$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: waSBI8sgHjhwUhE+vd7BpmrgKXDdXnbH40TayvSxn54= Subject key identifier: FA:27:85:7E:44:7D:36:47:92:51:76:B6:A2:69:4D:E8:36:EA:2C:FA Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 0830 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 0823 Signing time: Tue 18 Aug 2026 21:30:25 +0000 Manifest this update: Tue 18 Aug 2026 21:30:24 +0000 Manifest next update: Tue 25 Aug 2026 21:30:24 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: fC5jhTvlJi/udbK6T39FXiHOTFxAe+uBiZjx2gbeBnI=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: /LeLgNBBApVoU9W0PiPoKX0e1+iJ16jhEcyi7pM1vXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 21:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Aug 18 21:30:24 2026 GMT Not After : Aug 25 21:30:24 2026 GMT Subject: CN=6a84cef1-b8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:62:41:0c:09:49:33:72:c6:57:67:f3:78: d0:7b:23:d1:db:e6:89:80:18:16:2d:41:41:39:cb: 44:db:7c:09:ef:54:77:39:09:d7:b2:21:72:11:fb: 16:e7:38:67:0d:27:f6:fe:d0:bb:2b:e6:85:14:4a: a3:f3:8a:a4:c2:35:e1:48:db:22:a5:7a:e2:0d:e7: c2:b8:41:17:d8:1a:5a:b6:b9:52:9b:1f:59:48:b4: ef:5b:c3:68:0d:df:8f:bb:34:12:0d:f6:b2:2e:bf: 47:de:d7:02:d5:f0:0f:05:11:1b:e2:1b:47:e7:f4: 03:a5:bb:ce:79:a5:44:55:8e:c6:05:69:da:8c:d0: 8b:91:eb:eb:cc:4c:2d:8f:32:f8:62:06:d6:c4:d6: ea:6f:b3:9d:a2:7c:29:ca:5d:dc:e9:94:80:7c:8b: 25:60:a4:1c:57:b9:fa:4f:5a:20:f5:e8:d8:75:87: 23:0b:5f:36:1d:03:3a:49:ab:b6:2b:3c:ed:19:98: 93:ad:28:df:84:03:68:9f:25:73:70:f5:c2:96:be: d9:76:fe:4a:c7:41:b7:7b:8f:d7:9a:c4:fd:62:aa: d4:11:3b:4b:7a:df:bb:74:92:dd:9c:e1:2f:d4:1c: 6a:66:73:f1:8d:3b:ff:9c:87:5b:69:f5:90:64:12: e2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:27:85:7E:44:7D:36:47:92:51:76:B6:A2:69:4D:E8:36:EA:2C:FA X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:30:07:e9:3e:57:c3:ed:94:23:b9:8b:a6:90:fb:f4:fa:4b: 28:00:70:22:1d:dd:e4:60:90:67:3d:49:65:be:11:5c:c5:14: b8:84:f0:c1:c5:34:3e:0f:05:bd:56:3e:a9:e7:c4:4f:6d:4c: e3:6d:fd:04:36:ff:32:77:c6:0b:48:a2:b5:50:ea:1d:f1:e4: 80:9f:fb:12:22:ac:cf:0b:e4:1c:29:4f:93:7e:ae:91:da:bb: 31:ae:d8:d3:a6:b6:30:97:e4:d8:82:3b:8d:df:fa:e7:8e:b0: 1f:fd:15:7d:b3:ef:ac:f4:c1:fa:e5:2d:dd:80:42:44:d9:b8: d7:83:92:26:b5:fe:48:c2:fa:68:74:5f:b8:24:52:14:c5:99: 81:91:f0:03:db:27:da:08:50:78:6d:60:88:6b:27:78:08:87: d7:69:56:03:80:eb:db:9b:7f:7f:76:c5:ea:d6:79:bc:fd:aa: 4f:16:f4:4d:54:9d:d4:04:e7:9a:a7:16:5e:d6:97:63:14:fc: 2d:e3:ee:b1:a6:63:b8:ac:d5:cb:3d:18:9b:b4:61:b2:8c:19: 04:0e:3e:96:c5:72:cb:47:a8:a0:72:7d:8e:b8:09:21:12:54: c5:50:56:bb:5d:67:82:30:cf:b2:a5:c3:49:b6:73:63:7a:2b: 25:bb:1d:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjYwODE4MjEzMDI0WhcNMjYwODI1MjEzMDI0WjAYMRYwFAYD VQQDEw02YTg0Y2VmMS1iOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfdiQQwJSTNyxldn83jQeyPR2+aJgBgWLUFBOctE23wJ71R3OQnXsiFyEfsW 5zhnDSf2/tC7K+aFFEqj84qkwjXhSNsipXriDefCuEEX2BpatrlSmx9ZSLTvW8No Dd+PuzQSDfayLr9H3tcC1fAPBREb4htH5/QDpbvOeaVEVY7GBWnajNCLkevrzEwt jzL4YgbWxNbqb7Odonwpyl3c6ZSAfIslYKQcV7n6T1og9ejYdYcjC182HQM6Sau2 KzztGZiTrSjfhANonyVzcPXClr7Zdv5Kx0G3e4/XmsT9YqrUETtLet+7dJLdnOEv 1BxqZnPxjTv/nIdbafWQZBLiIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPonhX5E fTZHklF2tqJpTeg26iz6MB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABjAH6T5Xw+2UI7mLppD79PpLKABwIh3d5GCQZz1JZb4RXMUUuITwwcU0Pg8F vVY+qefET21M4239BDb/MnfGC0iitVDqHfHkgJ/7EiKszwvkHClPk36ukdq7Ma7Y 06a2MJfk2II7jd/6546wH/0VfbPvrPTB+uUt3YBCRNm414OSJrX+SML6aHRfuCRS FMWZgZHwA9sn2ghQeG1giGsneAiH12lWA4Dr25t/f3bF6tZ5vP2qTxb0TVSd1ATn mqcWXtaXYxT8LePusaZjuKzVyz0Ym7RhsowZBA4+lsVyy0eooHJ9jrgJIRJUxVBW u11ngjDPsqXDSbZzY3orJbsdcw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:43:47 2026 by rpki-client