$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft File: 10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json) Hash identifier: TogaNKMc3TmMC75G6VUcz68fDoFupDKk4Jtec8c5tcU= Subject key identifier: 02:1F:DB:DB:6C:AF:AA:63:E7:20:50:8F:00:EA:D7:A2:11:C4:D1:26 Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft Manifest number: 023D Signing time: Wed 19 Aug 2026 03:09:12 +0000 Manifest this update: Wed 19 Aug 2026 03:09:12 +0000 Manifest next update: Wed 26 Aug 2026 03:09:12 +0000 Files and hashes: 1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: jdkR64An2TBJkJVQTDZvlYWkegta8VpXjU6VdrEsM9w=) 2: 317FCFCA85B411F1928328FC5DA30FBC.roa (hash: it6HwI6gYN9kRsjao8LVj1cZthgpU769+I6sMCyi7EQ=) 3: 6E8D6EEA85AA11F1873A8CE75BA30FBC.roa (hash: iVDmlKturjsdPeMQ1ZgDutRftzZi0zhbWX3+CGjmM4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Validity Not Before: Aug 19 03:09:12 2026 GMT Not After : Aug 26 03:09:12 2026 GMT Subject: CN=6a851e58-6e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:0c:25:e4:9f:de:82:33:d7:e5:41:c9:02: 25:e3:a2:d6:25:c3:da:e0:77:8a:f5:92:7c:93:16: 46:3d:f0:df:28:e2:b3:34:2f:2b:40:7d:4e:ad:4c: 5a:f9:ee:3d:f1:34:ce:16:e1:24:26:c4:d1:10:1c: fd:cf:36:97:45:5e:63:11:b9:07:69:ed:2b:e2:d1: 50:d4:5e:fd:f5:39:0f:54:2f:80:f3:02:40:ae:5f: 8b:ef:eb:84:15:eb:1c:df:d7:da:85:76:74:9b:ed: 2c:b8:d8:ef:a5:4c:37:78:95:8c:80:71:9d:0a:15: 91:f8:ce:3e:32:f2:4d:00:56:07:a4:05:73:c8:cb: a4:8c:e9:f3:f7:30:e3:5a:3f:57:96:a5:47:5b:9e: ab:6e:43:71:d3:cc:8c:8c:bf:68:c3:5c:aa:09:c9: 7a:6e:fb:01:9b:3d:b8:e5:68:73:74:6c:d7:97:cc: c5:07:ff:85:f8:1a:5f:f9:f7:da:9e:6b:4c:78:42: 7e:f7:16:cd:c9:82:05:12:18:95:65:75:ee:41:bb: 64:5c:c8:23:65:f6:45:c5:3e:74:6b:2a:eb:14:49: ed:e3:64:4f:7a:05:c4:2d:e1:3c:c9:1f:d2:b4:1c: 2d:5c:c2:4e:1e:57:55:7f:e5:90:50:a8:30:fe:6e: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1F:DB:DB:6C:AF:AA:63:E7:20:50:8F:00:EA:D7:A2:11:C4:D1:26 X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:58:7b:1b:fe:b4:72:33:e2:1e:a1:0f:b0:0b:00:ad:3c:b8: 03:cc:64:ca:d8:6d:0b:54:7a:54:f7:3e:c1:e2:5e:83:37:72: c6:94:58:0f:41:3c:9a:84:78:84:8e:12:bf:21:c8:99:35:a3: 50:5c:5b:35:5d:28:a3:da:58:e7:0a:ee:43:87:f1:46:a7:65: cb:b6:c2:b5:91:02:2f:96:a2:c7:c8:0d:fc:fa:1d:6e:95:a6: 79:65:e4:93:24:30:ba:68:12:29:8b:e8:b4:c9:16:99:56:b6: ea:b6:98:6f:d0:98:76:ac:5f:51:ce:9b:73:b3:2a:ab:8c:4e: 91:cf:da:91:8f:66:44:48:ab:21:7f:d7:1a:b2:5f:9a:30:21: 4b:bd:e5:b1:13:36:3c:96:43:c0:e1:d9:ef:6e:d1:64:de:13: 09:3e:28:27:25:66:01:11:77:a7:8d:7b:1a:62:5c:af:7c:06: df:61:0e:cc:27:f6:d6:9b:77:8b:ef:5e:d8:ff:4d:40:4c:2a: d5:69:4b:b8:fe:ec:17:5b:14:d6:32:d3:77:f7:c7:87:eb:14: 98:4e:89:09:97:a1:6e:ce:a8:97:ba:8c:e5:89:76:c1:61:c7: ae:07:28:4e:5f:14:83:b6:a4:de:bc:10:78:15:f5:68:a9:2c: 87:15:d8:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3QzQxMTAvBgNVBAUTKEQ3NDVFMUM4NkIxODE4RjdEMDU2M0Y5MEU4QkExMkJF OEIxQUUzNzgwHhcNMjYwODE5MDMwOTEyWhcNMjYwODI2MDMwOTEyWjAYMRYwFAYD VQQDEw02YTg1MWU1OC02ZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtW4MJeSf3oIz1+VByQIl46LWJcPa4HeK9ZJ8kxZGPfDfKOKzNC8rQH1OrUxa +e498TTOFuEkJsTREBz9zzaXRV5jEbkHae0r4tFQ1F799TkPVC+A8wJArl+L7+uE Fesc39fahXZ0m+0suNjvpUw3eJWMgHGdChWR+M4+MvJNAFYHpAVzyMukjOnz9zDj Wj9XlqVHW56rbkNx08yMjL9ow1yqCcl6bvsBmz245WhzdGzXl8zFB/+F+Bpf+ffa nmtMeEJ+9xbNyYIFEhiVZXXuQbtkXMgjZfZFxT50ayrrFEnt42RPegXELeE8yR/S tBwtXMJOHldVf+WQUKgw/m5SSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIf29ts r6pj5yBQjwDq16IRxNEmMB8GA1UdIwQYMBaAFNdF4chrGBj30FY/kOi6Er6LGuN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTdDNC9DNjNERjIwMDND NjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQZlFWai1RNkxvU3Zvc2E0 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQ ZlFWai1RNkxvU3Zvc2E0M2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmVh7G/60cjPiHqEPsAsArTy4A8xkythtC1R6VPc+weJegzdyxpRYD0E8moR4 hI4SvyHImTWjUFxbNV0oo9pY5wruQ4fxRqdly7bCtZECL5aix8gN/PodbpWmeWXk kyQwumgSKYvotMkWmVa26raYb9CYdqxfUc6bc7Mqq4xOkc/akY9mREirIX/XGrJf mjAhS73lsRM2PJZDwOHZ727RZN4TCT4oJyVmARF3p417GmJcr3wG32EOzCf21pt3 i+9e2P9NQEwq1WlLuP7sF1sU1jLTd/fHh+sUmE6JCZehbs6ol7qM5Yl2wWHHrgco Tl8Ug7ak3rwQeBX1aKkshxXYWw== -----END CERTIFICATE-----Generated at Wed Aug 19 14:30:45 2026 by rpki-client