$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: Ay5HRUnGLPyZBl6Y0q8m20+zBQNIh2UBTiOfywQI9Bc= Subject key identifier: 0C:2E:86:31:4D:23:7F:05:98:CA:C9:2D:41:08:D4:F5:E8:67:08:CA Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 01DE Signing time: Tue 25 Aug 2026 03:56:15 +0000 Manifest this update: Tue 25 Aug 2026 03:56:15 +0000 Manifest next update: Tue 01 Sep 2026 03:56:15 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: 9aJWAevOE++1gtbw+B1amSJuPq9S48KECZnKuLcpBw8=) 2: DFB06F1E8C4411F1B3F3C3C65411F970.roa (hash: m3C4Ne1JUnCi+zYe3q0erjOJOltliP8iGbvHB8vQzRY=) 3: 6CFCC5EC8F4D11F1B986D3494611F970.roa (hash: DIzsgSR5GwxTp5MHAgczXy9dfk2cq7Ie4lXeoFdLBeg=) 4: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: N7d2kdSjz/jwSyQEPzpDvWGJTq/1G0TljCkUhHZagrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 03:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Aug 25 03:56:15 2026 GMT Not After : Sep 1 03:56:15 2026 GMT Subject: CN=6a8d125f-72fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:97:ca:b3:31:2e:5b:d3:7e:c9:07:62:94:76: ac:56:55:3a:de:37:8e:15:a8:20:b3:a1:b1:47:23: 10:52:a9:5d:3f:c2:6c:7c:83:b5:3a:9c:da:24:a9: 5e:7f:37:88:cc:8c:2f:f4:65:6a:6e:53:bf:23:1d: 30:7e:03:52:63:0c:7a:17:20:0c:37:03:6e:ed:10: 7c:83:ac:16:a2:eb:5a:d2:da:49:34:dd:0f:86:0e: 60:3e:5a:ac:4b:56:04:28:e7:c6:b7:38:37:21:1b: 7c:cf:89:b3:e9:ce:ac:b4:20:f7:3a:71:cd:1c:49: 29:c9:e9:6e:0c:d1:2d:5d:ec:30:89:61:b9:0d:09: 48:74:d8:88:ab:65:16:72:87:b2:32:3d:6c:90:45: 52:7e:4e:a8:1f:11:3f:26:54:3b:51:ac:42:03:6f: 67:91:da:4a:4e:35:fe:e6:6a:44:97:d1:34:bc:a4: 88:3d:d8:ae:00:d9:53:2a:d8:c5:5d:48:6a:64:4f: 69:12:c4:58:f1:07:64:09:9e:11:99:37:06:59:f9: c5:77:95:46:cf:03:bd:1f:64:ae:6a:a5:57:60:b2: d6:9e:01:5f:ed:da:40:ee:d6:fa:23:b1:13:6b:ba: 91:71:db:1f:32:fd:36:da:0c:7f:68:59:ef:51:17: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2E:86:31:4D:23:7F:05:98:CA:C9:2D:41:08:D4:F5:E8:67:08:CA X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:2c:6d:1b:bb:23:9a:05:00:59:4c:5d:bc:83:2b:f7:4c:f9: 8f:2d:e5:47:d0:33:4f:2c:d1:12:a5:0b:27:bb:c7:57:17:ae: ef:42:2b:2c:c8:19:49:97:03:0d:5c:fa:a3:12:fe:54:01:28: 55:ee:2f:22:38:34:30:ed:65:5d:74:69:64:73:76:7c:a7:3a: de:43:f0:49:7b:b9:ab:68:30:c4:cd:8a:27:05:5f:03:34:30: c0:7c:04:14:3a:5f:1c:1d:e6:ec:0f:fc:ed:c6:81:ca:7b:7c: 8e:0c:d5:d2:7a:92:4c:98:f4:73:40:0c:b4:2f:fa:cd:d3:4f: 68:f9:cd:04:67:6c:33:64:ac:c8:83:99:55:84:42:c6:7b:4a: ad:e9:d4:7d:1c:d8:12:5b:90:d8:04:09:63:81:84:2a:4b:8c: 6c:d3:bc:01:9a:67:3e:9b:64:3b:c9:c7:b3:b9:ae:25:ea:d5: c0:df:35:fd:d7:2d:ee:e7:ec:87:01:da:4e:61:43:1c:d5:7b: 97:8a:fd:39:3f:54:8c:bb:eb:e8:9a:5e:bd:44:be:2a:d3:25: 5c:c2:4d:5e:84:ca:1c:c6:53:1e:28:bc:9c:46:ca:81:38:42: 30:86:21:0d:4f:3b:90:d6:36:05:b8:71:8b:5b:c7:10:12:97: e6:32:c8:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjYwODI1MDM1NjE1WhcNMjYwOTAxMDM1NjE1WjAYMRYwFAYD VQQDEw02YThkMTI1Zi03MmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25fKszEuW9N+yQdilHasVlU63jeOFaggs6GxRyMQUqldP8JsfIO1OpzaJKle fzeIzIwv9GVqblO/Ix0wfgNSYwx6FyAMNwNu7RB8g6wWouta0tpJNN0Phg5gPlqs S1YEKOfGtzg3IRt8z4mz6c6stCD3OnHNHEkpyeluDNEtXewwiWG5DQlIdNiIq2UW coeyMj1skEVSfk6oHxE/JlQ7UaxCA29nkdpKTjX+5mpEl9E0vKSIPdiuANlTKtjF XUhqZE9pEsRY8QdkCZ4RmTcGWfnFd5VGzwO9H2SuaqVXYLLWngFf7dpA7tb6I7ET a7qRcdsfMv022gx/aFnvURepHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwuhjFN I38FmMrJLUEI1PXoZwjKMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhCxtG7sjmgUAWUxdvIMr90z5jy3lR9AzTyzREqULJ7vHVxeu70IrLMgZSZcD DVz6oxL+VAEoVe4vIjg0MO1lXXRpZHN2fKc63kPwSXu5q2gwxM2KJwVfAzQwwHwE FDpfHB3m7A/87caBynt8jgzV0nqSTJj0c0AMtC/6zdNPaPnNBGdsM2SsyIOZVYRC xntKrenUfRzYEluQ2AQJY4GEKkuMbNO8AZpnPptkO8nHs7muJerVwN81/dct7ufs hwHaTmFDHNV7l4r9OT9UjLvr6JpevUS+KtMlXMJNXoTKHMZTHii8nEbKgThCMIYh DU87kNY2Bbhxi1vHEBKX5jLIKg== -----END CERTIFICATE-----Generated at Wed Aug 26 18:58:07 2026 by rpki-client