$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: 2AydN0EzA9os3Vuc7a8nmlzbghVuyyvNOVS5HkrZMcY= Subject key identifier: 29:69:36:82:31:9C:18:56:FF:19:A9:2A:BF:18:3B:B4:D9:FF:AB:50 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2AF7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 2AE9 Signing time: Thu 20 Aug 2026 14:23:45 +0000 Manifest this update: Thu 20 Aug 2026 14:23:44 +0000 Manifest next update: Thu 27 Aug 2026 14:23:44 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: CKTxy2uW2q1wpp6zcEGjVGD9/Vz5h6pTgIKRG5kbRio=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: Pj58dNaZu/U/JcWFr9d0FmcQsI/n3fUrfDxW8/v49HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 14:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10999 (0x2af7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Aug 20 14:23:44 2026 GMT Not After : Aug 27 14:23:44 2026 GMT Subject: CN=6a870df0-db7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9c:eb:24:94:60:50:6a:f4:bb:fd:60:34:e1: 2b:c7:be:69:ad:2e:8a:64:c1:54:ed:6f:44:f1:9a: 7e:88:e8:63:83:6d:33:e3:2f:fe:31:da:20:5a:77: b2:1e:49:44:cd:cf:f0:72:e1:f9:ee:d6:0f:6a:d4: f2:56:ba:c8:c8:49:e1:8c:88:6a:37:74:c8:cd:1b: 6b:85:a0:a1:b5:41:b4:24:65:a2:48:67:c7:4f:3a: b8:18:80:ab:0f:45:aa:37:02:8f:6c:b7:21:43:4b: 24:88:70:a8:b5:f2:f4:61:cc:2d:19:5b:1d:8b:c0: 78:6c:a7:34:b6:74:3b:1f:4e:f4:3c:9c:2e:e3:4a: db:64:fc:10:4d:7e:6b:57:c1:e6:e8:d9:fc:78:2a: 14:85:f8:c9:4c:0b:2e:c9:22:09:d5:37:5a:ba:dc: 57:2b:29:5a:df:62:0a:c5:3f:ea:00:53:75:a6:92: 96:58:7e:7e:7c:cf:0c:2a:e4:dc:2c:c1:c1:8b:c7: 94:c2:14:56:ab:47:08:3f:ea:d4:bd:71:2e:97:87: fb:b5:da:ea:41:97:d6:7c:9a:28:46:20:7c:80:70: 73:b3:28:24:1c:f7:89:86:94:1d:d3:06:56:56:9b: 19:5f:74:bb:3a:c5:aa:c2:8d:1d:d6:30:5f:f0:6a: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:69:36:82:31:9C:18:56:FF:19:A9:2A:BF:18:3B:B4:D9:FF:AB:50 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:5f:0b:38:e1:be:e5:15:74:31:58:9e:11:6b:aa:7d:f9:af: cd:b1:b4:72:a4:cc:4c:61:dd:db:31:51:9b:c3:6e:f0:81:f5: 66:46:32:23:96:0e:e7:76:92:a9:fe:58:b8:ab:b4:fc:8d:66: 1c:48:0f:08:e7:b1:9a:0c:af:f0:38:43:47:e7:17:e5:de:85: 3c:23:69:a9:c3:22:61:d5:67:be:4e:7a:5f:7e:96:a2:d4:05: ea:cd:87:23:be:e9:b5:1f:b6:97:ca:03:44:7e:89:d4:46:79: 99:a3:9e:de:fa:94:37:23:a4:57:81:53:83:12:35:b2:65:93: 41:1c:78:75:1b:26:67:4f:b6:f6:35:a2:43:9e:6b:9e:c4:9c: e0:b6:03:24:a5:90:85:15:58:5c:a3:55:5d:f8:f0:cf:61:dd: 63:34:38:bd:2c:de:f0:c3:4d:64:69:35:f1:0f:1e:ad:4b:56: e1:db:9d:50:57:24:72:44:aa:fd:8b:ca:84:12:88:85:69:86: 10:1e:9f:bc:d9:b9:06:61:67:04:a0:ba:f0:e2:38:b6:b9:e8: 80:94:a9:6d:e8:44:b1:85:39:6b:80:93:9f:17:8c:56:8e:20: 8b:0c:b5:86:a8:20:e1:fd:be:fc:02:23:ef:c7:30:e4:0a:8b: ec:d4:6f:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjYwODIwMTQyMzQ0WhcNMjYwODI3MTQyMzQ0WjAYMRYwFAYD VQQDEw02YTg3MGRmMC1kYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5zrJJRgUGr0u/1gNOErx75prS6KZMFU7W9E8Zp+iOhjg20z4y/+MdogWney HklEzc/wcuH57tYPatTyVrrIyEnhjIhqN3TIzRtrhaChtUG0JGWiSGfHTzq4GICr D0WqNwKPbLchQ0skiHCotfL0YcwtGVsdi8B4bKc0tnQ7H070PJwu40rbZPwQTX5r V8Hm6Nn8eCoUhfjJTAsuySIJ1TdautxXKyla32IKxT/qAFN1ppKWWH5+fM8MKuTc LMHBi8eUwhRWq0cIP+rUvXEul4f7tdrqQZfWfJooRiB8gHBzsygkHPeJhpQd0wZW VpsZX3S7OsWqwo0d1jBf8GqcOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClpNoIx nBhW/xmpKr8YO7TZ/6tQMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIV8LOOG+5RV0MVieEWuqffmvzbG0cqTMTGHd2zFRm8Nu8IH1ZkYyI5YO53aS qf5YuKu0/I1mHEgPCOexmgyv8DhDR+cX5d6FPCNpqcMiYdVnvk56X36WotQF6s2H I77ptR+2l8oDRH6J1EZ5maOe3vqUNyOkV4FTgxI1smWTQRx4dRsmZ0+29jWiQ55r nsSc4LYDJKWQhRVYXKNVXfjwz2HdYzQ4vSze8MNNZGk18Q8erUtW4dudUFckckSq /YvKhBKIhWmGEB6fvNm5BmFnBKC68OI4trnogJSpbehEsYU5a4CTnxeMVo4giwy1 hqgg4f2+/AIj78cw5AqL7NRvcQ== -----END CERTIFICATE-----Generated at Fri Aug 21 02:52:06 2026 by rpki-client