$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft (raw, json) Hash identifier: fJXFIxf0xWiyfeGis726si7Ob1gR8VJJn35iugjSQIs= Subject key identifier: 45:63:2C:74:9D:B0:8B:84:A6:EF:4B:52:03:2A:D3:B9:35:49:A0:B8 Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Certificate serial: 2EC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft Manifest number: 2EA8 Signing time: Tue 18 Aug 2026 15:32:17 +0000 Manifest this update: Tue 18 Aug 2026 15:32:17 +0000 Manifest next update: Tue 25 Aug 2026 15:32:17 +0000 Files and hashes: 1: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl (hash: i56klejwAHy0piidp4aEZrc6G9NToGhEINCkqHnFduc=) 2: 611D8094B13D11E59299870AC4F9AE02.roa (hash: 6f1TkFWNlMl/F/acGbghOLoUP+OqCJaMnvA5r+odhLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11975 (0x2ec7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3102, serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Validity Not Before: Aug 18 15:32:17 2026 GMT Not After : Aug 25 15:32:17 2026 GMT Subject: CN=6a847b01-1480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:2a:6f:ed:3a:df:06:b9:ba:5c:9e:d3:9c: d9:27:26:70:60:70:f9:12:25:d5:ec:f0:44:19:1f: 39:2b:b7:ab:10:2d:87:72:c1:49:91:00:b2:58:41: 5e:b8:5a:1c:4f:2c:95:2a:07:1a:bd:6d:3d:1a:63: f7:f5:e1:74:0c:c6:8d:c9:b8:8e:b7:c7:0d:ea:42: 42:af:c5:dd:b4:6e:d1:f1:97:cb:4e:43:4a:d0:33: 3f:13:1e:61:64:dc:25:c1:f8:db:18:10:3c:b7:0f: 1a:55:87:cd:94:2f:f2:a3:8c:4e:76:85:91:82:bc: c0:eb:a6:33:66:42:5a:38:4e:2f:99:fb:eb:91:52: 0e:1d:3a:29:80:3f:fe:ca:ea:2b:69:90:7a:90:05: bc:91:a0:cd:9f:39:53:41:06:59:af:42:84:87:a6: 23:49:e0:36:fa:2c:a8:5d:43:c1:59:aa:87:96:c4: 22:19:a1:d0:6a:14:8c:38:08:cd:1a:67:e7:d1:bf: 15:b7:1d:f4:2f:17:fb:2e:b7:7f:28:d6:72:42:9d: 65:b7:bb:0e:ed:9c:cb:2a:f2:23:cc:48:e1:04:45: 35:ed:c7:39:47:ee:86:cd:f3:11:17:00:47:c1:73: a4:db:ae:47:1f:3b:42:be:41:73:6b:7c:de:0d:25: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:63:2C:74:9D:B0:8B:84:A6:EF:4B:52:03:2A:D3:B9:35:49:A0:B8 X509v3 Authority Key Identifier: keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:3e:f1:af:b6:be:b2:07:f8:3e:89:b9:a5:40:18:ba:68:52: c7:cd:59:c0:44:c7:a8:8d:42:f3:4b:e8:8c:c7:7a:13:da:40: 87:3e:1c:57:64:82:c5:55:d8:e7:29:e9:a0:15:cc:19:6a:79: 13:37:ac:95:29:08:a8:8b:26:21:c5:bb:0f:89:5d:4f:d7:36: 1f:a3:82:91:95:fc:32:c3:81:f5:9a:aa:f0:86:e7:2b:9d:56: 72:6d:b3:22:5d:52:2a:e4:48:db:73:7e:30:10:4f:b3:c0:9d: c9:3c:66:86:17:63:66:53:24:eb:63:a5:e3:cf:5a:08:db:27: dd:2b:38:8a:ac:2a:2a:a6:1c:cf:b7:9a:10:22:96:52:85:e7: e8:aa:4b:34:aa:54:5e:39:83:52:95:71:0d:95:3e:2d:4d:c3: fb:37:c4:ba:9b:50:1e:67:03:14:65:d2:37:a3:be:21:6e:fd: e7:8e:fe:46:15:af:6d:b1:bb:5f:28:e9:01:d4:ae:aa:bc:6c: 3d:4e:8e:5d:82:b3:4a:51:90:88:33:63:b3:cf:e0:dc:e0:e9: 87:6b:af:c4:59:61:23:84:3f:81:0f:18:7a:21:14:08:4e:c2: 3c:c0:6c:17:bf:28:74:fb:5b:a3:24:5d:3a:67:3c:e9:90:24: 2d:81:66:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxMDIxMTAvBgNVBAUTKEY5MUEzQTk4MzE0Mzg0QzQwM0E4RkYyMkE0NTNCQ0Ex QTNCQTZDRDgwHhcNMjYwODE4MTUzMjE3WhcNMjYwODI1MTUzMjE3WjAYMRYwFAYD VQQDEw02YTg0N2IwMS0xNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCgqb+063wa5ulye05zZJyZwYHD5EiXV7PBEGR85K7erEC2HcsFJkQCyWEFe uFocTyyVKgcavW09GmP39eF0DMaNybiOt8cN6kJCr8XdtG7R8ZfLTkNK0DM/Ex5h ZNwlwfjbGBA8tw8aVYfNlC/yo4xOdoWRgrzA66YzZkJaOE4vmfvrkVIOHTopgD/+ yuoraZB6kAW8kaDNnzlTQQZZr0KEh6YjSeA2+iyoXUPBWaqHlsQiGaHQahSMOAjN Gmfn0b8Vtx30Lxf7Lrd/KNZyQp1lt7sO7ZzLKvIjzEjhBEU17cc5R+6GzfMRFwBH wXOk265HHztCvkFza3zeDSX6rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVjLHSd sIuEpu9LUgMq07k1SaC4MB8GA1UdIwQYMBaAFPkaOpgxQ4TEA6j/IqRTvKGjumzY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEwMi9ENEFFRTJDODc2 OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhNUURxUDhpcEZPOG9hTzZi TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1SbzZtREZEaE1RRHFQOGlwRk84b2FPNmJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEwMi9ENEFFRTJDODc2OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhN UURxUDhpcEZPOG9hTzZiTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMz7xr7a+sgf4Pom5pUAYumhSx81ZwETHqI1C80vojMd6E9pAhz4cV2SCxVXY 5ynpoBXMGWp5EzeslSkIqIsmIcW7D4ldT9c2H6OCkZX8MsOB9Zqq8IbnK51Wcm2z Il1SKuRI23N+MBBPs8CdyTxmhhdjZlMk62Ol489aCNsn3Ss4iqwqKqYcz7eaECKW UoXn6KpLNKpUXjmDUpVxDZU+LU3D+zfEuptQHmcDFGXSN6O+IW79547+RhWvbbG7 XyjpAdSuqrxsPU6OXYKzSlGQiDNjs8/g3ODph2uvxFlhI4Q/gQ8YeiEUCE7CPMBs F78odPtboyRdOmc86ZAkLYFmYA== -----END CERTIFICATE-----Generated at Wed Aug 19 14:31:50 2026 by rpki-client