$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft File: p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json) Hash identifier: ZTl5TUTNX5NlmYdBrMN5ET0ltr0LNArEIXYEKcTpepo= Subject key identifier: 28:A8:F8:C0:C3:E5:43:10:C0:C4:39:CB:A0:79:E7:34:FE:38:77:11 Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71 Certificate issuer: /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft Manifest number: 9E Signing time: Wed 19 Aug 2026 07:59:21 +0000 Manifest this update: Wed 19 Aug 2026 07:59:21 +0000 Manifest next update: Wed 26 Aug 2026 07:59:21 +0000 Files and hashes: 1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: o37IY21G45/2wHgD1QeEmcFHOXY+df/3pIPMO3iyJWY=) 2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: KbzUtTPtGCQ3I/N5KWpd9MwtuQNamm+9Vruv3vtMr6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871 Validity Not Before: Aug 19 07:59:21 2026 GMT Not After : Aug 26 07:59:21 2026 GMT Subject: CN=6a856259-e0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:24:90:df:e7:63:cc:a3:6c:27:46:a1:6e:b6: 04:45:bd:f9:98:7f:9a:70:bd:40:ec:88:13:01:38: 10:54:a0:f9:4f:f8:84:2b:64:2d:6d:3d:be:49:db: f1:88:69:ce:db:c1:dd:03:af:44:dc:08:2f:8c:b3: 54:e5:5c:ae:07:0a:04:00:ef:30:12:9f:2c:29:fa: 46:fb:d0:a5:d2:c1:a4:25:23:20:68:5a:39:d7:4a: 77:39:98:1d:5c:c7:30:e0:ca:d6:8b:ed:8e:2f:45: 80:ec:b1:a7:8b:be:9d:ed:0d:e4:1d:69:1a:8a:34: 97:b1:f2:90:eb:19:de:f5:45:a1:43:46:c5:0d:04: ea:e8:de:4f:f6:6f:3a:be:9a:c3:86:e1:9e:57:da: 55:31:4d:29:d1:77:87:bb:c3:e0:a7:36:f1:15:4a: 99:54:d6:d9:8a:8d:77:39:53:21:f8:9f:6e:b8:7f: b6:f8:ba:3b:3c:00:67:42:b8:b5:21:54:17:dc:7a: 56:06:17:6d:4e:ca:8d:51:10:15:7b:58:48:0a:13: 0b:7f:44:c2:42:64:28:30:c4:5a:18:e2:b3:f7:bd: 85:d6:f3:bd:68:96:5d:fc:43:a7:2f:33:7c:11:15: df:ed:40:45:c5:dc:f0:9a:12:0a:5d:6a:f4:81:57: 23:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A8:F8:C0:C3:E5:43:10:C0:C4:39:CB:A0:79:E7:34:FE:38:77:11 X509v3 Authority Key Identifier: keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bd:3e:1a:c5:bc:f9:a7:19:af:82:de:c0:35:57:73:e7:36: dc:17:06:68:52:48:a7:8f:75:ac:6e:64:6e:4f:89:c7:92:58: 2a:8b:31:76:2e:25:70:3e:de:2b:81:6b:2d:52:58:65:33:33: dd:9e:a4:99:bd:c6:4d:6b:7e:df:02:61:23:4b:4b:04:a4:c1: 56:d1:8c:56:73:94:87:75:94:ad:42:b9:94:2c:45:d0:46:a0: 63:df:6b:dc:d5:f5:f7:41:75:60:fe:1e:71:6e:06:29:8e:06: a6:a7:91:3c:fb:26:bb:bd:f2:38:25:3a:a4:34:e9:85:4f:69: 0e:2e:93:0a:6c:5b:31:66:e9:ab:ce:8c:25:c4:12:ef:a5:b5: 8f:c5:53:8d:b5:f2:de:34:b1:41:b5:63:84:1c:0d:00:92:dd: 3b:29:a2:70:79:7b:89:cc:16:95:e3:e3:08:d3:37:ed:dd:41: 71:55:0e:fb:fd:a9:27:22:e3:af:05:d6:0a:e3:92:c4:1e:36: 5b:ca:e2:ec:fc:96:97:9e:94:69:07:81:a3:46:87:8c:af:c9: b5:ec:56:31:96:3c:bc:4d:03:2c:e9:ba:85:6a:fc:40:72:36: 5a:98:47:87:6f:aa:68:73:25:9b:f0:04:b9:a2:fa:fa:cd:fd: ae:f0:84:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0RTIxMTAvBgNVBAUTKEE3Rjc3RjIwNDdEMzU2OEMwNDNBMzM4Qzc5MzJCMEEy M0M4RjY4NzEwHhcNMjYwODE5MDc1OTIxWhcNMjYwODI2MDc1OTIxWjAYMRYwFAYD VQQDEw02YTg1NjI1OS1lMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ySQ3+djzKNsJ0ahbrYERb35mH+acL1A7IgTATgQVKD5T/iEK2QtbT2+Sdvx iGnO28HdA69E3AgvjLNU5VyuBwoEAO8wEp8sKfpG+9Cl0sGkJSMgaFo510p3OZgd XMcw4MrWi+2OL0WA7LGni76d7Q3kHWkaijSXsfKQ6xne9UWhQ0bFDQTq6N5P9m86 vprDhuGeV9pVMU0p0XeHu8PgpzbxFUqZVNbZio13OVMh+J9uuH+2+Lo7PABnQri1 IVQX3HpWBhdtTsqNURAVe1hIChMLf0TCQmQoMMRaGOKz972F1vO9aJZd/EOnLzN8 ERXf7UBFxdzwmhIKXWr0gVcjbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCio+MDD 5UMQwMQ5y6B55zT+OHcRMB8GA1UdIwQYMBaAFKf3fyBH01aMBDozjHkysKI8j2hx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRFMi8xNEQyRTdCQUFF REExMUYwOUQ0M0UyMkVDNEY5QUUwMi9wX2RfSUVmVFZvd0VPak9NZVRLd29qeVBh SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BfZF9JRWZUVm93RU9qT01lVEt3b2p5UGFIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRFMi8xNEQyRTdCQUFFREExMUYwOUQ0M0UyMkVDNEY5QUUwMi9wX2RfSUVmVFZv d0VPak9NZVRLd29qeVBhSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXb0+GsW8+acZr4LewDVXc+c23BcGaFJIp491rG5kbk+Jx5JYKosxdi4lcD7e K4FrLVJYZTMz3Z6kmb3GTWt+3wJhI0tLBKTBVtGMVnOUh3WUrUK5lCxF0EagY99r 3NX190F1YP4ecW4GKY4GpqeRPPsmu73yOCU6pDTphU9pDi6TCmxbMWbpq86MJcQS 76W1j8VTjbXy3jSxQbVjhBwNAJLdOymicHl7icwWlePjCNM37d1BcVUO+/2pJyLj rwXWCuOSxB42W8ri7PyWl56UaQeBo0aHjK/JtexWMZY8vE0DLOm6hWr8QHI2WphH h2+qaHMlm/AEuaL6+s39rvCEbA== -----END CERTIFICATE-----Generated at Wed Aug 19 15:15:07 2026 by rpki-client