$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: xEjpHuubrmCdkhxfu+wr4tYwBCdkERqYIl6B+C+uQSQ= Subject key identifier: F1:A9:6F:89:F7:4A:61:75:4D:C5:39:35:F0:79:B6:81:FF:9F:75:B4 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 114F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 1144 Signing time: Tue 18 Aug 2026 17:26:03 +0000 Manifest this update: Tue 18 Aug 2026 17:26:02 +0000 Manifest next update: Tue 25 Aug 2026 17:26:02 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: ylgQOrtW7wITEsKIBebq+Byb7QcKDY1DUOKa4DK+nEc=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: Qlspkhh8uor8ecMraj5PR2UqS4cARaGBWVRKRXzt500=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4431 (0x114f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Aug 18 17:26:02 2026 GMT Not After : Aug 25 17:26:02 2026 GMT Subject: CN=6a8495aa-0218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:ea:6d:b4:ce:b0:91:63:c5:b7:7f:09:db: 2a:99:37:9d:39:9b:5d:20:17:27:b7:c0:e2:64:51: 7f:4e:85:4d:cb:3c:ab:a7:69:05:d9:7e:06:46:f9: 8e:0f:48:ea:06:72:3c:77:b7:6f:6a:ee:ab:ab:ea: af:56:95:fb:62:59:de:d7:65:66:d7:75:3b:4d:ef: a0:d6:2d:29:8d:fa:20:31:df:bd:17:1e:b0:c2:60: 4e:48:d7:8b:30:93:58:4a:58:d9:00:b8:e2:0a:e5: 8a:72:2f:ac:82:61:fe:7c:31:b1:72:b4:73:95:7e: 80:ef:26:cc:0c:8f:4d:0b:54:97:54:51:e7:e3:a9: da:9a:76:6d:22:5f:5a:c5:f8:58:ab:dc:d9:81:82: 99:a9:dd:f6:0c:61:41:37:80:6c:4d:57:83:76:97: 6d:e3:09:7c:b8:ea:af:ce:3a:8a:95:c7:64:0f:8b: f4:9f:72:44:ee:eb:85:c3:88:89:71:9f:57:b8:8d: 9f:7f:10:c3:0d:c3:5f:1a:0b:9f:db:a3:c0:ba:a4: 90:a8:c3:21:2f:64:64:19:10:cb:ff:35:b6:e3:39: 38:a9:ce:87:db:ac:19:e9:4e:26:ab:31:32:9b:96: 6e:90:c5:ca:2b:b0:dd:bf:59:bd:13:59:4c:5f:57: 8e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A9:6F:89:F7:4A:61:75:4D:C5:39:35:F0:79:B6:81:FF:9F:75:B4 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a5:07:ca:13:b4:f9:7d:57:ab:07:80:15:86:e4:39:55:45: 15:14:1a:2f:47:77:ea:e5:98:26:b6:e0:e9:18:f6:f6:65:2c: 6a:73:52:84:d1:58:50:24:4e:13:ad:05:80:6c:e2:ce:0b:72: 94:a9:8a:bf:50:ce:1a:8a:fe:1e:b8:f9:bc:c3:e1:c4:6b:56: 2c:42:40:56:30:95:f4:3d:48:2e:bb:e9:d1:d0:36:5b:86:a2: 0e:9c:c7:5d:07:eb:36:11:26:6c:bf:79:c5:e3:f2:db:69:58: f5:ff:78:6f:77:7d:d2:bc:fb:81:44:8d:1c:59:6b:0c:a3:dc: 89:fb:8a:45:52:a1:76:4b:74:90:ff:e0:62:a3:62:dc:91:b6: 9f:17:2b:27:00:6f:00:6d:01:fd:f6:89:de:e8:9f:48:ca:44: f6:fb:2c:13:bb:6a:c4:61:5e:fe:12:f6:af:9b:ad:5b:7c:88: 3a:4e:9d:72:53:23:f1:cd:64:94:75:e6:99:de:48:58:f9:91: c4:89:c2:c1:7b:b6:ff:3b:cb:a4:59:0c:ae:b3:d0:a0:1a:1c: 6f:ba:a2:cc:09:42:42:e8:70:69:72:ee:12:d2:d5:79:83:6b: 09:02:5f:4c:6f:5e:54:d7:99:4b:41:52:e6:0d:89:70:fd:94: dd:c8:d9:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjYwODE4MTcyNjAyWhcNMjYwODI1MTcyNjAyWjAYMRYwFAYD VQQDEw02YTg0OTVhYS0wMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hfqbbTOsJFjxbd/CdsqmTedOZtdIBcnt8DiZFF/ToVNyzyrp2kF2X4GRvmO D0jqBnI8d7dvau6rq+qvVpX7Ylne12Vm13U7Te+g1i0pjfogMd+9Fx6wwmBOSNeL MJNYSljZALjiCuWKci+sgmH+fDGxcrRzlX6A7ybMDI9NC1SXVFHn46namnZtIl9a xfhYq9zZgYKZqd32DGFBN4BsTVeDdpdt4wl8uOqvzjqKlcdkD4v0n3JE7uuFw4iJ cZ9XuI2ffxDDDcNfGguf26PAuqSQqMMhL2RkGRDL/zW24zk4qc6H26wZ6U4mqzEy m5ZukMXKK7Ddv1m9E1lMX1eOPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGpb4n3 SmF1TcU5NfB5toH/n3W0MB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkKUHyhO0+X1XqweAFYbkOVVFFRQaL0d36uWYJrbg6Rj29mUsanNShNFYUCRO E60FgGzizgtylKmKv1DOGor+Hrj5vMPhxGtWLEJAVjCV9D1ILrvp0dA2W4aiDpzH XQfrNhEmbL95xePy22lY9f94b3d90rz7gUSNHFlrDKPcifuKRVKhdkt0kP/gYqNi 3JG2nxcrJwBvAG0B/faJ3uifSMpE9vssE7tqxGFe/hL2r5utW3yIOk6dclMj8c1k lHXmmd5IWPmRxInCwXu2/zvLpFkMrrPQoBocb7qizAlCQuhwaXLuEtLVeYNrCQJf TG9eVNeZS0FS5g2JcP2U3cjZgA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:12 2026 by rpki-client