$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: EJlwEmfrHxrVbGmqXY8PipXfcMUnXhFbWueSVqJSFFw= Subject key identifier: 18:78:D0:39:94:B0:6F:E3:19:D3:FF:07:53:7C:3A:58:FC:72:9C:77 Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 5C Signing time: Tue 25 Aug 2026 08:08:42 +0000 Manifest this update: Tue 25 Aug 2026 08:08:42 +0000 Manifest next update: Tue 01 Sep 2026 08:08:42 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: AddA41WXgtDYVLXkZ8bndPLpT9uzPWMYsgRHprHX1+w=) 2: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: xm+x+fd04WB7I1yVjzFgWBEajtZgqkuYkfVhhVRPfos=) 3: 60C94672909911F189B737F66C11F970.roa (hash: MkE66wfeDgOquisiYVXHDlUpsCxTafplxHRM0Iqm2AA=) 4: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: LCbiXJV4M3UWd5Td2YnoUunf4O6JAsggUfEGQHHJ8+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Aug 25 08:08:42 2026 GMT Not After : Sep 1 08:08:42 2026 GMT Subject: CN=6a8d4d8a-a407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:67:d4:88:1a:3f:03:8f:a6:ec:91:17:de:10: 28:ee:54:c6:c2:2a:0a:96:0a:88:45:be:1f:9e:f6: 5f:39:84:f2:0f:a7:61:e6:06:1a:c0:d7:e7:ee:58: 04:cb:e1:8c:84:ee:33:d6:4b:e0:a5:fc:57:c1:ab: be:a8:df:73:91:d8:ad:b5:b5:61:54:55:47:fa:4d: d3:fb:de:7f:4f:7e:e9:1f:0e:73:93:86:96:cb:2b: 3b:29:06:a5:45:cf:7c:e7:9b:32:9d:4f:a4:ee:0a: 55:96:4d:a2:60:4e:b2:77:8d:bf:af:9b:61:d5:59: f7:45:2f:ad:ed:5e:c5:db:a9:68:53:38:ae:7d:04: 04:da:81:ab:a7:06:87:eb:d3:b2:fb:e9:71:ea:85: 0d:2d:e2:1c:0d:e4:bc:c7:8c:98:00:29:14:29:1f: 77:35:1c:86:13:53:3d:0c:21:81:28:2f:cf:07:9e: b3:54:fb:b3:57:f6:00:2f:d2:ef:0d:b7:e9:5a:ac: cf:ab:35:fe:46:87:7f:5b:1d:56:42:f5:ad:3a:95: a1:91:9a:b9:00:8e:45:37:bd:80:8a:a4:c2:b7:24: 0f:22:15:5f:df:c8:0c:8c:e8:d4:80:19:52:84:ec: 4c:bc:64:64:fc:28:6f:68:30:f4:e9:86:8b:e7:a3: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:78:D0:39:94:B0:6F:E3:19:D3:FF:07:53:7C:3A:58:FC:72:9C:77 X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:95:8b:22:fe:db:8d:d0:6a:a5:bf:e2:18:0e:39:54:7d:ad: c0:54:25:46:9f:0e:ea:80:2d:c5:9b:6b:e4:8a:43:56:c7:c5: 88:42:78:4c:98:cf:36:06:48:0a:24:c2:53:8d:3f:44:34:eb: 94:78:a0:fc:9d:fd:32:de:4d:1b:b2:fd:77:cc:62:ba:42:ee: 20:00:98:a1:d2:b8:7c:6d:ca:f6:ce:cf:46:14:d5:f8:26:b7: be:61:6e:e7:a2:46:0d:6d:0e:47:a3:39:ee:ce:98:85:65:70: 94:63:e6:32:45:bb:9f:81:21:55:42:83:fe:eb:d7:96:5b:2a: d1:b1:4d:a0:5b:b2:b4:5e:9e:ab:cb:08:ef:a8:ba:7b:00:96: 78:b6:8f:7e:bb:1a:d5:fe:20:c7:3e:2d:1d:4e:1e:d9:99:ae: 99:db:58:5f:d5:df:a9:68:5d:d8:b9:b1:00:c1:e4:4e:ea:09: 7c:0f:01:69:a9:b3:a3:66:f6:6c:d3:59:ea:c2:f9:42:da:71: ad:be:d3:c0:fb:64:58:78:8e:6f:9a:df:60:15:1e:f6:01:3c: 1e:a6:ef:00:8e:bc:5e:24:61:58:f5:7d:3b:27:8d:3d:80:fc: ac:0a:f9:b5:90:07:93:1c:a2:1a:42:f6:dc:8c:8d:f6:40:8e: 9a:5c:63:c6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjA4MjUwODA4NDJaFw0yNjA5MDEwODA4NDJaMBgxFjAUBgNV BAMTDTZhOGQ0ZDhhLWE0MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfZ9SIGj8Dj6bskRfeECjuVMbCKgqWCohFvh+e9l85hPIPp2HmBhrA1+fuWATL 4YyE7jPWS+Cl/FfBq76o33OR2K21tWFUVUf6TdP73n9PfukfDnOThpbLKzspBqVF z3znmzKdT6TuClWWTaJgTrJ3jb+vm2HVWfdFL63tXsXbqWhTOK59BATagaunBofr 07L76XHqhQ0t4hwN5LzHjJgAKRQpH3c1HIYTUz0MIYEoL88HnrNU+7NX9gAv0u8N t+larM+rNf5Gh39bHVZC9a06laGRmrkAjkU3vYCKpMK3JA8iFV/fyAyM6NSAGVKE 7Ey8ZGT8KG9oMPTphovnoyOlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGHjQOZSw b+MZ0/8HU3w6WPxynHcwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjQyLzdDRjhBMDgyMURCMTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJ YVU1SU1iMDQxMGpHYzlHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLlYsi/tuN0Gqlv+IYDjlUfa3AVCVGnw7qgC3Fm2vkikNWx8WIQnhMmM82BkgK JMJTjT9ENOuUeKD8nf0y3k0bsv13zGK6Qu4gAJih0rh8bcr2zs9GFNX4Jre+YW7n okYNbQ5HoznuzpiFZXCUY+YyRbufgSFVQoP+69eWWyrRsU2gW7K0Xp6rywjvqLp7 AJZ4to9+uxrV/iDHPi0dTh7Zma6Z21hf1d+paF3YubEAweRO6gl8DwFpqbOjZvZs 01nqwvlC2nGtvtPA+2RYeI5vmt9gFR72ATwepu8AjrxeJGFY9X07J409gPysCvm1 kAeTHKIaQvbcjI32QI6aXGPG -----END CERTIFICATE-----Generated at Wed Aug 26 18:00:08 2026 by rpki-client