$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: B3zJwEPDg33YoWbVRpGeFfMZN0vnySeLe+HrvZnx+LA= Subject key identifier: B7:8B:F7:42:D7:03:38:1E:4E:DA:CE:FD:64:F7:23:2E:BB:D1:2A:77 Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 064C Signing time: Tue 18 Aug 2026 23:11:01 +0000 Manifest this update: Tue 18 Aug 2026 23:11:00 +0000 Manifest next update: Tue 25 Aug 2026 23:11:00 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: L0Fy3PJ/UX2WieHY+xl7TJI1lJBi+K+Ohze7Mv6NhuU=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: bH1L9ZSWpulV/YHi19WJkDCesjZJBYuj3hbuB5QanKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: Aug 18 23:11:00 2026 GMT Not After : Aug 25 23:11:00 2026 GMT Subject: CN=6a84e685-76e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:75:db:78:aa:6b:d2:a9:be:d1:3e:0d:88:e4: 4d:04:be:34:9b:3b:0b:7d:77:d2:1e:03:7c:04:2f: ce:a7:b8:70:8f:8a:ea:41:03:e8:86:4c:fd:8c:29: 47:87:cb:6a:ca:24:ac:1b:02:9c:c3:bc:29:32:2f: da:1e:5f:36:1b:c2:2c:0e:bb:11:d0:68:d7:5b:fb: 6f:4a:b6:be:0f:b0:14:f0:4e:3b:9a:d0:b8:10:45: 0e:38:a2:b6:89:f3:35:37:fd:f0:fb:e9:ec:c8:5d: 15:6d:c8:fe:d6:3f:e2:42:b9:2d:02:0b:f2:cd:6a: 65:7e:50:dd:8d:20:e4:6d:55:69:ff:36:dd:c6:bb: 14:09:26:97:8f:1c:91:07:8b:17:a1:b3:4d:00:f3: 87:4c:e0:01:86:b5:fb:80:ce:91:11:5a:92:82:eb: 85:64:22:a9:19:c4:d3:9b:20:a5:dd:72:44:77:e1: 52:e6:2a:dd:5d:6b:38:f8:3f:79:8e:4e:cc:40:6e: 4f:be:73:62:de:24:22:fa:8d:0a:dc:c5:f5:79:97: 34:3b:72:05:8d:a5:67:8f:96:41:b5:39:b2:1c:21: ef:83:46:2a:27:8a:45:b3:7f:78:91:bc:40:55:f9: d6:98:9f:b0:8c:e5:47:fb:27:e2:98:31:96:1e:07: 90:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8B:F7:42:D7:03:38:1E:4E:DA:CE:FD:64:F7:23:2E:BB:D1:2A:77 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:49:b2:1b:84:6f:77:aa:5a:2e:33:7c:e6:e7:81:d2:08:4c: 74:99:7d:5d:e0:ce:63:97:1b:34:83:40:2e:09:00:39:0e:cd: b0:8e:54:ca:40:34:96:18:aa:d8:b6:84:60:60:b8:d0:f3:18: f8:1e:4d:d3:2a:36:e7:91:58:90:98:8e:d6:54:90:09:6f:6c: 50:d8:00:62:a1:de:4f:9b:ad:f9:94:c8:c5:f7:8a:8d:01:bd: 30:01:77:7c:9a:20:2f:61:e0:05:40:47:5d:73:9b:e0:c4:a7: 4b:c2:5c:fe:0f:68:3c:da:0b:ed:50:cd:92:62:3c:34:57:31: f4:09:51:60:c9:85:47:48:2a:04:fa:ea:7b:36:6a:0e:37:d3: f3:29:4a:2c:66:79:90:06:fe:af:29:ba:88:b9:ab:2c:62:31: eb:92:b4:61:59:d1:a6:c4:c3:92:6c:3b:6f:cc:70:c4:38:f2: 35:67:25:9a:84:55:07:c0:77:af:4e:5d:dd:1b:56:15:e1:e6: a2:51:b4:7d:6c:f6:77:0c:b5:7a:69:22:7d:39:a5:17:44:9c: 99:5d:58:26:84:e4:d1:ae:d2:50:43:17:ee:1a:97:f9:1a:8e: 79:4b:63:bc:94:a7:56:be:1f:a6:1a:7c:fa:67:b8:fa:43:46: 15:eb:b8:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjYwODE4MjMxMTAwWhcNMjYwODI1MjMxMTAwWjAYMRYwFAYD VQQDEw02YTg0ZTY4NS03NmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HXbeKpr0qm+0T4NiORNBL40mzsLfXfSHgN8BC/Op7hwj4rqQQPohkz9jClH h8tqyiSsGwKcw7wpMi/aHl82G8IsDrsR0GjXW/tvSra+D7AU8E47mtC4EEUOOKK2 ifM1N/3w++nsyF0Vbcj+1j/iQrktAgvyzWplflDdjSDkbVVp/zbdxrsUCSaXjxyR B4sXobNNAPOHTOABhrX7gM6REVqSguuFZCKpGcTTmyCl3XJEd+FS5irdXWs4+D95 jk7MQG5PvnNi3iQi+o0K3MX1eZc0O3IFjaVnj5ZBtTmyHCHvg0YqJ4pFs394kbxA VfnWmJ+wjOVH+yfimDGWHgeQdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeL90LX AzgeTtrO/WT3Iy670Sp3MB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlkmyG4Rvd6paLjN85ueB0ghMdJl9XeDOY5cbNINALgkAOQ7NsI5UykA0lhiq 2LaEYGC40PMY+B5N0yo255FYkJiO1lSQCW9sUNgAYqHeT5ut+ZTIxfeKjQG9MAF3 fJogL2HgBUBHXXOb4MSnS8Jc/g9oPNoL7VDNkmI8NFcx9AlRYMmFR0gqBPrqezZq DjfT8ylKLGZ5kAb+rym6iLmrLGIx65K0YVnRpsTDkmw7b8xwxDjyNWclmoRVB8B3 r05d3RtWFeHmolG0fWz2dwy1emkifTmlF0ScmV1YJoTk0a7SUEMX7hqX+RqOeUtj vJSnVr4fphp8+me4+kNGFeu4Yw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:43:48 2026 by rpki-client