$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: qmZHCJkdJ8DKk7TO8UvgXZm6zxn3PtUyXmIBw1/ef5A= Subject key identifier: 27:F1:BD:09:FD:E5:E9:E7:DA:E3:E5:E3:D1:A9:A3:B2:C9:BA:B0:81 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 04AD Signing time: Wed 19 Aug 2026 00:16:40 +0000 Manifest this update: Wed 19 Aug 2026 00:16:39 +0000 Manifest next update: Wed 26 Aug 2026 00:16:39 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: DdvLK93mY7N+HyLN+PVdpvjNDE6qmsA9KUtNYMseqRU=) 2: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=) 3: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Aug 19 00:16:39 2026 GMT Not After : Aug 26 00:16:39 2026 GMT Subject: CN=6a84f5e7-4080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:01:16:67:da:9b:81:c3:8f:36:7d:c6:52: 0e:9a:32:55:72:ea:e6:c0:94:42:00:ac:5a:dd:7b: b2:f7:6a:9d:24:b2:c5:68:87:e1:f0:8b:8d:12:2d: 79:fd:5d:90:bf:9c:5a:f7:eb:05:b3:e4:f8:bd:6d: ae:ef:3b:30:e9:33:b9:35:77:e5:2b:3e:68:b0:ee: 46:e8:eb:3b:6a:9d:9f:39:65:00:89:40:70:37:0e: 77:bd:29:72:c1:35:c8:89:64:03:b1:8e:5f:d1:c9: 55:e2:24:e0:0c:a5:17:8d:b5:85:1d:b6:5e:95:d2: 31:04:b8:0a:97:a4:1c:d9:83:67:1a:dd:98:96:d0: 80:16:87:85:50:d4:9e:b3:89:a3:54:4f:16:d2:de: 96:0f:ee:0d:04:fe:b8:06:b5:25:e8:83:b9:5c:ab: 36:61:ee:34:36:45:a6:e4:12:26:d5:5d:da:13:2e: cf:1c:72:d2:e7:dd:53:02:dd:b8:af:f8:ef:6a:fc: 6b:e8:2c:c1:2c:9c:68:2d:ae:9e:71:8b:05:74:80: b3:c9:72:68:b2:d6:d3:f8:6d:db:a4:d5:0d:ee:d0: cf:b4:d3:85:dc:32:ef:02:95:41:d9:b5:72:c8:25: da:81:1c:03:6e:f8:79:9f:2f:66:1e:86:36:c2:4c: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F1:BD:09:FD:E5:E9:E7:DA:E3:E5:E3:D1:A9:A3:B2:C9:BA:B0:81 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bc:85:fe:2f:24:ac:71:e0:a7:93:99:bc:bb:5c:b3:f3:12: 78:44:10:a5:84:08:d9:aa:5b:7a:b5:0e:4b:de:54:61:34:ab: 28:e1:e2:d7:16:82:15:a2:64:88:a9:bc:dd:eb:b6:a1:71:98: a0:d1:3b:c7:e2:b0:04:6e:7b:e8:a8:2e:8d:c1:f3:c4:a1:17: 5f:56:1f:58:6f:78:0c:1f:e6:e1:97:36:67:fb:e2:09:07:2e: 4f:ae:27:99:8b:6a:f1:12:e4:89:96:9d:59:7c:b0:1e:33:ac: 5a:12:d1:b9:7d:fb:36:79:44:a2:33:a1:7c:1a:67:ea:59:aa: 8b:3e:52:b9:70:0e:7e:1f:66:e3:5c:d3:dd:0e:6a:ba:66:5a: 2e:e7:8a:88:23:01:da:02:bd:5a:ad:e4:c2:f9:02:43:11:47: 65:ce:76:75:0b:e3:3a:0f:4f:f5:cc:77:06:87:54:25:20:1f: 16:d4:2d:33:2e:10:3d:93:0a:86:53:cc:7a:a8:96:08:10:17: 3a:27:e9:88:27:a7:e4:3c:6d:d2:a6:e2:ce:fd:9a:3b:3d:af: 40:8e:17:28:bb:a2:df:ab:d1:b1:6c:33:a9:28:4c:49:fc:b3: 45:06:59:bd:7c:b6:a4:81:f0:45:ce:be:a9:99:a3:19:93:96: f3:f6:2e:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjYwODE5MDAxNjM5WhcNMjYwODI2MDAxNjM5WjAYMRYwFAYD VQQDEw02YTg0ZjVlNy00MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtioBFmfam4HDjzZ9xlIOmjJVcurmwJRCAKxa3Xuy92qdJLLFaIfh8IuNEi15 /V2Qv5xa9+sFs+T4vW2u7zsw6TO5NXflKz5osO5G6Os7ap2fOWUAiUBwNw53vSly wTXIiWQDsY5f0clV4iTgDKUXjbWFHbZeldIxBLgKl6Qc2YNnGt2YltCAFoeFUNSe s4mjVE8W0t6WD+4NBP64BrUl6IO5XKs2Ye40NkWm5BIm1V3aEy7PHHLS591TAt24 r/jvavxr6CzBLJxoLa6ecYsFdICzyXJostbT+G3bpNUN7tDPtNOF3DLvApVB2bVy yCXagRwDbvh5ny9mHoY2wkz7JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfxvQn9 5enn2uPl49Gpo7LJurCBMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC7yF/i8krHHgp5OZvLtcs/MSeEQQpYQI2apberUOS95UYTSrKOHi1xaCFaJk iKm83eu2oXGYoNE7x+KwBG576KgujcHzxKEXX1YfWG94DB/m4Zc2Z/viCQcuT64n mYtq8RLkiZadWXywHjOsWhLRuX37NnlEojOhfBpn6lmqiz5SuXAOfh9m41zT3Q5q umZaLueKiCMB2gK9Wq3kwvkCQxFHZc52dQvjOg9P9cx3BodUJSAfFtQtMy4QPZMK hlPMeqiWCBAXOifpiCen5Dxt0qbizv2aOz2vQI4XKLui36vRsWwzqShMSfyzRQZZ vXy2pIHwRc6+qZmjGZOW8/Yu8g== -----END CERTIFICATE-----Generated at Thu Aug 20 23:32:22 2026 by rpki-client