$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft File: hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json) Hash identifier: zhLr0xDrEXr0SpWGFBM0SZABmK54DVDPveW0FhzUKuU= Subject key identifier: 8B:6C:60:22:02:0C:C8:A4:27:B1:CA:7D:93:83:ED:F7:72:FE:ED:7A Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft Manifest number: 01AA Signing time: Wed 19 Aug 2026 04:45:03 +0000 Manifest this update: Wed 19 Aug 2026 04:45:02 +0000 Manifest next update: Wed 26 Aug 2026 04:45:02 +0000 Files and hashes: 1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: 8YuML7tjWO8yRub3hY2TQHZTqNPfAvMWQlTJVCvQkPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Validity Not Before: Aug 19 04:45:02 2026 GMT Not After : Aug 26 04:45:02 2026 GMT Subject: CN=6a8534cf-0b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:3a:af:a1:bd:b7:c9:19:d6:00:c5:ec:6c: e6:24:34:54:dc:43:70:fc:85:9e:91:77:dc:1a:f5: 10:61:1c:4f:96:22:e4:9b:22:2e:71:dd:ad:6d:63: b6:93:55:f3:8e:69:78:c1:30:ca:ac:b1:f6:36:1f: 8e:29:c1:d9:77:84:8a:04:00:33:19:b8:9c:0c:12: 25:b7:f0:66:0e:60:e9:46:6f:3f:8e:10:f0:a6:1e: 91:04:9d:ae:c2:0c:92:c4:51:43:89:b9:4e:70:4f: 53:cf:73:c6:5b:90:6d:f3:31:43:74:23:f2:9a:c6: 84:91:19:81:5f:41:ba:51:7c:69:00:86:e0:21:f6: 10:b2:da:28:21:34:11:5a:39:c0:24:51:dd:87:83: 7a:ad:ff:9c:96:5c:a9:2a:4e:a9:a1:87:bc:d8:0f: 42:bf:e4:58:41:7c:82:64:58:c7:de:e7:6b:10:6b: 13:fe:d6:3f:2c:ac:21:5a:9d:9f:6d:75:dd:31:61: ea:2c:e0:bb:ff:68:de:67:e8:d7:36:ae:a8:95:e8: 35:fd:43:b2:aa:14:81:d5:78:5c:fd:fa:40:9e:44: 23:91:49:b7:c5:48:cd:8c:e8:17:ba:84:4c:80:c5: 2e:85:4b:4d:63:ea:16:a6:89:f3:3a:5c:fc:96:fa: 08:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6C:60:22:02:0C:C8:A4:27:B1:CA:7D:93:83:ED:F7:72:FE:ED:7A X509v3 Authority Key Identifier: keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1c:bb:8e:d9:bb:a8:e3:1d:0b:43:91:ec:4b:e3:8a:62:c4: 56:72:a5:6d:e0:80:a5:42:ed:bb:35:f3:0a:ac:7e:e4:7c:e8: ec:59:07:7c:69:02:cd:48:61:f2:9a:68:fd:d0:8d:24:6d:f6: 38:77:f7:ba:96:e2:fd:4b:b6:d2:7a:b0:8f:72:bb:b8:33:03: 32:b9:82:07:02:7c:27:2d:9d:d4:8d:c9:77:22:a7:06:da:90: 82:08:28:67:be:f2:f3:1c:89:52:7c:dd:52:f4:8e:bd:8d:5e: f3:dd:9d:c8:d9:2e:a6:e0:d1:ee:95:6a:a2:eb:cd:92:2b:0b: 88:13:60:e2:00:29:92:72:b1:56:f6:ed:fa:fe:1d:d7:cf:26: 55:0c:5c:a4:1a:8b:31:ff:95:9c:be:b1:41:d8:cf:40:8d:28: 38:f2:29:e8:20:73:1a:35:be:72:48:2e:f1:91:0c:c6:b8:84: ce:16:80:33:33:e8:f4:27:a4:d1:01:21:86:cc:e9:b9:ea:08: 55:47:a3:b1:fa:92:ec:23:65:60:e7:47:27:8c:bb:17:9e:f6: ea:52:af:f9:9f:52:a4:af:e2:36:25:dc:72:4f:cd:e8:35:65: a7:35:ae:e6:f2:58:ec:de:ef:c2:ec:40:7b:4b:d6:89:61:e3: 4c:50:bf:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDg0MzI0N0MwQUMxODFGQzM2NjY2QTQ0MzcyMUFGMjFE OURBNjUwREEwHhcNMjYwODE5MDQ0NTAyWhcNMjYwODI2MDQ0NTAyWjAYMRYwFAYD VQQDEw02YTg1MzRjZi0wYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuo6r6G9t8kZ1gDF7GzmJDRU3ENw/IWekXfcGvUQYRxPliLkmyIucd2tbWO2 k1Xzjml4wTDKrLH2Nh+OKcHZd4SKBAAzGbicDBIlt/BmDmDpRm8/jhDwph6RBJ2u wgySxFFDiblOcE9Tz3PGW5Bt8zFDdCPymsaEkRmBX0G6UXxpAIbgIfYQstooITQR WjnAJFHdh4N6rf+cllypKk6poYe82A9Cv+RYQXyCZFjH3udrEGsT/tY/LKwhWp2f bXXdMWHqLOC7/2jeZ+jXNq6oleg1/UOyqhSB1Xhc/fpAnkQjkUm3xUjNjOgXuoRM gMUuhUtNY+oWponzOlz8lvoINwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItsYCIC DMikJ7HKfZOD7fdy/u16MB8GA1UdIwQYMBaAFIQyR8CsGB/DZmakQ3Ia8h2dplDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9CQzUyMUE1NDE5 MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4Tm1acVJEY2hyeUhaMm1V Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hESkh3S3dZSDhObVpxUkRjaHJ5SFoybVVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9CQzUyMUE1NDE5MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4 Tm1acVJEY2hyeUhaMm1VTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAihy7jtm7qOMdC0OR7EvjimLEVnKlbeCApULtuzXzCqx+5Hzo7FkHfGkCzUhh 8ppo/dCNJG32OHf3upbi/Uu20nqwj3K7uDMDMrmCBwJ8Jy2d1I3JdyKnBtqQgggo Z77y8xyJUnzdUvSOvY1e892dyNkupuDR7pVqouvNkisLiBNg4gApknKxVvbt+v4d 188mVQxcpBqLMf+VnL6xQdjPQI0oOPIp6CBzGjW+ckgu8ZEMxriEzhaAMzPo9Cek 0QEhhszpueoIVUejsfqS7CNlYOdHJ4y7F5726lKv+Z9SpK/iNiXcck/N6DVlpzWu 5vJY7N7vwuxAe0vWiWHjTFC/3A== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:13 2026 by rpki-client