$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: GI4ezFoOthDiVfdf3ItOxgl0fgundXoP3zblyPkG5Lo= Subject key identifier: D7:09:FC:58:C6:F3:6E:3C:B4:41:6B:9A:2D:B8:DC:A5:ED:79:F5:B9 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 0164 Signing time: Tue 25 Aug 2026 04:57:48 +0000 Manifest this update: Tue 25 Aug 2026 04:57:47 +0000 Manifest next update: Tue 01 Sep 2026 04:57:47 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: zXAskn3zMwbU243Gbx/yaXby1ddZ3dVw4j6t0lLjLXE=) 2: 4694313A887211EF840E431CC4F9AE02.roa (hash: eif617S5bX0Z7ndJMVLfruP5oLQH3qStAeh61KPNYBo=) 3: A54B071C887211EFAC44513CC4F9AE02.roa (hash: A+hlWvL+lcb0OAC4v/UaMyQV/3V/t7kpEeh0OoWWKV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 04:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Aug 25 04:57:47 2026 GMT Not After : Sep 1 04:57:47 2026 GMT Subject: CN=6a8d20cb-0586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:c1:63:97:fb:cc:1b:50:34:65:94:19:7d: 8e:0d:dd:fe:44:5c:83:bf:5d:8c:eb:95:a7:1a:51: 2b:7a:8b:bc:43:59:97:ec:c6:69:26:65:7c:28:15: c2:b3:1d:5c:56:81:c8:98:27:1b:01:cb:71:72:00: df:c4:e6:51:6f:ec:0c:07:03:2c:ee:da:33:31:5a: a7:d4:d0:91:6f:4c:2d:ae:54:ab:be:0a:60:67:8a: 14:ca:03:03:bf:63:f8:0b:0b:e7:40:d3:a0:67:63: 61:5b:e0:68:c7:d7:bb:ec:45:8f:d6:67:40:51:fc: 77:5f:f4:c3:da:60:d8:7d:84:c3:a8:5c:90:26:9f: 4d:83:73:36:8c:fa:6e:73:24:dc:d2:fa:dd:1e:2f: c2:79:ed:ad:7f:e3:b7:9e:b0:08:2d:5a:88:d2:24: 41:ad:59:98:f1:42:63:58:ff:57:64:46:d7:62:d4: f9:58:53:ae:09:a1:26:88:6e:5b:21:23:52:ca:58: 74:c2:62:4a:53:c0:b6:6f:30:fa:fb:fa:f0:10:18: a7:cd:8c:4d:1e:b3:db:57:5f:da:55:98:04:f8:30: e3:69:50:c5:b3:53:8a:0d:20:cf:bf:91:2e:f2:2a: 69:4d:4b:8c:fc:e2:3e:a2:5d:9d:60:0e:ad:cd:ff: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:09:FC:58:C6:F3:6E:3C:B4:41:6B:9A:2D:B8:DC:A5:ED:79:F5:B9 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b2:64:6b:4f:aa:ff:0f:61:20:ae:25:84:11:24:73:8c:e4: 78:0a:7d:b4:b6:16:96:4f:ab:dc:77:ef:77:18:09:ef:c8:0c: d3:4d:94:72:5b:82:e5:24:2b:72:52:41:7f:1b:34:1a:0d:1a: 63:b8:10:a4:1c:ad:c4:53:c5:b6:08:33:b0:de:c4:4e:79:4c: 4d:b0:f9:c1:ef:50:93:09:aa:82:06:89:58:2f:70:f4:a3:4d: 7f:45:ca:08:e6:e3:a6:62:75:b9:3d:f8:bf:c7:82:bb:29:8f: e8:bf:9b:87:d1:eb:7a:c0:dc:c6:d7:fb:21:f9:f7:4d:01:55: 00:81:15:f0:08:b5:3c:04:4f:f9:ea:01:6e:ac:a9:cb:3f:32: fd:11:e2:83:a3:81:99:9b:eb:a7:08:cb:81:40:c9:99:33:06: ab:ed:43:07:0b:77:26:23:24:d1:9c:34:2e:97:59:b4:14:22: dd:72:70:34:a8:b9:b3:17:58:5d:52:7c:f4:fd:e6:c1:ff:b7: b3:5b:36:50:75:91:69:88:81:31:4a:a3:0b:35:7d:5f:ab:db: 47:de:02:d6:e7:aa:14:b1:f7:54:4c:6d:b8:19:02:9e:9c:0e: ff:f0:fb:a9:ed:80:c9:8e:c5:cb:06:ce:6c:6e:e9:94:51:aa: 54:15:00:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjYwODI1MDQ1NzQ3WhcNMjYwOTAxMDQ1NzQ3WjAYMRYwFAYD VQQDEw02YThkMjBjYi0wNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRTBY5f7zBtQNGWUGX2ODd3+RFyDv12M65WnGlEreou8Q1mX7MZpJmV8KBXC sx1cVoHImCcbActxcgDfxOZRb+wMBwMs7tozMVqn1NCRb0wtrlSrvgpgZ4oUygMD v2P4CwvnQNOgZ2NhW+Box9e77EWP1mdAUfx3X/TD2mDYfYTDqFyQJp9Ng3M2jPpu cyTc0vrdHi/Cee2tf+O3nrAILVqI0iRBrVmY8UJjWP9XZEbXYtT5WFOuCaEmiG5b ISNSylh0wmJKU8C2bzD6+/rwEBinzYxNHrPbV1/aVZgE+DDjaVDFs1OKDSDPv5Eu 8ippTUuM/OI+ol2dYA6tzf/AywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcJ/FjG 8248tEFrmi243KXtefW5MB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZLJka0+q/w9hIK4lhBEkc4zkeAp9tLYWlk+r3HfvdxgJ78gM002UcluC5SQr clJBfxs0Gg0aY7gQpBytxFPFtggzsN7ETnlMTbD5we9QkwmqggaJWC9w9KNNf0XK CObjpmJ1uT34v8eCuymP6L+bh9HresDcxtf7Ifn3TQFVAIEV8Ai1PARP+eoBbqyp yz8y/RHig6OBmZvrpwjLgUDJmTMGq+1DBwt3JiMk0Zw0LpdZtBQi3XJwNKi5sxdY XVJ89P3mwf+3s1s2UHWRaYiBMUqjCzV9X6vbR94C1ueqFLH3VExtuBkCnpwO//D7 qe2AyY7FywbObG7plFGqVBUAgg== -----END CERTIFICATE-----Generated at Wed Aug 26 22:36:42 2026 by rpki-client