$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: ZO6exdN8INvxUspLLnQ6SMOdfKuMSxoxOojlLXUvfrw= Subject key identifier: 59:0C:05:54:A4:96:86:9D:36:B0:10:DC:9B:6E:89:B2:56:4C:2A:6B Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 0965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 0942 Signing time: Wed 26 Aug 2026 20:07:20 +0000 Manifest this update: Wed 26 Aug 2026 20:07:19 +0000 Manifest next update: Wed 02 Sep 2026 20:07:19 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: C04qq4p2tP1E6SfG2p6K5wcH6njotbLN4pwmmNlwXYM=) 2: 1702453A7EAF11F1A86AC8B467A30FBC.roa (hash: kK9g04kyEiFnynqhVR38EeQ3FQu8/W3rZrXFesWAU4w=) 3: 18C57F047EAF11F1A86AC8B467A30FBC.roa (hash: TwfuImduumf2E6CwFlSoq4jZU9n/ol3F3dOv5htetzY=) 4: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: O+J9NJa3UAiRFIsaF/1cDe44mda6RPgxat0aYJVT3MQ=) 5: 43BCAA10601011F1B53A223F8947A888.roa (hash: UAOZoXUNlqRhbsm6Ye0JLiTSN1KyydXhLfW68ppQgWM=) 6: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: fecuy51h04kA/93Fl9Jso7L2bJu10CuAwHp5PsU5FhA=) 7: 1845D6647EAF11F1A86AC8B467A30FBC.roa (hash: hAU4qUdvHl3msSyOtoY08felpEvTOnOlkZDcpV81OCM=) 8: 17A584347EAF11F1A86AC8B467A30FBC.roa (hash: cWMVPdtFhLjtPumAhMJx7mxgsrChxX1MDuj/JICmZU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 20:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Aug 26 20:07:19 2026 GMT Not After : Sep 2 20:07:19 2026 GMT Subject: CN=6a8f4778-699f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:f0:03:65:b2:1a:5b:da:c4:d8:63:87:c2: 1d:28:16:db:f6:dc:1d:b5:67:82:00:bb:03:8e:d5: 76:c0:32:01:59:29:49:62:56:17:64:1b:e9:0e:22: c1:f6:a2:ca:d5:5a:92:fe:79:d1:f9:91:b7:ec:2e: bb:0e:a0:1e:7b:b1:8d:18:c6:90:3a:61:f2:ed:77: 50:83:c9:84:84:02:32:27:f5:61:c2:26:ee:de:7a: 33:a2:7e:46:7f:ab:13:dc:42:c9:27:5a:71:a3:71: 1a:90:0e:1a:33:c4:ec:bd:31:f4:f9:46:bb:46:50: 7a:8d:3d:00:ae:f3:87:37:0a:f1:5b:43:ce:11:2c: 23:10:22:f6:5b:d6:5e:12:6a:01:fe:34:1c:39:06: e1:24:1e:38:5f:8f:10:f2:df:8c:cc:7f:69:c1:78: 24:94:ff:dd:c6:a7:5e:e1:4c:13:3a:8c:03:92:cf: c9:c8:cb:13:6a:56:da:f2:59:3e:84:40:37:65:f6: 3c:6a:2e:7a:2b:52:5a:95:d0:95:37:e1:1d:08:0d: bb:58:10:23:99:cc:f5:24:98:94:63:62:3a:5a:b9: d0:c5:c5:36:af:64:75:aa:8d:7c:6c:db:99:95:fd: 1b:d3:31:c4:c9:eb:a7:ff:bd:fd:3a:ab:2d:5c:6d: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0C:05:54:A4:96:86:9D:36:B0:10:DC:9B:6E:89:B2:56:4C:2A:6B X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:73:65:d8:ed:e2:0c:f6:05:71:c3:b3:6d:d5:04:62:56:2e: b9:ad:e9:4f:16:49:79:6d:87:0c:3e:9b:61:1e:56:ba:18:f1: 63:42:6b:48:e4:a8:63:df:2b:a6:d1:41:12:4b:ce:9a:11:41: 08:22:52:49:4c:db:55:a1:c8:9c:dc:36:44:62:94:e4:07:74: 5c:ca:9c:f1:1f:47:a6:43:d9:f6:f8:2f:43:35:27:49:b3:cd: 05:9d:0e:45:fc:49:eb:9c:f4:d0:2e:72:20:35:f5:00:0f:a7: 16:ff:f5:c8:7e:44:84:8d:c6:33:44:60:c5:a9:ef:2d:12:fa: 12:15:82:1b:85:e7:27:cd:58:c8:6e:9f:35:d8:d6:be:87:54: c7:25:d3:dc:fb:5c:e4:b0:46:a1:96:c1:8d:12:83:77:07:d6: b9:06:06:39:9e:7c:c3:30:98:37:7f:90:51:72:03:74:a3:a2: 09:14:cf:47:a7:b9:37:67:c5:b3:43:c3:33:0b:a8:b2:82:2a: 5b:d1:23:26:37:44:39:9c:7d:b5:d7:ec:1b:2c:fd:ca:33:02: 04:56:19:3e:5d:85:9d:96:dd:84:80:46:73:46:a6:fb:d4:8e: 60:85:0d:d0:4f:41:03:44:ff:04:34:9e:4a:cd:fa:70:20:bf: 95:3a:b5:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjYwODI2MjAwNzE5WhcNMjYwOTAyMjAwNzE5WjAYMRYwFAYD VQQDEw02YThmNDc3OC02OTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlvwA2WyGlvaxNhjh8IdKBbb9twdtWeCALsDjtV2wDIBWSlJYlYXZBvpDiLB 9qLK1VqS/nnR+ZG37C67DqAee7GNGMaQOmHy7XdQg8mEhAIyJ/Vhwibu3nozon5G f6sT3ELJJ1pxo3EakA4aM8TsvTH0+Ua7RlB6jT0ArvOHNwrxW0POESwjECL2W9Ze EmoB/jQcOQbhJB44X48Q8t+MzH9pwXgklP/dxqde4UwTOowDks/JyMsTalba8lk+ hEA3ZfY8ai56K1JaldCVN+EdCA27WBAjmcz1JJiUY2I6WrnQxcU2r2R1qo18bNuZ lf0b0zHEyeun/739OqstXG2S7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkMBVSk loadNrAQ3JtuibJWTCprMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR3Nl2O3iDPYFccOzbdUEYlYuua3pTxZJeW2HDD6bYR5WuhjxY0JrSOSoY98r ptFBEkvOmhFBCCJSSUzbVaHInNw2RGKU5Ad0XMqc8R9HpkPZ9vgvQzUnSbPNBZ0O RfxJ65z00C5yIDX1AA+nFv/1yH5EhI3GM0RgxanvLRL6EhWCG4XnJ81YyG6fNdjW vodUxyXT3Ptc5LBGoZbBjRKDdwfWuQYGOZ58wzCYN3+QUXIDdKOiCRTPR6e5N2fF s0PDMwuosoIqW9EjJjdEOZx9tdfsGyz9yjMCBFYZPl2FnZbdhIBGc0am+9SOYIUN 0E9BA0T/BDSeSs36cCC/lTq10Q== -----END CERTIFICATE-----Generated at Thu Aug 27 19:14:31 2026 by rpki-client