$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft File: kBdT4_LIclCGbxxHOQChAP1Mq1M.mft (raw, json) Hash identifier: 9Kc4RLVgokb/DISfyEKqRDwJ9VetMVunQtNvDtBYjnI= Subject key identifier: 20:69:99:5D:E3:46:A6:A4:72:78:2E:27:B3:B0:4F:9D:7E:3E:02:43 Authority key identifier: 90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53 Certificate issuer: /CN=A91E4FA6/serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft Manifest number: 17 Signing time: Wed 19 Aug 2026 09:44:27 +0000 Manifest this update: Wed 19 Aug 2026 09:44:26 +0000 Manifest next update: Wed 26 Aug 2026 09:44:26 +0000 Files and hashes: 1: kBdT4_LIclCGbxxHOQChAP1Mq1M.crl (hash: Dtyzt3Qdfy0tGJnJpzjHp0GM9fKw8aB61korUcztB5o=) 2: 947763C67B4211F1AEF4840594A30FBC.roa (hash: J3btKuOFaL2iAnmc6q/6qXEqUsLNqUcznVApxNof1zE=) 3: 93CAB16C7B4211F1AEF4840594A30FBC.roa (hash: tsHb5mr8RbkReF/Lzb1FiewO29ujOLPqtSMY3Pgh1Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4FA6, serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53 Validity Not Before: Aug 19 09:44:26 2026 GMT Not After : Aug 26 09:44:26 2026 GMT Subject: CN=6a857afa-c827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:8e:e5:eb:cb:5d:5b:b3:39:c1:3b:a3:9b: b7:07:be:15:f3:b4:84:56:21:cb:ef:2a:66:18:11: c7:04:ad:7c:3e:08:37:c2:dd:ec:b4:1c:50:fb:00: 15:66:f9:9d:72:51:31:ed:35:2f:ca:b3:8a:2a:5e: 55:81:bd:4a:f5:05:b5:31:44:d7:84:36:b2:d7:80: 88:07:25:1d:b9:f3:48:5e:ff:8d:d1:73:fe:6e:b5: f4:ea:e8:6d:3a:42:b5:b9:bf:f1:32:37:18:4f:85: 36:11:a8:aa:12:84:e4:74:3b:05:03:4d:50:08:86: 7c:5d:6b:5a:a5:01:18:2f:95:01:b9:6b:a7:a7:4d: 85:a0:31:47:4b:56:8c:88:45:88:4c:ba:c3:c7:2c: ef:4c:0d:89:d9:48:da:1c:91:af:56:14:cc:37:6f: c6:dd:27:23:87:c8:67:37:fa:f0:a9:98:88:82:cb: 9f:88:31:8b:5b:ae:1c:58:17:99:6b:06:34:0b:f0: 34:dd:9e:51:04:92:84:fd:c7:a9:d5:3a:c2:74:d3: 85:8e:c9:42:c6:4f:56:0d:f4:91:85:46:d6:e9:06: f6:15:c9:2e:fe:ba:83:29:64:c6:a0:4a:1a:7b:a6: 8d:48:48:f0:65:b7:88:17:b9:b4:d0:03:70:4c:e7: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:69:99:5D:E3:46:A6:A4:72:78:2E:27:B3:B0:4F:9D:7E:3E:02:43 X509v3 Authority Key Identifier: keyid:90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:2e:14:77:37:f6:3c:27:38:4e:84:e2:3c:38:47:d5:7f:dc: 58:4e:48:20:e2:99:24:7c:15:91:ac:a6:0a:be:1a:6b:32:10: 91:61:ea:e6:3b:f9:dd:c3:ea:13:62:64:7d:eb:eb:b3:00:ae: e8:cc:5e:bf:85:63:0f:8f:bb:b9:1b:5b:f7:ed:6c:9e:f1:8e: 1e:f8:c7:5f:30:f3:38:d6:3d:60:23:c2:78:9a:74:89:56:a8: eb:c5:d4:5d:e7:b7:9e:fb:1e:45:86:a9:3e:97:ea:88:20:c8: 66:e8:f6:94:37:e1:20:f4:e4:86:b7:6d:80:dc:62:6b:63:e9: 3e:3b:e5:20:58:b1:42:56:c9:01:a5:ff:ec:70:48:09:df:67: ed:de:fc:3c:8d:7b:f4:5a:f8:0e:69:b5:cf:c5:3b:87:95:06: 75:8a:da:63:df:66:6b:1b:01:c8:e2:c0:0b:81:23:f2:9d:e1: 35:e8:ce:4c:7d:d4:d0:ee:92:b5:38:5c:c8:10:15:06:65:fd: 04:ad:06:52:f2:62:e6:7a:fd:c3:8a:22:a8:85:a0:71:bf:5c: 54:63:ec:24:b9:4d:b7:66:96:57:4f:12:c7:e1:f5:ce:cb:4e: 78:ad:8f:7f:46:cc:d3:14:97:ea:4f:07:a0:2e:38:15:ba:38: 54:2d:45:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEZBNjExMC8GA1UEBRMoOTAxNzUzRTNGMkM4NzI1MDg2NkYxQzQ3MzkwMEExMDBG RDRDQUI1MzAeFw0yNjA4MTkwOTQ0MjZaFw0yNjA4MjYwOTQ0MjZaMBgxFjAUBgNV BAMTDTZhODU3YWZhLWM4MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwt47l68tdW7M5wTujm7cHvhXztIRWIcvvKmYYEccErXw+CDfC3ey0HFD7ABVm +Z1yUTHtNS/Ks4oqXlWBvUr1BbUxRNeENrLXgIgHJR2580he/43Rc/5utfTq6G06 QrW5v/EyNxhPhTYRqKoShOR0OwUDTVAIhnxda1qlARgvlQG5a6enTYWgMUdLVoyI RYhMusPHLO9MDYnZSNocka9WFMw3b8bdJyOHyGc3+vCpmIiCy5+IMYtbrhxYF5lr BjQL8DTdnlEEkoT9x6nVOsJ004WOyULGT1YN9JGFRtbpBvYVyS7+uoMpZMagShp7 po1ISPBlt4gXubTQA3BM57VDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIGmZXeNG pqRyeC4ns7BPnX4+AkMwHwYDVR0jBBgwFoAUkBdT4/LIclCGbxxHOQChAP1Mq1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RkE2LzJCMEI5NTFBN0I0 MjExRjFCNTVCNjVBQjkzQTMwRkJDL2tCZFQ0X0xJY2xDR2J4eEhPUUNoQVAxTXEx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0JkVDRfTEljbENHYnh4SE9RQ2hBUDFNcTFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 RkE2LzJCMEI5NTFBN0I0MjExRjFCNTVCNjVBQjkzQTMwRkJDL2tCZFQ0X0xJY2xD R2J4eEhPUUNoQVAxTXExTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGLhR3N/Y8JzhOhOI8OEfVf9xYTkgg4pkkfBWRrKYKvhprMhCRYermO/ndw+oT YmR96+uzAK7ozF6/hWMPj7u5G1v37Wye8Y4e+MdfMPM41j1gI8J4mnSJVqjrxdRd 57ee+x5Fhqk+l+qIIMhm6PaUN+Eg9OSGt22A3GJrY+k+O+UgWLFCVskBpf/scEgJ 32ft3vw8jXv0WvgOabXPxTuHlQZ1itpj32ZrGwHI4sALgSPyneE16M5MfdTQ7pK1 OFzIEBUGZf0ErQZS8mLmev3DiiKohaBxv1xUY+wkuU23ZpZXTxLH4fXOy054rY9/ RszTFJfqTwegLjgVujhULUWy -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:06 2026 by rpki-client