$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft File: 4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft (raw, json) Hash identifier: 8CXAXIASm0JaLudS1jtsjYkoucl6eIBPaqkBRnisCEA= Subject key identifier: 35:D0:D7:4C:FF:AB:9C:9E:F8:5C:A8:4D:04:C6:54:14:F0:96:3B:F5 Authority key identifier: E2:45:53:20:A7:EE:5F:D0:8D:B2:EB:B4:5C:60:F8:87:1E:FF:69:6C Certificate issuer: /CN=A91FF8C9/serialNumber=E2455320A7EE5FD08DB2EBB45C60F8871EFF696C Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft Manifest number: 05 Signing time: Wed 19 Aug 2026 09:58:49 +0000 Manifest this update: Wed 19 Aug 2026 09:58:49 +0000 Manifest next update: Wed 26 Aug 2026 09:58:49 +0000 Files and hashes: 1: 4kVTIKfuX9CNsuu0XGD4hx7_aWw.crl (hash: 1G0zY6xjri2s581fLrJ5rYCjjkFNkD2ScwucEVOqXCw=) 2: 406749E4977C11F188CAEE0F4A11F970.roa (hash: mUzwEBEIYs4Q+pXwSXu3nH8Y1qE0+nzYoQdjfbjh0SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.crl rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF8C9, serialNumber=E2455320A7EE5FD08DB2EBB45C60F8871EFF696C Validity Not Before: Aug 19 09:58:49 2026 GMT Not After : Aug 26 09:58:49 2026 GMT Subject: CN=6a857e59-74eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:dc:22:f3:ca:51:5e:1d:1a:f6:b9:26:db: 0b:c6:a6:10:4e:3f:b6:da:56:40:2c:6a:c7:e4:12: f6:43:88:91:ab:42:a8:c3:6a:a3:f3:7a:9f:41:5e: 49:7f:f8:b7:e2:3e:5c:93:bf:56:ac:58:cd:be:72: 7f:b0:07:f3:9a:87:e0:62:0a:c5:b3:55:b4:04:b3: 0d:18:8f:b5:62:e9:cc:f4:63:7d:89:a8:44:0a:66: 7c:95:bb:55:d8:ee:e4:4d:c1:ca:6d:b3:c8:79:c4: e1:d1:ef:8a:21:18:00:05:0b:f0:b0:07:86:77:f6: d2:13:7f:30:21:b4:dd:66:e7:4d:e4:9b:a9:14:31: d5:d7:f5:9a:66:a9:c3:c3:d7:de:0f:9d:51:d1:bf: bb:d0:6c:22:6a:aa:98:09:6b:b9:f5:e9:1b:e5:a8: 2e:57:fb:bb:1c:1f:df:cc:87:99:07:c9:e4:2b:e0: b1:b2:27:a7:e3:97:a4:d7:09:60:6a:ff:6e:f1:76: 77:ea:07:d4:8c:45:96:03:ec:bb:02:ad:2c:a1:45: 35:81:9b:90:b6:c0:db:75:74:e2:19:47:e8:d8:ac: ac:4a:32:02:c4:c9:03:03:9a:6d:e7:5d:c1:38:cb: 2b:a8:71:9f:3a:8f:95:42:88:7d:e3:7e:7f:77:b4: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:D7:4C:FF:AB:9C:9E:F8:5C:A8:4D:04:C6:54:14:F0:96:3B:F5 X509v3 Authority Key Identifier: keyid:E2:45:53:20:A7:EE:5F:D0:8D:B2:EB:B4:5C:60:F8:87:1E:FF:69:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4kVTIKfuX9CNsuu0XGD4hx7_aWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/6786E6FC977B11F1B7539E2E4911F970/4kVTIKfuX9CNsuu0XGD4hx7_aWw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:36:6f:2d:3c:6e:04:35:0d:0e:a0:bd:6a:40:63:85:56:b0: 9f:42:08:69:ee:c3:74:32:82:f1:c8:4c:c4:05:8a:52:ab:41: ee:89:46:5c:9b:a6:f3:6d:de:60:ca:b9:d0:da:24:52:62:dd: 9e:0a:91:d1:2d:85:95:d8:57:eb:68:63:71:61:e4:8d:27:a2: 5f:d4:64:39:8b:ca:83:8c:59:67:2b:05:cd:eb:03:75:57:47: 65:dd:4c:f5:f5:8e:a1:dc:f3:47:4f:70:f2:79:70:a7:62:e5: 33:25:bc:76:63:17:de:d4:59:5b:da:c3:83:f4:93:20:20:87: 26:1a:cb:4b:d0:a7:98:fc:67:9b:1f:bd:d2:e5:9d:7a:3c:34: 84:ed:89:02:98:1b:85:5a:d4:96:92:af:bd:93:95:d2:1f:31: 28:9b:40:be:3d:18:2c:0d:60:9c:44:28:76:6f:b0:94:d8:8b: ac:d3:b1:9f:7f:f3:21:67:a6:77:b1:c4:1f:17:c2:5e:d7:ed: 24:ee:e4:bc:c3:7b:61:4e:c2:ef:c0:de:ed:9b:a5:9a:92:ef: 64:6b:c3:40:19:a2:35:22:ba:bd:22:bf:67:1f:29:46:bb:bc: 91:5b:9c:64:96:f7:8f:8b:58:77:a9:b4:0e:e8:61:7c:e6:c3: 8b:31:e3:67 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjhDOTExMC8GA1UEBRMoRTI0NTUzMjBBN0VFNUZEMDhEQjJFQkI0NUM2MEY4ODcx RUZGNjk2QzAeFw0yNjA4MTkwOTU4NDlaFw0yNjA4MjYwOTU4NDlaMBgxFjAUBgNV BAMTDTZhODU3ZTU5LTc0ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiS9wi88pRXh0a9rkm2wvGphBOP7baVkAsasfkEvZDiJGrQqjDaqPzep9BXkl/ +LfiPlyTv1asWM2+cn+wB/Oah+BiCsWzVbQEsw0Yj7Vi6cz0Y32JqEQKZnyVu1XY 7uRNwcpts8h5xOHR74ohGAAFC/CwB4Z39tITfzAhtN1m503km6kUMdXX9ZpmqcPD 194PnVHRv7vQbCJqqpgJa7n16RvlqC5X+7scH9/Mh5kHyeQr4LGyJ6fjl6TXCWBq /27xdnfqB9SMRZYD7LsCrSyhRTWBm5C2wNt1dOIZR+jYrKxKMgLEyQMDmm3nXcE4 yyuocZ86j5VCiH3jfn93tEL1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNdDXTP+r nJ74XKhNBMZUFPCWO/UwHwYDVR0jBBgwFoAU4kVTIKfuX9CNsuu0XGD4hx7/aWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGOEM5LzY3ODZFNkZDOTc3 QjExRjFCNzUzOUUyRTQ5MTFGOTcwLzRrVlRJS2Z1WDlDTnN1dTBYR0Q0aHg3X2FX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNGtWVElLZnVYOUNOc3V1MFhHRDRoeDdfYVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG OEM5LzY3ODZFNkZDOTc3QjExRjFCNzUzOUUyRTQ5MTFGOTcwLzRrVlRJS2Z1WDlD TnN1dTBYR0Q0aHg3X2FXdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPNm8tPG4ENQ0OoL1qQGOFVrCfQghp7sN0MoLxyEzEBYpSq0HuiUZcm6bzbd5g yrnQ2iRSYt2eCpHRLYWV2FfraGNxYeSNJ6Jf1GQ5i8qDjFlnKwXN6wN1V0dl3Uz1 9Y6h3PNHT3DyeXCnYuUzJbx2Yxfe1Flb2sOD9JMgIIcmGstL0KeY/GebH73S5Z16 PDSE7YkCmBuFWtSWkq+9k5XSHzEom0C+PRgsDWCcRCh2b7CU2Ius07Gff/MhZ6Z3 scQfF8Je1+0k7uS8w3thTsLvwN7tm6Waku9ka8NAGaI1Irq9Ir9nHylGu7yRW5xk lvePi1h3qbQO6GF85sOLMeNn -----END CERTIFICATE-----Generated at Wed Aug 19 15:59:40 2026 by rpki-client