$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft File: sBO5crQspa2fahYr87XHT5M8HgU.mft (raw, json) Hash identifier: xADqvojbvKPsrTxgjAwnb9xCReB0D+wdNwABoXVeY2U= Subject key identifier: 5C:6D:0C:63:FA:CD:9B:73:57:B9:A1:64:4A:3E:BA:AE:D0:D6:3C:4F Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft Manifest number: 0668 Signing time: Tue 18 Aug 2026 22:57:29 +0000 Manifest this update: Tue 18 Aug 2026 22:57:28 +0000 Manifest next update: Tue 25 Aug 2026 22:57:28 +0000 Files and hashes: 1: sBO5crQspa2fahYr87XHT5M8HgU.crl (hash: oNkSxHuViEt6HfSEEkBsKD0l4bWiM3+YqJRgS7y7cRs=) 2: 5334D20CDA5E11EBA323F462C4F9AE02.roa (hash: wpTOnbFzHuZykJ8pDXVXmzxxqZkD4nI9a0iplVk0s2M=) 3: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (hash: cye1hIVFGwa2LCmeYD2ib4pZaHJ8xh8Jr5cItjYasmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 22:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Validity Not Before: Aug 18 22:57:28 2026 GMT Not After : Aug 25 22:57:28 2026 GMT Subject: CN=6a84e358-e4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:b8:0e:c1:e0:f2:46:19:02:31:bf:66:1f: 49:13:45:d6:35:57:3c:d7:77:50:8b:00:e9:36:e5: 6f:b1:06:90:ea:6e:f1:71:df:34:43:fe:8e:b6:7e: ed:37:07:71:8e:8d:63:55:0f:35:a3:ff:46:39:9e: fa:9e:d0:fd:dc:6a:03:f6:8d:6f:10:20:cf:45:f2: c7:73:b3:61:06:6a:c7:db:b6:05:5f:31:e8:66:c7: dc:8d:c2:b8:25:fe:9d:66:65:d4:68:be:dc:84:4a: 31:86:63:d0:7f:6d:09:89:d2:4d:81:91:38:0e:0e: 99:70:0c:21:27:3b:92:3e:94:3c:ca:4d:5e:c1:85: 0d:c9:2c:ee:87:27:90:fc:dc:ef:7b:21:e4:60:d9: 9e:50:f0:69:a9:cc:aa:4c:46:ca:b6:c8:44:27:2a: 26:a1:50:71:f7:c4:5b:e3:f7:d3:b2:d2:34:66:38: 49:79:74:49:1d:f8:7d:a1:aa:08:d1:48:5f:c2:96: ec:dd:8f:86:a6:08:8a:5c:df:5e:61:54:0a:90:13: 55:c2:60:e4:fa:62:c7:2d:28:8a:48:bf:b2:ab:f1: 75:3c:b9:d6:40:21:6d:35:f8:f8:ef:19:0c:3a:e6: 24:14:ac:63:c7:0f:54:fa:3a:e3:f4:5b:b4:c8:b5: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6D:0C:63:FA:CD:9B:73:57:B9:A1:64:4A:3E:BA:AE:D0:D6:3C:4F X509v3 Authority Key Identifier: keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:6c:16:94:d9:42:f5:ba:b4:26:71:c1:8e:5d:a4:76:9c:ac: e0:b2:02:ba:dc:7a:27:fc:69:e0:12:ad:3b:e6:00:32:c5:9c: d5:5c:02:9d:02:43:21:57:a5:dc:9b:cc:71:12:47:66:61:57: 76:59:a5:be:89:1b:56:58:5c:82:0b:61:c1:82:9c:da:a4:dd: d6:b1:c1:9e:29:fc:20:7d:0e:e2:79:38:89:d4:15:de:6e:67: f8:12:1c:66:93:20:88:1f:0f:4b:ca:a0:f9:2a:6e:2b:82:89: 39:33:04:fe:41:08:e8:95:fc:85:a6:0e:d3:63:51:97:1d:aa: eb:d4:8e:79:d0:99:12:45:c5:c0:63:67:d7:18:96:50:b3:1c: a2:6e:6d:c1:21:7f:97:63:b9:b0:2d:4a:37:fe:b7:cc:61:c5: 69:62:ea:bf:64:fc:42:f8:da:28:0a:0a:ce:bc:c6:05:27:30: a3:79:81:e8:32:8d:77:60:72:10:6d:3f:a3:ac:56:98:3c:fd: 18:47:60:5d:02:2e:50:65:83:c5:2b:01:72:87:4a:9b:f4:11: 25:11:89:4c:3e:59:fd:2a:20:d5:53:4f:84:f3:de:10:4d:30: b0:9f:3c:82:ad:a7:2a:a5:93:0b:a0:05:c4:d7:b8:91:2e:fa: 58:b6:c2:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJCNjYxMTAvBgNVBAUTKEIwMTNCOTcyQjQyQ0E1QUQ5RjZBMTYyQkYzQjVDNzRG OTMzQzFFMDUwHhcNMjYwODE4MjI1NzI4WhcNMjYwODI1MjI1NzI4WjAYMRYwFAYD VQQDEw02YTg0ZTM1OC1lNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnau4DsHg8kYZAjG/Zh9JE0XWNVc813dQiwDpNuVvsQaQ6m7xcd80Q/6Otn7t Nwdxjo1jVQ81o/9GOZ76ntD93GoD9o1vECDPRfLHc7NhBmrH27YFXzHoZsfcjcK4 Jf6dZmXUaL7chEoxhmPQf20JidJNgZE4Dg6ZcAwhJzuSPpQ8yk1ewYUNySzuhyeQ /NzveyHkYNmeUPBpqcyqTEbKtshEJyomoVBx98Rb4/fTstI0ZjhJeXRJHfh9oaoI 0Uhfwpbs3Y+GpgiKXN9eYVQKkBNVwmDk+mLHLSiKSL+yq/F1PLnWQCFtNfj47xkM OuYkFKxjxw9U+jrj9Fu0yLXnmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxtDGP6 zZtzV7mhZEo+uq7Q1jxPMB8GA1UdIwQYMBaAFLATuXK0LKWtn2oWK/O1x0+TPB4F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkI2Ni81M0U4RkJFQURB NUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3BhMmZhaFlyODdYSFQ1TThI Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCTzVjclFzcGEyZmFoWXI4N1hIVDVNOEhnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkI2Ni81M0U4RkJFQURBNUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3Bh MmZhaFlyODdYSFQ1TThIZ1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYWwWlNlC9bq0JnHBjl2kdpys4LICutx6J/xp4BKtO+YAMsWc1VwCnQJDIVel 3JvMcRJHZmFXdlmlvokbVlhcggthwYKc2qTd1rHBnin8IH0O4nk4idQV3m5n+BIc ZpMgiB8PS8qg+SpuK4KJOTME/kEI6JX8haYO02NRlx2q69SOedCZEkXFwGNn1xiW ULMcom5twSF/l2O5sC1KN/63zGHFaWLqv2T8QvjaKAoKzrzGBScwo3mB6DKNd2By EG0/o6xWmDz9GEdgXQIuUGWDxSsBcodKm/QRJRGJTD5Z/Sog1VNPhPPeEE0wsJ88 gq2nKqWTC6AFxNe4kS76WLbCsg== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:14 2026 by rpki-client