$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft File: h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json) Hash identifier: eVIWL3r2owT3dWvT6zJOEC7eEDaBo2R72h42bmRYkng= Subject key identifier: 07:58:48:1C:8E:11:BB:2D:C2:5F:FC:55:8E:38:11:FA:14:33:2F:A4 Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Certificate serial: 1604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft Manifest number: 15EF Signing time: Sat 22 Aug 2026 16:40:26 +0000 Manifest this update: Sat 22 Aug 2026 16:40:25 +0000 Manifest next update: Sat 29 Aug 2026 16:40:25 +0000 Files and hashes: 1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: Tq+PcpsDhKwkzaFArbmvIiTKewlI0qKyR6C3QkU/gAo=) 2: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: IPwUYf1i7UXpGfgy42YQLyz0KFiyyYobrDQbSdSHXgY=) 3: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: jueJlQIp/n088nFesAl2o/XwQiao4sKjxZsgZFyb2lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5636 (0x1604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C Validity Not Before: Aug 22 16:40:25 2026 GMT Not After : Aug 29 16:40:25 2026 GMT Subject: CN=6a89d0fa-d616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:67:ab:a5:1b:c9:3e:ac:23:00:7f:ea:04: 8c:3d:99:b3:4c:43:3a:05:b5:12:35:7e:03:ea:8c: 11:f7:c4:a6:b6:d0:1c:1a:a1:f3:e0:61:8f:7a:03: 44:e7:c7:bf:7a:d8:e4:5f:86:47:f7:62:1f:9f:9b: b2:c5:0b:11:90:2e:69:7a:fe:aa:77:40:2a:50:f5: ca:bb:ed:02:56:02:5e:60:4f:2a:cd:4e:a3:5d:bf: 1a:53:7a:5b:f0:2a:72:9a:9e:10:db:c7:f8:82:88: d6:0c:3a:b1:20:b9:af:93:0a:b1:e0:d2:e9:b2:d7: 87:ee:a6:f2:30:3f:e9:3c:17:08:61:62:88:21:01: 8f:6f:6d:4a:7b:82:7f:3b:25:70:8c:c2:0a:67:8a: c5:19:34:ed:aa:44:ad:85:73:de:b7:da:ae:62:4a: dd:d5:25:5a:d0:ad:c4:00:0c:12:6f:1b:18:d2:49: 82:ed:d9:a2:89:2e:4c:47:83:2e:33:7e:37:63:ab: f5:b1:c9:cd:78:f0:5d:a4:df:13:88:58:86:bf:8f: bf:5c:27:c7:69:ee:73:fd:ec:06:b9:d1:6b:f6:98: 87:e8:22:5b:81:e4:13:c7:10:07:9b:7d:86:a1:e9: 4a:f8:50:30:4e:06:58:67:c4:65:a3:0c:27:f6:11: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:58:48:1C:8E:11:BB:2D:C2:5F:FC:55:8E:38:11:FA:14:33:2F:A4 X509v3 Authority Key Identifier: keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d2:e0:dc:2a:0c:02:f5:94:f3:3c:47:68:a6:d7:19:df:87: a8:0e:ad:f0:58:97:c6:68:08:5d:01:78:ac:ad:f2:c4:74:b3: 54:5d:56:23:04:78:94:51:32:e7:17:c0:dd:e7:bb:a7:eb:14: 02:86:1a:01:27:cf:ed:44:fc:f9:43:bd:67:31:50:8e:f9:ae: a1:2e:bc:69:28:d5:64:3a:30:a1:8a:e4:0b:9e:b2:5e:0b:87: d2:a5:ae:16:68:7f:a6:cf:d1:87:c9:d5:d6:6e:42:37:43:26: 6b:a4:73:5b:60:e7:f4:c1:3d:f2:07:84:e0:b7:27:08:ab:a9: 83:3f:d0:4b:73:8d:f6:65:c6:1e:85:4a:da:72:0e:69:43:8b: 4e:5e:9b:d1:ff:9f:e7:48:71:95:74:3f:d4:ea:d9:58:47:af: 81:29:3a:c5:9a:2c:1c:c8:ca:85:7e:04:54:96:0f:02:83:ab: 7e:e3:89:f4:e4:a4:12:d3:b8:4d:a0:76:0c:47:3f:27:aa:51: 57:99:c0:d2:d4:ef:74:22:6e:44:8b:ac:a3:be:f5:05:3a:5c: 2f:27:c4:f7:c4:35:52:c9:d6:03:01:8f:0e:dc:b7:5f:41:5e: 46:5c:7a:b1:9c:1d:5b:88:fc:3e:a3:7a:0b:31:cf:5f:d5:ef: 04:0d:60:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1RTQxMTAvBgNVBAUTKDg3Q0EzOTQ4Q0UxQ0NCRTFBMjA0QzVGODBEQjQzMDQx MDlBODMxN0MwHhcNMjYwODIyMTY0MDI1WhcNMjYwODI5MTY0MDI1WjAYMRYwFAYD VQQDEw02YTg5ZDBmYS1kNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVtnq6UbyT6sIwB/6gSMPZmzTEM6BbUSNX4D6owR98SmttAcGqHz4GGPegNE 58e/etjkX4ZH92Ifn5uyxQsRkC5pev6qd0AqUPXKu+0CVgJeYE8qzU6jXb8aU3pb 8Cpymp4Q28f4gojWDDqxILmvkwqx4NLpsteH7qbyMD/pPBcIYWKIIQGPb21Ke4J/ OyVwjMIKZ4rFGTTtqkSthXPet9quYkrd1SVa0K3EAAwSbxsY0kmC7dmiiS5MR4Mu M343Y6v1scnNePBdpN8TiFiGv4+/XCfHae5z/ewGudFr9piH6CJbgeQTxxAHm32G oelK+FAwTgZYZ8Rlowwn9hFIhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdYSByO Ebstwl/8VY44EfoUMy+kMB8GA1UdIwQYMBaAFIfKOUjOHMvhogTF+A20MEEJqDF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVFNC83OTM5NzMyMDRE MDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3ktR2lCTVg0RGJRd1FRbW9N WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4bzVTTTRjeS1HaUJNWDREYlF3UVFtb01Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVFNC83OTM5NzMyMDREMDAxMUU4QTAyNkUxNEFDNEY5QUUwMi9oOG81U000Y3kt R2lCTVg0RGJRd1FRbW9NWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATdLg3CoMAvWU8zxHaKbXGd+HqA6t8FiXxmgIXQF4rK3yxHSzVF1WIwR4lFEy 5xfA3ee7p+sUAoYaASfP7UT8+UO9ZzFQjvmuoS68aSjVZDowoYrkC56yXguH0qWu Fmh/ps/Rh8nV1m5CN0Mma6RzW2Dn9ME98geE4LcnCKupgz/QS3ON9mXGHoVK2nIO aUOLTl6b0f+f50hxlXQ/1OrZWEevgSk6xZosHMjKhX4EVJYPAoOrfuOJ9OSkEtO4 TaB2DEc/J6pRV5nA0tTvdCJuRIuso771BTpcLyfE98Q1UsnWAwGPDty3X0FeRlx6 sZwdW4j8PqN6CzHPX9XvBA1gOg== -----END CERTIFICATE-----Generated at Sat Aug 22 21:11:13 2026 by rpki-client