$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft File: kBqfnorkBi5SGbdlLY6f7n7FrjM.mft (raw, json) Hash identifier: nUQZzg/5vp0amj0865B5RCKjKlu1FWOAKtqmDw4chyU= Subject key identifier: B4:B6:61:2B:39:E4:7B:74:81:1A:8D:5D:27:0A:A0:C6:11:30:C3:8F Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 Certificate issuer: /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft Manifest number: 017D Signing time: Wed 19 Aug 2026 05:14:26 +0000 Manifest this update: Wed 19 Aug 2026 05:14:25 +0000 Manifest next update: Wed 26 Aug 2026 05:14:25 +0000 Files and hashes: 1: kBqfnorkBi5SGbdlLY6f7n7FrjM.crl (hash: e8w8gU38LLP4WjreHvcgD+TpH/qZbnxcDr64sEwesC8=) 2: 4C738434ABD011F08EDDF110C4F9AE02.roa (hash: jP6TZWwRFPY1LK/E2kOV63Xfi0StNXGzAgbQFJN0A6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 05:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Validity Not Before: Aug 19 05:14:25 2026 GMT Not After : Aug 26 05:14:25 2026 GMT Subject: CN=6a853bb2-c246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:94:87:e2:d4:da:fc:56:62:79:15:f1:d7: 4b:04:4b:71:2b:e4:e6:a0:d3:5f:14:46:d7:88:06: 2f:a4:7c:fd:9b:d0:11:e3:61:3b:4d:b8:0f:48:0f: 7a:43:fa:66:e7:1d:e1:bf:47:2e:5e:5f:4d:02:71: 0e:b3:c3:c0:d4:09:1c:93:70:d7:97:bb:60:77:1d: 2a:c0:5a:89:7c:57:94:c7:76:4f:1e:43:dd:d6:5c: 92:b5:40:bf:4a:ef:d3:a9:d2:a5:b9:2f:43:b1:e1: cc:15:df:76:fb:0c:c2:46:a7:56:08:ad:65:0c:63: 24:d2:ef:09:a5:30:80:1d:3b:ff:5f:bf:52:e9:ba: 08:d5:30:9a:84:b2:8f:88:c2:d5:9c:d6:e4:1d:53: 5f:a7:1e:61:76:83:83:1a:da:01:4c:23:f8:ea:8f: 60:6a:c1:77:a0:04:23:e6:aa:53:cc:9f:bc:25:85: a6:d3:87:c8:89:23:c0:5b:7d:cf:79:08:40:e9:17: bc:1d:ad:a2:da:5a:8f:aa:d7:3f:31:94:1b:7e:dd: 21:30:06:ce:7f:eb:96:d1:c3:61:b2:e7:14:e8:b6: ed:66:06:4b:a8:4c:55:c0:d7:19:5d:fc:ef:e3:06: 17:53:d4:6b:bb:9c:af:d9:99:a2:69:d5:a4:32:69: 66:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B6:61:2B:39:E4:7B:74:81:1A:8D:5D:27:0A:A0:C6:11:30:C3:8F X509v3 Authority Key Identifier: keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:22:73:94:e9:52:b3:cc:53:90:bd:5c:f6:8c:7b:00:47:15: 73:3f:bf:8f:47:f3:ad:bf:4a:c9:e2:ff:77:a7:45:c3:c7:ce: 04:05:eb:a0:ff:22:2c:00:81:35:5c:23:0d:1f:b4:49:1f:11: 25:46:13:f0:f4:ab:e5:2c:32:e4:a5:15:a0:2e:45:5c:16:56: 21:93:28:4d:9a:75:12:fe:d6:be:41:ea:cd:7b:df:f4:46:e4: 60:4d:04:d8:da:6d:0a:94:c9:7b:74:f8:94:69:5a:05:a9:23: 6d:91:54:4a:91:24:48:04:12:2e:b7:1b:5f:2c:fe:d5:6e:cd: 6a:1c:ec:7f:a8:a8:85:84:96:bb:3f:81:67:1b:ed:d8:c8:64: de:1d:2d:a7:bf:0b:8e:5d:61:97:85:00:69:8b:c6:96:9c:7e: d5:a9:43:b7:58:0d:f2:17:0d:4c:a6:63:2f:d0:cb:df:ae:1d: 58:7b:98:eb:44:20:c3:fb:c2:e2:db:0f:fe:e8:8f:05:6d:c4: 5d:d1:36:a3:82:d0:67:e3:ad:8a:3b:c2:a4:a6:35:88:86:f7: 97:65:cb:b1:1f:f8:33:4d:7c:81:03:68:37:08:6a:3f:5c:00: f7:ef:a6:ea:18:6f:66:3a:62:1f:ee:61:e8:5d:07:c8:e0:11: 77:d0:d9:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDRTcxMTAvBgNVBAUTKDkwMUE5RjlFOEFFNDA2MkU1MjE5Qjc2NTJEOEU5RkVF N0VDNUFFMzMwHhcNMjYwODE5MDUxNDI1WhcNMjYwODI2MDUxNDI1WjAYMRYwFAYD VQQDEw02YTg1M2JiMi1jMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUqUh+LU2vxWYnkV8ddLBEtxK+TmoNNfFEbXiAYvpHz9m9AR42E7TbgPSA96 Q/pm5x3hv0cuXl9NAnEOs8PA1Akck3DXl7tgdx0qwFqJfFeUx3ZPHkPd1lyStUC/ Su/TqdKluS9DseHMFd92+wzCRqdWCK1lDGMk0u8JpTCAHTv/X79S6boI1TCahLKP iMLVnNbkHVNfpx5hdoODGtoBTCP46o9gasF3oAQj5qpTzJ+8JYWm04fIiSPAW33P eQhA6Re8Ha2i2lqPqtc/MZQbft0hMAbOf+uW0cNhsucU6LbtZgZLqExVwNcZXfzv 4wYXU9Rru5yv2ZmiadWkMmlmjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLS2YSs5 5Ht0gRqNXScKoMYRMMOPMB8GA1UdIwQYMBaAFJAan56K5AYuUhm3ZS2On+5+xa4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNFNy83MkY3NUI5ODVB REQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9ya0JpNVNHYmRsTFk2ZjduN0Zy ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tCcWZub3JrQmk1U0diZGxMWTZmN243RnJqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNFNy83MkY3NUI5ODVBREQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9ya0Jp NVNHYmRsTFk2ZjduN0Zyak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZCJzlOlSs8xTkL1c9ox7AEcVcz+/j0fzrb9KyeL/d6dFw8fOBAXroP8iLACB NVwjDR+0SR8RJUYT8PSr5Swy5KUVoC5FXBZWIZMoTZp1Ev7WvkHqzXvf9EbkYE0E 2NptCpTJe3T4lGlaBakjbZFUSpEkSAQSLrcbXyz+1W7Nahzsf6iohYSWuz+BZxvt 2Mhk3h0tp78Ljl1hl4UAaYvGlpx+1alDt1gN8hcNTKZjL9DL364dWHuY60Qgw/vC 4tsP/uiPBW3EXdE2o4LQZ+OtijvCpKY1iIb3l2XLsR/4M018gQNoNwhqP1wA9++m 6hhvZjpiH+5h6F0HyOARd9DZgQ== -----END CERTIFICATE-----Generated at Wed Aug 19 15:14:56 2026 by rpki-client