$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft File: He4XpqM4DuSI7ztuISW4eOZAckg.mft (raw, json) Hash identifier: KOLLhi5rzvJnRO0hvtK7S0R56GrLSd6vx4BiY6a4dps= Subject key identifier: AC:F7:42:08:38:8A:8F:C8:63:24:70:BE:96:86:E2:AC:E3:6D:AA:F4 Authority key identifier: 1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 Certificate issuer: /CN=A91E8D22/serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft Manifest number: 0269 Signing time: Wed 19 Aug 2026 02:44:53 +0000 Manifest this update: Wed 19 Aug 2026 02:44:52 +0000 Manifest next update: Wed 26 Aug 2026 02:44:52 +0000 Files and hashes: 1: He4XpqM4DuSI7ztuISW4eOZAckg.crl (hash: 3mRJQ3AwLUYokcA8X928L74NRO+K3n5sYQDD58vTPXM=) 2: 805A2E74660311EF90397033C4F9AE02.roa (hash: 5vtGlk0S0hYad6mDuGYTky+IHAV1KVmi2xi5vEoQKNE=) 3: 3C248A948D4111F1AD3AABFD6211F970.roa (hash: bBEKBjnwEkzANt3BU+uWRZGtxiwc6NAtMeokJphAkAc=) 4: 91A463F68EF211F1955665D66611F970.roa (hash: 3Zu4wSnQBBq3lkzK9F3PC+ZEn2jGSzlYHJFjGae8M2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D22, serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Validity Not Before: Aug 19 02:44:52 2026 GMT Not After : Aug 26 02:44:52 2026 GMT Subject: CN=6a8518a4-ba1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e8:60:52:67:f6:fb:f9:49:b7:5e:77:5e:8e: 3d:06:53:d8:90:d3:7f:5e:4e:17:c3:59:a7:87:bd: 81:d2:9d:92:65:b8:8f:ff:0d:0a:ed:79:b2:bf:e8: 18:41:33:70:e4:45:7a:12:41:74:61:15:95:85:68: e7:07:9a:c2:70:da:0f:62:ab:76:93:66:2f:06:3d: dc:c1:26:0b:c6:86:6b:e0:3b:07:2a:26:4c:b7:b2: 0a:ff:0e:0f:34:4b:d1:6b:eb:14:86:2c:c4:27:1a: 84:dc:4d:84:a7:fa:d3:2a:f7:1c:25:ef:6f:00:db: 87:45:06:db:a6:8d:27:e2:67:c1:25:4d:b2:80:04: eb:25:97:fd:dc:84:50:f0:56:0a:34:64:11:8f:dd: a2:ee:63:ec:a2:87:75:91:2d:69:30:b1:e9:5d:e9: 10:26:36:81:bd:77:7b:c1:4a:c8:65:1e:66:34:e1: cc:31:8c:7b:0b:6b:80:b5:15:0a:2f:95:3c:a3:49: b1:bc:62:7b:1b:eb:a0:c6:fc:68:71:55:61:2c:f9: 68:1c:96:f2:0b:7d:e9:e1:0e:80:b0:b7:77:c7:a3: 21:b9:c5:a9:d0:cb:11:80:56:ad:9f:12:8a:9d:c0: 19:21:c1:ad:f5:15:4a:05:9e:85:8e:73:7a:de:60: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F7:42:08:38:8A:8F:C8:63:24:70:BE:96:86:E2:AC:E3:6D:AA:F4 X509v3 Authority Key Identifier: keyid:1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:11:e9:d8:97:44:a8:0e:23:b5:2a:7b:12:7d:ca:e0:4a:71: 6b:6f:d7:35:d7:03:e6:ac:d7:04:d8:0e:ef:21:6e:09:b9:65: 72:d0:47:61:0a:a2:f8:b3:f2:6d:6d:61:60:ac:8f:5f:b3:ef: 6b:35:99:53:a9:5f:a5:f5:d0:88:ee:6d:63:cc:72:13:6c:cc: 05:16:43:65:77:89:7d:de:4e:cd:c5:d9:2d:23:76:bb:37:2e: 8e:03:bb:7c:9d:2a:3d:98:91:ab:03:29:69:31:d5:75:09:02: 82:ec:c4:c9:6b:df:c6:ae:25:78:f0:a4:74:8e:cf:03:d9:22: 39:ea:49:fc:a0:7f:4b:72:b9:24:83:a3:ba:e6:d9:4b:3f:d3: 3d:37:58:8f:3b:4e:42:b3:16:dd:b8:bb:d4:a8:5f:6c:43:de: d8:70:10:c6:c3:c9:4f:ff:3d:4c:17:6f:cd:81:f6:ea:19:16: 09:53:c0:cc:35:69:44:c5:e2:99:b6:3d:18:ff:29:eb:38:28: 9d:bd:02:a3:55:8d:c0:50:87:7a:fe:e5:e8:57:7b:ed:de:43: 16:71:aa:81:a4:90:3b:7e:30:5b:fb:da:02:08:a1:84:ea:a7: e8:bb:36:f6:13:0d:a7:26:09:fb:d2:f1:2c:99:6c:1b:b5:9a: 7c:a3:f2:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjIxMTAvBgNVBAUTKDFERUUxN0E2QTMzODBFRTQ4OEVGM0I2RTIxMjVCODc4 RTY0MDcyNDgwHhcNMjYwODE5MDI0NDUyWhcNMjYwODI2MDI0NDUyWjAYMRYwFAYD VQQDEw02YTg1MThhNC1iYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+hgUmf2+/lJt153Xo49BlPYkNN/Xk4Xw1mnh72B0p2SZbiP/w0K7Xmyv+gY QTNw5EV6EkF0YRWVhWjnB5rCcNoPYqt2k2YvBj3cwSYLxoZr4DsHKiZMt7IK/w4P NEvRa+sUhizEJxqE3E2Ep/rTKvccJe9vANuHRQbbpo0n4mfBJU2ygATrJZf93IRQ 8FYKNGQRj92i7mPsood1kS1pMLHpXekQJjaBvXd7wUrIZR5mNOHMMYx7C2uAtRUK L5U8o0mxvGJ7G+ugxvxocVVhLPloHJbyC33p4Q6AsLd3x6MhucWp0MsRgFatnxKK ncAZIcGt9RVKBZ6FjnN63mDybQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKz3Qgg4 io/IYyRwvpaG4qzjbar0MB8GA1UdIwQYMBaAFB3uF6ajOA7kiO87biEluHjmQHJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyMi8zRjdENjhBOEZE RTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1U0k3enR1SVNXNGVPWkFj a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlNFhwcU00RHVTSTd6dHVJU1c0ZU9aQWNrZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQyMi8zRjdENjhBOEZERTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1 U0k3enR1SVNXNGVPWkFja2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkBHp2JdEqA4jtSp7En3K4Epxa2/XNdcD5qzXBNgO7yFuCbllctBHYQqi+LPy bW1hYKyPX7PvazWZU6lfpfXQiO5tY8xyE2zMBRZDZXeJfd5OzcXZLSN2uzcujgO7 fJ0qPZiRqwMpaTHVdQkCguzEyWvfxq4lePCkdI7PA9kiOepJ/KB/S3K5JIOjuubZ Sz/TPTdYjztOQrMW3bi71KhfbEPe2HAQxsPJT/89TBdvzYH26hkWCVPAzDVpRMXi mbY9GP8p6zgonb0Co1WNwFCHev7l6Fd77d5DFnGqgaSQO34wW/vaAgihhOqn6Ls2 9hMNpyYJ+9LxLJlsG7WafKPyaw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:42 2026 by rpki-client