$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: imdVyf6hgpSziRUruSAtbz6SSMIgSaWpsKj6GxniU7A= Subject key identifier: 86:28:CF:45:1E:68:9F:46:E6:75:B2:B0:F7:C8:09:16:77:CE:F0:DC Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0F6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0F57 Signing time: Thu 20 Aug 2026 17:31:03 +0000 Manifest this update: Thu 20 Aug 2026 17:31:02 +0000 Manifest next update: Thu 27 Aug 2026 17:31:02 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: rMTbkyfql9UBhV3mzPuJVjJP4a1T9gIs20TUwgm4xxk=) 2: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: QgnZ4sc6Puwjs/s8k5cb77PzqC45+lyxM26KCi/2eRw=) 3: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3948 (0xf6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Aug 20 17:31:02 2026 GMT Not After : Aug 27 17:31:02 2026 GMT Subject: CN=6a8739d7-f10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:28:5a:75:10:1a:d9:59:6c:34:7b:19:1f: 35:9f:a6:13:12:be:a4:15:e7:02:d9:70:2e:65:36: 77:d8:52:1d:df:a6:ed:df:f6:5d:01:db:65:e4:6d: 66:39:04:e1:3c:ed:3c:34:c6:76:ca:f8:34:b4:c7: ed:65:ce:19:da:45:fc:f8:0c:18:14:be:14:03:cd: 2d:56:b4:d1:a9:8e:3a:ef:80:58:61:88:46:db:e6: 2d:a6:8c:68:9d:9b:37:98:dc:f5:34:f5:12:ac:bb: 15:e1:5b:9a:aa:44:a0:17:48:f4:05:bd:9f:7d:fa: 22:cd:78:a8:32:25:62:82:ff:00:1a:df:76:c8:cd: 13:d0:4e:c1:c5:38:b8:9d:ce:69:1e:a8:37:67:75: 8a:0d:28:e0:d3:9b:42:ad:e9:34:e9:8c:2d:ec:5c: b5:a8:be:55:70:56:97:c2:6d:ab:98:d6:0d:05:36: 84:3a:e5:9b:88:7c:ec:b3:bc:2d:76:f2:3b:be:0b: 3d:b1:37:49:6f:91:00:c9:76:b0:a0:61:84:8c:aa: 3a:98:95:c1:32:78:1c:83:40:80:c2:fe:58:b3:49: c2:2d:16:c7:ad:09:62:24:64:ab:d7:2a:3c:28:9d: 0b:96:f1:2c:3c:52:7b:17:e3:bb:ec:9a:1d:29:fe: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:28:CF:45:1E:68:9F:46:E6:75:B2:B0:F7:C8:09:16:77:CE:F0:DC X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a0:4d:2c:dd:3a:a6:13:8a:cb:ca:49:d5:e0:69:9b:62:52: 9b:1a:88:74:19:bb:a5:89:97:6c:d7:aa:7e:25:74:65:48:6d: 1a:34:fc:8b:f3:2d:7e:e0:aa:e9:11:61:63:c3:f4:d6:62:0e: 40:fa:e4:56:bc:3b:1a:6e:20:58:e9:d4:2f:b5:46:37:3a:3d: c6:80:c0:a4:cb:21:0d:5c:44:2d:b6:01:8d:54:cb:58:3b:dd: 1a:d9:7f:a1:c9:0c:47:a8:85:2d:41:55:32:bd:59:4c:1d:c1: f4:17:46:12:3b:ea:5d:db:5d:c4:36:4a:06:ea:48:30:29:41: 47:eb:0a:94:af:fa:c1:43:e8:41:50:96:f2:89:7f:ed:6a:09: 1a:2b:dd:e4:e6:fa:da:44:50:cb:67:89:fd:09:7f:85:11:9b: bb:8e:32:b2:cb:9f:61:ec:bf:1d:43:0f:e1:0d:3c:f6:48:f4: 39:d2:fd:06:87:5a:c7:ac:7d:d8:fd:66:b9:2b:d1:88:6c:f8: 56:8e:62:85:82:3c:8c:36:48:be:3f:2a:e9:ef:ca:af:c1:7a: 30:75:4e:fe:c6:70:e7:68:89:e1:58:f8:75:0e:b1:82:cd:f6: 33:05:d0:fe:77:c1:8a:82:90:ca:68:ad:36:bc:b3:48:b9:52: fe:a4:e9:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwODIwMTczMTAyWhcNMjYwODI3MTczMTAyWjAYMRYwFAYD VQQDEw02YTg3MzlkNy1mMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMwoWnUQGtlZbDR7GR81n6YTEr6kFecC2XAuZTZ32FId36bt3/ZdAdtl5G1m OQThPO08NMZ2yvg0tMftZc4Z2kX8+AwYFL4UA80tVrTRqY4674BYYYhG2+Ytpoxo nZs3mNz1NPUSrLsV4VuaqkSgF0j0Bb2fffoizXioMiVigv8AGt92yM0T0E7BxTi4 nc5pHqg3Z3WKDSjg05tCrek06Ywt7Fy1qL5VcFaXwm2rmNYNBTaEOuWbiHzss7wt dvI7vgs9sTdJb5EAyXawoGGEjKo6mJXBMngcg0CAwv5Ys0nCLRbHrQliJGSr1yo8 KJ0LlvEsPFJ7F+O77JodKf5VjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYoz0Ue aJ9G5nWysPfICRZ3zvDcMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYaBNLN06phOKy8pJ1eBpm2JSmxqIdBm7pYmXbNeqfiV0ZUhtGjT8i/MtfuCq 6RFhY8P01mIOQPrkVrw7Gm4gWOnUL7VGNzo9xoDApMshDVxELbYBjVTLWDvdGtl/ ockMR6iFLUFVMr1ZTB3B9BdGEjvqXdtdxDZKBupIMClBR+sKlK/6wUPoQVCW8ol/ 7WoJGivd5Ob62kRQy2eJ/Ql/hRGbu44yssufYey/HUMP4Q089kj0OdL9Bodax6x9 2P1muSvRiGz4Vo5ihYI8jDZIvj8q6e/Kr8F6MHVO/sZw52iJ4Vj4dQ6xgs32MwXQ /nfBioKQymitNryzSLlS/qTpUg== -----END CERTIFICATE-----Generated at Sat Aug 22 14:26:19 2026 by rpki-client