$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: 0aKrzcihcBWi/Ig+VlTipW5QsQLAARUmHRzOg2HdEvw= Subject key identifier: 8A:9B:11:BE:1A:7D:F7:A8:8E:7B:2B:43:15:FF:14:4D:25:5C:38:DE Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 048F Signing time: Fri 14 Aug 2026 23:58:58 +0000 Manifest this update: Fri 14 Aug 2026 23:58:58 +0000 Manifest next update: Fri 21 Aug 2026 23:58:58 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: bnUeTLNcyMhoQfwpC8PfhQhT9iNh7FDfsv0FMMmFjdc=) 2: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=) 3: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=) 4: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 23:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Aug 14 23:58:58 2026 GMT Not After : Aug 21 23:58:58 2026 GMT Subject: CN=6a7fabc2-d7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:2d:54:ff:d3:28:9a:6f:75:c8:a9:66:1e: cc:02:ef:a8:92:72:69:5b:10:09:91:e9:7b:c2:2e: 2b:bf:57:f2:f2:ca:bc:51:00:32:6f:fd:e5:60:0f: e3:83:4f:c8:11:2e:68:92:57:6a:75:71:2e:7a:41: 74:aa:33:62:14:79:64:95:d8:09:ba:6e:30:7d:30: 2d:03:be:3d:ed:31:41:db:34:a6:35:58:fc:d3:19: 2b:c2:0a:7a:24:52:0a:3f:a5:27:3f:26:0d:a8:c6: 62:8f:29:4d:99:be:de:d9:33:66:0c:03:85:ea:ca: c7:7e:70:38:a3:b3:50:ef:4a:4f:d7:3d:b6:7f:4b: 26:56:36:81:74:3e:e6:da:d0:05:f4:a8:68:9e:84: c6:f8:cf:35:4b:b4:09:5e:b9:be:9d:16:ea:bc:1a: 68:ea:ef:dc:e2:c0:d9:f8:92:2c:72:cf:f5:74:04: 46:7d:ee:03:c0:e7:4f:f7:1a:4e:f2:42:18:a4:53: cc:27:50:00:6c:69:b3:d3:21:db:da:78:1d:d7:61: 54:84:32:a1:9c:fc:4c:74:7c:89:8e:8e:a9:10:6b: cd:d7:db:a9:b7:13:f2:b9:93:42:cb:f2:7b:46:9d: d7:bf:84:92:ee:7b:52:ff:f7:f4:2b:75:57:ec:7a: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9B:11:BE:1A:7D:F7:A8:8E:7B:2B:43:15:FF:14:4D:25:5C:38:DE X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:99:c0:3f:74:c6:26:f8:6b:9d:4b:ea:ef:8a:0b:8e:1f:50: 0d:d1:a0:4e:eb:89:4b:05:f9:3a:70:73:7e:e5:15:b6:ba:6d: 49:99:c1:75:b0:0f:39:89:1d:9d:62:af:8e:86:f4:c7:43:6c: 4d:20:b2:f5:94:e2:ce:ee:e3:a1:b1:80:74:83:01:ba:36:6d: d6:b6:72:ad:10:7e:8b:44:01:bb:0b:cc:b5:fc:c3:6f:31:16: 09:fa:96:d1:34:90:a8:d7:3a:40:39:fb:12:64:21:c0:95:ff: a3:b6:77:a9:33:79:12:a0:0a:e9:1a:22:35:55:5b:66:50:71: 80:97:3b:de:ba:e3:8f:00:49:cc:be:34:82:81:f0:9c:fa:25: 36:77:fe:bc:b1:16:ce:a9:c2:65:a7:e2:18:1e:d6:42:a5:68: 80:9a:db:e3:ff:be:fe:a5:29:c5:97:e3:4b:a6:a3:19:c3:55: b8:4a:ef:c9:bb:d4:22:15:15:79:7c:a4:2f:88:ba:ec:60:4a: 84:81:09:5e:be:d4:ac:e7:79:dd:99:cb:31:59:fc:66:20:d6: 77:ba:fc:f1:6d:6d:7c:45:6b:93:28:6c:68:5a:bf:72:65:a2: d7:1f:d7:72:86:f7:36:2b:43:1c:ba:25:f5:de:5d:cf:3e:71: 8a:4e:f6:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjYwODE0MjM1ODU4WhcNMjYwODIxMjM1ODU4WjAYMRYwFAYD VQQDEw02YTdmYWJjMi1kN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2ktVP/TKJpvdcipZh7MAu+oknJpWxAJkel7wi4rv1fy8sq8UQAyb/3lYA/j g0/IES5okldqdXEuekF0qjNiFHlkldgJum4wfTAtA7497TFB2zSmNVj80xkrwgp6 JFIKP6UnPyYNqMZijylNmb7e2TNmDAOF6srHfnA4o7NQ70pP1z22f0smVjaBdD7m 2tAF9KhonoTG+M81S7QJXrm+nRbqvBpo6u/c4sDZ+JIscs/1dARGfe4DwOdP9xpO 8kIYpFPMJ1AAbGmz0yHb2ngd12FUhDKhnPxMdHyJjo6pEGvN19uptxPyuZNCy/J7 Rp3Xv4SS7ntS//f0K3VX7HqfDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqbEb4a ffeojnsrQxX/FE0lXDjeMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl5nAP3TGJvhrnUvq74oLjh9QDdGgTuuJSwX5OnBzfuUVtrptSZnBdbAPOYkd nWKvjob0x0NsTSCy9ZTizu7jobGAdIMBujZt1rZyrRB+i0QBuwvMtfzDbzEWCfqW 0TSQqNc6QDn7EmQhwJX/o7Z3qTN5EqAK6RoiNVVbZlBxgJc73rrjjwBJzL40goHw nPolNnf+vLEWzqnCZafiGB7WQqVogJrb4/++/qUpxZfjS6ajGcNVuErvybvUIhUV eXykL4i67GBKhIEJXr7UrOd53ZnLMVn8ZiDWd7r88W1tfEVrkyhsaFq/cmWi1x/X cob3NitDHLol9d5dzz5xik723A== -----END CERTIFICATE-----Generated at Sat Aug 15 04:32:01 2026 by rpki-client