$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft File: ItyTZY3G6XAwereu8eJV3j1D9bc.mft (raw, json) Hash identifier: k3iv2Rt2S6EgVnkbTNFEtlL2g2A76+/9+yfQPxZzjZo= Subject key identifier: 65:E1:7D:36:FB:C9:41:01:63:9F:F9:A8:C4:BB:55:26:D3:AF:C3:89 Authority key identifier: 22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7 Certificate issuer: /CN=A91F0C45/serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft Manifest number: BC Signing time: Wed 19 Aug 2026 07:43:23 +0000 Manifest this update: Wed 19 Aug 2026 07:43:22 +0000 Manifest next update: Wed 26 Aug 2026 07:43:22 +0000 Files and hashes: 1: ItyTZY3G6XAwereu8eJV3j1D9bc.crl (hash: Od1Z0jwv3CXEDQssO3zXx4PrQ/L0+912yoLm9WPdesQ=) 2: 96AF1D609A0F11F09F475111C4F9AE02.roa (hash: lCi752ligH/UO1OJEHoof5FIfLu807frgAct0rFSMSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7 Validity Not Before: Aug 19 07:43:22 2026 GMT Not After : Aug 26 07:43:22 2026 GMT Subject: CN=6a855e9a-a246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:4f:91:22:bf:ea:09:de:1d:cf:2a:f0:30: 73:b0:d4:56:55:03:f1:2a:36:b6:a7:36:58:3c:11: 8c:c7:7f:b3:cc:68:d1:ad:49:44:4d:8e:b1:6e:98: 82:a3:db:a5:3d:33:3c:8c:40:81:80:9c:5b:d0:43: a9:5e:4d:5a:6e:5e:7b:96:a2:95:31:a1:5c:f5:32: d2:a4:a3:9c:3c:7c:e1:6a:f0:c1:5d:9f:34:13:74: f8:71:2f:1b:9c:0a:5b:c0:ed:1b:46:52:ef:04:d5: ff:b4:1d:fa:9e:5c:fc:91:4a:8e:a8:1c:38:30:c7: 52:91:0a:3b:18:53:d9:b5:db:d8:2b:20:93:66:a4: c5:06:28:62:46:f3:a2:2d:d9:59:c6:d5:3c:e9:f5: 29:48:01:eb:c9:26:28:31:db:cb:f5:77:e6:3b:47: 23:36:a0:45:29:4f:b1:42:f9:ba:31:04:7a:5c:59: 7d:78:0f:63:10:e3:dd:36:f9:d3:57:dd:c0:76:49: 8d:05:44:37:0c:4d:5f:6d:1f:3d:e7:3a:5c:31:18: ee:1a:66:d4:3c:c6:ce:1b:d9:88:5b:b5:d2:cf:8e: 2e:8c:af:fa:ec:d1:45:bc:e0:f2:ee:ce:ee:39:a4: f0:21:f8:16:44:69:ec:ca:bf:0b:ba:90:d5:71:26: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E1:7D:36:FB:C9:41:01:63:9F:F9:A8:C4:BB:55:26:D3:AF:C3:89 X509v3 Authority Key Identifier: keyid:22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1a:19:4d:74:98:be:ed:35:9f:e7:6d:83:f3:42:5a:b3:c8: 54:17:32:5a:34:96:ee:6e:58:28:0e:a2:36:87:40:a1:a3:38: c7:1c:3e:4b:76:08:e0:c9:f5:c2:44:22:56:88:07:43:57:ad: f9:e6:bb:e3:40:ab:fb:84:fb:1f:08:c7:59:c9:01:90:0d:f6: 88:1e:6e:46:8b:a9:b4:ba:49:c8:49:18:ad:29:0b:88:17:2b: 48:f7:37:63:f4:18:eb:99:ff:ee:62:44:10:40:49:92:c4:1c: 2d:f9:83:a3:a7:cd:30:e0:a6:45:74:29:85:a7:e0:43:57:f6: e1:2b:1d:9d:86:d1:1a:6f:2f:e1:79:69:c1:d1:fa:86:3b:e5: 49:e9:dc:e1:1c:12:a5:f5:52:37:ae:c8:04:8d:43:26:8a:96: 24:1a:37:45:cb:41:25:54:68:a8:26:0a:ea:1f:b7:3e:ec:b8: 8c:9c:28:a2:c2:81:82:31:59:49:aa:a6:3a:eb:1b:fc:70:9b: 3e:aa:84:ef:6e:23:82:89:89:74:23:2d:f7:69:76:86:d4:86: 25:52:d6:3f:b9:7a:c7:0f:73:89:e5:48:cb:55:31:73:4a:7c: 05:cb:db:f1:4f:74:66:07:18:86:d6:40:42:9c:e8:cc:ed:96: e4:e2:ef:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNDUxMTAvBgNVBAUTKDIyREM5MzY1OERDNkU5NzAzMDdBQjdBRUYxRTI1NURF M0Q0M0Y1QjcwHhcNMjYwODE5MDc0MzIyWhcNMjYwODI2MDc0MzIyWjAYMRYwFAYD VQQDEw02YTg1NWU5YS1hMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiZPkSK/6gneHc8q8DBzsNRWVQPxKja2pzZYPBGMx3+zzGjRrUlETY6xbpiC o9ulPTM8jECBgJxb0EOpXk1abl57lqKVMaFc9TLSpKOcPHzhavDBXZ80E3T4cS8b nApbwO0bRlLvBNX/tB36nlz8kUqOqBw4MMdSkQo7GFPZtdvYKyCTZqTFBihiRvOi LdlZxtU86fUpSAHrySYoMdvL9XfmO0cjNqBFKU+xQvm6MQR6XFl9eA9jEOPdNvnT V93AdkmNBUQ3DE1fbR895zpcMRjuGmbUPMbOG9mIW7XSz44ujK/67NFFvODy7s7u OaTwIfgWRGnsyr8LupDVcSYzzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXhfTb7 yUEBY5/5qMS7VSbTr8OJMB8GA1UdIwQYMBaAFCLck2WNxulwMHq3rvHiVd49Q/W3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM0NS85MUExODk5RTg5 MkUxMUYwOTdBQzY2MkZDNEY5QUUwMi9JdHlUWlkzRzZYQXdlcmV1OGVKVjNqMUQ5 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0eVRaWTNHNlhBd2VyZXU4ZUpWM2oxRDliYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM0NS85MUExODk5RTg5MkUxMUYwOTdBQzY2MkZDNEY5QUUwMi9JdHlUWlkzRzZY QXdlcmV1OGVKVjNqMUQ5YmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFxoZTXSYvu01n+dtg/NCWrPIVBcyWjSW7m5YKA6iNodAoaM4xxw+S3YI4Mn1 wkQiVogHQ1et+ea740Cr+4T7HwjHWckBkA32iB5uRouptLpJyEkYrSkLiBcrSPc3 Y/QY65n/7mJEEEBJksQcLfmDo6fNMOCmRXQphafgQ1f24SsdnYbRGm8v4XlpwdH6 hjvlSenc4RwSpfVSN67IBI1DJoqWJBo3RctBJVRoqCYK6h+3Puy4jJwoosKBgjFZ SaqmOusb/HCbPqqE724jgomJdCMt92l2htSGJVLWP7l6xw9zieVIy1Uxc0p8Bcvb 8U90ZgcYhtZAQpzozO2W5OLvBA== -----END CERTIFICATE-----Generated at Fri Aug 21 02:48:21 2026 by rpki-client