$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: zt6rGn41ALy+q96AFbP0BjydrCMK8q2JoQz4AEaOD+E= Subject key identifier: 12:D5:31:8A:D5:A6:45:8C:D6:76:34:27:C4:20:17:D5:9F:B6:40:E6 Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 16B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 16A7 Signing time: Tue 18 Aug 2026 16:50:37 +0000 Manifest this update: Tue 18 Aug 2026 16:50:36 +0000 Manifest next update: Tue 25 Aug 2026 16:50:36 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: HOkk2OAQhk5n1i7GKlo4wyu7ANW5P35DtsJfo3oEjug=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: KmhukKmF5EOvpy7I16yjXo0PVUDB0PQfpBY9iUTxeeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5817 (0x16b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Aug 18 16:50:36 2026 GMT Not After : Aug 25 16:50:36 2026 GMT Subject: CN=6a848d5c-f298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:6b:45:57:ad:ce:09:a3:9c:4a:e2:42:aa: 2a:ec:68:c7:37:c3:01:77:c6:b6:d2:9a:bf:b3:2d: a8:d5:32:b4:01:13:b3:f4:50:b0:93:84:fb:b1:d5: b4:f1:e4:a9:e7:60:45:06:d0:75:dc:78:84:67:2b: a1:c1:2c:e0:c9:5f:eb:d2:5d:27:54:14:3c:10:79: 5c:ba:5a:8e:65:0c:82:e5:a0:87:57:f6:0a:18:d9: c1:5a:3e:8d:c1:c9:0c:98:b5:e8:b6:77:73:73:f4: 3d:21:23:b5:c8:49:a9:b9:0f:4e:04:9e:97:1f:72: 78:de:ca:03:0c:1f:86:7b:ee:a1:00:77:c9:bf:22: 40:2f:77:c4:e7:bc:91:fb:79:7f:9e:73:b2:98:11: e2:b6:e1:59:e0:f7:8f:4a:74:8f:2f:0c:ef:e5:d2: 34:90:6c:18:ea:f2:8c:1e:8c:ee:37:98:4a:1b:5b: fc:19:81:c3:eb:6f:90:dd:91:04:23:52:d9:04:ae: 75:c3:a3:7d:93:08:00:a7:64:62:97:2c:f6:2f:ce: 95:6c:ba:f8:08:62:9c:d6:d2:08:3e:9a:4e:ff:02: 0d:ea:f2:7a:38:67:e9:62:3c:63:f3:f8:3c:d5:ee: f4:47:2e:96:5c:48:91:cb:6d:52:17:3d:db:79:c9: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D5:31:8A:D5:A6:45:8C:D6:76:34:27:C4:20:17:D5:9F:B6:40:E6 X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4d:68:df:5b:f5:fe:3e:1e:1c:69:f0:9b:ef:e7:bc:58:c6: 6e:7f:18:21:2d:ee:ef:b1:c1:d8:e4:04:df:33:26:e4:42:b5: eb:42:83:11:2e:f5:84:3e:4c:15:6c:1c:63:4f:c5:ab:89:8f: 13:54:ac:89:a7:30:17:6d:b7:43:88:00:20:a5:9a:53:4a:b9: 14:11:22:8c:a3:14:dc:25:f7:57:b3:98:eb:ca:a2:b2:74:4d: f7:ba:49:78:be:05:91:4b:44:72:71:57:67:29:56:02:60:6f: 5f:ea:ac:b1:71:fd:60:54:61:dd:1b:73:a9:91:e8:5c:df:06: 7b:9b:01:2a:dd:5a:93:32:4a:68:f0:d7:2b:fe:18:9c:5b:8d: ab:66:08:66:96:38:5c:4a:04:20:27:33:dd:ff:63:fb:e4:26: 47:ae:43:4a:85:d5:48:67:2e:33:71:20:72:8f:f6:48:14:e3: c2:cf:e1:81:ef:3e:9f:a6:05:ee:97:d0:bc:26:fb:f2:44:bd: 19:3a:58:4f:cc:e3:8b:8f:3f:d5:83:1f:82:e2:6d:65:67:ab: bb:b0:cd:0d:07:d8:cf:b4:05:5b:2e:b4:d8:f7:02:d0:11:bb: ac:78:00:3c:30:ca:f4:66:b3:9a:c3:2f:8e:a7:79:32:43:c0: 73:7c:ce:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjYwODE4MTY1MDM2WhcNMjYwODI1MTY1MDM2WjAYMRYwFAYD VQQDEw02YTg0OGQ1Yy1mMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV5rRVetzgmjnEriQqoq7GjHN8MBd8a20pq/sy2o1TK0AROz9FCwk4T7sdW0 8eSp52BFBtB13HiEZyuhwSzgyV/r0l0nVBQ8EHlculqOZQyC5aCHV/YKGNnBWj6N wckMmLXotndzc/Q9ISO1yEmpuQ9OBJ6XH3J43soDDB+Ge+6hAHfJvyJAL3fE57yR +3l/nnOymBHituFZ4PePSnSPLwzv5dI0kGwY6vKMHozuN5hKG1v8GYHD62+Q3ZEE I1LZBK51w6N9kwgAp2Rilyz2L86VbLr4CGKc1tIIPppO/wIN6vJ6OGfpYjxj8/g8 1e70Ry6WXEiRy21SFz3becmETwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLVMYrV pkWM1nY0J8QgF9WftkDmMB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPU1o31v1/j4eHGnwm+/nvFjGbn8YIS3u77HB2OQE3zMm5EK160KDES71hD5M FWwcY0/Fq4mPE1SsiacwF223Q4gAIKWaU0q5FBEijKMU3CX3V7OY68qisnRN97pJ eL4FkUtEcnFXZylWAmBvX+qssXH9YFRh3RtzqZHoXN8Ge5sBKt1akzJKaPDXK/4Y nFuNq2YIZpY4XEoEICcz3f9j++QmR65DSoXVSGcuM3Egco/2SBTjws/hge8+n6YF 7pfQvCb78kS9GTpYT8zji48/1YMfguJtZWeru7DNDQfYz7QFWy602PcC0BG7rHgA PDDK9GazmsMvjqd5MkPAc3zOuw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:42 2026 by rpki-client