$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: cSDsL5VdSfqd2FbFCZh9Xln+FiVzmuC4YdWRq4RwCVs= Subject key identifier: 4A:42:1B:BE:E1:43:98:70:76:9B:96:8A:A1:59:22:D2:CF:46:90:69 Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1DCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1DB1 Signing time: Thu 20 Aug 2026 16:05:02 +0000 Manifest this update: Thu 20 Aug 2026 16:05:01 +0000 Manifest next update: Thu 27 Aug 2026 16:05:01 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: v5AwzZvRDroOPcQyjfrcBTfrJxwjbPCdYDaJ+70eeZ4=) 2: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: SMMdB5FfbHvQ8XxRMRHHqZDp8nFnCc1tqnhGm5C6OOg=) 3: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: 8mj54azzqhjHXfOWyNFC53u9e3MBttuOm97GXb6TaYE=) 4: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: uLWtAzm0T2XZ8XrHmk3i4Qv1rCDDVOMUdZgDRK+R9AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7631 (0x1dcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Aug 20 16:05:01 2026 GMT Not After : Aug 27 16:05:01 2026 GMT Subject: CN=6a8725ad-e2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:96:ed:73:fb:24:1b:b1:f1:da:55:e7:7c:73: 32:c9:80:e3:88:a7:21:f5:8b:32:a9:f5:45:41:86: 11:28:fd:4b:68:3c:36:1c:1b:54:0b:65:52:46:0c: 5f:93:a7:8d:80:2f:22:83:e3:e8:01:24:6c:ab:02: 6d:98:bc:cb:8e:6e:86:2c:b8:48:30:4f:c2:65:ba: 2b:e4:73:cb:d6:9e:6e:fe:80:2a:bb:06:67:5e:6e: 61:53:a1:5a:d3:7f:b5:ac:3f:b1:56:06:da:ab:58: 74:48:28:af:ac:0d:29:4a:ec:d0:76:e7:e3:92:5d: e5:70:68:8b:b2:19:52:da:c9:52:90:96:35:4c:94: e8:00:39:cd:1a:11:2a:f2:51:7f:ef:a1:ad:f6:49: b1:59:18:3b:cb:08:0d:6d:8b:e4:b9:b1:3b:49:b8: 1c:e4:a3:27:1f:d1:7b:71:12:de:67:be:7c:4f:6a: 69:93:c3:8a:07:3c:a8:02:c2:1c:8f:3e:6d:e8:e5: db:a9:36:35:cf:f5:f2:11:8e:35:df:c4:4e:f4:44: 8c:82:1f:f9:a8:5a:60:ce:c8:3f:f8:48:93:9d:d7: 9a:3d:7d:79:f8:10:59:87:a4:a5:ca:d9:7b:e5:dc: 19:f9:29:03:40:e3:ab:67:c0:e7:e6:7f:3b:96:87: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:42:1B:BE:E1:43:98:70:76:9B:96:8A:A1:59:22:D2:CF:46:90:69 X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:39:ac:c7:87:59:07:d5:3b:2e:5c:1f:61:9f:07:f0:a1:1c: 4d:65:d9:ae:a2:e2:91:73:b7:59:fa:7a:65:0d:d4:52:04:4b: 39:6e:83:d2:da:ba:fc:07:2e:a5:39:de:38:2a:95:37:b6:57: c9:9d:3a:29:a8:91:d9:5a:66:48:75:d8:f9:08:2b:75:6e:b7: c2:87:87:78:4e:1c:13:4b:39:d1:73:5f:fd:5b:49:b9:a4:fd: 7c:9c:ea:7c:58:a4:96:80:e0:ce:6d:a2:7e:3d:f2:6c:0c:01: 82:02:c9:8f:e8:b5:f6:a6:65:b3:dd:a0:1f:47:90:62:63:94: fe:76:ad:67:79:65:f4:bd:b1:a3:29:be:a0:b2:e3:dd:9a:f2: 19:8e:8b:59:72:96:ea:bc:6c:03:88:20:70:2d:8b:93:c2:86: 44:70:85:7c:69:38:cc:ba:ef:df:56:e6:b4:c2:eb:81:60:b2: 73:01:3e:a9:27:60:0d:93:5b:c6:63:23:88:da:bc:96:94:7f: f3:39:8f:d5:7c:18:49:0f:42:74:0f:ac:c8:36:76:da:10:23: 6d:e8:54:48:2c:68:3e:80:64:a5:0a:7e:fb:43:84:54:4f:70: ad:50:54:6d:37:a9:55:fc:7b:ab:32:ca:40:6c:15:8c:0d:79: ba:bc:06:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjYwODIwMTYwNTAxWhcNMjYwODI3MTYwNTAxWjAYMRYwFAYD VQQDEw02YTg3MjVhZC1lMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJbtc/skG7Hx2lXnfHMyyYDjiKch9YsyqfVFQYYRKP1LaDw2HBtUC2VSRgxf k6eNgC8ig+PoASRsqwJtmLzLjm6GLLhIME/CZbor5HPL1p5u/oAquwZnXm5hU6Fa 03+1rD+xVgbaq1h0SCivrA0pSuzQdufjkl3lcGiLshlS2slSkJY1TJToADnNGhEq 8lF/76Gt9kmxWRg7ywgNbYvkubE7Sbgc5KMnH9F7cRLeZ758T2ppk8OKBzyoAsIc jz5t6OXbqTY1z/XyEY4138RO9ESMgh/5qFpgzsg/+EiTndeaPX15+BBZh6Slytl7 5dwZ+SkDQOOrZ8Dn5n87locYxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpCG77h Q5hwdpuWiqFZItLPRpBpMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiDmsx4dZB9U7LlwfYZ8H8KEcTWXZrqLikXO3Wfp6ZQ3UUgRLOW6D0tq6/Acu pTneOCqVN7ZXyZ06KaiR2VpmSHXY+QgrdW63woeHeE4cE0s50XNf/VtJuaT9fJzq fFikloDgzm2ifj3ybAwBggLJj+i19qZls92gH0eQYmOU/natZ3ll9L2xoym+oLLj 3ZryGY6LWXKW6rxsA4ggcC2Lk8KGRHCFfGk4zLrv31bmtMLrgWCycwE+qSdgDZNb xmMjiNq8lpR/8zmP1XwYSQ9CdA+syDZ22hAjbehUSCxoPoBkpQp++0OEVE9wrVBU bTepVfx7qzLKQGwVjA15urwGVA== -----END CERTIFICATE-----Generated at Sat Aug 22 11:05:35 2026 by rpki-client