D9thFh3TgjTZuJUpaZPkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258 Validity Not Before: Aug 19 09:20:19 2026 GMT Not After : Aug 26 09:20:19 2026 GMT Subject: CN=6a857553-78a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:f7:c5:7e:7f:81:09:39:0c:e3:3e:4c:d2: 86:d4:3e:08:17:5d:e3:88:42:c6:e3:ad:b4:29:8c: 40:16:a1:a2:d4:2a:50:ef:e1:a4:f3:62:d9:b8:46: da:3a:f4:9a:fb:26:42:31:53:18:15:6e:65:bd:b2: 09:29:df:ec:c7:cd:9f:52:9e:8f:ab:80:8e:ff:48: f0:21:52:1a:8e:0f:bb:66:eb:7f:9f:2d:70:a4:8e: cc:25:f7:93:86:7f:ca:20:40:eb:ef:5c:aa:c5:b4: 3e:da:78:e4:68:67:d9:34:e3:73:04:b4:01:95:91: 45:9b:5c:f9:65:0b:4c:f0:57:cc:b8:d6:70:94:ba: 52:0b:eb:d7:00:45:ea:04:06:94:65:89:79:67:59: 31:35:98:63:12:50:cc:46:c0:67:2c:4c:4e:eb:d9: 57:71:39:96:a2:1e:a1:bb:c0:17:75:7e:4f:f6:87: 30:74:58:cc:9d:e1:ba:64:a6:46:e9:74:71:76:25: dc:60:3d:93:e6:0a:79:ac:0e:44:70:26:e1:8e:57: 45:44:0b:ff:85:71:b0:7a:e9:58:23:43:59:60:6b: d7:83:f7:df:c3:21:77:2b:00:67:45:26:6d:db:af: 0a:98:b4:65:10:ea:e4:ba:0c:c9:4c:15:d6:31:49: 07:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BD:4C:13:47:49:39:C7:00:DA:10:B3:97:34:0E:E9:8E:54:70:2C X509v3 Authority Key Identifier: keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:89:a0:a0:fa:53:91:b9:39:2f:be:f7:90:f6:50:7f:c5:57: cf:90:46:5c:bb:63:7c:c2:8d:44:5f:f1:9b:7c:a3:14:da:eb: 0d:d5:b6:d1:af:61:55:74:e4:eb:2f:52:2a:71:57:82:e7:c0: b4:5f:16:2c:da:e8:56:ae:73:31:95:5f:4e:f5:d9:0d:c0:3a: ea:f4:23:34:45:84:24:cd:e8:97:13:c3:0f:c2:6e:7a:24:3a: 33:5e:10:bf:3a:06:9c:7a:69:44:f6:3a:2f:d8:1a:2e:99:db: 77:8b:b5:2c:8c:24:28:92:bc:4b:a0:d6:ba:f1:cc:67:c3:94: c7:de:aa:28:3e:ba:10:53:15:47:b0:e0:92:f6:97:55:c0:32: dc:cd:a3:b0:1e:51:f5:b2:25:f8:99:c0:70:dc:fc:ee:cc:31: d3:d4:1e:ec:dc:66:9c:a2:88:32:ab:7d:8e:4a:04:87:df:25: 64:dd:c8:ec:71:45:01:91:23:03:88:61:c6:d2:57:33:92:3d: 1a:e7:40:be:99:4a:b3:fa:2f:c1:45:e3:dc:56:d0:00:fb:ff: 68:75:2e:46:ea:cd:b7:5d:98:60:c2:3e:4c:a4:d7:99:2e:5c: b1:f6:a9:1b:ac:ee:b0:2d:30:9e:12:78:fa:62:a7:73:21:2a: a9:9c:03:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REY3ODExMC8GA1UEBRMoRjI0NDgxNUQ1QjM5MUUyMDAwQjc4Q0E5NkUxOTMwMjBG RjkwMjI1ODAeFw0yNjA4MTkwOTIwMTlaFw0yNjA4MjYwOTIwMTlaMBgxFjAUBgNV BAMTDTZhODU3NTUzLTc4YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8hvfFfn+BCTkM4z5M0obUPggXXeOIQsbjrbQpjEAWoaLUKlDv4aTzYtm4Rto6 9Jr7JkIxUxgVbmW9sgkp3+zHzZ9Sno+rgI7/SPAhUhqOD7tm63+fLXCkjswl95OG f8ogQOvvXKrFtD7aeORoZ9k043MEtAGVkUWbXPllC0zwV8y41nCUulIL69cAReoE BpRliXlnWTE1mGMSUMxGwGcsTE7r2VdxOZaiHqG7wBd1fk/2hzB0WMyd4bpkpkbp dHF2JdxgPZPmCnmsDkRwJuGOV0VEC/+FcbB66VgjQ1lga9eD99/DIXcrAGdFJm3b rwqYtGUQ6uS6DMlMFdYxSQdFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG71ME0dJ OccA2hCzlzQO6Y5UcCwwHwYDVR0jBBgwFoAU8kSBXVs5HiAAt4ypbhkwIP+QIlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERjc4L0YwMzA5QkE2NDdD NjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlBQXQ0eXBiaGt3SVAtUUls Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGtTQlhWczVIaUFBdDR5cGJoa3dJUC1RSWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Rjc4L0YwMzA5QkE2NDdDNjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlB QXQ0eXBiaGt3SVAtUUlsZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLiaCg+lORuTkvvveQ9lB/xVfPkEZcu2N8wo1EX/GbfKMU2usN1bbRr2FVdOTr L1IqcVeC58C0XxYs2uhWrnMxlV9O9dkNwDrq9CM0RYQkzeiXE8MPwm56JDozXhC/ OgacemlE9jov2Boumdt3i7UsjCQokrxLoNa68cxnw5TH3qooProQUxVHsOCS9pdV wDLczaOwHlH1siX4mcBw3PzuzDHT1B7s3Gacoogyq32OSgSH3yVk3cjscUUBkSMD iGHG0lczkj0a50C+mUqz+i/BRePcVtAA+/9odS5G6s23XZhgwj5MpNeZLlyx9qkb rO6wLTCeEnj6YqdzISqpnAPo -----END CERTIFICATE-----Generated at Fri Aug 21 06:33:02 2026 by rpki-client