$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: kixC1+NavXgyCz/RIF8De+WQYzSCx4bAVYStOcPQLzQ= Subject key identifier: D3:52:4B:94:9A:86:4E:36:35:B0:5F:99:40:45:A8:5B:C0:6F:89:3F Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 0A1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 0A14 Signing time: Tue 18 Aug 2026 20:03:50 +0000 Manifest this update: Tue 18 Aug 2026 20:03:50 +0000 Manifest next update: Tue 25 Aug 2026 20:03:50 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: 34/SfXmlwtLkOX12MPa3qaaTN4dnTVS3NsJIqzDfEh4=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: XaO1hJB0oSGtUyL6Bx5I5lGNvEGPhwnmNhYVX7Xyt8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Aug 18 20:03:50 2026 GMT Not After : Aug 25 20:03:50 2026 GMT Subject: CN=6a84baa6-e24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:4a:8c:51:f5:2f:18:b9:9c:dc:c1:ae:ae: a7:e7:dc:c4:8f:84:34:c6:4a:80:80:14:ad:01:07: eb:92:97:6d:83:d2:54:84:c9:56:b2:02:08:a9:79: a4:6d:40:c8:a8:a9:61:0d:66:59:bf:2c:75:85:50: 10:92:68:ce:7c:a6:7f:b0:0b:31:d1:32:75:f6:91: d1:dd:dd:ce:16:38:4b:c6:0f:ee:bc:61:ca:02:6b: 9d:25:a7:a2:3c:4d:cc:d9:9b:c7:b9:66:72:9f:83: 6a:a4:9e:ab:11:a2:6d:a6:7a:00:62:83:3e:63:60: b9:82:a0:d4:7f:09:31:d1:9b:7c:78:3f:eb:61:6c: e4:bf:61:41:19:97:6e:68:58:7b:bf:85:66:fe:76: 6c:3a:49:7c:ec:d3:95:d2:71:9d:5f:1f:41:43:a8: 42:09:e3:6a:36:3f:27:4b:ae:ad:d6:8f:64:ea:12: 0a:6b:3c:ba:bc:e7:82:12:ff:89:90:24:6a:df:3a: f7:9b:c4:8f:5a:39:00:c3:da:be:8f:cc:c1:c0:97: bc:a5:03:b0:a5:19:47:2f:34:88:75:12:08:0a:eb: 31:4f:50:8a:79:d0:7a:fd:b7:8e:66:16:17:32:fb: 66:fe:4c:8b:89:73:ea:be:fd:c9:63:63:e9:15:28: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:52:4B:94:9A:86:4E:36:35:B0:5F:99:40:45:A8:5B:C0:6F:89:3F X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:5b:7a:1b:fc:e3:64:f7:0f:9f:0d:44:d5:0e:e3:91:d0:38: f9:a0:9f:4f:82:05:9d:77:38:ea:79:d3:a9:65:42:b1:96:e8: 49:2c:5d:57:34:95:8d:a1:4c:65:d2:a8:19:57:95:b1:0c:97: 53:28:1b:5c:c2:3c:25:64:53:c8:b0:b6:11:f1:da:cc:f0:1c: 12:3b:35:33:43:84:f4:a6:74:70:40:97:b5:2e:6d:73:14:6e: b0:b3:a7:51:45:e9:f2:74:47:3a:8a:9a:5a:b6:9d:c1:5b:92: da:29:64:e1:df:59:1f:f1:cf:2e:cd:29:e3:8c:10:93:1f:10: cc:07:0c:06:bc:c2:c1:39:19:c2:09:81:9a:fd:cf:a1:bb:15: 21:cf:cd:ae:61:6e:b9:6e:75:de:aa:11:99:7a:5d:71:32:9d: 40:04:77:66:23:5d:9c:d4:96:72:ae:ec:73:a2:ae:a8:a7:1d: a2:85:07:fd:5b:a8:d4:70:7d:b3:79:52:f0:65:32:de:c3:35: aa:0f:2d:2a:aa:96:79:4c:37:7b:45:2b:26:e4:5a:2b:4b:e3: 69:e8:94:1b:1f:05:8a:6d:93:fc:4f:9c:b2:da:fc:61:66:c2: b4:2c:78:0a:07:49:ae:39:7f:7d:e4:12:ef:e2:2d:bb:b1:d6: ac:81:5f:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjYwODE4MjAwMzUwWhcNMjYwODI1MjAwMzUwWjAYMRYwFAYD VQQDEw02YTg0YmFhNi1lMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyBKjFH1Lxi5nNzBrq6n59zEj4Q0xkqAgBStAQfrkpdtg9JUhMlWsgIIqXmk bUDIqKlhDWZZvyx1hVAQkmjOfKZ/sAsx0TJ19pHR3d3OFjhLxg/uvGHKAmudJaei PE3M2ZvHuWZyn4NqpJ6rEaJtpnoAYoM+Y2C5gqDUfwkx0Zt8eD/rYWzkv2FBGZdu aFh7v4Vm/nZsOkl87NOV0nGdXx9BQ6hCCeNqNj8nS66t1o9k6hIKazy6vOeCEv+J kCRq3zr3m8SPWjkAw9q+j8zBwJe8pQOwpRlHLzSIdRIICusxT1CKedB6/beOZhYX Mvtm/kyLiXPqvv3JY2PpFShqiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNSS5Sa hk42NbBfmUBFqFvAb4k/MB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtlt6G/zjZPcPnw1E1Q7jkdA4+aCfT4IFnXc46nnTqWVCsZboSSxdVzSVjaFM ZdKoGVeVsQyXUygbXMI8JWRTyLC2EfHazPAcEjs1M0OE9KZ0cECXtS5tcxRusLOn UUXp8nRHOoqaWradwVuS2ilk4d9ZH/HPLs0p44wQkx8QzAcMBrzCwTkZwgmBmv3P obsVIc/NrmFuuW513qoRmXpdcTKdQAR3ZiNdnNSWcq7sc6KuqKcdooUH/Vuo1HB9 s3lS8GUy3sM1qg8tKqqWeUw3e0UrJuRaK0vjaeiUGx8Fim2T/E+cstr8YWbCtCx4 CgdJrjl/feQS7+Itu7HWrIFfPw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:56 2026 by rpki-client