$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft File: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft (raw, json) Hash identifier: GeygqBu10QRkUAt1eD73Si6Yew2I2wDhkpuE87uUGgU= Subject key identifier: 17:DF:E2:ED:2A:5F:6B:89:99:96:0A:8A:1E:7A:C9:97:6B:3F:E4:E0 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft Manifest number: 228A Signing time: Mon 24 Aug 2026 15:48:45 +0000 Manifest this update: Mon 24 Aug 2026 15:48:44 +0000 Manifest next update: Mon 31 Aug 2026 15:48:44 +0000 Files and hashes: 1: Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl (hash: 3MC5IIeqS41RAufYUbqmOfVZhmkEw/JJ5GSNRzKlZhE=) 2: 586B33AEF44611EBA78C117AC4F9AE02.roa (hash: fTK97vrMBpL2ZoSynxsGZ4U3KEvxzaz+0BewP/ZQJbc=) 3: 63BFE4C0292811EEAF894530C4F9AE02.roa (hash: sVanteUBCWSFVUaHrZ5yntV/JIzyhq/72ORLRX744ZU=) 4: 2D477384D9C711F098E1B70271D3641D.roa (hash: GJ6jqaxX7BHT2XHEY46Q7jZx0gkdB0fTcOfm2Nfw3us=) 5: 11DE1CDA467611EC988CDC09C4F9AE02.roa (hash: MfV4ukOu3FWI/jsl4kHuM58dQAKJFj/LhFrUhOuLtaI=) 6: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (hash: 9Wh8912cu3W7SvBPurOS5rCjf4J0gjpN7uj92f3pmsg=) 7: 5480D316764D11EA8CB5C039C4F9AE02.roa (hash: mJF9eHW945FqOhcOebNZDCr93WVmTQPVaMtl9lfF/sA=) 8: 5F649D88F27E11EE8704D12FC4F9AE02.roa (hash: 9WmU8Y4ZcOpIMboLEtIMfgE7BVSSzD6O48vbK37ECCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8932 (0x22e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Aug 24 15:48:44 2026 GMT Not After : Aug 31 15:48:44 2026 GMT Subject: CN=6a8c67dd-edf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f4:23:c1:bd:80:5a:70:ce:76:8f:2b:d6:15: d2:a2:89:db:5f:0c:85:58:d0:56:21:bb:44:94:5d: 68:8c:83:8d:4b:8d:4a:26:f9:3b:31:ac:5e:29:ee: b8:68:f2:2e:47:a7:0a:e7:f1:1a:77:a8:da:27:ce: fc:ef:b0:35:40:23:01:00:e8:49:aa:bf:54:84:bd: e5:c4:e1:6f:b7:cf:57:62:2c:9e:a3:ed:b9:81:a9: 64:ad:e0:fa:70:1a:7b:81:6c:1a:c3:45:80:93:1e: cf:4f:7e:4a:bd:77:8d:d2:d2:1a:05:87:4b:65:61: 5d:c5:f3:97:4d:a4:25:ae:34:db:72:f5:bb:3c:72: 53:5b:47:72:28:4c:7f:f5:c0:da:53:60:cc:93:f6: 61:6b:73:c3:dd:7f:1b:2f:af:1f:14:9f:3b:19:79: 9d:62:b5:72:cf:36:cf:9e:f3:d0:f6:ca:69:80:6b: 3e:d9:42:36:4e:bf:4f:f2:fe:05:9d:e1:5c:b6:16: e9:4b:b0:bd:d6:f1:78:1f:3c:4c:f3:59:34:ce:dd: 9d:1c:3e:4f:1b:3a:04:20:55:c7:fd:98:be:99:9d: 7f:5e:b1:ce:96:25:a6:28:04:59:26:5f:88:0b:b9: 18:58:68:66:81:25:5a:c9:a3:1b:e9:d3:18:82:d9: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DF:E2:ED:2A:5F:6B:89:99:96:0A:8A:1E:7A:C9:97:6B:3F:E4:E0 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:18:3c:fd:4e:12:b1:8a:e1:6d:e2:08:d6:7c:db:b0:3d:15: 32:09:ec:c0:2b:c7:72:3c:cb:03:c4:d1:4a:f6:b5:a7:fb:10: 3f:99:78:98:49:16:e2:da:71:18:f6:a3:c7:fe:e5:bb:fd:64: 9b:b9:3d:a5:3c:7b:0c:bc:e2:63:83:c6:83:c4:1b:df:60:2e: f3:ce:ff:21:12:63:55:e4:7c:4b:b4:dc:df:1d:11:db:04:d4: e8:6a:42:0f:9e:7c:76:15:25:75:12:f4:1c:44:cf:41:f7:4d: cd:75:da:a6:9b:eb:3b:ac:78:56:9e:55:01:db:3f:42:61:af: 82:7a:f2:57:da:ed:d1:b8:d0:45:e4:be:a0:3d:f3:27:af:7d: f1:6f:93:b6:23:d7:3d:ac:e9:90:c9:1e:aa:30:37:fe:6b:6a: e4:20:25:2e:84:3a:1f:a0:7c:13:93:5d:15:47:c8:49:8f:0e: 89:9e:c7:ae:5a:66:e4:1d:8b:86:35:7d:3a:00:3e:8d:b6:7a: 5e:90:06:63:0c:d5:f6:34:e1:03:2c:1e:d4:ba:5b:e5:de:0b: 0a:bc:8b:21:57:f0:04:79:bd:68:0a:46:3b:ab:e0:7d:69:59: 6d:f8:dc:e3:2f:69:67:7d:f3:fd:55:f2:59:39:85:6f:3f:a0: c8:a0:7c:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwODI0MTU0ODQ0WhcNMjYwODMxMTU0ODQ0WjAYMRYwFAYD VQQDEw02YThjNjdkZC1lZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vQjwb2AWnDOdo8r1hXSoonbXwyFWNBWIbtElF1ojIONS41KJvk7MaxeKe64 aPIuR6cK5/Ead6jaJ87877A1QCMBAOhJqr9UhL3lxOFvt89XYiyeo+25galkreD6 cBp7gWwaw0WAkx7PT35KvXeN0tIaBYdLZWFdxfOXTaQlrjTbcvW7PHJTW0dyKEx/ 9cDaU2DMk/Zha3PD3X8bL68fFJ87GXmdYrVyzzbPnvPQ9sppgGs+2UI2Tr9P8v4F neFcthbpS7C91vF4HzxM81k0zt2dHD5PGzoEIFXH/Zi+mZ1/XrHOliWmKARZJl+I C7kYWGhmgSVayaMb6dMYgtmr3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBff4u0q X2uJmZYKih56yZdrP+TgMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEVCRi81Rjg0RDdEOERCODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24w S0l2TkR3cFVKUTFaTDFRTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhxg8/U4SsYrhbeII1nzbsD0VMgnswCvHcjzLA8TRSva1p/sQP5l4mEkW4tpx GPajx/7lu/1km7k9pTx7DLziY4PGg8Qb32Au887/IRJjVeR8S7Tc3x0R2wTU6GpC D558dhUldRL0HETPQfdNzXXappvrO6x4Vp5VAds/QmGvgnryV9rt0bjQReS+oD3z J6998W+TtiPXPazpkMkeqjA3/mtq5CAlLoQ6H6B8E5NdFUfISY8OiZ7Hrlpm5B2L hjV9OgA+jbZ6XpAGYwzV9jThAywe1Lpb5d4LCryLIVfwBHm9aApGO6vgfWlZbfjc 4y9pZ33z/VXyWTmFbz+gyKB8sw== -----END CERTIFICATE-----Generated at Tue Aug 25 23:40:37 2026 by rpki-client