$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: 11+TGw7V+t+fDIlB5/xv1pChAuxN3EJWAKH574NsD0k= Subject key identifier: 70:64:E8:0C:B4:B7:63:5B:23:99:46:C7:47:5A:59:88:E9:0B:5C:31 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0226 Signing time: Tue 25 Aug 2026 02:46:21 +0000 Manifest this update: Tue 25 Aug 2026 02:46:20 +0000 Manifest next update: Tue 01 Sep 2026 02:46:20 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: Y2LyR2gChg5VMopNHz5mxq4OZmCNyNoWwDrgLOUWpqc=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 02:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Aug 25 02:46:20 2026 GMT Not After : Sep 1 02:46:20 2026 GMT Subject: CN=6a8d01fc-1ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:58:af:17:09:1d:09:dc:62:04:94:4e:55: 71:b9:0b:72:a7:64:0f:31:7c:47:7b:01:4b:a0:10: 37:82:33:22:4c:49:b5:e9:52:50:8b:e3:ae:a8:dd: 00:a4:c2:a5:1e:19:99:d7:2a:21:d2:72:89:6c:d9: df:d5:09:6d:64:f4:e0:96:83:74:7d:c7:c9:60:0d: 68:e2:de:3b:87:3c:0f:3c:d0:82:71:75:4f:8c:f0: af:bb:12:f7:21:25:53:d8:8f:29:8a:a1:5e:8f:d6: 1c:d1:4e:c5:14:86:10:bc:87:7b:07:f6:d8:89:38: cf:17:16:80:c9:37:b5:e0:c1:01:e6:aa:cd:19:d1: cb:8d:39:3e:3b:d4:5f:aa:57:55:b6:8a:37:85:da: d7:de:af:e4:d1:9c:ad:24:f4:b9:d0:69:62:35:45: b1:e1:d5:59:08:54:58:27:bb:aa:fd:86:26:74:c8: bd:b8:24:f3:d7:43:39:89:78:d9:bb:07:60:c2:13: 2f:aa:ce:ff:4a:3d:f3:3b:e2:77:ef:ea:48:0d:bb: a0:41:a5:1a:f2:7b:ab:96:e8:9b:10:47:3f:1d:c9: 0e:f1:4c:aa:16:42:fa:52:2f:82:1d:a0:f0:93:c6: 69:70:7d:2f:e7:29:5c:bc:ec:63:31:aa:8c:f6:d7: b1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:64:E8:0C:B4:B7:63:5B:23:99:46:C7:47:5A:59:88:E9:0B:5C:31 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8e:d0:a0:ce:ff:b5:21:d1:ad:69:44:ec:fa:ea:b3:53:cf: 3e:b6:c1:9e:0f:45:69:2a:4e:ed:73:4c:9e:1c:77:ce:1b:52: ef:da:2b:e2:9f:2c:93:27:2f:0e:69:2f:77:49:c9:6e:00:13: e9:c8:c0:71:be:aa:23:3f:19:e4:5c:e8:64:8d:ef:01:b6:af: b8:26:e2:41:d4:28:83:3e:77:f6:37:2d:55:90:39:15:dd:98: d0:50:8c:d7:17:37:b5:66:a1:c3:5a:4c:18:ed:d4:23:b3:d4: da:68:72:3a:a4:eb:9e:2e:3e:1c:12:7f:ab:cb:be:70:4b:2b: eb:c1:d0:0f:e9:c7:64:51:e6:09:4a:77:0b:1e:63:65:89:ea: 1e:7f:11:a2:d6:58:63:18:fb:5b:bb:9b:8e:12:cc:e3:70:d5: 3f:1a:68:f7:43:f9:6e:27:11:aa:db:33:b0:78:51:e7:94:34: 28:a1:a4:15:a1:03:37:b3:bf:fd:2f:4c:ae:3b:bd:21:94:f2: 63:5a:7f:fe:3d:46:2f:2c:21:fd:0b:68:cf:e0:bc:8c:23:68: 06:37:2f:71:a7:d9:61:4c:1d:83:45:f5:6a:6d:84:d0:a5:13: 8f:44:d1:0f:32:0a:29:03:6a:76:97:ed:d9:f1:6e:36:75:da: 5b:b1:c8:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYwODI1MDI0NjIwWhcNMjYwOTAxMDI0NjIwWjAYMRYwFAYD VQQDEw02YThkMDFmYy0xY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKhYrxcJHQncYgSUTlVxuQtyp2QPMXxHewFLoBA3gjMiTEm16VJQi+OuqN0A pMKlHhmZ1yoh0nKJbNnf1QltZPTgloN0fcfJYA1o4t47hzwPPNCCcXVPjPCvuxL3 ISVT2I8piqFej9Yc0U7FFIYQvId7B/bYiTjPFxaAyTe14MEB5qrNGdHLjTk+O9Rf qldVtoo3hdrX3q/k0ZytJPS50GliNUWx4dVZCFRYJ7uq/YYmdMi9uCTz10M5iXjZ uwdgwhMvqs7/Sj3zO+J37+pIDbugQaUa8nurluibEEc/HckO8UyqFkL6Ui+CHaDw k8ZpcH0v5ylcvOxjMaqM9tex8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBk6Ay0 t2NbI5lGx0daWYjpC1wxMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJY7QoM7/tSHRrWlE7Prqs1PPPrbBng9FaSpO7XNMnhx3zhtS79or4p8skycv Dmkvd0nJbgAT6cjAcb6qIz8Z5FzoZI3vAbavuCbiQdQogz539jctVZA5Fd2Y0FCM 1xc3tWahw1pMGO3UI7PU2mhyOqTrni4+HBJ/q8u+cEsr68HQD+nHZFHmCUp3Cx5j ZYnqHn8RotZYYxj7W7ubjhLM43DVPxpo90P5bicRqtszsHhR55Q0KKGkFaEDN7O/ /S9Mrju9IZTyY1p//j1GLywh/Qtoz+C8jCNoBjcvcafZYUwdg0X1am2E0KUTj0TR DzIKKQNqdpft2fFuNnXaW7HIFw== -----END CERTIFICATE-----Generated at Wed Aug 26 12:17:38 2026 by rpki-client