$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: XdVRR9w/bfoCdaQ35BTYxRW3131eq1cRY9N3rh35HSw= Subject key identifier: CD:CC:29:1A:80:8A:12:3F:EF:93:60:2A:4C:CB:8D:7D:F1:A7:FC:FF Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0BFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0BF3 Signing time: Tue 18 Aug 2026 19:10:48 +0000 Manifest this update: Tue 18 Aug 2026 19:10:47 +0000 Manifest next update: Tue 25 Aug 2026 19:10:47 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: 3b+0xri8u5qgMW+R43bipUQ5Aj1JxalvamNsAueJZAQ=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: K1S8Q65Z3w1SElyF5atmBbQ9pOqRtecrW95mrmJVLwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Aug 18 19:10:47 2026 GMT Not After : Aug 25 19:10:47 2026 GMT Subject: CN=6a84ae38-a374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:0f:25:87:b8:58:0c:c6:01:5d:de:55:09: c8:a9:43:bf:d8:46:00:1c:37:3d:3a:45:77:df:79: 76:7a:29:38:5f:d3:57:67:d5:fa:63:6e:4b:d2:6a: 04:a6:f8:2c:6c:1f:51:90:2f:eb:e1:e6:f1:2a:51: 83:14:1c:e2:c0:47:80:67:93:34:50:1f:02:15:15: 40:66:6f:76:73:04:f3:c1:9f:1f:d7:56:d9:3a:73: 5b:4a:25:a0:13:8f:40:b6:f5:ac:30:1a:63:4d:5d: 97:f0:7c:39:04:2e:a3:d4:4e:ba:76:63:8d:fa:93: 30:27:1e:03:04:4f:00:05:83:71:72:be:12:31:f5: 6f:8b:91:76:41:d2:b5:66:db:bf:71:13:58:26:ef: 88:7a:68:c4:77:98:4b:2e:41:7a:6a:e8:88:d1:16: 34:cd:d1:d5:a8:73:d3:a0:c1:10:78:37:43:ef:24: a6:a9:e5:1c:bb:6c:1d:d4:58:ab:f8:cd:5c:2f:00: 56:90:4e:95:49:46:bd:04:fe:e9:67:26:df:73:87: 22:9a:1e:1b:08:ef:ae:10:08:46:e8:ca:e9:1b:34: 56:67:5d:2a:cd:07:15:55:c0:f6:25:62:d2:6a:8a: bd:39:9a:1f:61:99:8f:57:a1:b4:27:69:c4:47:be: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CC:29:1A:80:8A:12:3F:EF:93:60:2A:4C:CB:8D:7D:F1:A7:FC:FF X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:60:db:e0:72:b1:9c:2a:22:1a:db:25:90:d4:a5:75:77:93: bf:b6:7b:09:0a:47:19:56:a5:fc:35:67:30:32:88:4d:e4:e1: 68:9e:af:57:78:fc:57:fd:eb:03:bf:36:95:9b:fa:ef:d8:61: 61:89:8e:e0:20:0e:48:92:04:02:dd:41:b4:d0:f6:d3:f7:14: 63:ea:de:ea:61:01:43:32:ce:88:f9:c9:96:b6:71:e1:07:43: 05:11:2e:ba:89:a9:cc:68:a8:94:1e:06:33:c5:bc:8b:93:89: 12:df:76:70:27:f0:ed:3d:76:3a:66:7b:38:c1:6e:53:09:69: 2a:6f:7e:7d:1f:ed:7a:1e:a7:a7:53:6c:ca:f1:42:0f:4b:2e: 2b:3e:a1:c2:d9:9a:dd:61:69:ad:1a:12:74:2d:30:89:95:22: b7:b1:5a:bb:3f:e8:c8:4b:97:7a:4a:eb:0d:82:58:80:ec:55: 8c:6e:17:1d:2e:0a:77:9a:b7:a1:48:0e:0e:55:fe:87:c6:75: 70:a3:ca:03:02:1f:fe:59:68:6b:6a:9b:d1:74:d1:38:f1:10: 22:56:7c:1f:49:95:18:10:a4:59:ec:84:5f:9d:8d:85:7f:90: 6d:ba:9a:37:4c:a1:36:ac:1a:b2:9a:57:b0:ae:60:ea:2c:91: b0:8f:a2:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjYwODE4MTkxMDQ3WhcNMjYwODI1MTkxMDQ3WjAYMRYwFAYD VQQDEw02YTg0YWUzOC1hMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47IPJYe4WAzGAV3eVQnIqUO/2EYAHDc9OkV333l2eik4X9NXZ9X6Y25L0moE pvgsbB9RkC/r4ebxKlGDFBziwEeAZ5M0UB8CFRVAZm92cwTzwZ8f11bZOnNbSiWg E49AtvWsMBpjTV2X8Hw5BC6j1E66dmON+pMwJx4DBE8ABYNxcr4SMfVvi5F2QdK1 Ztu/cRNYJu+IemjEd5hLLkF6auiI0RY0zdHVqHPToMEQeDdD7ySmqeUcu2wd1Fir +M1cLwBWkE6VSUa9BP7pZybfc4cimh4bCO+uEAhG6MrpGzRWZ10qzQcVVcD2JWLS aoq9OZofYZmPV6G0J2nER77+eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3MKRqA ihI/75NgKkzLjX3xp/z/MB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdGDb4HKxnCoiGtslkNSldXeTv7Z7CQpHGVal/DVnMDKITeThaJ6vV3j8V/3r A782lZv679hhYYmO4CAOSJIEAt1BtND20/cUY+re6mEBQzLOiPnJlrZx4QdDBREu uompzGiolB4GM8W8i5OJEt92cCfw7T12OmZ7OMFuUwlpKm9+fR/teh6np1NsyvFC D0suKz6hwtma3WFprRoSdC0wiZUit7Fauz/oyEuXekrrDYJYgOxVjG4XHS4Kd5q3 oUgODlX+h8Z1cKPKAwIf/lloa2qb0XTROPEQIlZ8H0mVGBCkWeyEX52NhX+Qbbqa N0yhNqwasppXsK5g6iyRsI+iHw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:39 2026 by rpki-client