$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft File: 4hHNheByVQ4z5MyGpj-8360dNTI.mft (raw, json) Hash identifier: 8YW744Cq2dVG23T9vNbsg2kzgrJL46c2PZdRXyE+IQQ= Subject key identifier: 2D:1E:35:B6:99:2A:D3:C7:A6:4D:0D:C9:80:AA:85:D8:23:FF:6D:D3 Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32 Certificate issuer: /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532 Certificate serial: 091E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft Manifest number: 0906 Signing time: Sun 30 Aug 2026 20:24:32 +0000 Manifest this update: Sun 30 Aug 2026 20:24:32 +0000 Manifest next update: Sun 06 Sep 2026 20:24:32 +0000 Files and hashes: 1: 4hHNheByVQ4z5MyGpj-8360dNTI.crl (hash: Z8gbvX+zw1DfAvCGWotqw7XKJXbqZ2U9hYOuF3IiUyY=) 2: 57BDB7A85E7011F1A73FCCD7147AAC22.roa (hash: D1vi/CU/2Qa3UAwk8ROF6/81kLEg5XQ0HrFSPG7aFBg=) 3: 0694DE925E7011F18D994AD5147AAC22.roa (hash: 1VTps7TMblVtTtQQmFdN1wLLHWYElV09OvYdQPb9W90=) 4: AF3304C65E6F11F18B912BC3147AAC22.roa (hash: mugZ6N0u6WAwoUu9/alz8CzePymZa9nygy/+jo0Dw6g=) 5: CEDD71FAE48811F09BEEC367446F56BC.roa (hash: v+w6FMXM2xR0r2SO7jbmxEeAiii0dpp5GEOdFjQ8hTM=) 6: 624086E2E99611EA930A5B74C4F9AE02.roa (hash: gGjRkko3vUXG2uHIO8NHVPfpIWdSndydd5tBp7Lr7bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 20:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2334 (0x91e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532 Validity Not Before: Aug 30 20:24:32 2026 GMT Not After : Sep 6 20:24:32 2026 GMT Subject: CN=6a949180-6f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:c2:fa:e3:a8:cf:b3:f6:85:35:be:97:a5: 53:cf:75:c5:b2:b1:a9:34:d6:06:86:41:28:6b:54: 1e:ea:62:78:51:76:b2:75:24:da:94:d1:11:b2:af: e5:f4:72:69:fb:1e:31:c2:42:f6:27:9d:23:08:f1: a2:32:1c:32:df:e6:c0:23:7d:1f:73:9a:ca:49:85: 93:d3:c8:1c:2b:22:b5:62:12:4e:94:04:82:33:e4: c6:37:a1:a5:83:f8:26:6c:20:ae:56:51:13:1c:0b: 06:89:e9:5b:a5:77:b8:c7:55:29:15:cd:99:a1:4c: 82:f3:87:6d:b4:4a:51:57:4f:09:a4:fb:71:bd:fe: 43:ca:47:9f:84:93:60:98:a9:e9:ef:17:c7:4f:ff: bb:ee:c2:a8:9c:e4:b6:18:4b:f1:b6:59:b5:9f:75: 72:71:57:98:e1:7c:3f:8f:f9:f7:e0:01:d7:e2:a3: b8:27:d4:ff:65:92:18:2b:7f:b8:1a:1f:8c:e7:b7: 99:c8:43:86:0c:70:ff:2e:2c:20:ce:94:49:47:02: 26:92:3d:76:6d:31:d7:4b:66:03:9b:45:f6:a6:7d: 3a:f4:49:59:6b:a2:2b:ae:8d:90:71:13:6c:7e:9c: 37:c7:a4:b9:e5:cf:a7:b7:ad:f6:c7:aa:0b:49:98: 68:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1E:35:B6:99:2A:D3:C7:A6:4D:0D:C9:80:AA:85:D8:23:FF:6D:D3 X509v3 Authority Key Identifier: keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:17:e3:22:cf:ff:63:3d:22:e7:27:4e:d4:cb:9a:bf:5e:9c: 7b:fa:07:a5:a1:f5:bb:a9:99:49:f3:75:df:4e:fc:fb:f5:1e: d0:2d:9b:9d:55:08:c9:7f:af:a8:4c:ce:0c:cc:69:1b:bb:40: ef:f8:07:e2:0b:40:39:24:11:80:5b:aa:23:6a:39:6a:a9:08: 76:8d:18:8f:ca:34:4e:ee:6a:7c:f7:57:65:25:11:e7:27:7e: 6d:92:42:7d:c7:d3:f6:5e:aa:74:09:88:46:77:c4:da:3f:da: 48:71:9d:33:a9:86:51:8a:78:3a:40:31:e2:51:14:5e:6f:07: 1b:29:13:dc:f0:5f:02:50:52:63:66:9e:7a:e1:2f:2c:f7:a8: 44:95:ae:4e:65:01:2f:9a:7d:f0:6f:22:05:28:1f:a6:0c:5d: db:f0:a3:ef:00:64:ae:8f:b4:67:86:29:d7:e6:85:c1:de:8c: c8:79:d3:e0:86:05:ec:09:74:a2:c5:a8:68:4a:17:66:1d:29: fd:50:fe:99:35:b9:0a:81:3e:cc:bb:19:bf:76:d0:fc:c6:d8: a4:dd:03:f3:51:ec:00:ef:e3:1c:a9:a7:4a:41:10:3c:b5:ae: ed:bb:3d:35:38:f0:60:e3:80:2b:e6:66:7c:36:5b:59:60:5b: 0f:99:fa:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1Q0QxMTAvBgNVBAUTKEUyMTFDRDg1RTA3MjU1MEUzM0U0Q0M4NkE2M0ZCQ0RG QUQxRDM1MzIwHhcNMjYwODMwMjAyNDMyWhcNMjYwOTA2MjAyNDMyWjAYMRYwFAYD VQQDEw02YTk0OTE4MC02ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVHC+uOoz7P2hTW+l6VTz3XFsrGpNNYGhkEoa1Qe6mJ4UXaydSTalNERsq/l 9HJp+x4xwkL2J50jCPGiMhwy3+bAI30fc5rKSYWT08gcKyK1YhJOlASCM+TGN6Gl g/gmbCCuVlETHAsGielbpXe4x1UpFc2ZoUyC84dttEpRV08JpPtxvf5DykefhJNg mKnp7xfHT/+77sKonOS2GEvxtlm1n3VycVeY4Xw/j/n34AHX4qO4J9T/ZZIYK3+4 Gh+M57eZyEOGDHD/LiwgzpRJRwImkj12bTHXS2YDm0X2pn069ElZa6Irro2QcRNs fpw3x6S55c+nt632x6oLSZhomwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0eNbaZ KtPHpk0NyYCqhdgj/23TMB8GA1UdIwQYMBaAFOIRzYXgclUOM+TMhqY/vN+tHTUy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODVDRC84QTUwNTU4OERE MTkxMUVBOTREMjYwMTFDNEY5QUUwMi80aEhOaGVCeVZRNHo1TXlHcGotODM2MGRO VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRoSE5oZUJ5VlE0ejVNeUdwai04MzYwZE5USS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODVDRC84QTUwNTU4OEREMTkxMUVBOTREMjYwMTFDNEY5QUUwMi80aEhOaGVCeVZR NHo1TXlHcGotODM2MGROVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADBfjIs//Yz0i5ydO1Muav16ce/oHpaH1u6mZSfN13078+/Ue0C2bnVUIyX+v qEzODMxpG7tA7/gH4gtAOSQRgFuqI2o5aqkIdo0Yj8o0Tu5qfPdXZSUR5yd+bZJC fcfT9l6qdAmIRnfE2j/aSHGdM6mGUYp4OkAx4lEUXm8HGykT3PBfAlBSY2aeeuEv LPeoRJWuTmUBL5p98G8iBSgfpgxd2/Cj7wBkro+0Z4Yp1+aFwd6MyHnT4IYF7Al0 osWoaEoXZh0p/VD+mTW5CoE+zLsZv3bQ/MbYpN0D81HsAO/jHKmnSkEQPLWu7bs9 NTjwYOOAK+ZmfDZbWWBbD5n6Uw== -----END CERTIFICATE-----Generated at Mon Aug 31 11:12:33 2026 by rpki-client