$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft File: rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json) Hash identifier: q1e+JCn4b/q2ZZudC2Yd2f04wVny+oj7all7AZRAH2s= Subject key identifier: C3:2D:05:85:25:9F:CE:CF:2D:99:71:3F:D1:91:EC:F6:6C:21:87:52 Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Certificate serial: 0C19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft Manifest number: 0C0A Signing time: Tue 18 Aug 2026 19:07:43 +0000 Manifest this update: Tue 18 Aug 2026 19:07:42 +0000 Manifest next update: Tue 25 Aug 2026 19:07:42 +0000 Files and hashes: 1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: OB0EbLgi+Uh2iEXXYHuggYC3CvKcIbl6rwYFTdKRvRk=) 2: 4BE5757097E511F19253A8476911F970.roa (hash: kp1Hz7ncHNN2Q2V/Opxr60e+iP8FHQPNukxZnZrbqQU=) 3: 8149B27675E911F19295859071A30FBC.roa (hash: tdvIAv84+ObvJ7mIypgIHxRBp8brbZOBkzTBZnvClfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3097 (0xc19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90 Validity Not Before: Aug 18 19:07:42 2026 GMT Not After : Aug 25 19:07:42 2026 GMT Subject: CN=6a84ad7f-23fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:62:0b:fa:54:e0:98:23:86:cb:9a:bb:79: 1f:93:82:bf:5f:0a:19:c3:02:db:bf:79:96:19:9f: a2:d8:9a:17:c3:7e:63:71:6e:e4:b0:ae:f8:f7:76: fa:ba:d4:b4:13:70:19:3b:78:4c:e3:4a:c8:51:a1: 78:22:fa:81:48:f1:ec:98:6f:cf:6b:78:a4:0f:a2: 27:ab:2c:50:e6:dc:28:4a:b8:d1:97:2f:d7:6f:05: f4:46:09:ec:62:58:a8:ca:0e:c1:2d:c0:96:4b:8c: cb:c6:4a:68:41:08:4b:2c:f0:0c:c7:7c:88:3a:5c: 61:4d:9f:34:08:49:55:ee:de:55:14:5f:c5:74:31: d1:24:de:c9:de:92:d1:33:0d:23:6f:87:d9:1a:43: bb:75:cf:13:9a:38:1e:c3:9a:f1:7f:c5:1c:ee:76: 6a:e0:13:e6:d3:69:df:9b:d8:06:a6:05:b9:37:ba: 0c:69:f2:a0:5a:2e:4b:6a:61:dd:95:94:e6:96:4a: ec:a8:28:78:a0:21:a7:6d:9f:9c:dd:66:05:95:ec: 44:bb:ec:cb:b2:91:63:d4:9d:59:20:c2:74:da:c3: d6:36:d5:0b:d2:01:86:e1:e7:1e:30:1a:12:d4:93: 26:2f:7d:87:2d:f8:f0:a9:78:5a:ee:c6:c8:42:ef: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2D:05:85:25:9F:CE:CF:2D:99:71:3F:D1:91:EC:F6:6C:21:87:52 X509v3 Authority Key Identifier: keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:73:58:7b:a9:b4:20:58:75:07:d3:f3:0a:aa:3e:19:21:12: d7:a2:a2:ae:2d:cd:b9:8d:f9:66:f4:8a:71:a5:bb:b2:db:36: 40:d3:e6:50:9f:af:0d:c0:ea:ec:af:13:08:35:27:de:a4:ce: 8e:37:7e:c2:69:68:8a:35:08:3c:3d:d9:86:e7:51:3d:24:6e: 2f:1e:da:92:c0:7e:93:a1:bc:15:6a:62:31:39:38:80:a4:61: 6b:18:05:54:e1:cf:b4:e7:49:63:65:6d:80:0e:ad:5d:34:8c: 2f:ef:2c:a3:83:3f:78:3b:fe:72:c5:ad:9a:92:9e:38:69:27: af:a2:04:75:2b:4b:52:a9:30:4b:6a:92:4a:7e:c6:76:1a:72: d6:2d:49:e9:95:3b:c6:5e:64:c1:2c:40:42:63:70:6a:14:96: 57:79:65:95:0f:b1:c0:2a:f6:43:93:3c:42:b9:a4:69:3c:dd: e1:04:56:04:c0:3c:06:cd:64:53:ec:22:e4:a5:36:4d:09:6a: e1:e9:ad:48:35:48:b0:74:17:88:f2:fc:b9:6e:55:9f:ae:f6: 1e:f0:f1:78:b7:a8:8d:df:4e:db:0d:71:bf:63:7a:da:96:b5: 4a:c5:91:3f:f2:78:f4:39:3a:95:d4:f7:86:7c:0f:5d:29:80: 6d:c9:d0:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REIxMTAvBgNVBAUTKEFFQkExOUI2RkNDMUQyMUFFNzEzMTc3MEU3QjFEQTNF MTQ3NUVDOTAwHhcNMjYwODE4MTkwNzQyWhcNMjYwODI1MTkwNzQyWjAYMRYwFAYD VQQDEw02YTg0YWQ3Zi0yM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+9iC/pU4Jgjhsuau3kfk4K/XwoZwwLbv3mWGZ+i2JoXw35jcW7ksK7493b6 utS0E3AZO3hM40rIUaF4IvqBSPHsmG/Pa3ikD6InqyxQ5twoSrjRly/XbwX0Rgns Ylioyg7BLcCWS4zLxkpoQQhLLPAMx3yIOlxhTZ80CElV7t5VFF/FdDHRJN7J3pLR Mw0jb4fZGkO7dc8Tmjgew5rxf8Uc7nZq4BPm02nfm9gGpgW5N7oMafKgWi5LamHd lZTmlkrsqCh4oCGnbZ+c3WYFlexEu+zLspFj1J1ZIMJ02sPWNtUL0gGG4eceMBoS 1JMmL32HLfjwqXha7sbIQu8shQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMtBYUl n87PLZlxP9GR7PZsIYdSMB8GA1UdIwQYMBaAFK66Gbb8wdIa5xMXcOex2j4UdeyQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdEQi9COTUxRTI4QzNE Q0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBocm5FeGR3NTdIYVBoUjE3 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jyb1p0dnpCMGhybkV4ZHc1N0hhUGhSMTdKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdEQi9COTUxRTI4QzNEQ0ExMUVBODFCOUQzNTJDNEY5QUUwMi9ycm9adHZ6QjBo cm5FeGR3NTdIYVBoUjE3SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABnNYe6m0IFh1B9PzCqo+GSES16Kiri3NuY35ZvSKcaW7sts2QNPmUJ+vDcDq 7K8TCDUn3qTOjjd+wmloijUIPD3ZhudRPSRuLx7aksB+k6G8FWpiMTk4gKRhaxgF VOHPtOdJY2VtgA6tXTSML+8so4M/eDv+csWtmpKeOGknr6IEdStLUqkwS2qSSn7G dhpy1i1J6ZU7xl5kwSxAQmNwahSWV3lllQ+xwCr2Q5M8QrmkaTzd4QRWBMA8Bs1k U+wi5KU2TQlq4emtSDVIsHQXiPL8uW5Vn672HvDxeLeojd9O2w1xv2N62pa1SsWR P/J49Dk6ldT3hnwPXSmAbcnQeg== -----END CERTIFICATE-----Generated at Wed Aug 19 11:47:07 2026 by rpki-client