$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft File: Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json) Hash identifier: 7j0bKCHjeSjUBOlQal+pND5GatZZxWE+hrqPFLggpIE= Subject key identifier: 54:6A:3A:03:51:68:20:2E:E8:E4:5B:5F:E1:2A:C5:B0:81:30:83:A1 Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft Manifest number: AC Signing time: Wed 19 Aug 2026 07:48:53 +0000 Manifest this update: Wed 19 Aug 2026 07:48:53 +0000 Manifest next update: Wed 26 Aug 2026 07:48:53 +0000 Files and hashes: 1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: YDer4qkIDdO5gGAl0BPhp7ouVvluweQM7/RxLekDXdo=) 2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: 2jaK9Imhu+Xw7a9whl7nd2mMko9E0vTzAQrleZ3Kuic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Validity Not Before: Aug 19 07:48:53 2026 GMT Not After : Aug 26 07:48:53 2026 GMT Subject: CN=6a855fe5-c913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:72:a1:f5:6d:35:da:76:6d:6f:1a:e9:76: e0:67:17:0e:79:97:08:d4:99:56:de:c8:89:2a:0f: 7d:f1:63:71:6e:e6:d3:99:8c:c2:49:7d:a9:c6:15: c5:b0:ff:3e:75:7c:28:91:12:68:48:6f:9f:51:5f: 99:6c:bf:25:f8:a8:8c:f0:4a:d8:b4:31:0b:e8:5b: f7:a6:ed:4d:e9:81:5f:b7:da:a6:1d:2f:62:64:1f: 15:76:1c:ef:b8:50:2f:d2:5c:52:5b:cd:ea:02:51: 17:90:90:8b:e6:ea:4f:c6:86:d8:1e:e8:9c:61:f9: d2:ff:8e:5c:c0:54:ec:89:74:68:16:b1:e5:24:fa: ae:23:3f:02:93:24:80:3b:6c:30:ca:66:9c:e5:ae: 01:9f:ec:e2:4e:e5:86:1a:c1:c8:a3:d6:c6:8a:b7: af:b0:6b:90:c8:2f:2a:e8:ca:dd:17:62:28:f9:8e: 3a:73:d0:38:b1:4d:4c:49:dd:39:fb:b8:bc:88:b9: 68:18:0b:e6:4a:06:58:1b:3f:1c:97:97:8e:d7:9b: 8b:98:93:64:51:dc:81:ac:4b:d5:4a:32:99:60:cc: 01:95:11:2b:03:16:05:ba:93:95:5e:09:ac:7d:3c: 2e:fb:7e:21:81:e2:16:ab:c2:68:77:4c:d9:d8:2d: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6A:3A:03:51:68:20:2E:E8:E4:5B:5F:E1:2A:C5:B0:81:30:83:A1 X509v3 Authority Key Identifier: keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a9:a4:2f:c8:dc:8b:b6:71:1f:02:a6:96:23:b0:15:28:43: e8:34:71:9b:61:f9:7d:5e:97:2d:e0:c8:2d:eb:9f:7b:71:b9: 2f:6d:ce:b2:1a:75:06:bb:cc:65:63:d4:35:77:23:5d:93:2f: 6f:c0:22:5c:a0:3c:64:71:07:90:26:75:f8:90:45:75:76:77: 38:01:74:e9:90:fe:d2:2b:d7:bc:45:b4:a3:b7:ae:e4:f7:c9: f0:05:4a:6b:d9:99:01:67:86:30:59:0a:7d:04:b7:01:07:bb: db:90:f4:03:5f:4f:0e:58:97:68:e5:c0:8f:b6:20:ac:d0:ad: 3f:52:97:2c:c7:d8:f9:bd:e8:6c:c6:33:f8:1d:2f:8d:45:e5: 8a:1b:a8:a1:af:55:d5:35:b7:64:b2:42:51:99:4b:94:e3:a0: 7b:6a:86:98:ea:f4:8e:c4:3a:ad:87:52:76:bc:e9:8f:3c:77: 41:0a:c5:8f:00:17:33:58:06:bb:1b:90:c9:2d:14:60:4d:aa: ab:a6:51:66:3a:8d:db:c4:b7:a7:98:37:30:bf:2d:1d:f9:2c: ff:8c:47:94:ac:67:b4:d7:52:cd:7d:79:97:32:12:67:30:1e: ba:1e:bb:c2:f8:5e:b5:d0:83:26:60:38:b7:e1:7a:2e:78:f0: 43:44:cb:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFNkQxMTAvBgNVBAUTKDIyNDcyMTg3NkExMUUyRDNBNEI5OEIyMUJDODRGNzhF NjRGRUM4NDYwHhcNMjYwODE5MDc0ODUzWhcNMjYwODI2MDc0ODUzWjAYMRYwFAYD VQQDEw02YTg1NWZlNS1jOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSNyofVtNdp2bW8a6XbgZxcOeZcI1JlW3siJKg998WNxbubTmYzCSX2pxhXF sP8+dXwokRJoSG+fUV+ZbL8l+KiM8ErYtDEL6Fv3pu1N6YFft9qmHS9iZB8Vdhzv uFAv0lxSW83qAlEXkJCL5upPxobYHuicYfnS/45cwFTsiXRoFrHlJPquIz8CkySA O2wwymac5a4Bn+ziTuWGGsHIo9bGirevsGuQyC8q6MrdF2Io+Y46c9A4sU1MSd05 +7i8iLloGAvmSgZYGz8cl5eO15uLmJNkUdyBrEvVSjKZYMwBlRErAxYFupOVXgms fTwu+34hgeIWq8Jod0zZ2C11BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRqOgNR aCAu6ORbX+EqxbCBMIOhMB8GA1UdIwQYMBaAFCJHIYdqEeLTpLmLIbyE945k/shG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU2RC81MTExMEFGRTk3 NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0T2t1WXNodklUM2ptVC15 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrY2hoMm9SNHRPa3VZc2h2SVQzam1ULXlFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU2RC81MTExMEFGRTk3NjUxMUYwOTIzQTY3MENDNEY5QUUwMi9Ja2NoaDJvUjR0 T2t1WXNodklUM2ptVC15RVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHqmkL8jci7ZxHwKmliOwFShD6DRxm2H5fV6XLeDILeufe3G5L23Oshp1BrvM ZWPUNXcjXZMvb8AiXKA8ZHEHkCZ1+JBFdXZ3OAF06ZD+0ivXvEW0o7eu5PfJ8AVK a9mZAWeGMFkKfQS3AQe725D0A19PDliXaOXAj7YgrNCtP1KXLMfY+b3obMYz+B0v jUXlihuooa9V1TW3ZLJCUZlLlOOge2qGmOr0jsQ6rYdSdrzpjzx3QQrFjwAXM1gG uxuQyS0UYE2qq6ZRZjqN28S3p5g3ML8tHfks/4xHlKxntNdSzX15lzISZzAeuh67 wvhetdCDJmA4t+F6LnjwQ0TL8g== -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:51 2026 by rpki-client