$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: nP6VM5m0EtTghiRfHt/NGD0VtiCTwGhCW5xLbD7FPXE= Subject key identifier: 5E:C4:94:B8:1B:41:1D:B0:DA:F3:D8:CC:74:C9:90:FE:DB:24:F1:0D Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 026F Signing time: Wed 19 Aug 2026 02:58:37 +0000 Manifest this update: Wed 19 Aug 2026 02:58:37 +0000 Manifest next update: Wed 26 Aug 2026 02:58:37 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: Mz8FxDIPmufWLMjTpy0dg54tv5nmIgCkxas74xdpovs=) 2: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: XhHaHdOlqWYP1wfuj95iHXOiSFz6V8DkPjaDxpfW1i8=) 3: F02954E694AA11F18168138B6F11F970.roa (hash: jdpMDiHc19U9B3dTcdf0OBI4UCQ8NKRYGsnZZyIR7FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Aug 19 02:58:37 2026 GMT Not After : Aug 26 02:58:37 2026 GMT Subject: CN=6a851bdd-0cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ee:1e:fc:fc:e3:b1:5c:67:9a:ba:b6:b8:61: 83:d8:62:75:1c:4c:21:10:af:86:66:61:1a:f3:df: bc:f5:04:a3:55:b6:5a:5f:c3:a0:c5:93:8e:e3:db: 4e:71:3b:65:f1:5b:94:17:83:48:8e:88:c2:02:3d: 72:3d:fa:cf:78:9d:cc:44:e4:fb:4e:f9:01:33:81: 25:e1:07:48:05:24:95:f8:fe:41:a3:42:f7:1e:a7: e0:27:04:d3:5e:18:27:20:70:e6:30:96:71:c4:3e: 97:26:f4:be:4b:15:78:30:c5:bb:62:31:38:92:fc: bc:52:6b:46:96:5d:03:23:cf:6b:01:d5:61:54:15: 3f:68:b7:f2:cc:e9:41:c0:a5:14:dd:7d:da:45:6b: c9:4e:26:df:d8:8b:3b:1e:05:44:85:3d:5c:2a:69: ca:d6:8d:99:d3:2f:05:8e:68:54:1a:f5:fd:8b:51: 02:d1:9a:77:fa:17:09:ac:a1:cc:0f:c6:4b:c4:ad: ba:3b:fe:b8:ba:6b:e3:34:3f:09:d0:e1:f2:a3:48: 6e:00:d9:c9:4b:0c:a4:b4:33:a7:87:f2:0b:a5:c8: 8b:db:6f:3e:8c:31:dd:42:2b:4a:71:e7:b8:dc:ee: ac:ca:39:f8:a9:f0:97:f3:fc:1c:b5:cd:4d:43:7f: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C4:94:B8:1B:41:1D:B0:DA:F3:D8:CC:74:C9:90:FE:DB:24:F1:0D X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:52:be:ed:8d:49:69:65:f0:7a:2f:5d:3d:8d:61:fb:d9:5e: 6a:4f:8a:78:5f:27:cc:25:08:59:e1:e9:63:fb:6f:32:0d:31: 1c:1c:c8:8f:06:6a:aa:42:75:ce:e7:ff:e2:c6:f7:f9:f6:de: e5:ba:5a:04:b1:ba:d2:e8:dc:d8:be:a2:5f:36:30:b1:bc:0b: 3a:bb:31:5e:eb:1b:9c:d9:4f:8f:49:0e:75:3b:cc:a9:02:ab: 47:1d:05:6e:e6:ce:10:f5:e3:2c:ff:ab:4b:2a:1a:ce:01:b3: ce:8c:2e:99:f4:c3:db:7a:ff:fc:86:0f:54:0e:f4:69:42:dc: 1a:68:23:95:84:18:f8:06:59:43:10:dd:30:e3:88:2a:09:55: 44:1f:77:b5:05:58:a9:1c:01:b0:34:d9:99:b9:be:56:5d:e0: 8a:ce:a5:bb:8f:85:0e:f4:50:9e:d7:c1:01:52:ca:50:fa:7d: 4a:e5:f6:2c:2a:37:5f:69:aa:ab:f5:f3:5a:11:1a:0a:82:db: 46:fb:fa:72:0f:de:e1:dc:ba:3a:5e:eb:e5:78:40:91:db:08: 24:fc:c6:11:44:5e:bb:c1:f1:61:1d:ca:82:fe:33:ba:84:90: 07:a6:14:93:08:8a:41:af:b3:93:f8:e0:b8:73:2f:d7:af:5a: 1c:ce:37:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjYwODE5MDI1ODM3WhcNMjYwODI2MDI1ODM3WjAYMRYwFAYD VQQDEw02YTg1MWJkZC0wY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8O4e/PzjsVxnmrq2uGGD2GJ1HEwhEK+GZmEa89+89QSjVbZaX8OgxZOO49tO cTtl8VuUF4NIjojCAj1yPfrPeJ3MROT7TvkBM4El4QdIBSSV+P5Bo0L3HqfgJwTT XhgnIHDmMJZxxD6XJvS+SxV4MMW7YjE4kvy8UmtGll0DI89rAdVhVBU/aLfyzOlB wKUU3X3aRWvJTibf2Is7HgVEhT1cKmnK1o2Z0y8FjmhUGvX9i1EC0Zp3+hcJrKHM D8ZLxK26O/64umvjND8J0OHyo0huANnJSwyktDOnh/ILpciL228+jDHdQitKcee4 3O6syjn4qfCX8/wctc1NQ38lrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7ElLgb QR2w2vPYzHTJkP7bJPENMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq1K+7Y1JaWXwei9dPY1h+9leak+KeF8nzCUIWeHpY/tvMg0xHBzIjwZqqkJ1 zuf/4sb3+fbe5bpaBLG60ujc2L6iXzYwsbwLOrsxXusbnNlPj0kOdTvMqQKrRx0F bubOEPXjLP+rSyoazgGzzowumfTD23r//IYPVA70aULcGmgjlYQY+AZZQxDdMOOI KglVRB93tQVYqRwBsDTZmbm+Vl3gis6lu4+FDvRQntfBAVLKUPp9SuX2LCo3X2mq q/XzWhEaCoLbRvv6cg/e4dy6Ol7r5XhAkdsIJPzGEUReu8HxYR3Kgv4zuoSQB6YU kwiKQa+zk/jguHMv169aHM43fg== -----END CERTIFICATE-----Generated at Wed Aug 19 13:39:45 2026 by rpki-client