$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json) Hash identifier: FA1lHQ6ltZq5us8/imbckyrdgxc+B15cQXN5KBgF9Qk= Subject key identifier: 7D:F7:CB:FC:A7:09:B7:D9:E3:EB:AB:59:88:5C:EB:FD:39:E9:45:AD Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft Manifest number: 0292 Signing time: Wed 19 Aug 2026 02:20:23 +0000 Manifest this update: Wed 19 Aug 2026 02:20:22 +0000 Manifest next update: Wed 26 Aug 2026 02:20:22 +0000 Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: Ku5HBcuG5juf8cS2/wqsmhBprbBXalB+fPiNPcXKE2M=) 2: 7E9B367C7EA811F1A854ADB365A30FBC.roa (hash: Eu4ivh0ocxW3L/+Wz018Tp2rtHk2MvNF/CFT6tWavaM=) 3: 1B8AAA547EA811F1B1B4ABB165A30FBC.roa (hash: CrxDIG23oExmjO7SdSCqEOfcY+3UGQ0HeSLQRNX0rk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Validity Not Before: Aug 19 02:20:22 2026 GMT Not After : Aug 26 02:20:22 2026 GMT Subject: CN=6a8512e6-e4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6c:90:ec:da:81:ab:7c:15:61:6b:33:46:01: 25:b3:65:2b:9e:2b:39:d9:52:39:05:1b:3a:0a:c2: 96:4b:56:34:9b:f2:18:3f:51:9e:27:bd:70:40:33: d2:0c:4e:c4:0b:d9:b8:e1:25:8a:65:cf:b2:8f:ef: e5:d0:09:00:30:8b:2c:83:35:1d:fa:7c:07:34:84: 91:38:33:b3:17:18:3e:ae:57:cc:2e:7b:21:ba:7b: 37:70:fd:1b:83:31:87:34:ab:fa:93:cf:a5:25:f9: 3d:03:da:e1:a5:22:fc:cd:d3:17:3c:41:77:bf:cb: 0d:6f:11:63:40:06:64:cb:8e:b8:e7:26:e8:a7:de: 6b:af:3e:d6:35:8c:4b:7c:c0:77:97:21:68:20:c4: 31:1e:e3:b4:98:15:60:c7:03:87:d3:32:8f:78:4a: 25:0c:cf:94:44:4c:a6:01:cf:53:eb:a8:b5:0e:dc: fb:e0:a6:7d:33:3c:b6:cd:29:7a:18:73:23:b6:37: 83:15:8b:17:13:81:ba:99:3d:ff:a1:4a:99:66:4a: b4:77:17:bf:32:76:a3:d9:3b:97:b7:a3:fe:84:00: 5a:73:38:ee:e1:6e:b0:4e:9f:59:19:33:31:a1:48: 15:1e:52:d4:16:47:49:c9:59:60:db:b8:c4:7d:ce: a2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F7:CB:FC:A7:09:B7:D9:E3:EB:AB:59:88:5C:EB:FD:39:E9:45:AD X509v3 Authority Key Identifier: keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:5d:09:31:a6:4d:7b:44:8f:8e:c0:47:45:79:a9:30:cb:9e: ab:72:70:a6:1f:49:29:7a:3d:97:87:91:9d:dc:5f:ab:f7:90: a4:08:9a:9f:c5:70:a6:18:24:31:63:8e:ed:9c:a4:9d:85:70: 32:cf:f4:be:de:84:48:ee:b7:9b:83:b2:6e:d7:63:53:77:76: 33:d3:5e:83:80:91:17:37:cd:6d:d9:e7:94:df:26:a5:1c:c9: f0:9c:36:74:73:ae:3a:30:22:c3:fd:53:77:51:82:5d:42:fe: 9a:f0:70:e9:4c:c3:32:fd:57:76:2a:09:32:f0:3c:e8:fa:2c: 51:90:8a:d3:8c:8b:34:be:af:9d:9e:f5:4e:ac:06:13:e9:07: 42:da:fd:e6:30:96:55:55:a6:29:81:06:ff:4a:8a:cd:e5:f1: 29:4e:0f:69:7e:24:82:ca:8c:f1:ca:e0:27:53:14:0d:f8:2c: 8a:22:72:bc:07:12:e7:8b:23:cc:58:c9:d9:8a:42:f7:8e:69: 35:99:73:15:28:dd:8b:ac:ed:b1:db:3e:b8:ea:7a:19:5f:6e: c3:7a:b3:de:f9:c5:57:91:0a:01:a4:5d:e3:52:83:48:95:74: c1:d4:71:56:85:f3:b9:c9:c4:18:ef:f7:6d:aa:b8:8c:74:8b: eb:0c:9e:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBNDAxMTAvBgNVBAUTKDM3QjYyQTc3MjUxQzUyQTA0QjMzQjgyRDJFRDAyMDRD OTI3QTQyOUEwHhcNMjYwODE5MDIyMDIyWhcNMjYwODI2MDIyMDIyWjAYMRYwFAYD VQQDEw02YTg1MTJlNi1lNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGyQ7NqBq3wVYWszRgEls2Urnis52VI5BRs6CsKWS1Y0m/IYP1GeJ71wQDPS DE7EC9m44SWKZc+yj+/l0AkAMIssgzUd+nwHNISRODOzFxg+rlfMLnshuns3cP0b gzGHNKv6k8+lJfk9A9rhpSL8zdMXPEF3v8sNbxFjQAZky4645ybop95rrz7WNYxL fMB3lyFoIMQxHuO0mBVgxwOH0zKPeEolDM+UREymAc9T66i1Dtz74KZ9Mzy2zSl6 GHMjtjeDFYsXE4G6mT3/oUqZZkq0dxe/Mnaj2TuXt6P+hABaczju4W6wTp9ZGTMx oUgVHlLUFkdJyVlg27jEfc6ieQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH33y/yn CbfZ4+urWYhc6/056UWtMB8GA1UdIwQYMBaAFDe2KnclHFKgSzO4LS7QIEySekKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREE0MC85NkYwRDcwQ0JC REExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1VxQkxNN2d0THRBZ1RKSjZR cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL043WXFkeVVjVXFCTE03Z3RMdEFnVEpKNlFwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REE0MC85NkYwRDcwQ0JCREExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1Vx QkxNN2d0THRBZ1RKSjZRcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQV0JMaZNe0SPjsBHRXmpMMueq3Jwph9JKXo9l4eRndxfq/eQpAian8Vwphgk MWOO7ZyknYVwMs/0vt6ESO63m4OybtdjU3d2M9Neg4CRFzfNbdnnlN8mpRzJ8Jw2 dHOuOjAiw/1Td1GCXUL+mvBw6UzDMv1XdioJMvA86PosUZCK04yLNL6vnZ71TqwG E+kHQtr95jCWVVWmKYEG/0qKzeXxKU4PaX4kgsqM8crgJ1MUDfgsiiJyvAcS54sj zFjJ2YpC945pNZlzFSjdi6ztsds+uOp6GV9uw3qz3vnFV5EKAaRd41KDSJV0wdRx VoXzucnEGO/3baq4jHSL6wyeMg== -----END CERTIFICATE-----Generated at Wed Aug 19 16:04:18 2026 by rpki-client