$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft File: b70F9jC-RBCpUSzbaahco3zoxzk.mft (raw, json) Hash identifier: X2XJZ+gn0QDTZZR94dvq651hXxFC2a6bIph3J2AgQFs= Subject key identifier: A7:61:5B:D4:53:2F:8A:48:5B:74:25:20:E9:22:29:5D:72:18:0F:2C Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 Certificate issuer: /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft Manifest number: 6C Signing time: Tue 25 Aug 2026 07:54:01 +0000 Manifest this update: Tue 25 Aug 2026 07:54:00 +0000 Manifest next update: Tue 01 Sep 2026 07:54:00 +0000 Files and hashes: 1: b70F9jC-RBCpUSzbaahco3zoxzk.crl (hash: jPpxPIJjSjEq/CLK7Iis80FUGr4ZiT/cWJf8mm3qM18=) 2: 2764AC08003111F18836FC08486F56BC.roa (hash: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=) 3: B8EA8ABC033311F1AAD74374203D8C67.roa (hash: VGTwiIqmaXq4MsscshpbxlIvpQ6VN4x9kiDNRx4VLZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 07:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Validity Not Before: Aug 25 07:54:00 2026 GMT Not After : Sep 1 07:54:00 2026 GMT Subject: CN=6a8d4a19-a284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:90:be:5d:1e:51:49:64:cb:3c:df:3e:95:ed: b9:71:7b:7f:10:8c:44:44:bf:cc:95:7b:d7:4c:10: 50:5e:b4:f4:1a:ca:f4:04:cf:19:e7:5c:84:d1:12: 70:8a:cc:b3:6f:b2:7d:bf:22:1a:28:05:53:41:fb: 88:5f:31:ef:10:8e:64:f7:a9:43:5e:1b:8c:5b:c9: 75:bb:7b:9f:cd:8a:72:fc:7a:56:ee:d0:9d:27:4b: b9:bb:04:22:fb:eb:81:7e:55:e3:56:d4:47:56:e0: 1c:81:c7:42:42:c2:73:56:5d:ad:a0:fc:67:67:b1: e8:1b:55:64:30:f2:68:45:d6:67:5f:84:8f:e9:85: 3e:df:3e:21:8a:22:a3:f8:ad:54:56:03:8f:c9:10: 27:92:27:59:20:5a:3c:9d:f6:5d:66:01:aa:d6:ff: 18:75:ac:64:fb:6e:5b:4d:12:1a:21:ca:9e:42:24: d0:4c:0a:d2:f8:29:99:08:7e:d3:44:af:8e:61:2e: 1b:dc:90:73:36:89:02:df:b5:87:7a:37:03:88:59: 20:4e:b1:9f:4f:28:b5:88:ea:0b:bf:f2:b5:9e:d6: 52:f9:ce:7c:89:74:1b:01:67:01:e5:b9:fa:33:af: 9f:a6:2c:65:f6:b2:2b:bb:70:6e:50:5c:d8:7c:c5: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:61:5B:D4:53:2F:8A:48:5B:74:25:20:E9:22:29:5D:72:18:0F:2C X509v3 Authority Key Identifier: keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3c:85:44:1f:6c:d3:fe:65:d1:6d:8a:03:cc:0e:67:1d:4d: 3c:f8:23:dd:fc:8e:0f:3a:9a:e0:d2:39:5c:dd:c5:eb:0a:9b: c8:7f:56:01:4e:12:16:12:7e:33:fa:2c:c5:c4:21:d9:d8:b6: 8e:03:f5:d2:be:90:0a:4b:13:02:16:34:6d:15:a7:5c:6d:3c: 25:b9:97:f0:3d:3d:d0:a3:de:4f:85:2e:f1:ec:73:63:47:ab: ac:cb:1b:3b:29:61:58:66:7c:7a:f9:bf:c7:62:3c:1d:e4:bd: f8:11:d5:60:74:b3:06:b2:7d:dc:c7:09:f4:78:0b:93:fc:6a: 18:c0:f7:80:79:3a:8d:91:20:cf:11:f0:e9:9c:a4:d8:47:6f: af:e3:05:e2:2e:a3:64:9d:55:45:96:58:cd:06:06:2d:1c:8f: c0:b4:cb:05:af:b0:0a:a5:5a:d0:d8:53:17:a4:00:f2:15:b9: af:ff:73:f3:e9:b5:71:7b:14:d5:3a:8d:6b:7f:65:f2:cf:58: 22:70:83:62:7e:80:fb:ff:8a:7a:63:20:7d:59:ba:a5:ca:e7: d9:09:aa:ca:92:72:d9:6b:3f:99:8f:eb:54:f9:66:27:a4:d7: e8:f6:3d:80:05:65:48:51:45:d3:4e:32:fd:3c:43:bc:e1:71: 7e:47:04:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoNkZCRDA1RjYzMEJFNDQxMEE5NTEyQ0RCNjlBODVDQTM3 Q0U4QzczOTAeFw0yNjA4MjUwNzU0MDBaFw0yNjA5MDEwNzU0MDBaMBgxFjAUBgNV BAMTDTZhOGQ0YTE5LWEyODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTkL5dHlFJZMs83z6V7blxe38QjEREv8yVe9dMEFBetPQayvQEzxnnXITREnCK zLNvsn2/IhooBVNB+4hfMe8QjmT3qUNeG4xbyXW7e5/NinL8elbu0J0nS7m7BCL7 64F+VeNW1EdW4ByBx0JCwnNWXa2g/GdnsegbVWQw8mhF1mdfhI/phT7fPiGKIqP4 rVRWA4/JECeSJ1kgWjyd9l1mAarW/xh1rGT7bltNEhohyp5CJNBMCtL4KZkIftNE r45hLhvckHM2iQLftYd6NwOIWSBOsZ9PKLWI6gu/8rWe1lL5znyJdBsBZwHlufoz r5+mLGX2siu7cG5QXNh8xdr/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUp2Fb1FMv ikhbdCUg6SIpXXIYDywwHwYDVR0jBBgwFoAUb70F9jC+RBCpUSzbaahco3zoxzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzdGNEU2M0VDMDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJDcFVTemJhYWhjbzN6b3h6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvYjcwRjlqQy1SQkNwVVN6YmFhaGNvM3pveHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzdGNEU2M0VDMDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJD cFVTemJhYWhjbzN6b3h6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZPIVEH2zT/mXRbYoDzA5nHU08+CPd/I4POprg0jlc3cXrCpvIf1YBThIWEn4z +izFxCHZ2LaOA/XSvpAKSxMCFjRtFadcbTwluZfwPT3Qo95PhS7x7HNjR6usyxs7 KWFYZnx6+b/HYjwd5L34EdVgdLMGsn3cxwn0eAuT/GoYwPeAeTqNkSDPEfDpnKTY R2+v4wXiLqNknVVFlljNBgYtHI/AtMsFr7AKpVrQ2FMXpADyFbmv/3Pz6bVxexTV Oo1rf2Xyz1gicINifoD7/4p6YyB9WbqlyufZCarKknLZaz+Zj+tU+WYnpNfo9j2A BWVIUUXTTjL9PEO84XF+RwQW -----END CERTIFICATE-----Generated at Wed Aug 26 11:27:11 2026 by rpki-client