$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: WSB2bbJj+bBXfdN0+FV5DaV7sapRNDtmn37goT1RQ38= Subject key identifier: 79:AD:AB:87:F4:11:1F:39:9C:42:75:EC:78:A8:D5:73:0F:6A:97:7D Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 22F8 Signing time: Wed 12 Aug 2026 15:46:17 +0000 Manifest this update: Wed 12 Aug 2026 15:46:17 +0000 Manifest next update: Wed 19 Aug 2026 15:46:17 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: F9gniVO5LjaiXupkGhYno+ut92xgXI5RMqx7+Ey+Q7A=) 2: 0EB9C488501611F1BCA6FB50C1833773.roa (hash: hjLor0naDuB1MHE0ASMpLEp5N2HxCBYq1jwBVQbTUI4=) 3: 05302944D38811F096791A31C4F9AE02.roa (hash: 0TpazCbbP+eq5jbcmOC+QEukwM8XRQa407MbLaS5Vso=) 4: 114016CE65DB11F0A01C3E60C4F9AE02.roa (hash: qG9igdUpXB7wk8yx/k2tOuq/gYueDRGW4t5eH6cDkms=) 5: D128F6A2366111F19FA677FACA833773.roa (hash: ZY7Vk9qpQDHcmIYTowz44r/Aadjt59khWHwSNvAaAYk=) 6: B4A61D2A501511F19B7490E3C0833773.roa (hash: ULhHp7+sYXuEA4oAMAlvVXNC4B0eNrv0HmhmrXot1Bo=) 7: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: fekDwvX/Pg2YZ9Fe3QZAnU92TpFpbncEnNKE83KMH+M=) 8: 1738E8A8932F11F1ABABBC783C11F970.roa (hash: HGdBrPP2ECBqX72o/GXBpNLwCLFggA+06XmOaQsUJKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 15:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9042 (0x2352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Aug 12 15:46:17 2026 GMT Not After : Aug 19 15:46:17 2026 GMT Subject: CN=6a7c9549-aac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:f0:a2:44:85:ef:d6:21:52:00:aa:4b:03: 37:ce:f0:d2:e0:4a:14:f1:74:17:fa:97:34:23:95: 5d:0a:d2:ee:e7:79:da:bf:b5:b0:50:07:ca:3e:16: 4e:af:90:8e:20:8a:1d:d7:2d:a0:e2:bc:4e:0f:ca: 2b:5e:a9:8a:6e:72:56:44:c7:79:df:77:7c:39:29: 3c:24:b9:6d:e6:b8:cd:00:ee:a7:86:c8:f5:82:48: e7:fe:ba:6f:72:53:e7:bc:e8:71:0f:21:f6:2b:86: c5:0a:ba:46:ca:ce:9e:fa:5a:b0:01:31:7c:23:54: 1c:af:99:e2:10:6e:6b:c7:36:5f:b2:26:81:6c:eb: 4e:cd:53:69:6c:b4:16:6d:ed:1d:9e:e6:08:18:66: b6:ac:32:ec:57:52:10:6a:23:74:cd:a6:bd:31:32: 0a:fb:4c:0d:08:d4:58:ab:92:5f:66:65:03:81:19: 42:fd:f3:ca:4f:20:12:7e:e2:4f:5a:0d:85:ac:4b: 40:a3:6f:51:a2:98:fe:cc:aa:2a:14:30:fa:67:5e: 6c:2f:d1:04:ac:ce:2e:7f:43:4d:ff:0a:f1:8e:bf: 89:33:ef:40:6c:95:51:0e:3c:cb:58:2b:a3:2d:5c: 69:a3:d1:2f:f5:fa:c3:53:b6:b0:70:32:0b:41:20: 57:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AD:AB:87:F4:11:1F:39:9C:42:75:EC:78:A8:D5:73:0F:6A:97:7D X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b3:62:e5:1e:f7:62:68:a3:2e:d9:32:d3:19:d7:bc:0b:7c: 29:a9:46:de:ea:d8:3d:6d:70:e2:e2:dd:56:9a:2c:36:24:3d: 26:58:33:c2:60:ad:88:f2:51:62:cc:7d:9b:45:ba:86:5d:09: 8b:17:98:9c:73:a8:8d:75:e3:b2:cd:5b:6f:08:ca:b4:c4:28: aa:29:28:f6:ca:bf:49:ba:54:25:f9:79:d3:59:80:17:eb:9f: 27:fc:6a:b2:f8:02:69:a7:3d:bb:5f:48:8d:4d:b4:9e:39:b0: b2:d7:b6:13:f5:4a:0d:09:8a:d4:e1:1b:d1:e9:4f:31:18:33: e5:d9:7a:3d:80:1e:ab:d4:41:5b:e3:ea:8e:45:ef:cf:0b:3f: 6d:75:46:8d:75:4a:57:63:3c:e1:e1:26:c5:e9:93:85:e5:7b: d1:16:70:a9:d4:05:54:9a:6c:98:9f:d6:94:9e:a7:e5:47:38: 34:09:03:91:a3:e8:d1:0e:86:82:7b:fc:b5:4a:65:8d:45:11: 39:c4:d6:17:ba:79:de:f2:fb:1c:7d:ef:05:09:bc:f7:6c:2d: a8:21:a8:0c:20:bd:95:63:e7:83:06:ce:32:2b:c9:c9:e9:ef: d0:11:53:b5:a8:f9:e0:c3:60:ed:73:37:22:82:35:10:31:b6: 50:8c:95:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjYwODEyMTU0NjE3WhcNMjYwODE5MTU0NjE3WjAYMRYwFAYD VQQDEw02YTdjOTU0OS1hYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0jwokSF79YhUgCqSwM3zvDS4EoU8XQX+pc0I5VdCtLu53nav7WwUAfKPhZO r5COIIod1y2g4rxOD8orXqmKbnJWRMd533d8OSk8JLlt5rjNAO6nhsj1gkjn/rpv clPnvOhxDyH2K4bFCrpGys6e+lqwATF8I1Qcr5niEG5rxzZfsiaBbOtOzVNpbLQW be0dnuYIGGa2rDLsV1IQaiN0zaa9MTIK+0wNCNRYq5JfZmUDgRlC/fPKTyASfuJP Wg2FrEtAo29Ropj+zKoqFDD6Z15sL9EErM4uf0NN/wrxjr+JM+9AbJVRDjzLWCuj LVxpo9Ev9frDU7awcDILQSBXoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmtq4f0 ER85nEJ17Hio1XMPapd9MB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMbNi5R73YmijLtky0xnXvAt8KalG3urYPW1w4uLdVposNiQ9JlgzwmCtiPJR Ysx9m0W6hl0JixeYnHOojXXjss1bbwjKtMQoqiko9sq/SbpUJfl501mAF+ufJ/xq svgCaac9u19IjU20njmwste2E/VKDQmK1OEb0elPMRgz5dl6PYAeq9RBW+PqjkXv zws/bXVGjXVKV2M84eEmxemTheV70RZwqdQFVJpsmJ/WlJ6n5Uc4NAkDkaPo0Q6G gnv8tUpljUUROcTWF7p53vL7HH3vBQm892wtqCGoDCC9lWPngwbOMivJyenv0BFT taj54MNg7XM3IoI1EDG2UIyVfA== -----END CERTIFICATE-----Generated at Thu Aug 13 13:23:24 2026 by rpki-client