$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: +9l2OUOoniWn71YkuGuNrRPni/+vODRuQmbUqNNTR+Y= Subject key identifier: A7:35:00:04:34:EF:38:77:79:69:36:3C:14:FA:64:EE:52:72:8D:7B Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: E2 Signing time: Tue 25 Aug 2026 06:28:29 +0000 Manifest this update: Tue 25 Aug 2026 06:28:29 +0000 Manifest next update: Tue 01 Sep 2026 06:28:29 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: Q5Uo0bvR9qMlBXZSmni0Vogj2cnvjilv951mTpIDap8=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: jnh0hd9BJeU6DriRSa5jcG1pBk63GyyVkCh16HHy3wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 06:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Aug 25 06:28:29 2026 GMT Not After : Sep 1 06:28:29 2026 GMT Subject: CN=6a8d360d-bd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:aa:db:7f:c8:d8:04:46:0d:b6:d8:04:da: 18:4a:6a:bb:35:83:80:74:33:e4:13:21:eb:ab:6b: 64:42:37:6b:1f:0c:5f:ab:e2:f2:26:77:80:8a:86: 08:6c:cf:9e:c0:56:1f:6b:4e:e3:a2:db:54:b2:ae: b6:35:8b:53:a5:3d:8f:63:c6:8e:a9:21:76:18:7e: 13:23:d7:f6:fb:02:eb:c3:cd:37:a6:d0:80:97:0f: de:4b:0c:80:67:a1:0a:0c:59:2d:9b:4e:66:96:91: 1c:62:7d:22:00:05:5b:2f:65:c4:a7:2b:5d:0f:ae: f4:b9:15:48:9b:24:3a:61:14:fa:92:4e:be:52:cb: 65:17:ac:93:31:70:2a:b9:14:20:2d:e6:86:9b:4d: 1f:72:90:ff:30:61:b4:20:77:8d:ab:9d:71:2c:43: 79:58:43:dc:21:e6:9a:e3:ce:87:16:54:c6:b6:e2: 61:68:48:d8:f1:e2:67:a9:61:a1:6b:c3:0a:9b:96: 67:b8:5d:5a:b1:0e:4a:20:b7:e3:9e:f7:bd:ab:bb: 01:af:66:aa:f5:3a:94:c6:af:f6:a2:75:57:c5:f0: e8:23:fe:86:74:dd:d5:66:6c:63:a2:85:7e:03:c7: da:a5:74:94:58:f1:b4:32:b5:43:67:f5:9b:a6:a9: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:35:00:04:34:EF:38:77:79:69:36:3C:14:FA:64:EE:52:72:8D:7B X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:aa:41:9d:77:be:d4:a0:68:f8:21:21:21:6e:ef:eb:0b:73: fb:1f:3b:9d:e8:e6:1c:cc:5f:e9:d6:49:7c:a6:6c:10:ba:40: 90:b5:a3:29:2d:28:ea:64:8a:2b:89:a6:78:12:36:ef:01:6b: 49:2d:f3:26:2c:8d:22:f7:fe:f8:1b:04:50:bf:b9:c7:1d:92: 15:94:dd:19:0f:46:66:77:84:8a:e4:1f:70:20:cb:57:e0:b4: 82:de:52:af:7d:62:58:b3:45:09:b2:25:3a:b5:e2:74:7b:04: ee:54:87:ba:cb:cc:ce:30:25:23:7e:ed:81:28:9e:5f:af:81: 8e:bd:34:45:3f:28:0d:e7:4b:ff:c0:67:0f:86:88:1a:b5:2d: 9d:e7:fb:aa:70:32:1e:be:33:e0:a7:07:47:4e:ae:e2:9b:cf: 41:a2:33:e0:11:bf:2f:ee:f7:40:be:c9:60:74:14:88:48:f3: 2d:b0:23:d0:d1:48:31:8a:a7:94:74:0a:0c:d0:be:fb:ac:e3: c8:15:c4:28:bc:e5:b6:64:37:cd:db:e6:11:48:c3:e4:79:74: f6:5c:96:01:9a:db:fb:0a:d3:04:d2:a2:c9:b5:d2:d3:c0:57: 77:45:8e:ad:10:3e:97:89:3b:77:45:62:f9:f9:5e:58:59:97: cc:d9:06:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRkYxMTAvBgNVBAUTKDM1NDMzQzlFQzQwODA5OUY3MDE4QkM1MTQ0MUQyMkM0 QzExRkMzODUwHhcNMjYwODI1MDYyODI5WhcNMjYwOTAxMDYyODI5WjAYMRYwFAYD VQQDEw02YThkMzYwZC1iZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpWq23/I2ARGDbbYBNoYSmq7NYOAdDPkEyHrq2tkQjdrHwxfq+LyJneAioYI bM+ewFYfa07jottUsq62NYtTpT2PY8aOqSF2GH4TI9f2+wLrw803ptCAlw/eSwyA Z6EKDFktm05mlpEcYn0iAAVbL2XEpytdD670uRVImyQ6YRT6kk6+UstlF6yTMXAq uRQgLeaGm00fcpD/MGG0IHeNq51xLEN5WEPcIeaa486HFlTGtuJhaEjY8eJnqWGh a8MKm5ZnuF1asQ5KILfjnve9q7sBr2aq9TqUxq/2onVXxfDoI/6GdN3VZmxjooV+ A8fapXSUWPG0MrVDZ/WbpqlYfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKc1AAQ0 7zh3eWk2PBT6ZO5Sco17MB8GA1UdIwQYMBaAFDVDPJ7ECAmfcBi8UUQdIsTBH8OF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BQjk3NUJDRTQ4 NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNaOXdHTHhSUkIwaXhNRWZ3 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGRi9BQjk3NUJDRTQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNa OXdHTHhSUkIwaXhNRWZ3NFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGqpBnXe+1KBo+CEhIW7v6wtz+x87nejmHMxf6dZJfKZsELpAkLWjKS0o6mSK K4mmeBI27wFrSS3zJiyNIvf++BsEUL+5xx2SFZTdGQ9GZneEiuQfcCDLV+C0gt5S r31iWLNFCbIlOrXidHsE7lSHusvMzjAlI37tgSieX6+Bjr00RT8oDedL/8BnD4aI GrUtnef7qnAyHr4z4KcHR06u4pvPQaIz4BG/L+73QL7JYHQUiEjzLbAj0NFIMYqn lHQKDNC++6zjyBXEKLzltmQ3zdvmEUjD5Hl09lyWAZrb+wrTBNKiybXS08BXd0WO rRA+l4k7d0Vi+fleWFmXzNkG1Q== -----END CERTIFICATE-----Generated at Thu Aug 27 04:03:17 2026 by rpki-client