$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft File: AWua7YGMT9MEeU6yQtiz5WdlpUU.mft (raw, json) Hash identifier: SKyU+wR3K/4zwRw+rFx9jx60zpX2P9Nf9/sb9zb7pc8= Subject key identifier: 29:59:FC:47:15:D8:92:60:36:E7:DC:4B:7F:F9:F2:2C:9D:3D:2A:B7 Authority key identifier: 01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45 Certificate issuer: /CN=A91F53E8/serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft Manifest number: 19 Signing time: Tue 25 Aug 2026 08:56:11 +0000 Manifest this update: Tue 25 Aug 2026 08:56:10 +0000 Manifest next update: Tue 01 Sep 2026 08:56:10 +0000 Files and hashes: 1: AWua7YGMT9MEeU6yQtiz5WdlpUU.crl (hash: HgyvnzudO7UpHp8QeBxJGSv4iDChv3QrYGVNawxsDWo=) 2: D6539C8290BA11F1A55F2B8C3B11F970.roa (hash: 1gMk578HCqfbL2ovex22oq1A9V3RoK9szbLmcW/UkxU=) 3: ECDD26C485F411F18488A9A174A30FBC.roa (hash: VW4iL+otXl2aCZSt2+vQ6u30LJgxp5dtKkbiclHRg5w=) 4: CF24AA2890BA11F1BA9FFC863B11F970.roa (hash: MTfoO9wn3QvZGZC4Gkbs2o88ommC38rd6edFjng06T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53E8, serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545 Validity Not Before: Aug 25 08:56:10 2026 GMT Not After : Sep 1 08:56:10 2026 GMT Subject: CN=6a8d58ab-16f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:8d:09:b0:84:88:d8:e3:a9:4f:1b:35:0e: a6:7a:cd:b9:46:28:0b:fa:34:16:15:ae:83:49:dc: f1:5c:5c:78:05:f7:ff:44:5a:df:6a:2e:90:ad:20: fb:58:f7:1b:d5:72:3e:ac:6b:04:36:2d:83:81:97: 76:50:e7:b9:fd:99:80:39:e1:ed:e0:6b:24:59:bd: 5e:f3:db:3a:a0:c5:e8:9f:3d:a8:f9:f7:4a:b0:03: ba:15:a7:50:9a:9f:a9:f9:0c:66:25:c5:09:79:13: ce:6b:e9:e8:aa:83:aa:f9:a6:83:86:84:8f:2a:5f: f1:8c:67:03:a3:52:73:9c:d1:cb:e3:c8:b5:d9:04: 5e:47:b7:19:f5:9a:09:50:bb:21:b7:23:1c:eb:60: 00:eb:eb:3d:6a:e0:14:2d:24:81:60:77:d1:21:31: aa:d2:76:93:da:b8:ad:b4:67:a4:08:3c:5c:10:88: d2:d4:70:8a:a8:a2:b4:3f:98:d9:23:57:87:4e:00: eb:78:95:49:b0:6f:28:06:df:3d:61:11:c2:89:b3: 5a:6e:b3:0c:b5:48:82:e5:dd:87:f4:fd:29:c9:69: 2c:24:47:8a:ae:6b:c5:bf:eb:e7:9b:3e:dd:85:23: ed:34:d3:34:83:82:af:d3:d4:ad:36:91:dc:62:4f: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:59:FC:47:15:D8:92:60:36:E7:DC:4B:7F:F9:F2:2C:9D:3D:2A:B7 X509v3 Authority Key Identifier: keyid:01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:42:f5:76:84:f4:ba:86:b5:e5:25:9b:77:19:aa:7f:4f:54: 28:93:77:d7:77:82:33:76:d2:de:c5:45:98:07:40:b8:e7:d3: fa:ad:71:80:f8:65:9d:96:d0:9b:2e:39:fc:d1:1f:ec:a9:db: 7d:bc:d4:0f:0e:5e:28:42:84:03:3a:2f:c0:0b:11:dc:75:a0: ff:6e:b3:57:31:f8:41:46:87:54:78:db:11:f7:98:bb:49:d8: 87:27:99:9a:57:f6:53:a8:4b:06:89:44:84:0a:13:f9:fd:5e: a5:88:a9:f0:e7:dc:5f:7c:5c:24:17:ba:3c:86:cc:8e:04:6d: e4:d3:01:90:8a:35:00:a9:2a:df:33:62:d9:e5:be:6f:61:50: 8b:51:7a:87:21:c2:91:62:f1:08:b1:5e:63:52:d1:03:d4:53: 61:78:d7:e3:7c:33:40:df:87:3e:e5:ab:0e:0b:a2:99:1c:ca: 91:44:7e:26:6f:e0:43:e7:f2:09:88:43:50:4e:c6:c6:5b:30: 3f:25:a7:c1:94:57:07:27:2b:ba:64:11:c7:97:00:43:da:91: da:1e:62:f7:43:14:b0:49:c6:74:98:c5:9c:c2:6b:6f:8b:00: 36:a7:34:07:e7:e3:03:f9:32:4a:eb:cf:8a:b1:2c:78:fe:9f: 45:47:8d:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTNFODExMC8GA1UEBRMoMDE2QjlBRUQ4MThDNEZEMzA0Nzk0RUIyNDJEOEIzRTU2 NzY1QTU0NTAeFw0yNjA4MjUwODU2MTBaFw0yNjA5MDEwODU2MTBaMBgxFjAUBgNV BAMTDTZhOGQ1OGFiLTE2ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVFY0JsISI2OOpTxs1DqZ6zblGKAv6NBYVroNJ3PFcXHgF9/9EWt9qLpCtIPtY 9xvVcj6sawQ2LYOBl3ZQ57n9mYA54e3gayRZvV7z2zqgxeifPaj590qwA7oVp1Ca n6n5DGYlxQl5E85r6eiqg6r5poOGhI8qX/GMZwOjUnOc0cvjyLXZBF5Htxn1mglQ uyG3IxzrYADr6z1q4BQtJIFgd9EhMarSdpPauK20Z6QIPFwQiNLUcIqoorQ/mNkj V4dOAOt4lUmwbygG3z1hEcKJs1puswy1SILl3Yf0/SnJaSwkR4qua8W/6+ebPt2F I+000zSDgq/T1K02kdxiT5vnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKVn8RxXY kmA259xLf/nyLJ09KrcwHwYDVR0jBBgwFoAUAWua7YGMT9MEeU6yQtiz5WdlpUUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1M0U4LzZCRUM1OTIyODVG NDExRjFCOUEwMDQ4ODc0QTMwRkJDL0FXdWE3WUdNVDlNRWVVNnlRdGl6NVdkbHBV VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQVd1YTdZR01UOU1FZVU2eVF0aXo1V2RscFVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 M0U4LzZCRUM1OTIyODVGNDExRjFCOUEwMDQ4ODc0QTMwRkJDL0FXdWE3WUdNVDlN RWVVNnlRdGl6NVdkbHBVVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDKQvV2hPS6hrXlJZt3Gap/T1Qok3fXd4IzdtLexUWYB0C459P6rXGA+GWdltCb Ljn80R/sqdt9vNQPDl4oQoQDOi/ACxHcdaD/brNXMfhBRodUeNsR95i7SdiHJ5ma V/ZTqEsGiUSEChP5/V6liKnw59xffFwkF7o8hsyOBG3k0wGQijUAqSrfM2LZ5b5v YVCLUXqHIcKRYvEIsV5jUtED1FNheNfjfDNA34c+5asOC6KZHMqRRH4mb+BD5/IJ iENQTsbGWzA/JafBlFcHJyu6ZBHHlwBD2pHaHmL3QxSwScZ0mMWcwmtviwA2pzQH 5+MD+TJK68+KsSx4/p9FR43y -----END CERTIFICATE-----Generated at Wed Aug 26 23:12:58 2026 by rpki-client