$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: AiqB9X3hBv5A+02gP5RlvBY9/OdxxHwNq7dPIhFi2Ww= Subject key identifier: EE:FB:8D:16:3B:B3:8B:8B:A9:2A:0F:BE:1D:7D:33:48:63:8D:AD:09 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 12AA Signing time: Thu 20 Aug 2026 17:02:42 +0000 Manifest this update: Thu 20 Aug 2026 17:02:42 +0000 Manifest next update: Thu 27 Aug 2026 17:02:42 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: 4JNtMLXD0qRmfQm9Oqq7BtqWHBtcboAWKPGsXgtZeUE=) 2: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: B4PjSBYjorfWxo1YSpPxhGaOBSD9dJ0o8/kl1/H4JCI=) 3: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: Q8GHoeHbmqW7M4R7JqdbouyG47lAXEk2l5ZINQlZhUw=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: zTMcMU85Vfrv28bnOAwruUSVF1/v5V80nulZ37SkFAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4811 (0x12cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Aug 20 17:02:42 2026 GMT Not After : Aug 27 17:02:42 2026 GMT Subject: CN=6a873332-ddad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:bb:2d:31:d0:f7:62:89:41:22:4a:c2:cd: 00:a2:75:9c:96:1f:40:e3:94:a0:18:a2:ca:e5:94: ae:d5:9b:f0:32:76:83:f7:1a:48:60:8d:71:b1:03: f1:8d:1d:63:4f:c8:86:eb:88:2a:3a:ec:60:59:4a: a8:4d:48:90:c1:75:67:99:67:05:b8:d4:81:43:b7: ab:c8:d7:a8:1e:0a:3c:b4:0e:8f:52:2f:fc:03:1e: bd:6d:0e:01:11:34:07:cc:db:e5:a8:b7:f2:fa:c8: ca:9b:6b:e6:8c:e9:2d:f3:64:30:a3:4c:fe:04:13: c8:5f:12:65:0c:64:0d:83:ae:a3:55:85:34:80:ad: 50:67:3a:76:dc:19:19:99:18:23:21:3a:e1:b1:be: 16:a8:be:6b:e4:0c:64:e0:45:48:6a:0a:75:e8:73: ba:a8:5a:23:87:37:46:e0:48:62:39:b6:de:5a:5c: d8:d4:ef:34:e9:d5:33:15:13:84:a0:09:d9:41:82: 89:e1:81:5c:6b:48:70:ca:57:db:c5:7d:fc:a7:f1: 3b:c0:88:33:73:2a:fd:2f:00:33:89:30:33:fb:81: a8:fe:e3:8b:e2:eb:ba:f5:81:ba:22:3c:7d:07:f5: 22:b6:ba:50:f6:07:5a:a5:e5:d3:69:1e:57:6b:7a: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FB:8D:16:3B:B3:8B:8B:A9:2A:0F:BE:1D:7D:33:48:63:8D:AD:09 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:87:c8:d3:20:66:20:f9:d0:c5:99:7f:b1:a2:4b:9a:94:59: f1:b6:53:c8:c6:27:8c:b3:77:0e:b1:72:be:7c:62:2c:ba:2d: cd:42:f8:be:62:4c:44:59:ab:6a:93:26:d6:d8:6b:a0:4c:d6: 95:c8:3f:fc:59:30:29:40:5a:76:1b:6b:d2:4c:02:40:50:ba: e6:97:c1:73:0c:77:7d:b7:8f:c8:5a:4a:22:10:13:34:3c:95: c9:d1:45:65:24:f2:c5:7e:96:c4:10:a2:3d:5d:14:19:c5:29: 61:7b:48:f9:cc:8e:3f:5a:8a:25:29:75:f4:e8:7c:97:2b:28: 73:38:c2:f8:65:08:0a:2f:0c:d1:e1:42:e6:3b:ad:40:71:28: c3:2d:bf:51:28:49:0c:45:68:ed:30:3c:18:5d:17:96:31:20: e3:40:c6:67:b5:02:17:db:d8:0b:26:a9:e4:87:82:08:e5:92: f2:59:f6:c5:37:a8:be:bc:2b:ee:02:11:d2:31:32:a6:9d:31: 17:ac:e5:04:5e:37:ad:ad:6a:c3:e0:2f:64:f1:5a:8b:d3:4b: 37:52:5a:ed:71:60:9a:a0:ec:0c:1b:1d:ca:9a:93:08:c8:05: 8e:43:d8:0c:93:1b:29:44:fd:f1:b9:d6:90:13:00:c8:85:c9: ce:4f:c1:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYwODIwMTcwMjQyWhcNMjYwODI3MTcwMjQyWjAYMRYwFAYD VQQDEw02YTg3MzMzMi1kZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuby7LTHQ92KJQSJKws0AonWclh9A45SgGKLK5ZSu1ZvwMnaD9xpIYI1xsQPx jR1jT8iG64gqOuxgWUqoTUiQwXVnmWcFuNSBQ7eryNeoHgo8tA6PUi/8Ax69bQ4B ETQHzNvlqLfy+sjKm2vmjOkt82Qwo0z+BBPIXxJlDGQNg66jVYU0gK1QZzp23BkZ mRgjITrhsb4WqL5r5Axk4EVIagp16HO6qFojhzdG4EhiObbeWlzY1O806dUzFROE oAnZQYKJ4YFca0hwylfbxX38p/E7wIgzcyr9LwAziTAz+4Go/uOL4uu69YG6Ijx9 B/UitrpQ9gdapeXTaR5Xa3o7EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO77jRY7 s4uLqSoPvh19M0hjja0JMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALIfI0yBmIPnQxZl/saJLmpRZ8bZTyMYnjLN3DrFyvnxiLLotzUL4vmJMRFmr apMm1throEzWlcg//FkwKUBadhtr0kwCQFC65pfBcwx3fbePyFpKIhATNDyVydFF ZSTyxX6WxBCiPV0UGcUpYXtI+cyOP1qKJSl19Oh8lysoczjC+GUICi8M0eFC5jut QHEowy2/UShJDEVo7TA8GF0XljEg40DGZ7UCF9vYCyap5IeCCOWS8ln2xTeovrwr 7gIR0jEypp0xF6zlBF43ra1qw+AvZPFai9NLN1Ja7XFgmqDsDBsdypqTCMgFjkPY DJMbKUT98bnWkBMAyIXJzk/BBQ== -----END CERTIFICATE-----Generated at Fri Aug 21 23:09:07 2026 by rpki-client