$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: qrE9LmACK3yv1wYQdPhDv1UmhpQyvKe+BKi2KmTpv2I= Subject key identifier: 5B:FB:D2:98:0E:09:7E:2A:BD:DC:C3:FB:C4:32:0C:49:31:70:6A:9F Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0B9F Signing time: Tue 18 Aug 2026 19:26:48 +0000 Manifest this update: Tue 18 Aug 2026 19:26:48 +0000 Manifest next update: Tue 25 Aug 2026 19:26:48 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: pzqR0GxExg2R2S8+tkyJMjstDSs3LfgwVesBcn3hZ0A=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: pNMivkkOLffKPDrh/XyyiMiyvZdESt4jTfT5doztz7c=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: lAb12WKjWNZhERVfu+rXY9B+lTIhcdPrOzSWtvyJJG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3021 (0xbcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Aug 18 19:26:48 2026 GMT Not After : Aug 25 19:26:48 2026 GMT Subject: CN=6a84b1f8-6412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:2a:99:31:00:bd:60:c4:1b:de:e7:11:82: 07:0d:ab:af:b9:9a:fb:7f:9b:25:aa:0e:4b:e2:fd: c1:a4:59:bb:9e:a9:96:0f:70:7f:09:74:2d:59:3b: a6:61:02:0d:12:c7:3c:65:f8:b1:73:0c:57:80:74: a5:b4:7c:e7:f3:75:90:bd:a0:9a:7c:76:d3:dc:a2: 4e:30:ab:2e:22:93:8d:64:48:98:b3:12:a3:7d:c6: fe:da:35:64:20:36:2b:ed:22:2e:fb:ed:92:1f:d2: 74:ce:09:25:af:d7:9b:7f:44:ad:2e:f9:78:c4:a2: 72:7f:34:f9:3b:ee:eb:5e:9f:72:57:9f:c3:2c:35: 47:bd:03:97:ec:8b:98:9d:48:2b:94:81:af:8c:76: e0:d0:20:19:80:d2:c5:d6:1d:92:fd:c3:86:dc:3f: 30:48:77:76:f1:53:ad:80:b0:d2:c3:c9:6b:7d:ec: 70:6f:22:3b:12:7b:a0:ea:02:ed:3f:f9:9e:9d:e1: 08:44:3d:69:cc:2b:1f:fa:35:7f:b9:e0:55:7a:9d: d2:37:48:06:ec:a0:41:25:8f:59:1c:7f:c2:6c:74: 7c:fa:70:4d:e3:96:2d:ae:bd:78:db:14:55:45:b7: 4a:35:c8:bd:35:f2:43:ab:a9:19:a3:e3:68:a2:35: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FB:D2:98:0E:09:7E:2A:BD:DC:C3:FB:C4:32:0C:49:31:70:6A:9F X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e6:16:19:79:f3:d6:68:5a:01:46:45:4c:bc:a6:fa:7c:b5: 1a:1c:38:1d:2a:16:d2:17:f5:3f:30:ea:3b:ba:e3:83:a5:6f: 4a:f5:99:28:d4:76:d4:8d:c2:73:70:45:b0:ca:a6:ed:da:f2: 80:20:28:21:29:ab:f8:d4:ea:83:2b:3c:52:b8:ef:d9:d8:4c: 9b:3c:23:df:ab:b1:ab:45:3c:16:0b:0f:ed:a9:0c:c9:05:a9: 5a:86:10:3a:7c:89:3b:8c:10:56:32:fd:42:63:62:6e:fb:69: 8d:7f:b6:13:83:f2:61:db:ea:bf:c8:fd:b4:25:0c:86:d1:10: 1c:f2:f4:79:4d:9a:30:3f:79:5a:36:9c:fe:c6:ba:42:96:de: 80:19:74:a2:3d:87:c8:38:82:1f:09:85:82:e2:35:e7:4d:af: d9:32:82:4f:c7:87:c7:41:35:3a:a3:c5:79:66:f8:ca:9f:22: af:ed:2e:50:02:52:c1:40:1f:6e:ef:e8:95:fd:66:1b:8b:fb: c0:d5:fe:7a:21:bd:18:70:dc:79:60:4d:fc:2f:a6:69:0f:6c: 29:34:12:09:e8:62:9a:05:9c:c2:db:dd:67:c8:d6:3d:0e:5c: 6c:a5:b0:85:cc:49:35:51:19:f9:7a:72:31:07:8b:26:86:36: be:28:0f:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjYwODE4MTkyNjQ4WhcNMjYwODI1MTkyNjQ4WjAYMRYwFAYD VQQDEw02YTg0YjFmOC02NDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVsqmTEAvWDEG97nEYIHDauvuZr7f5slqg5L4v3BpFm7nqmWD3B/CXQtWTum YQINEsc8ZfixcwxXgHSltHzn83WQvaCafHbT3KJOMKsuIpONZEiYsxKjfcb+2jVk IDYr7SIu++2SH9J0zgklr9ebf0StLvl4xKJyfzT5O+7rXp9yV5/DLDVHvQOX7IuY nUgrlIGvjHbg0CAZgNLF1h2S/cOG3D8wSHd28VOtgLDSw8lrfexwbyI7Enug6gLt P/meneEIRD1pzCsf+jV/ueBVep3SN0gG7KBBJY9ZHH/CbHR8+nBN45Ytrr142xRV RbdKNci9NfJDq6kZo+NoojX9VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFv70pgO CX4qvdzD+8QyDEkxcGqfMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm+YWGXnz1mhaAUZFTLym+ny1Ghw4HSoW0hf1PzDqO7rjg6VvSvWZKNR21I3C c3BFsMqm7drygCAoISmr+NTqgys8Urjv2dhMmzwj36uxq0U8FgsP7akMyQWpWoYQ OnyJO4wQVjL9QmNibvtpjX+2E4PyYdvqv8j9tCUMhtEQHPL0eU2aMD95Wjac/sa6 QpbegBl0oj2HyDiCHwmFguI1502v2TKCT8eHx0E1OqPFeWb4yp8ir+0uUAJSwUAf bu/olf1mG4v7wNX+eiG9GHDceWBN/C+maQ9sKTQSCehimgWcwtvdZ8jWPQ5cbKWw hcxJNVEZ+XpyMQeLJoY2vigP7w== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:03 2026 by rpki-client