$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft File: l7tUs9I8N8PdPgFpypdNJ9up8FA.mft (raw, json) Hash identifier: 8i9SROEozwARWYRsHHE4cNSDBVwr7PAZ0zolx4XktzE= Subject key identifier: D3:4D:F8:27:4D:C3:C9:CF:72:F0:37:2D:98:49:D3:9D:58:B0:92:C0 Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50 Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050 Certificate serial: 06BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft Manifest number: 06AE Signing time: Thu 20 Aug 2026 22:19:25 +0000 Manifest this update: Thu 20 Aug 2026 22:19:25 +0000 Manifest next update: Thu 27 Aug 2026 22:19:25 +0000 Files and hashes: 1: l7tUs9I8N8PdPgFpypdNJ9up8FA.crl (hash: GbAX5TyIKANFK4mSju6AhCxWS+52mB6Nh2tedvs4XDc=) 2: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (hash: 3hykLcorYgLEfCJWHrkkPwMpO+Se/Lm85HODusfioqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1722 (0x6ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51C1, serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050 Validity Not Before: Aug 20 22:19:25 2026 GMT Not After : Aug 27 22:19:25 2026 GMT Subject: CN=6a877d6d-c4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:66:95:b8:0e:fb:de:75:1a:91:3f:39:6d:ce: d2:13:ae:77:2d:af:83:4b:6d:46:cf:1b:fb:21:d4: 6f:ba:15:45:d5:f8:7c:13:09:bd:44:db:4e:26:b6: 09:e5:2b:19:d9:08:79:a1:72:07:d1:c0:32:c6:98: ee:c1:53:10:e1:82:30:9c:76:aa:f1:c6:31:1f:ea: ff:0b:90:b3:7d:de:8b:a9:30:68:e4:36:e8:9e:0e: 63:b5:41:10:fe:76:05:d4:12:6c:9c:d6:b7:ea:6a: c1:5f:2c:2a:22:e6:bc:a4:a3:46:ba:46:55:4c:d8: 3a:f0:89:6a:75:f0:cc:10:59:0f:9f:5f:bb:dc:f5: 45:3f:08:c2:86:96:d7:ff:af:20:e5:a5:d8:ef:1a: f5:c2:1f:4e:b8:e9:67:18:48:00:b6:c5:b5:e2:f0: 7e:63:06:fd:fd:01:e5:cd:47:44:68:3a:53:7f:32: 77:76:21:b9:15:fa:c3:c4:a4:08:f0:c0:8f:b9:ee: 46:8e:0a:85:8b:8f:b7:d3:b5:9c:ff:a6:32:75:3c: 40:d3:57:ce:1d:fc:52:52:e0:76:05:26:7d:60:82: 97:ca:a9:50:a4:50:40:dd:ba:a6:38:b6:03:ec:5b: 09:50:71:fd:44:34:c8:08:3e:42:b4:d7:a0:a8:f6: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4D:F8:27:4D:C3:C9:CF:72:F0:37:2D:98:49:D3:9D:58:B0:92:C0 X509v3 Authority Key Identifier: keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b4:5c:71:64:74:ca:81:8b:db:b4:95:48:63:28:e2:ce:17: f6:b6:c7:a9:2c:4b:79:75:ad:58:1d:1d:a1:68:00:3b:ec:81: 30:12:1e:df:ac:e2:16:14:d3:d1:70:31:c3:c5:f4:d0:00:14: 4e:0f:c0:1e:07:d3:2a:5d:8a:22:53:7c:b5:66:bd:bb:2a:95: 7b:56:04:50:b0:64:2e:18:88:69:6d:a8:55:07:49:19:10:5b: 42:e2:0b:ae:fa:df:46:b1:74:f2:6f:a0:10:c1:51:25:7c:11: ee:32:60:0d:d2:a1:b1:a3:c9:1d:74:b6:d9:5b:69:07:c6:ef: a4:00:d7:83:0c:4f:f9:f6:6f:40:cb:00:76:4d:2c:c0:1d:31: a7:50:e6:d5:ce:6a:f4:e6:d5:7d:3d:04:7a:3a:bb:c3:2a:bf: 7a:53:3a:10:c1:63:4f:1a:85:ea:13:48:82:64:9f:13:55:86: 47:e9:e6:07:76:7c:1f:26:38:9d:35:aa:28:dd:9a:e2:28:e5: 16:14:a2:b9:ba:57:6c:2b:39:24:53:b7:35:43:7e:b6:f3:94: a9:9a:7e:e5:bd:bd:dc:a7:0a:14:7e:29:27:42:77:c3:85:84: 10:70:d4:77:8d:22:54:7f:f9:d2:08:cc:46:28:d7:b3:0c:69: 2e:34:12:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQzExMTAvBgNVBAUTKDk3QkI1NEIzRDIzQzM3QzNERDNFMDE2OUNBOTc0RDI3 REJBOUYwNTAwHhcNMjYwODIwMjIxOTI1WhcNMjYwODI3MjIxOTI1WjAYMRYwFAYD VQQDEw02YTg3N2Q2ZC1jNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWaVuA773nUakT85bc7SE653La+DS21Gzxv7IdRvuhVF1fh8Ewm9RNtOJrYJ 5SsZ2Qh5oXIH0cAyxpjuwVMQ4YIwnHaq8cYxH+r/C5Czfd6LqTBo5Dbong5jtUEQ /nYF1BJsnNa36mrBXywqIua8pKNGukZVTNg68IlqdfDMEFkPn1+73PVFPwjChpbX /68g5aXY7xr1wh9OuOlnGEgAtsW14vB+Ywb9/QHlzUdEaDpTfzJ3diG5FfrDxKQI 8MCPue5GjgqFi4+307Wc/6YydTxA01fOHfxSUuB2BSZ9YIKXyqlQpFBA3bqmOLYD 7FsJUHH9RDTICD5CtNegqPZNNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNN+CdN w8nPcvA3LZhJ051YsJLAMB8GA1UdIwQYMBaAFJe7VLPSPDfD3T4BacqXTSfbqfBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFDMS9EOTJFNjlBQUMx RUUxMUVCQkZENTdFMkFDNEY5QUUwMi9sN3RVczlJOE44UGRQZ0ZweXBkTko5dXA4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3dFVzOUk4TjhQZFBnRnB5cGROSjl1cDhGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFDMS9EOTJFNjlBQUMxRUUxMUVCQkZENTdFMkFDNEY5QUUwMi9sN3RVczlJOE44 UGRQZ0ZweXBkTko5dXA4RkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfbRccWR0yoGL27SVSGMo4s4X9rbHqSxLeXWtWB0doWgAO+yBMBIe36ziFhTT 0XAxw8X00AAUTg/AHgfTKl2KIlN8tWa9uyqVe1YEULBkLhiIaW2oVQdJGRBbQuIL rvrfRrF08m+gEMFRJXwR7jJgDdKhsaPJHXS22VtpB8bvpADXgwxP+fZvQMsAdk0s wB0xp1Dm1c5q9ObVfT0Eejq7wyq/elM6EMFjTxqF6hNIgmSfE1WGR+nmB3Z8HyY4 nTWqKN2a4ijlFhSiubpXbCs5JFO3NUN+tvOUqZp+5b293KcKFH4pJ0J3w4WEEHDU d40iVH/50gjMRijXswxpLjQS5Q== -----END CERTIFICATE-----Generated at Fri Aug 21 23:08:56 2026 by rpki-client