$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: DI28q2schtGV3Lal4YhsrBbvcorwLa+hCNdNPslruVU= Subject key identifier: 57:0E:2E:45:93:91:79:28:7B:E2:10:21:BC:C0:6D:04:B8:35:27:4D Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 0560 Signing time: Tue 18 Aug 2026 23:44:32 +0000 Manifest this update: Tue 18 Aug 2026 23:44:31 +0000 Manifest next update: Tue 25 Aug 2026 23:44:31 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: bgb545mZFlWNwot22duJKgu9fzTlPqtSEtFT5h6qgvY=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: ux98ZA0wQgB4FkaCCMLS/K2q+Dgh8iXTzVCbgOOhli4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Aug 18 23:44:31 2026 GMT Not After : Aug 25 23:44:31 2026 GMT Subject: CN=6a84ee5f-625a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:cd:cc:4b:14:c6:28:71:69:89:bc:8e:8c: ab:b7:95:b2:09:a1:ed:57:b3:b1:a9:19:73:e4:9c: d4:a9:4f:01:4f:19:f2:d0:a7:66:39:f1:0a:ec:df: ae:1a:94:49:be:c8:2b:b8:8b:22:a9:f8:48:75:63: 0b:a2:3a:4a:00:44:c9:7b:a7:39:cf:37:84:54:8c: d3:ff:32:74:9c:f7:38:b8:07:7b:1f:d7:38:a3:95: ca:2b:68:31:7b:60:ca:e7:11:ab:0d:ff:79:14:88: 18:29:4a:13:d3:b4:dc:5b:d1:40:40:e1:21:bd:47: c3:af:9f:9a:24:ab:79:21:0e:fb:f3:19:17:57:2e: 68:b4:9b:c4:ec:d8:f3:78:22:66:ea:d5:92:50:85: 6b:07:c2:8b:e5:7c:96:f9:79:a4:c9:31:99:d6:a5: e3:64:2f:e2:9a:90:24:3b:59:ca:58:86:57:2f:9d: b3:a7:c5:3a:9e:9c:62:1d:26:d7:92:5a:eb:03:a3: 3d:90:1e:61:ad:55:9a:33:fe:9a:de:34:21:8c:81: df:7d:61:84:af:a3:1a:5c:ae:0d:45:2e:f8:29:bf: 4e:27:ef:e7:53:5e:c6:5a:9b:97:ac:e1:ae:e1:43: ef:95:78:3b:d1:79:76:b7:0f:f2:7c:1c:04:1f:61: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:2E:45:93:91:79:28:7B:E2:10:21:BC:C0:6D:04:B8:35:27:4D X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:42:61:82:04:81:09:1b:8b:28:3c:d0:7e:9b:6a:b7:b7:b3: 5b:bd:53:17:e3:69:65:a6:86:61:f6:ad:fe:d4:5d:58:c5:7f: fc:b5:50:45:2c:de:f2:5d:e9:af:37:b1:d5:62:20:0b:97:11: d2:23:69:73:fc:c6:89:44:96:ae:17:b9:47:fa:86:84:71:73: a5:f8:50:97:c6:b0:b6:a5:bc:30:35:66:75:f0:1b:a7:78:b4: ab:73:b7:4a:44:ec:bd:49:e1:8a:be:f9:63:7c:42:06:67:86: f9:f8:84:a2:47:6a:d3:47:d1:07:33:ec:30:d5:aa:03:18:e9: 38:a3:d4:a5:33:76:aa:78:dd:20:d4:3a:54:0c:71:fe:44:97: 9b:12:95:ac:ea:3c:5f:b0:23:b6:f3:51:98:c1:0b:5b:67:d5: 9c:f4:43:8a:99:07:0d:31:04:85:2b:be:65:e5:85:fe:8a:7c: 04:80:83:e2:3e:89:c3:2b:1a:13:22:8f:2a:7b:b7:c1:38:fc: c9:15:87:34:d1:69:32:83:ff:58:0d:37:e7:8c:28:b2:fb:e8: 7d:c2:ba:16:5d:71:b1:1d:9d:94:56:06:9f:85:1d:16:98:fd: 1e:62:22:6b:18:97:60:eb:6a:17:9c:ab:95:03:ec:2e:f9:71: 97:c7:db:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjYwODE4MjM0NDMxWhcNMjYwODI1MjM0NDMxWjAYMRYwFAYD VQQDEw02YTg0ZWU1Zi02MjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxzNzEsUxihxaYm8joyrt5WyCaHtV7OxqRlz5JzUqU8BTxny0KdmOfEK7N+u GpRJvsgruIsiqfhIdWMLojpKAETJe6c5zzeEVIzT/zJ0nPc4uAd7H9c4o5XKK2gx e2DK5xGrDf95FIgYKUoT07TcW9FAQOEhvUfDr5+aJKt5IQ778xkXVy5otJvE7Njz eCJm6tWSUIVrB8KL5XyW+XmkyTGZ1qXjZC/impAkO1nKWIZXL52zp8U6npxiHSbX klrrA6M9kB5hrVWaM/6a3jQhjIHffWGEr6MaXK4NRS74Kb9OJ+/nU17GWpuXrOGu 4UPvlXg70Xl2tw/yfBwEH2FdgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcOLkWT kXkoe+IQIbzAbQS4NSdNMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArkJhggSBCRuLKDzQfptqt7ezW71TF+NpZaaGYfat/tRdWMV//LVQRSze8l3p rzex1WIgC5cR0iNpc/zGiUSWrhe5R/qGhHFzpfhQl8awtqW8MDVmdfAbp3i0q3O3 SkTsvUnhir75Y3xCBmeG+fiEokdq00fRBzPsMNWqAxjpOKPUpTN2qnjdINQ6VAxx /kSXmxKVrOo8X7AjtvNRmMELW2fVnPRDipkHDTEEhSu+ZeWF/op8BICD4j6Jwysa EyKPKnu3wTj8yRWHNNFpMoP/WA0354wosvvofcK6Fl1xsR2dlFYGn4UdFpj9HmIi axiXYOtqF5yrlQPsLvlxl8fbVw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:51:09 2026 by rpki-client