$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json) Hash identifier: avjJa6+Gt/itm5DSNw/S6Meca0Pz2J4O5eeKE1nWrOg= Subject key identifier: 51:87:84:6E:AB:F2:93:4F:5D:92:C8:1E:EC:71:E9:6B:61:58:1F:E9 Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft Manifest number: 95 Signing time: Wed 19 Aug 2026 08:09:05 +0000 Manifest this update: Wed 19 Aug 2026 08:09:04 +0000 Manifest next update: Wed 26 Aug 2026 08:09:04 +0000 Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: wTXIcApSZSjKM6WOcw9LP5Wut4WZ+zQGTAfWz06Idfc=) 2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Validity Not Before: Aug 19 08:09:04 2026 GMT Not After : Aug 26 08:09:04 2026 GMT Subject: CN=6a8564a1-68e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5e:ea:9f:a7:b1:a9:d8:03:02:80:c6:20:73: 1c:0d:3b:bf:63:bf:1e:f2:78:1c:b1:d5:e2:6f:a6: 18:64:67:e6:c3:d7:7a:5e:ec:d0:2b:7d:7d:98:0f: e2:b6:c8:d1:9e:a9:97:1f:de:a7:70:7a:e5:33:ec: 7a:56:f3:56:b7:bd:bf:7a:9c:6c:21:2a:36:6a:73: a0:b3:70:48:e1:6a:3f:98:cb:c1:af:87:3c:e0:9c: d7:9f:28:1e:cb:81:da:f6:65:17:2a:e2:27:aa:03: 71:ef:0d:46:2b:ba:e2:c4:a1:82:48:7a:9a:68:59: 04:66:18:2b:d6:ee:a7:20:dd:09:db:06:c1:c3:c9: f7:9f:52:79:7c:15:cd:b2:ee:4d:70:ab:88:c4:b4: 13:d3:e4:b9:11:37:10:56:a3:1e:b8:73:84:a2:28: 7d:e5:67:72:ee:09:60:1a:cd:a6:43:bc:30:2a:71: 6f:66:4d:40:c1:bb:67:6c:20:ea:69:53:6d:e0:2a: 81:c4:4c:de:6d:1b:f5:33:98:34:b2:1c:3e:2b:52: 28:ef:0e:46:89:d9:60:43:d7:e1:b3:8c:64:ac:63: 02:cb:ca:02:33:f3:44:e1:b5:54:90:3f:d8:36:19: c7:80:d8:37:66:ad:17:48:f9:fc:cf:f9:7f:60:28: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:87:84:6E:AB:F2:93:4F:5D:92:C8:1E:EC:71:E9:6B:61:58:1F:E9 X509v3 Authority Key Identifier: keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:61:a5:b4:86:7f:f3:fe:b4:4a:34:ea:2c:a1:a5:8b:85:cb: 1a:3b:72:87:fc:28:e2:e4:84:75:69:74:98:4c:46:de:be:a8: ca:74:5c:3a:c6:1e:5e:07:7d:07:f3:0d:3f:70:b1:e1:55:26: 91:9c:fe:9a:e3:73:e6:08:32:f9:5a:96:c7:f3:b3:1e:1d:ab: 7e:52:2a:05:9c:22:9d:78:05:f1:0d:1f:52:fe:80:3d:52:4e: 6d:cd:ba:c2:a9:57:f7:2e:37:af:5a:1c:ee:e8:bc:f9:bb:d1: 89:1e:43:46:7a:7b:65:cd:1a:de:8d:bf:e2:4a:ed:e7:a1:82: 35:34:a5:d0:8d:71:d7:90:77:0d:25:d0:a7:23:ab:86:36:0c: b9:e9:50:28:b4:8d:04:61:8e:5f:69:c0:87:e0:b4:27:3a:6b: 01:a4:1f:68:3f:e8:25:a1:c3:eb:1f:8c:54:56:ca:c2:25:65: c0:34:d4:f0:a1:c6:14:58:11:80:f2:f4:91:89:b2:7a:77:4f: eb:9c:90:f8:c5:16:14:bd:33:39:b0:8b:66:5c:46:d2:ab:eb: 32:bf:93:10:99:11:ee:49:67:f9:03:a2:7f:0f:92:f7:11:77: e6:c0:8e:12:99:bb:44:cb:80:e7:53:fc:cf:35:7b:fe:23:91: 54:5c:52:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIzMUMxMTAvBgNVBAUTKDY4RDE0NjY0MzM5NTg0MTZERDgxQTdENEFCRjJCMjQz RUU3RDhCNTYwHhcNMjYwODE5MDgwOTA0WhcNMjYwODI2MDgwOTA0WjAYMRYwFAYD VQQDEw02YTg1NjRhMS02OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkl7qn6exqdgDAoDGIHMcDTu/Y78e8ngcsdXib6YYZGfmw9d6XuzQK319mA/i tsjRnqmXH96ncHrlM+x6VvNWt72/epxsISo2anOgs3BI4Wo/mMvBr4c84JzXnyge y4Ha9mUXKuInqgNx7w1GK7rixKGCSHqaaFkEZhgr1u6nIN0J2wbBw8n3n1J5fBXN su5NcKuIxLQT0+S5ETcQVqMeuHOEoih95Wdy7glgGs2mQ7wwKnFvZk1AwbtnbCDq aVNt4CqBxEzebRv1M5g0shw+K1Io7w5GidlgQ9fhs4xkrGMCy8oCM/NE4bVUkD/Y NhnHgNg3Zq0XSPn8z/l/YChabQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFGHhG6r 8pNPXZLIHuxx6WthWB/pMB8GA1UdIwQYMBaAFGjRRmQzlYQW3YGn1KvyskPufYtW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjMxQy8yOEU4M0U2QUM0 MzAxMUYwOTZDRTlDNDlDNEY5QUUwMi9hTkZHWkRPVmhCYmRnYWZVcV9LeVEtNTlp MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FORkdaRE9WaEJiZGdhZlVxX0t5US01OWkxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjMxQy8yOEU4M0U2QUM0MzAxMUYwOTZDRTlDNDlDNEY5QUUwMi9hTkZHWkRPVmhC YmRnYWZVcV9LeVEtNTlpMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlmGltIZ/8/60SjTqLKGli4XLGjtyh/wo4uSEdWl0mExG3r6oynRcOsYeXgd9 B/MNP3Cx4VUmkZz+muNz5ggy+VqWx/OzHh2rflIqBZwinXgF8Q0fUv6APVJObc26 wqlX9y43r1oc7ui8+bvRiR5DRnp7Zc0a3o2/4krt56GCNTSl0I1x15B3DSXQpyOr hjYMuelQKLSNBGGOX2nAh+C0JzprAaQfaD/oJaHD6x+MVFbKwiVlwDTU8KHGFFgR gPL0kYmyendP65yQ+MUWFL0zObCLZlxG0qvrMr+TEJkR7kln+QOifw+S9xF35sCO Epm7RMuA51P8zzV7/iORVFxSlg== -----END CERTIFICATE-----Generated at Wed Aug 19 16:47:32 2026 by rpki-client