$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json) Hash identifier: tk9imDdBwudcKFkAdA5N1mrQetN4S56x67aoh1Uke3I= Subject key identifier: 32:F1:77:F9:23:3D:03:9A:9E:8D:4C:9B:4F:B9:8E:05:D5:B5:AD:A2 Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft Manifest number: 01DE Signing time: Tue 25 Aug 2026 03:29:16 +0000 Manifest this update: Tue 25 Aug 2026 03:29:15 +0000 Manifest next update: Tue 01 Sep 2026 03:29:15 +0000 Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: YsMKu8rg1ZSLqSfKc8ZW7Yt/s/uw/39LJ5YaF4S5aNY=) 2: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: vrmDfWTNDEfAAGTB6RMWU6c9oOq8iON07z3iMp7YpRs=) 3: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: qcHwawytQ/8AG7cdx5hu0AuGvZCgLwDCZXBXxMtoIVk=) 4: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: a3vM/Ppf0GxiRLmbleY13cfOquo7BmGPzlHgh28TyyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 03:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Validity Not Before: Aug 25 03:29:15 2026 GMT Not After : Sep 1 03:29:15 2026 GMT Subject: CN=6a8d0c0c-4c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:06:5e:30:7f:9f:b4:49:4b:fe:5e:64:12: b0:4e:21:24:56:1b:76:3e:53:0b:21:92:c0:6c:4c: 0f:d1:4a:1e:30:e3:bd:3e:cd:65:b7:f3:50:cb:f7: e2:1a:c9:01:7f:ad:40:79:1b:3a:6d:56:5b:29:b2: 84:df:a9:b9:83:4e:f5:89:9b:36:cc:02:77:88:b8: cf:44:d8:2f:af:7e:09:c3:89:45:40:13:21:69:5b: 08:f6:4d:92:43:55:f1:8f:a2:89:57:4f:2b:15:2a: 16:97:20:56:d9:36:e1:57:a6:99:c9:e8:14:11:ce: 46:fe:dd:51:ef:58:01:54:8d:e3:b2:be:e3:4e:56: 33:56:b1:c4:c4:83:4a:19:23:21:2a:7e:c8:20:73: fc:53:08:a6:fb:45:77:d9:fc:0c:86:40:57:9e:e1: 12:34:44:db:08:3a:07:b9:96:e2:2d:d9:af:2e:14: ce:b8:4a:62:d8:89:e1:b1:39:fd:f1:06:ac:a6:35: 67:eb:1d:97:69:65:92:85:04:c9:d6:95:a9:f5:8e: e6:bf:09:54:3d:98:e3:51:92:9d:17:2f:07:ad:ae: 7c:b6:e5:46:19:b3:d5:67:75:00:74:73:45:e2:4d: 71:42:d5:8b:29:fa:9f:31:0e:a5:14:d7:0c:36:ae: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F1:77:F9:23:3D:03:9A:9E:8D:4C:9B:4F:B9:8E:05:D5:B5:AD:A2 X509v3 Authority Key Identifier: keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:86:6a:c3:cd:2e:73:2a:fa:f5:34:dd:be:d8:68:1c:e0:a8: e3:ae:ce:7b:ce:6a:e3:b3:76:52:73:0c:15:a2:51:7c:19:d4: 45:65:08:69:cb:bb:46:68:c0:76:64:90:2e:63:4a:e4:4d:49: 42:e7:61:40:d0:4a:1c:bf:06:84:94:f5:0a:37:cc:65:59:e0: ab:d4:1c:2b:9a:00:81:1f:2d:d5:54:cf:6b:81:ca:a4:1f:f4: 70:11:f9:20:4b:3a:15:6b:ad:28:00:4a:61:f4:30:a3:a7:22: c1:1e:2b:41:a4:c9:d2:dd:49:50:4d:ba:c1:c3:b8:2f:a6:4d: 51:1d:e6:3b:74:a4:ec:fc:65:8f:d6:dd:c4:cc:56:b8:9e:50: e5:e4:73:a8:e5:4f:0a:55:86:d1:64:08:7d:e7:fa:ef:99:19: 8e:8b:f4:77:c0:54:b0:82:12:3e:ce:f4:dd:9d:e2:c0:a8:eb: 8d:fe:79:bc:5f:a6:ed:e0:77:7d:5d:cd:2c:d8:c9:d2:8b:59: 93:e9:28:ff:ff:5f:ec:e4:b7:aa:a3:87:b6:9c:77:5e:d2:cc: 12:68:49:73:b4:92:14:66:a1:2c:98:2c:54:7b:65:42:8b:ec: b3:f3:63:c5:13:1d:fb:04:80:3d:27:c7:cb:94:bd:be:58:17: 6c:97:de:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDVCNUNDNDAzMDlBMDdDMDNERjBCNjMwNEZDRDg0MEY5 NTBCRkIwNDEwHhcNMjYwODI1MDMyOTE1WhcNMjYwOTAxMDMyOTE1WjAYMRYwFAYD VQQDEw02YThkMGMwYy00YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fEGXjB/n7RJS/5eZBKwTiEkVht2PlMLIZLAbEwP0UoeMOO9Ps1lt/NQy/fi GskBf61AeRs6bVZbKbKE36m5g071iZs2zAJ3iLjPRNgvr34Jw4lFQBMhaVsI9k2S Q1Xxj6KJV08rFSoWlyBW2TbhV6aZyegUEc5G/t1R71gBVI3jsr7jTlYzVrHExINK GSMhKn7IIHP8Uwim+0V32fwMhkBXnuESNETbCDoHuZbiLdmvLhTOuEpi2InhsTn9 8QaspjVn6x2XaWWShQTJ1pWp9Y7mvwlUPZjjUZKdFy8Hra58tuVGGbPVZ3UAdHNF 4k1xQtWLKfqfMQ6lFNcMNq6hZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLxd/kj PQOano1Mm0+5jgXVta2iMB8GA1UdIwQYMBaAFFtcxAMJoHwD3wtjBPzYQPlQv7BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi82RUI5QzAzRUM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZBUGZDMk1FX05oQS1WQ19z RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi82RUI5QzAzRUM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZB UGZDMk1FX05oQS1WQ19zRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl4Zqw80ucyr69TTdvthoHOCo467Oe85q47N2UnMMFaJRfBnURWUIacu7RmjA dmSQLmNK5E1JQudhQNBKHL8GhJT1CjfMZVngq9QcK5oAgR8t1VTPa4HKpB/0cBH5 IEs6FWutKABKYfQwo6ciwR4rQaTJ0t1JUE26wcO4L6ZNUR3mO3Sk7Pxlj9bdxMxW uJ5Q5eRzqOVPClWG0WQIfef675kZjov0d8BUsIISPs703Z3iwKjrjf55vF+m7eB3 fV3NLNjJ0otZk+ko//9f7OS3qqOHtpx3XtLMEmhJc7SSFGahLJgsVHtlQovss/Nj xRMd+wSAPSfHy5S9vlgXbJfebg== -----END CERTIFICATE-----Generated at Wed Aug 26 15:05:12 2026 by rpki-client