$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft File: _thOn-AVmpk3ohk6C326I7bCZbg.mft (raw, json) Hash identifier: hfkzXV3UpLQFp0g0B/F7QY3IXhNqSeOzMqs2vdF9RTQ= Subject key identifier: 00:26:D8:AD:0B:11:F7:F5:4E:95:4A:87:8D:7C:ED:95:14:B2:14:89 Authority key identifier: FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 Certificate issuer: /CN=A91EDBB0/serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft Manifest number: 010D Signing time: Wed 19 Aug 2026 06:45:37 +0000 Manifest this update: Wed 19 Aug 2026 06:45:37 +0000 Manifest next update: Wed 26 Aug 2026 06:45:37 +0000 Files and hashes: 1: _thOn-AVmpk3ohk6C326I7bCZbg.crl (hash: Drkmbk3Yy01VhiImeRjSefHZ0jqttlbn8hNLIAI6++M=) 2: 18317928083911F0A2909A72C4F9AE02.roa (hash: aWC9Z9bpEAKz9IJhY7xU/+8CcFBubkzB7CX939nqCu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDBB0, serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Validity Not Before: Aug 19 06:45:37 2026 GMT Not After : Aug 26 06:45:37 2026 GMT Subject: CN=6a855111-e809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:02:0c:f6:cb:41:4b:96:8c:50:5b:99:5f: e0:67:e6:67:ea:4b:29:55:c5:a2:26:04:3a:1f:ec: 32:ab:c5:1e:b7:0d:c5:ac:fa:ae:d2:44:6e:44:73: dc:99:cb:26:10:df:59:77:1b:79:a8:cd:ad:03:76: 78:ff:1c:a2:cf:6d:64:d0:10:c0:37:be:14:2b:1a: 5d:5d:e0:38:ff:c9:c8:05:c9:26:22:85:09:27:38: 39:b7:c9:eb:c0:eb:53:de:72:03:71:e6:a5:27:0c: b8:52:55:94:ff:b2:46:da:5b:3f:1a:19:7e:12:09: c6:51:e9:7d:f7:66:59:91:32:4b:4c:d9:16:e3:15: 88:09:b0:cb:ed:4f:8d:da:41:3f:ba:cc:d8:d2:dc: 07:cd:0a:a0:d8:49:1b:26:61:73:a5:b4:2b:91:4c: 6f:5e:9f:0a:ea:c6:12:0a:f7:30:a4:89:bf:37:73: 7c:42:0d:7d:69:66:98:7c:aa:42:94:83:ae:d0:f0: c7:aa:4a:09:6b:8a:38:7a:9c:91:7d:22:d8:6d:f8: 96:6f:ba:32:df:53:d2:22:d7:8e:a1:ed:43:44:95: 66:36:d6:9d:93:6f:0b:80:20:10:7b:fa:f7:be:64: db:9e:2f:6d:c4:84:35:4f:d1:53:99:59:ee:e2:e7: 21:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:26:D8:AD:0B:11:F7:F5:4E:95:4A:87:8D:7C:ED:95:14:B2:14:89 X509v3 Authority Key Identifier: keyid:FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f6:0d:89:8a:51:da:ba:aa:15:69:3e:7f:fe:66:e0:bf:b3: 95:cd:56:c9:55:e8:e0:c8:4d:e0:c8:8a:d4:94:e6:2a:a2:d5: c8:92:be:e9:e4:d4:38:a1:e8:46:d8:18:b6:a5:31:eb:10:7d: 2d:fa:6e:33:f1:51:34:1a:ef:6c:45:0b:6c:3b:16:e0:36:83: 68:91:36:d7:f8:23:c8:4f:5c:4e:98:3e:69:01:57:d9:73:f6: d9:63:44:15:23:12:24:52:bc:a9:fe:30:7f:62:fa:ee:74:ae: 0d:f6:a9:e7:5a:78:15:d5:2d:91:c4:2e:5f:fb:98:d6:28:1d: 18:29:bc:8c:d5:8d:ba:5c:8b:25:c6:f1:aa:95:7d:36:91:eb: ee:f8:4a:de:7c:01:2d:d0:97:83:89:07:de:d8:55:34:bb:e7: 8d:9a:43:eb:62:2e:99:69:34:d1:49:7d:0b:7a:43:6e:7f:24: c2:a3:cc:ff:d9:7f:63:aa:fc:58:ef:c6:91:48:e5:93:5a:20: 45:e1:b5:80:0d:b4:be:27:2b:e6:35:8a:ba:3f:a9:84:cc:53: fb:7d:95:fd:bc:e2:c5:e8:8f:65:f7:8c:0d:c3:72:4a:66:d8: 5b:c3:88:81:15:e8:9a:41:3d:3b:9a:37:37:ef:c7:02:84:c0: 1e:c8:9a:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCQjAxMTAvBgNVBAUTKEZFRDg0RTlGRTAxNTlBOTkzN0EyMTkzQTBCN0RCQTIz QjZDMjY1QjgwHhcNMjYwODE5MDY0NTM3WhcNMjYwODI2MDY0NTM3WjAYMRYwFAYD VQQDEw02YTg1NTExMS1lODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNoCDPbLQUuWjFBbmV/gZ+Zn6kspVcWiJgQ6H+wyq8Uetw3FrPqu0kRuRHPc mcsmEN9Zdxt5qM2tA3Z4/xyiz21k0BDAN74UKxpdXeA4/8nIBckmIoUJJzg5t8nr wOtT3nIDcealJwy4UlWU/7JG2ls/Ghl+EgnGUel992ZZkTJLTNkW4xWICbDL7U+N 2kE/uszY0twHzQqg2EkbJmFzpbQrkUxvXp8K6sYSCvcwpIm/N3N8Qg19aWaYfKpC lIOu0PDHqkoJa4o4epyRfSLYbfiWb7oy31PSIteOoe1DRJVmNtadk28LgCAQe/r3 vmTbni9txIQ1T9FTmVnu4uchVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAm2K0L Eff1TpVKh4187ZUUshSJMB8GA1UdIwQYMBaAFP7YTp/gFZqZN6IZOgt9uiO2wmW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREJCMC9FNjUzRTUxMjA3 RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1wazNvaGs2QzMyNkk3YkNa YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL190aE9uLUFWbXBrM29oazZDMzI2STdiQ1piZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REJCMC9FNjUzRTUxMjA3RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1w azNvaGs2QzMyNkk3YkNaYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASvYNiYpR2rqqFWk+f/5m4L+zlc1WyVXo4MhN4MiK1JTmKqLVyJK+6eTUOKHo RtgYtqUx6xB9LfpuM/FRNBrvbEULbDsW4DaDaJE21/gjyE9cTpg+aQFX2XP22WNE FSMSJFK8qf4wf2L67nSuDfap51p4FdUtkcQuX/uY1igdGCm8jNWNulyLJcbxqpV9 NpHr7vhK3nwBLdCXg4kH3thVNLvnjZpD62IumWk00Ul9C3pDbn8kwqPM/9l/Y6r8 WO/GkUjlk1ogReG1gA20vicr5jWKuj+phMxT+32V/bzixeiPZfeMDcNySmbYW8OI gRXomkE9O5o3N+/HAoTAHsiaUw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:50:17 2026 by rpki-client