$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft File: aGr0G8M9rvgo-rSuSjoNWHutDT8.mft (raw, json) Hash identifier: 44ZVwg+qW1wq7syiXdbADimsy5XJkyWL6KZU0XH8pSs= Subject key identifier: 1F:FF:78:8C:09:A7:0F:02:4A:25:88:B7:B4:11:9B:CE:5F:53:6F:26 Authority key identifier: 68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F Certificate issuer: /CN=A91E4D3D/serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft Manifest number: 067E Signing time: Tue 18 Aug 2026 22:54:59 +0000 Manifest this update: Tue 18 Aug 2026 22:54:58 +0000 Manifest next update: Tue 25 Aug 2026 22:54:58 +0000 Files and hashes: 1: aGr0G8M9rvgo-rSuSjoNWHutDT8.crl (hash: J+i9Sgiar3rCFRCm8SAi1Li4kfnFsSmVtOxfMBhFLr8=) 2: 40310456D8D211EB97FF5586C4F9AE02.roa (hash: ljhzAAAHOEbQtw8/O2WirKoWv6XtLYHxhjuJKY3iiZM=) 3: 63FEB4F8D97411EBB8CC3F40C4F9AE02.roa (hash: GBummmykHnsRNOp2UTZVHW61aelGglaz1bE3tCnWo5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 22:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D3D, serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Validity Not Before: Aug 18 22:54:58 2026 GMT Not After : Aug 25 22:54:58 2026 GMT Subject: CN=6a84e2c3-a5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:c8:5d:2e:2e:75:76:37:eb:53:72:7b:20: 63:31:1f:03:38:e5:83:2b:49:8c:b7:b8:7e:29:cc: 1c:76:eb:53:95:f3:46:8e:78:21:24:df:10:7c:61: 4b:8e:1a:79:c6:79:3b:fd:f6:11:74:7a:14:a1:76: 5d:e8:b0:ee:30:79:65:1b:d7:b0:88:0c:cd:12:fb: 43:ad:10:5c:ae:3a:b1:00:74:fb:de:d7:ac:bc:17: a7:f9:cb:c6:5e:1f:16:51:7e:96:3e:10:f7:e0:d2: 02:3f:67:00:b1:9d:95:06:c2:b7:19:c2:22:f1:7b: 7f:da:c1:85:49:b3:90:6c:34:4d:9f:cb:8c:f2:e2: aa:f7:57:05:bf:b7:21:89:85:d3:30:12:f0:81:ba: 5a:85:34:b7:db:23:4c:cc:2b:46:5a:be:e0:a3:40: 13:9c:67:68:03:84:8a:5e:0a:79:12:34:c0:e2:05: ad:fc:44:18:8a:9d:4c:f3:3c:f7:76:22:94:4e:57: 1d:5b:7d:05:96:9b:23:4b:de:51:92:4e:5f:4b:a5: 5b:8b:f9:85:2d:29:60:da:53:a7:03:49:83:92:a0: 3e:ef:03:9d:3d:7d:2d:21:bb:ae:e6:51:7e:c9:5e: 07:a9:4d:d5:2d:a2:c5:4c:71:17:e5:bd:20:6b:b2: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FF:78:8C:09:A7:0F:02:4A:25:88:B7:B4:11:9B:CE:5F:53:6F:26 X509v3 Authority Key Identifier: keyid:68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f0:de:1a:d3:4d:02:a7:40:bc:38:8f:e0:c9:a7:ee:6a:96:ec: 7e:0e:28:64:61:47:f3:19:56:b8:d3:38:7a:33:19:0d:36:0c: c6:98:94:ba:4a:9c:68:87:83:f7:02:c7:67:ec:bd:2d:fd:c6: 35:fc:68:c1:53:a6:2e:7e:bb:f3:40:24:a4:64:cb:88:99:12: ce:87:73:f6:02:17:22:a2:21:28:bc:c7:7f:f1:00:68:e7:ac: b5:ee:00:28:0b:be:21:7e:ae:93:53:c2:85:f0:94:b0:65:11: 32:b7:61:fd:ad:65:94:11:17:8d:35:f9:3c:f5:dd:24:15:10: 1b:ea:73:32:47:17:ac:e5:e8:e3:4c:95:33:48:fc:d8:ee:ad: e2:85:7c:64:d6:21:2f:93:da:08:ca:06:b2:86:1e:89:9b:cf: a0:69:0e:de:10:bc:b0:8d:ec:89:76:1f:74:21:8b:13:3a:09: 6b:e9:5b:e9:78:39:2a:3e:46:36:a3:65:5d:37:9b:a2:a5:49: a5:f1:e9:22:f1:d5:71:20:00:54:5f:7e:4d:f0:83:04:15:67: cd:15:61:4c:36:3b:7e:be:7b:f2:6f:bd:c0:e9:b6:14:d0:0c: 4d:d7:5d:fe:57:ce:86:b6:f7:c5:e2:0f:5c:14:d0:95:97:4a: 28:55:43:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREM0QxMTAvBgNVBAUTKDY4NkFGNDFCQzMzREFFRjgyOEZBQjRBRTRBM0EwRDU4 N0JBRDBEM0YwHhcNMjYwODE4MjI1NDU4WhcNMjYwODI1MjI1NDU4WjAYMRYwFAYD VQQDEw02YTg0ZTJjMy1hNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtATIXS4udXY361NyeyBjMR8DOOWDK0mMt7h+KcwcdutTlfNGjnghJN8QfGFL jhp5xnk7/fYRdHoUoXZd6LDuMHllG9ewiAzNEvtDrRBcrjqxAHT73tesvBen+cvG Xh8WUX6WPhD34NICP2cAsZ2VBsK3GcIi8Xt/2sGFSbOQbDRNn8uM8uKq91cFv7ch iYXTMBLwgbpahTS32yNMzCtGWr7go0ATnGdoA4SKXgp5EjTA4gWt/EQYip1M8zz3 diKUTlcdW30FlpsjS95Rkk5fS6Vbi/mFLSlg2lOnA0mDkqA+7wOdPX0tIbuu5lF+ yV4HqU3VLaLFTHEX5b0ga7IdQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB//eIwJ pw8CSiWIt7QRm85fU28mMB8GA1UdIwQYMBaAFGhq9BvDPa74KPq0rko6DVh7rQ0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9BNzBBOEZFRUQ4 QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2Z28tclN1U2pvTldIdXRE VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FHcjBHOE05cnZnby1yU3VTam9OV0h1dERUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEQzRC9BNzBBOEZFRUQ4QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2 Z28tclN1U2pvTldIdXREVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA8N4a000Cp0C8OI/gyafuapbsfg4oZGFH8xlWuNM4ejMZDTYMxpiUukqcaIeD 9wLHZ+y9Lf3GNfxowVOmLn6780AkpGTLiJkSzodz9gIXIqIhKLzHf/EAaOeste4A KAu+IX6uk1PChfCUsGURMrdh/a1llBEXjTX5PPXdJBUQG+pzMkcXrOXo40yVM0j8 2O6t4oV8ZNYhL5PaCMoGsoYeiZvPoGkO3hC8sI3siXYfdCGLEzoJa+lb6Xg5Kj5G NqNlXTeboqVJpfHpIvHVcSAAVF9+TfCDBBVnzRVhTDY7fr578m+9wOm2FNAMTddd /lfOhrb3xeIPXBTQlZdKKFVD2w== -----END CERTIFICATE-----Generated at Wed Aug 19 16:03:29 2026 by rpki-client