$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft File: NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json) Hash identifier: m0IB7eklN47TwrXpVB4SKpBrZ6Zn1H37KPteMH38ASs= Subject key identifier: FA:2B:BF:68:57:AF:0C:D5:BF:E3:BD:1A:D2:7C:01:04:D9:95:B1:79 Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC Certificate issuer: /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft Manifest number: 9B Signing time: Wed 19 Aug 2026 07:59:24 +0000 Manifest this update: Wed 19 Aug 2026 07:59:24 +0000 Manifest next update: Wed 26 Aug 2026 07:59:24 +0000 Files and hashes: 1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: K4DOb1pjZlYhtyFze3zwUcAMJ29vpyuVcBpKYqQqHeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC Validity Not Before: Aug 19 07:59:24 2026 GMT Not After : Aug 26 07:59:24 2026 GMT Subject: CN=6a85625c-1fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ea:e2:84:d9:c7:93:98:e0:8e:68:a7:e6:a2: fa:1d:13:2c:e1:27:8f:fe:76:1c:75:b5:02:5f:3c: 5d:50:b7:84:93:d5:4f:71:e0:cf:44:37:5c:d0:a0: 71:5c:d8:07:ba:28:dc:d9:17:ac:8a:e0:de:b8:81: 24:ef:18:50:8c:b2:2d:d6:c2:14:09:f6:f1:e4:59: 97:1c:5a:cb:a4:f6:af:2d:8c:dc:4c:e3:28:31:d7: b1:f0:1f:8b:c0:e2:a2:03:67:13:d3:8e:ff:28:1b: 23:33:60:a0:24:ea:e6:ee:eb:dd:31:77:f9:96:4f: 15:35:75:f9:c7:0f:13:4c:45:30:03:d5:44:82:7a: 66:64:d7:f5:69:50:a2:45:d7:b9:30:79:34:dd:3e: 67:5c:bc:42:e7:4f:44:2b:5f:31:24:8f:de:bf:7c: c8:b3:69:c7:7d:ed:dd:11:e8:b3:ea:08:38:ed:5e: 9e:8f:54:d1:bc:10:74:7e:d5:0c:2f:26:76:2d:8b: 97:63:a7:a0:b8:cc:ef:7e:ee:56:ad:48:96:98:97: f5:f2:ac:93:10:f0:b7:ad:6c:9c:31:13:0d:e5:b9: 1b:59:be:a3:c1:89:00:47:36:6f:b4:86:83:8b:40: d4:c7:61:33:bc:18:2c:67:89:20:75:7e:bb:1c:97: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:BF:68:57:AF:0C:D5:BF:E3:BD:1A:D2:7C:01:04:D9:95:B1:79 X509v3 Authority Key Identifier: keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:23:a8:d2:34:b7:a0:55:fd:b0:5e:c9:f3:d8:92:63:69:32: 4c:85:04:d5:e0:ec:57:b2:a4:23:9b:2c:75:5b:01:87:bd:0f: 16:92:88:19:78:32:07:ad:7e:da:80:31:e4:90:f5:a7:2c:96: cb:12:8a:aa:e1:98:9f:8b:22:bc:44:ef:7e:96:ea:b8:81:a1: 94:3c:da:1a:14:33:df:e2:cf:1b:b3:6f:1d:5e:13:8e:c0:7b: d6:18:5f:e3:58:bf:3e:13:c7:21:4e:da:3e:09:78:55:16:ad: ee:43:38:ab:1e:53:db:09:2b:c0:09:40:7c:b3:fb:d9:55:5d: 93:59:e0:9c:cc:63:bc:21:95:54:07:86:f8:de:46:7a:50:f0: 72:1d:5a:3d:bf:11:5d:6b:32:81:32:a3:e9:8a:14:d1:f8:64: f8:8e:56:fb:d6:89:2f:29:15:58:65:78:19:bc:74:68:cb:b4: c6:e3:7a:8f:58:4a:7d:26:e8:bf:24:7b:29:ac:bc:32:df:e4: de:1d:89:29:52:9d:a7:44:54:fc:89:86:e4:e5:0f:7d:11:83: 57:40:0e:90:8a:c6:a8:12:c4:6d:51:14:11:dd:82:88:b7:9b: 38:b8:e8:f0:3d:80:93:42:56:ee:ea:d1:be:8f:4f:1e:f9:03: 30:6f:0d:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0RTIxMTAvBgNVBAUTKDM2RDVBRDZFMTI2Q0Q1QjE4RUMxNDVCQzc3MkY0OTAw Rjk0Q0E2QkMwHhcNMjYwODE5MDc1OTI0WhcNMjYwODI2MDc1OTI0WjAYMRYwFAYD VQQDEw02YTg1NjI1Yy0xZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+rihNnHk5jgjmin5qL6HRMs4SeP/nYcdbUCXzxdULeEk9VPceDPRDdc0KBx XNgHuijc2ResiuDeuIEk7xhQjLIt1sIUCfbx5FmXHFrLpPavLYzcTOMoMdex8B+L wOKiA2cT047/KBsjM2CgJOrm7uvdMXf5lk8VNXX5xw8TTEUwA9VEgnpmZNf1aVCi Rde5MHk03T5nXLxC509EK18xJI/ev3zIs2nHfe3dEeiz6gg47V6ej1TRvBB0ftUM LyZ2LYuXY6eguMzvfu5WrUiWmJf18qyTEPC3rWycMRMN5bkbWb6jwYkARzZvtIaD i0DUx2EzvBgsZ4kgdX67HJepmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPorv2hX rwzVv+O9GtJ8AQTZlbF5MB8GA1UdIwQYMBaAFDbVrW4SbNWxjsFFvHcvSQD5TKa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRFMi8xRkRCMEYzRUFF REExMUYwOUQ0M0UyMkVDNEY5QUUwMi9OdFd0YmhKczFiR093VVc4ZHk5SkFQbE1w cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050V3RiaEpzMWJHT3dVVzhkeTlKQVBsTXBydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRFMi8xRkRCMEYzRUFFREExMUYwOUQ0M0UyMkVDNEY5QUUwMi9OdFd0YmhKczFi R093VVc4ZHk5SkFQbE1wcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAACOo0jS3oFX9sF7J89iSY2kyTIUE1eDsV7KkI5ssdVsBh70PFpKIGXgyB61+ 2oAx5JD1pyyWyxKKquGYn4sivETvfpbquIGhlDzaGhQz3+LPG7NvHV4TjsB71hhf 41i/PhPHIU7aPgl4VRat7kM4qx5T2wkrwAlAfLP72VVdk1ngnMxjvCGVVAeG+N5G elDwch1aPb8RXWsygTKj6YoU0fhk+I5W+9aJLykVWGV4Gbx0aMu0xuN6j1hKfSbo vyR7Kay8Mt/k3h2JKVKdp0RU/ImG5OUPfRGDV0AOkIrGqBLEbVEUEd2CiLebOLjo 8D2Ak0JW7urRvo9PHvkDMG8NPg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:47:53 2026 by rpki-client