$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: hIMv1qEDwDQv+fvgqjJTnNwDvRztBFmJnUYM4Y5SjsU= Subject key identifier: 44:E5:EF:14:9E:49:B4:BE:6C:6F:2A:77:03:E0:75:05:28:6D:DA:5A Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 01CE Signing time: Wed 19 Aug 2026 04:45:52 +0000 Manifest this update: Wed 19 Aug 2026 04:45:52 +0000 Manifest next update: Wed 26 Aug 2026 04:45:52 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: clk2kdeiCDz8bFqAjphgvvl0MQI03gJdvXfwyC/N9Fo=) 2: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=) 3: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=) 4: E8AC04B286F311F1B8F66003A7EE528E.roa (hash: gdGgY10s0aC8Do46TFQ8bG2KR+XSS6EIIPnk5BDXjnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Aug 19 04:45:52 2026 GMT Not After : Aug 26 04:45:52 2026 GMT Subject: CN=6a853500-fa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:2b:6a:a9:4e:52:99:e1:c5:b1:28:67:d4: cf:72:e7:85:56:53:e2:67:c2:ed:89:d0:59:f5:1d: fb:38:ff:d3:7a:a8:0d:f6:59:c6:33:15:e4:3c:cf: 7f:f8:88:98:25:24:42:1f:ac:d2:7c:9a:60:f4:80: 83:95:9b:8c:74:a4:78:44:5b:bf:0a:ce:43:77:37: f8:c4:ce:f7:6e:f1:b7:d9:39:0c:5c:b4:f1:f5:61: 08:b6:ae:90:36:4e:67:d4:96:1c:9d:95:47:7c:cf: 3f:f3:d0:07:a1:25:e6:4c:3c:a8:12:0f:53:0e:1f: a7:e6:8e:b4:ea:1d:1d:86:83:2f:18:6f:44:44:ea: 7e:2c:c1:91:c3:12:75:26:f8:68:a0:2b:9e:eb:0a: 4c:bf:35:6e:8c:53:1d:f8:cb:9e:b7:7b:cf:fd:17: 81:8d:ea:97:8a:62:6e:e7:9e:58:43:79:25:84:04: be:8e:46:1e:be:13:cc:63:9d:d4:43:f9:60:b4:14: 70:d4:e5:5b:69:43:67:69:e0:ee:19:37:bf:25:c6: 6c:fe:c9:9d:74:9e:f4:72:25:5f:6c:ea:0c:ff:3e: b4:12:b0:b8:c5:0d:09:d9:65:5d:19:e7:00:3f:e7: 54:90:7c:0a:6a:d0:34:af:4e:db:96:62:4b:29:64: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E5:EF:14:9E:49:B4:BE:6C:6F:2A:77:03:E0:75:05:28:6D:DA:5A X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:0f:8e:eb:db:cc:05:3b:6f:33:46:55:1e:32:9e:bd:9c:60: fc:86:2a:f0:69:f2:3e:63:95:61:fa:cf:cc:5a:9f:d9:a9:0f: 79:36:f1:ca:bf:24:6e:9f:d0:92:80:51:9c:d5:70:38:7a:be: 60:2d:a2:7e:33:55:1b:f4:c2:8e:ad:c3:90:3d:d4:de:b0:e0: 97:8f:f1:58:5e:a3:aa:83:4e:2f:c1:e6:0b:b8:b9:1d:89:13: 5b:7b:13:7c:41:8a:d2:bd:b0:24:dd:e3:59:94:3a:0b:81:fa: fd:18:0b:3f:92:ce:8f:fc:ab:46:13:1c:93:70:b1:c6:1a:b6: 1c:4a:01:f2:cf:8d:09:81:e7:04:d6:68:16:8f:00:80:5c:9e: 44:e1:40:2e:4a:f5:87:38:e6:f5:21:e8:6a:b4:a9:03:23:dd: ef:1d:9b:35:04:99:b6:e8:68:c9:10:26:11:c3:1d:49:1f:a6: c2:be:7a:71:2f:9a:39:e1:ee:89:f3:30:77:32:1a:4e:f2:d1: 74:17:47:6f:9e:d3:d8:72:84:82:28:c4:d2:e5:7d:51:4d:cc: 4b:a7:81:b5:2f:ea:0c:d0:ac:df:16:39:3e:93:fa:f0:09:48: 74:74:75:7f:99:a6:ed:88:76:d5:95:03:dd:89:a2:5d:f4:35: f0:f8:ac:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjYwODE5MDQ0NTUyWhcNMjYwODI2MDQ0NTUyWjAYMRYwFAYD VQQDEw02YTg1MzUwMC1mYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lQraqlOUpnhxbEoZ9TPcueFVlPiZ8LtidBZ9R37OP/TeqgN9lnGMxXkPM9/ +IiYJSRCH6zSfJpg9ICDlZuMdKR4RFu/Cs5Ddzf4xM73bvG32TkMXLTx9WEItq6Q Nk5n1JYcnZVHfM8/89AHoSXmTDyoEg9TDh+n5o606h0dhoMvGG9EROp+LMGRwxJ1 JvhooCue6wpMvzVujFMd+Muet3vP/ReBjeqXimJu555YQ3klhAS+jkYevhPMY53U Q/lgtBRw1OVbaUNnaeDuGTe/JcZs/smddJ70ciVfbOoM/z60ErC4xQ0J2WVdGecA P+dUkHwKatA0r07blmJLKWSivQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETl7xSe SbS+bG8qdwPgdQUobdpaMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsA+O69vMBTtvM0ZVHjKevZxg/IYq8GnyPmOVYfrPzFqf2akPeTbxyr8kbp/Q koBRnNVwOHq+YC2ifjNVG/TCjq3DkD3U3rDgl4/xWF6jqoNOL8HmC7i5HYkTW3sT fEGK0r2wJN3jWZQ6C4H6/RgLP5LOj/yrRhMck3Cxxhq2HEoB8s+NCYHnBNZoFo8A gFyeROFALkr1hzjm9SHoarSpAyPd7x2bNQSZtuhoyRAmEcMdSR+mwr56cS+aOeHu ifMwdzIaTvLRdBdHb57T2HKEgijE0uV9UU3MS6eBtS/qDNCs3xY5PpP68AlIdHR1 f5mm7Yh21ZUD3YmiXfQ18PisGQ== -----END CERTIFICATE-----Generated at Thu Aug 20 23:38:36 2026 by rpki-client