$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft File: r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json) Hash identifier: pX6jlwI80WhqI2MCKCE7AVUjp498+VFxWbeqUlsiQa0= Subject key identifier: 66:F6:C1:4F:97:31:2E:92:AB:4E:85:0F:D1:6A:98:84:EC:A6:28:69 Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft Manifest number: 0208 Signing time: Mon 17 Aug 2026 03:43:19 +0000 Manifest this update: Mon 17 Aug 2026 03:43:18 +0000 Manifest next update: Mon 24 Aug 2026 03:43:18 +0000 Files and hashes: 1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: OCESqJz7O0Hc3BztChQTOtggDfMktCgzBOqNKObLo3k=) 2: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: 4apUkb/9OAkWGMu7J3h8tdbWlfEZR8ZKAMbBcPjKoaU=) 3: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: ySADP91L9zzRBTSfDoHJ50+Ik7XzeYcUmFcCyfVbDoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Aug 2026 03:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Validity Not Before: Aug 17 03:43:18 2026 GMT Not After : Aug 24 03:43:18 2026 GMT Subject: CN=6a828357-b186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:5c:21:b9:a3:ef:6d:40:f4:4e:92:2d:f1: 5f:61:1d:d5:12:84:03:bb:6c:0d:31:50:cc:ea:7c: 6f:35:c2:f9:f7:ee:63:b8:80:97:75:69:73:62:ce: 26:62:97:1c:ea:90:f5:aa:1e:96:1d:88:94:9a:f3: 60:47:a2:70:c8:30:5d:cd:06:60:1e:3c:fd:33:69: bc:d5:ee:38:fa:43:7c:01:d7:f9:d8:d0:55:e0:0e: ae:d1:41:3f:b5:58:13:d5:03:6f:35:e4:71:0c:a4: ae:9a:78:ce:1a:72:ef:f3:e4:23:48:45:5f:d9:ab: 56:ef:b1:6d:f5:ee:00:84:3b:65:a6:19:d7:49:b2: 00:a2:b4:2d:d5:98:ac:37:b5:a6:22:4f:bc:3e:1c: fa:e8:51:ab:d8:d0:70:0f:e7:c1:7e:da:c6:e9:58: c8:77:bb:0d:3d:d9:82:8b:45:23:24:ab:2f:4b:06: b4:75:9a:13:e5:51:1a:80:f1:9f:e0:69:1f:d9:1e: 79:95:a5:70:45:e6:19:cf:94:8c:9f:35:26:96:68: b5:68:ce:ae:cb:e5:95:eb:b1:c5:68:35:37:b8:fa: 4f:fd:1f:e5:c9:89:2c:81:fe:62:73:8e:d3:f1:7c: c6:1d:55:e1:fe:28:6d:c9:bf:15:b9:a0:88:69:81: bc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F6:C1:4F:97:31:2E:92:AB:4E:85:0F:D1:6A:98:84:EC:A6:28:69 X509v3 Authority Key Identifier: keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:6f:b6:ae:d8:5a:7b:92:5b:14:b6:35:ba:ee:46:b2:a3:3e: c6:73:f1:be:44:2d:02:03:78:0e:49:25:47:2b:f0:57:c8:ef: 2c:ab:a2:66:db:7e:dc:18:a1:84:f4:19:f7:8a:31:96:30:04: 2a:bf:30:e8:dd:fa:b9:03:e7:9e:83:fd:9b:a8:d2:10:88:84: 76:fa:a2:ac:c1:5c:fd:d9:b6:03:3f:46:14:c4:1d:33:b6:21: 99:33:75:b7:d2:61:98:88:c7:35:f4:5e:e9:34:f6:69:38:f0: 2b:49:1b:cc:86:e9:da:89:a0:f5:63:19:5c:a5:72:5c:18:c6: ad:94:dd:f6:87:4a:3d:33:fc:8f:ec:f3:f6:f1:1c:c8:4f:e6: aa:28:d8:4d:7d:b8:f7:35:14:0b:cf:af:99:fa:15:5e:e6:b3: 10:20:12:72:ad:27:4d:4e:60:88:53:a6:e6:39:1d:fe:61:11: b1:1d:1c:d6:8d:96:71:e3:29:05:95:d2:55:94:26:6f:4f:4b: 48:c8:af:a5:f6:41:e5:5a:0e:7e:6b:41:c6:d7:2c:b5:5d:c6: 9e:e5:ac:d4:f5:47:e7:26:f4:65:67:6a:9b:6d:89:77:05:b4: b9:43:bc:4c:82:e4:e7:45:76:5b:fc:d9:f7:55:64:ac:08:5b: c9:a2:47:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjgxMTAvBgNVBAUTKEFGRkNFNjM3OTg4MTY1RTZDNTFCRkJGRUJEMTI4M0Q1 MTEyNDAxOTAwHhcNMjYwODE3MDM0MzE4WhcNMjYwODI0MDM0MzE4WjAYMRYwFAYD VQQDEw02YTgyODM1Ny1iMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsj9cIbmj721A9E6SLfFfYR3VEoQDu2wNMVDM6nxvNcL59+5juICXdWlzYs4m Ypcc6pD1qh6WHYiUmvNgR6JwyDBdzQZgHjz9M2m81e44+kN8Adf52NBV4A6u0UE/ tVgT1QNvNeRxDKSumnjOGnLv8+QjSEVf2atW77Ft9e4AhDtlphnXSbIAorQt1Zis N7WmIk+8Phz66FGr2NBwD+fBftrG6VjId7sNPdmCi0UjJKsvSwa0dZoT5VEagPGf 4Gkf2R55laVwReYZz5SMnzUmlmi1aM6uy+WV67HFaDU3uPpP/R/lyYksgf5ic47T 8XzGHVXh/ihtyb8VuaCIaYG8DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGb2wU+X MS6Sq06FD9FqmITspihpMB8GA1UdIwQYMBaAFK/85jeYgWXmxRv7/r0Sg9URJAGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2OC84Mjc1MjRFODhF RTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlplYkZHX3YtdlJLRDFSRWtB WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jfem1ONWlCWmViRkdfdi12UktEMVJFa0FaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2OC84Mjc1MjRFODhFRTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlpl YkZHX3YtdlJLRDFSRWtBWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARW+2rthae5JbFLY1uu5GsqM+xnPxvkQtAgN4DkklRyvwV8jvLKuiZtt+3Bih hPQZ94oxljAEKr8w6N36uQPnnoP9m6jSEIiEdvqirMFc/dm2Az9GFMQdM7YhmTN1 t9JhmIjHNfRe6TT2aTjwK0kbzIbp2omg9WMZXKVyXBjGrZTd9odKPTP8j+zz9vEc yE/mqijYTX249zUUC8+vmfoVXuazECAScq0nTU5giFOm5jkd/mERsR0c1o2WceMp BZXSVZQmb09LSMivpfZB5VoOfmtBxtcstV3GnuWs1PVH5yb0ZWdqm22JdwW0uUO8 TILk50V2W/zZ91VkrAhbyaJHNA== -----END CERTIFICATE-----Generated at Tue Aug 18 01:08:40 2026 by rpki-client