$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: ifSOCmSPzHmbKfjeOtqHUqYKApDiu1jB3Mjjh+vZ1lM= Subject key identifier: A3:2A:D5:1F:A9:3A:89:B5:D7:DD:2E:D8:2F:9D:02:9F:92:95:D9:1B Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 82 Signing time: Sat 15 Aug 2026 07:50:44 +0000 Manifest this update: Sat 15 Aug 2026 07:50:44 +0000 Manifest next update: Sat 22 Aug 2026 07:50:44 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: vg1svVjypd6wK7BWm3TY4HgalCK7PeZ6/7Y/Wbq7ex0=) 2: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: vhaf/68N75siwelbtPS2Tu3DEgGqynrrUITnReXj5p4=) 3: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: 63YdLXndxb2ZNy3UKl9Em7+7aoRcbOsCAOFA6tKDt14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Aug 15 07:50:44 2026 GMT Not After : Aug 22 07:50:44 2026 GMT Subject: CN=6a801a54-cf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:2a:97:0b:0b:cc:e5:13:4a:d9:1d:68:e4: fc:15:02:45:0d:79:d2:33:16:86:46:3a:bc:02:e6: 3b:35:8e:e3:ec:b6:27:00:87:7a:e1:1e:27:0f:fe: 91:bc:7e:27:1d:f6:c4:da:34:3c:20:f5:f9:40:d7: bc:a8:40:66:3f:ff:fb:ba:fa:1d:39:51:ed:37:54: b1:ce:c7:81:32:82:0e:1f:60:63:ff:2c:27:fa:8e: 47:73:74:d7:b2:24:59:67:bc:24:0d:c4:c0:6c:97: 09:3e:7a:eb:75:d8:15:f9:bc:9f:ba:bb:bf:94:69: 9c:1b:cd:a6:13:6f:1e:d3:5a:21:0e:a5:a6:df:ad: 86:9c:7b:a8:73:5e:df:73:4d:36:df:7f:22:17:52: 8c:4a:8b:f5:24:18:b7:a8:18:15:98:52:6a:21:cd: 3a:c4:16:1e:0c:16:47:ca:57:01:10:36:42:78:19: 28:d9:07:85:a0:99:7c:8c:ab:99:14:03:ee:a7:9b: 26:68:de:7b:8e:fe:34:1c:56:8c:af:60:2d:e2:b0: da:0b:fc:b4:8b:58:55:16:ef:f9:b0:54:7a:39:ba: 42:97:10:f3:39:41:ce:04:fb:e6:5c:44:c7:e2:97: 72:49:f4:1f:dc:04:07:3d:0f:e2:ac:60:04:d5:cd: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2A:D5:1F:A9:3A:89:B5:D7:DD:2E:D8:2F:9D:02:9F:92:95:D9:1B X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0f:f1:2b:b1:29:d8:70:7f:7d:97:4b:80:53:a1:bd:d1:6d: 18:8f:b6:d3:d7:9a:0d:e6:67:25:e1:e0:df:50:8c:98:f5:21: f9:95:91:7a:43:df:1b:59:02:7e:85:67:80:92:2e:b7:17:9c: 18:c6:ee:cd:38:15:06:e4:a0:23:ad:fe:17:b7:8a:07:31:f9: c5:3d:0c:d6:66:53:fd:e5:03:b9:01:69:d5:53:61:d0:e6:c4: 6d:f6:d5:7c:91:d2:5b:5e:b8:31:8c:bf:a8:3e:bc:c3:e8:fa: b2:e6:ac:32:38:97:3c:2c:58:9e:15:94:da:7b:52:16:32:84: a0:46:e4:63:5d:c4:cb:38:4a:e8:2d:bf:fe:5f:c6:7b:12:24: 3b:0c:8c:c9:2c:5e:d0:bb:a8:b0:c8:19:27:88:54:6b:37:ae: 2c:22:ba:eb:26:9c:b6:b3:4a:07:79:84:85:2b:a7:82:4f:3c: 39:4d:9a:5f:47:bb:5b:9c:63:d3:dc:7c:f5:e8:a0:ce:59:73: c7:8a:6c:7f:2e:fa:b6:c5:f4:17:fe:14:6c:99:a1:89:fa:42: 37:0c:dc:22:13:a1:0a:6a:83:4a:77:2c:d9:3c:c1:47:b0:f1: 9d:d9:53:9b:5c:2e:25:0b:aa:da:eb:9b:75:d9:1e:8b:94:2b: f5:88:c5:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVERTcxMTAvBgNVBAUTKEUxQzU5RkE1QTZCQzg3NkY3Q0U0QTQ2Q0FBQUU2MDYw NEYwNTE4NjYwHhcNMjYwODE1MDc1MDQ0WhcNMjYwODIyMDc1MDQ0WjAYMRYwFAYD VQQDEw02YTgwMWE1NC1jZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAUqlwsLzOUTStkdaOT8FQJFDXnSMxaGRjq8AuY7NY7j7LYnAId64R4nD/6R vH4nHfbE2jQ8IPX5QNe8qEBmP//7uvodOVHtN1SxzseBMoIOH2Bj/ywn+o5Hc3TX siRZZ7wkDcTAbJcJPnrrddgV+byfuru/lGmcG82mE28e01ohDqWm362GnHuoc17f c002338iF1KMSov1JBi3qBgVmFJqIc06xBYeDBZHylcBEDZCeBko2QeFoJl8jKuZ FAPup5smaN57jv40HFaMr2At4rDaC/y0i1hVFu/5sFR6ObpClxDzOUHOBPvmXETH 4pdySfQf3AQHPQ/irGAE1c3TNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMq1R+p Oom1190u2C+dAp+SldkbMB8GA1UdIwQYMBaAFOHFn6WmvIdvfOSkbKquYGBPBRhm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRURFNy9FN0ZEMzA1OEQ5 OUQxMUYwQkJFNzgzOTk2NkQzNjQxRC80Y1dmcGFhOGgyOTg1S1JzcXE1Z1lFOEZH R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RURFNy9FN0ZEMzA1OEQ5OUQxMUYwQkJFNzgzOTk2NkQzNjQxRC80Y1dmcGFhOGgy OTg1S1JzcXE1Z1lFOEZHR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnQ/xK7Ep2HB/fZdLgFOhvdFtGI+209eaDeZnJeHg31CMmPUh+ZWRekPfG1kC foVngJIutxecGMbuzTgVBuSgI63+F7eKBzH5xT0M1mZT/eUDuQFp1VNh0ObEbfbV fJHSW164MYy/qD68w+j6suasMjiXPCxYnhWU2ntSFjKEoEbkY13EyzhK6C2//l/G exIkOwyMySxe0LuosMgZJ4hUazeuLCK66yactrNKB3mEhSungk88OU2aX0e7W5xj 09x89eigzllzx4psfy76tsX0F/4UbJmhifpCNwzcIhOhCmqDSncs2TzBR7DxndlT m1wuJQuq2uubddkei5Qr9YjFWg== -----END CERTIFICATE-----Generated at Sat Aug 15 13:07:02 2026 by rpki-client