$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json) Hash identifier: 9zN+MUucWQicHmgtX0asCOaBRiLuyY4isX6wKQtfvOY= Subject key identifier: FB:DD:2A:8B:74:D7:99:30:82:C7:F7:1E:D3:5A:5A:A4:D5:4B:A8:AC Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft Manifest number: C1 Signing time: Wed 19 Aug 2026 07:37:37 +0000 Manifest this update: Wed 19 Aug 2026 07:37:36 +0000 Manifest next update: Wed 26 Aug 2026 07:37:36 +0000 Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: UuRsNObzEE6WPnR63DPmMxQveUr+1efzDgXjt+UvSso=) 2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: aA5xOOf0l5kwLxMjA9WGASG0n2PqG9HAsf+v12Q+bMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Validity Not Before: Aug 19 07:37:36 2026 GMT Not After : Aug 26 07:37:36 2026 GMT Subject: CN=6a855d40-9220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:58:0c:23:e1:53:39:d3:61:42:51:3a:e5: c9:22:4e:bf:5b:b1:53:5c:46:a5:f7:10:91:ff:83: a2:8e:0d:d0:e9:07:bf:f5:16:c3:c8:be:ee:3b:04: 86:60:a8:8d:05:4a:ff:c6:42:ce:f1:78:e9:89:b4: 57:9a:b3:24:82:e8:06:eb:9f:97:4e:61:50:73:d9: 70:b7:28:24:dd:86:0f:58:42:e9:4f:da:2c:7c:b1: a5:9c:5b:00:f0:da:0c:91:fa:00:76:74:ee:af:dc: a1:81:22:20:d5:0d:31:45:ce:43:d3:67:50:e0:6a: da:41:f0:6a:3c:1b:ac:d2:55:89:8e:d4:c8:61:e6: 8e:bc:74:7f:15:32:ff:29:b2:ba:83:1a:7d:8d:0d: af:1a:f1:25:90:71:12:a1:73:b3:cc:39:6d:5a:ea: 7b:5a:62:46:87:2b:f5:5f:b0:69:5a:32:ef:6b:ac: 36:26:66:15:b2:1e:6b:e1:26:d2:68:52:3a:80:fd: a5:ca:30:46:d9:6e:ae:98:03:ac:72:ab:2a:9b:99: 2f:ee:d2:a9:09:cf:68:f4:86:a9:77:8c:02:a0:6f: cd:0c:22:82:8d:c7:07:77:4d:d2:18:f0:63:7f:95: ce:e6:1d:85:62:cc:bc:ad:4f:73:b0:7f:3a:0b:c2: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DD:2A:8B:74:D7:99:30:82:C7:F7:1E:D3:5A:5A:A4:D5:4B:A8:AC X509v3 Authority Key Identifier: keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:b2:df:c1:11:b2:b2:45:c9:1b:55:ea:a5:d1:0a:3f:b5:45: 73:b7:ae:9d:48:80:06:19:17:11:05:32:a9:c4:d9:7a:ad:1d: 3b:cb:54:35:d2:96:8a:99:82:c2:30:ee:c2:74:e5:b7:c1:71: 56:9a:77:96:c4:ab:6f:be:db:e5:72:96:eb:d1:1d:15:f9:aa: 62:9e:7c:60:f2:0f:4f:31:99:7c:74:5c:6d:b8:a9:28:52:ff: 4f:29:12:b4:8b:30:18:4b:be:6b:2e:b1:65:38:8f:fc:da:47: 59:7a:80:f0:8e:d0:ef:6c:92:ff:0a:2d:1b:57:18:6a:34:18: 99:cb:cc:91:da:ec:56:64:25:8c:b9:b8:87:8b:82:53:e5:eb: c7:fe:a5:f8:e7:d1:ed:7c:cc:cc:28:d2:1c:8a:11:7a:0b:71: c3:ec:13:ac:a3:7f:3a:21:3d:c6:3d:b2:44:e3:00:b4:16:57: f1:83:1b:97:af:ee:92:63:b8:ba:0c:f4:46:53:6b:1b:e0:44: a2:3a:8a:db:e4:df:48:ea:0c:b4:97:ba:70:bc:67:96:27:a2: fb:cd:f2:62:c6:fa:c9:3a:26:e6:f3:ed:c8:84:69:33:49:0d: 7a:86:b6:06:f4:58:5f:ee:c9:c8:4d:6b:8f:8c:58:c7:91:2e: 5f:76:1f:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwMUUxMTAvBgNVBAUTKDBCQkJBNDEyNEJBNEM3QzhBN0Y5RDA5N0VFRUFBOTgz MkYwOTc5NjcwHhcNMjYwODE5MDczNzM2WhcNMjYwODI2MDczNzM2WjAYMRYwFAYD VQQDEw02YTg1NWQ0MC05MjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMtYDCPhUznTYUJROuXJIk6/W7FTXEal9xCR/4Oijg3Q6Qe/9RbDyL7uOwSG YKiNBUr/xkLO8XjpibRXmrMkgugG65+XTmFQc9lwtygk3YYPWELpT9osfLGlnFsA 8NoMkfoAdnTur9yhgSIg1Q0xRc5D02dQ4GraQfBqPBus0lWJjtTIYeaOvHR/FTL/ KbK6gxp9jQ2vGvElkHESoXOzzDltWup7WmJGhyv1X7BpWjLva6w2JmYVsh5r4SbS aFI6gP2lyjBG2W6umAOscqsqm5kv7tKpCc9o9Iapd4wCoG/NDCKCjccHd03SGPBj f5XO5h2FYsy8rU9zsH86C8KH7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvdKot0 15kwgsf3HtNaWqTVS6isMB8GA1UdIwQYMBaAFAu7pBJLpMfIp/nQl+7qqYMvCXln MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTAxRS9FNkU4ODBEODc4 REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4aW4tZENYN3VxcGd5OEpl V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3dWtFa3VreDhpbi1kQ1g3dXFwZ3k4SmVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTAxRS9FNkU4ODBEODc4REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4 aW4tZENYN3VxcGd5OEplV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzrLfwRGyskXJG1XqpdEKP7VFc7eunUiABhkXEQUyqcTZeq0dO8tUNdKWipmC wjDuwnTlt8FxVpp3lsSrb77b5XKW69EdFfmqYp58YPIPTzGZfHRcbbipKFL/TykS tIswGEu+ay6xZTiP/NpHWXqA8I7Q72yS/wotG1cYajQYmcvMkdrsVmQljLm4h4uC U+Xrx/6l+OfR7XzMzCjSHIoRegtxw+wTrKN/OiE9xj2yROMAtBZX8YMbl6/ukmO4 ugz0RlNrG+BEojqK2+TfSOoMtJe6cLxnliei+83yYsb6yTom5vPtyIRpM0kNeoa2 BvRYX+7JyE1rj4xYx5EuX3YfMQ== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:15 2026 by rpki-client