$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: b6zIolU77nfPtSadskL04MdiexVcXKj1RQxOsw+jSuU= Subject key identifier: D7:67:D6:77:B6:A8:45:D9:79:1F:F9:12:B3:F0:95:87:71:20:C8:91 Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0D52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0D39 Signing time: Tue 18 Aug 2026 18:23:10 +0000 Manifest this update: Tue 18 Aug 2026 18:23:10 +0000 Manifest next update: Tue 25 Aug 2026 18:23:10 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: qvaQZ8Kr4lHIZMXXDsmTyG2YzvmSEvzbj0w/dKJ5jno=) 2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: DvZA6XJDkyHfkolYQVEDhxnUbcvdyFYpNYGE/Rx6mkk=) 3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: zG4D1s2xrlJsIzyQLjKkrbBcFvkHI/PRTbX5mMwZqTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3410 (0xd52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Aug 18 18:23:10 2026 GMT Not After : Aug 25 18:23:10 2026 GMT Subject: CN=6a84a30e-39fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:11:d2:0e:36:a4:a9:63:9a:27:5d:9f:08:50: 98:d8:77:5e:86:7c:8b:10:20:8b:c5:8d:c2:e9:39: 30:0d:83:93:f9:95:83:4a:43:83:aa:b0:c6:b3:fd: 2f:31:7a:9a:a8:05:11:bf:ff:fe:f6:66:4e:e8:b8: 5c:a9:51:32:ed:ea:a2:03:e2:63:5e:27:64:88:6e: b5:36:93:6f:da:c3:31:f6:54:25:5f:09:d4:32:9d: b3:82:c9:5b:f7:6b:aa:98:0a:c6:77:c4:0e:58:4f: fc:63:62:68:52:f0:c2:91:80:27:9a:24:ae:5b:96: c9:35:2b:9e:98:aa:24:6b:0b:5a:ea:4b:b6:d5:79: 2c:ac:74:30:ab:cb:05:e2:ce:c9:76:7d:4d:d4:79: 57:19:38:30:26:13:b5:e7:3d:80:40:d6:2e:e8:01: 99:39:8f:e1:f4:af:60:4a:30:67:06:4a:b1:5c:df: cb:3c:8d:99:5a:e5:fa:f7:a2:6c:72:00:c2:43:0d: e8:1f:23:44:17:ff:a7:f3:77:6b:47:4d:bc:7c:0d: 57:4d:76:8d:30:e6:00:49:c0:9b:37:24:44:46:d2: 59:00:fe:6e:ac:84:e3:ae:c3:f1:57:cd:4d:76:e9: 22:6d:63:b3:f7:97:ae:2c:8d:47:ca:00:ce:3e:d8: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:67:D6:77:B6:A8:45:D9:79:1F:F9:12:B3:F0:95:87:71:20:C8:91 X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7a:6e:89:18:62:c8:91:a4:35:11:54:ea:0c:dd:49:f0:26: ec:bb:17:77:21:55:2e:d9:b5:3c:91:86:c8:65:38:0d:3a:78: 96:46:27:0c:61:02:27:f0:44:72:58:5e:1f:a6:95:4a:c9:e9: 9e:b0:4c:f8:f0:f4:cd:e0:a8:58:d8:d7:e3:39:a5:9c:92:aa: c3:2d:83:80:31:46:4e:b6:46:70:fa:2f:3d:18:54:93:b0:bb: 37:f5:ea:be:38:85:05:aa:f4:55:12:2e:6c:e1:eb:5a:2d:3e: 01:27:ce:05:32:b4:e4:67:32:b9:07:e3:a4:11:aa:58:ea:c8: e7:2d:90:49:30:65:b8:4a:9f:91:53:3e:b1:f6:f5:fa:7e:bd: 49:c4:8c:8d:3e:3d:a4:57:ff:29:af:c2:82:75:fb:13:e2:a7: 33:f7:72:a1:2b:2d:86:e5:09:31:30:86:84:77:29:31:2f:c6: 14:e8:ea:fc:d3:8a:cb:19:85:fc:1f:b5:dc:f9:3e:e5:56:ae: 9a:74:53:3b:04:44:3c:e5:63:0b:86:ef:18:e9:4b:c0:97:f5: 09:b2:1d:03:c3:05:74:a6:2d:8e:80:e8:19:fb:eb:5d:7c:07: e4:d3:41:a0:05:81:74:e1:e2:3b:c3:dc:36:86:6f:08:2c:21: 41:78:17:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjYwODE4MTgyMzEwWhcNMjYwODI1MTgyMzEwWjAYMRYwFAYD VQQDEw02YTg0YTMwZS0zOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xHSDjakqWOaJ12fCFCY2HdehnyLECCLxY3C6TkwDYOT+ZWDSkODqrDGs/0v MXqaqAURv//+9mZO6LhcqVEy7eqiA+JjXidkiG61NpNv2sMx9lQlXwnUMp2zgslb 92uqmArGd8QOWE/8Y2JoUvDCkYAnmiSuW5bJNSuemKokawta6ku21XksrHQwq8sF 4s7Jdn1N1HlXGTgwJhO15z2AQNYu6AGZOY/h9K9gSjBnBkqxXN/LPI2ZWuX696Js cgDCQw3oHyNEF/+n83drR028fA1XTXaNMOYAScCbNyRERtJZAP5urITjrsPxV81N dukibWOz95euLI1HygDOPtgCXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdn1ne2 qEXZeR/5ErPwlYdxIMiRMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW3puiRhiyJGkNRFU6gzdSfAm7LsXdyFVLtm1PJGGyGU4DTp4lkYnDGECJ/BE clheH6aVSsnpnrBM+PD0zeCoWNjX4zmlnJKqwy2DgDFGTrZGcPovPRhUk7C7N/Xq vjiFBar0VRIubOHrWi0+ASfOBTK05GcyuQfjpBGqWOrI5y2QSTBluEqfkVM+sfb1 +n69ScSMjT49pFf/Ka/CgnX7E+KnM/dyoSsthuUJMTCGhHcpMS/GFOjq/NOKyxmF /B+13Pk+5VaumnRTOwREPOVjC4bvGOlLwJf1CbIdA8MFdKYtjoDoGfvrXXwH5NNB oAWBdOHiO8PcNoZvCCwhQXgX1Q== -----END CERTIFICATE-----Generated at Wed Aug 19 16:52:42 2026 by rpki-client