$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft File: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json) Hash identifier: ih4XRfxGIGHPOgiC1gZgAF7ffzmmvVa+965Y0mXsEh0= Subject key identifier: 46:21:B9:01:C7:FF:D6:AA:D3:95:13:4F:2B:1A:9A:7D:8B:75:0D:37 Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 Certificate issuer: /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934 Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft Manifest number: 0CDA Signing time: Tue 18 Aug 2026 18:42:34 +0000 Manifest this update: Tue 18 Aug 2026 18:42:33 +0000 Manifest next update: Tue 25 Aug 2026 18:42:33 +0000 Files and hashes: 1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: 4LXfK97YVZNWvAMfq5VRd+o2FCrzRSvM7a2RHx7AWAE=) 2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: Sez/a2sgGSbWwvJeQPZUS5uIi1mmZfqNVL6dsISb/6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934 Validity Not Before: Aug 18 18:42:33 2026 GMT Not After : Aug 25 18:42:33 2026 GMT Subject: CN=6a84a79a-588e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ad:bc:c0:0f:07:3c:47:d4:cf:45:ad:a0:85: 7f:e2:dc:90:e6:c2:2b:45:dc:b4:cd:13:97:0a:44: 06:92:9d:05:e0:21:d0:c4:be:78:b3:a7:ce:f9:5c: e5:93:58:b9:4d:3e:dd:c1:e8:59:fd:1b:db:71:09: 4c:3f:33:0c:c7:b3:c6:98:cf:41:e9:90:8b:39:1d: 16:cf:f2:3c:86:48:55:25:e6:c5:dc:e3:6c:31:9c: 91:1d:07:78:58:eb:ea:4f:de:a9:d1:2c:36:75:9e: 0b:ca:ed:8c:ef:5a:de:d6:b6:49:1c:d7:f3:7a:b0: fc:70:dd:33:9f:bc:99:c2:59:c0:db:5c:91:06:7d: 7c:ee:93:49:11:bf:a3:f3:e5:6b:88:50:95:7a:17: 1c:8d:27:21:ef:2d:41:a6:46:31:59:f8:65:48:54: 3f:4d:69:53:31:18:54:3a:dd:f3:e9:db:08:7d:6c: 1b:fb:4f:e0:4a:8c:44:ae:2c:6c:29:cb:26:84:ca: 48:a3:2e:f7:ed:6a:cf:ce:d3:87:1d:5d:75:da:9b: ea:52:fb:16:d8:eb:1f:a2:c6:ff:ea:03:59:a4:bc: d2:2e:24:ac:2b:a3:13:fb:6c:c6:03:89:48:ae:71: 1c:ce:d6:80:02:88:4d:c1:5e:82:50:3d:20:bc:60: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:21:B9:01:C7:FF:D6:AA:D3:95:13:4F:2B:1A:9A:7D:8B:75:0D:37 X509v3 Authority Key Identifier: keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f9:6a:b2:e3:be:6a:84:e9:ef:f3:2c:d6:d8:44:d2:4d:4a: 53:3b:95:d8:47:66:be:04:6a:70:63:82:dd:70:cb:f5:c6:e5: 04:78:47:cc:c5:77:2a:02:c5:4c:23:86:df:40:62:cc:e2:6b: 81:cd:a6:c8:e9:1f:c6:d7:7d:ad:6c:46:98:11:59:43:7d:85: ae:06:b3:bd:54:90:24:1c:1a:2d:f2:92:40:c5:54:58:72:f7: d9:3f:0d:bb:75:c8:f2:55:d4:0b:e5:59:46:fd:aa:86:99:23: 9d:52:bb:16:e2:f4:2e:45:12:d0:e0:43:ab:e5:a8:0b:3c:8c: 6b:26:4f:e8:f2:7a:10:9e:0d:18:2e:16:66:46:ba:5d:5a:4e: 05:96:87:a9:b4:e3:37:5c:4c:0a:3e:87:bd:9c:b5:28:b9:5a: 70:88:26:d3:5c:28:ce:2b:bc:0b:5a:88:30:9c:36:26:46:c9: 3e:2c:12:1c:c2:30:f5:6c:fe:c5:43:d3:e0:de:8f:30:87:5b: 3c:f0:53:f8:c9:8f:56:7c:ef:5e:9d:31:3a:75:7e:fb:f7:e3: cf:a2:2a:58:02:51:fe:45:fa:d4:28:bf:37:cb:e4:fa:ae:73: a1:5a:5b:9b:df:d7:2b:18:7a:f8:72:39:c8:5c:26:4f:dd:fb: d6:73:69:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwNDYxMTAvBgNVBAUTKDg5NDgwOTYzMDk1NjkyNDM4MkNDMzlENDYwRkE0NzY0 QjAxNzU5MzQwHhcNMjYwODE4MTg0MjMzWhcNMjYwODI1MTg0MjMzWjAYMRYwFAYD VQQDEw02YTg0YTc5YS01ODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAma28wA8HPEfUz0WtoIV/4tyQ5sIrRdy0zROXCkQGkp0F4CHQxL54s6fO+Vzl k1i5TT7dwehZ/RvbcQlMPzMMx7PGmM9B6ZCLOR0Wz/I8hkhVJebF3ONsMZyRHQd4 WOvqT96p0Sw2dZ4Lyu2M71re1rZJHNfzerD8cN0zn7yZwlnA21yRBn187pNJEb+j 8+VriFCVehccjSch7y1BpkYxWfhlSFQ/TWlTMRhUOt3z6dsIfWwb+0/gSoxErixs KcsmhMpIoy737WrPztOHHV112pvqUvsW2Osfosb/6gNZpLzSLiSsK6MT+2zGA4lI rnEcztaAAohNwV6CUD0gvGBsNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYhuQHH /9aq05UTTysamn2LdQ03MB8GA1UdIwQYMBaAFIlICWMJVpJDgsw51GD6R2SwF1k0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA0Ni8zRkIwMkFFMjE0 RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2trT0N6RG5VWVBwSFpMQVhX VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVZ0pZd2xXa2tPQ3pEblVZUHBIWkxBWFdUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA0Ni8zRkIwMkFFMjE0RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2tr T0N6RG5VWVBwSFpMQVhXVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaflqsuO+aoTp7/Ms1thE0k1KUzuV2EdmvgRqcGOC3XDL9cblBHhHzMV3KgLF TCOG30BizOJrgc2myOkfxtd9rWxGmBFZQ32FrgazvVSQJBwaLfKSQMVUWHL32T8N u3XI8lXUC+VZRv2qhpkjnVK7FuL0LkUS0OBDq+WoCzyMayZP6PJ6EJ4NGC4WZka6 XVpOBZaHqbTjN1xMCj6HvZy1KLlacIgm01woziu8C1qIMJw2JkbJPiwSHMIw9Wz+ xUPT4N6PMIdbPPBT+MmPVnzvXp0xOnV++/fjz6IqWAJR/kX61Ci/N8vk+q5zoVpb m9/XKxh6+HI5yFwmT9371nNpMQ== -----END CERTIFICATE-----Generated at Wed Aug 19 13:42:07 2026 by rpki-client