$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft File: sfYJnZYvySdk5xe4l9ERPLfnbSk.mft (raw, json) Hash identifier: ptUHqqRb22PNpgpGO2MRFgRTcmZPc/LPOt/57bBmrA0= Subject key identifier: 42:E1:90:29:00:21:1A:5A:CA:87:80:B3:99:08:E8:11:7F:47:CB:53 Authority key identifier: B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29 Certificate issuer: /CN=A91FF8C9/serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft Manifest number: 09 Signing time: Wed 19 Aug 2026 09:58:46 +0000 Manifest this update: Wed 19 Aug 2026 09:58:46 +0000 Manifest next update: Wed 26 Aug 2026 09:58:46 +0000 Files and hashes: 1: sfYJnZYvySdk5xe4l9ERPLfnbSk.crl (hash: ZmRKD5AvDXKHYoPm8mBL1wg+M7GVHJVARKpR0BwXeHc=) 2: 0EB7317299AA11F1BAD0E41A7111F970.roa (hash: 8OuhmagAmsUG01wzlgf+KfYSs7YjWuqfz/27xcrRefY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF8C9, serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29 Validity Not Before: Aug 19 09:58:46 2026 GMT Not After : Aug 26 09:58:46 2026 GMT Subject: CN=6a857e56-fad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:16:96:c0:8c:e7:b3:88:f3:d0:57:09:f8: 51:20:31:2b:a0:8c:12:cd:df:a9:46:8f:af:fd:31: 9a:d3:34:eb:38:4b:63:08:69:86:55:86:d6:40:18: 8a:4f:26:bc:e6:12:11:05:2c:0a:eb:02:cb:4e:41: d7:d3:3a:35:b6:7f:e6:1c:b4:56:55:ee:a8:0a:2c: ca:e8:85:32:68:00:f4:66:da:97:45:7a:c6:f6:42: b3:eb:a6:78:7e:41:b8:d0:74:d7:18:0c:29:c2:d4: 4c:ed:a7:6d:f4:34:0d:09:e9:cc:3d:b5:7e:75:69: ee:11:c0:3c:b5:29:30:df:08:5b:cf:62:15:ce:73: 3f:4a:6c:88:10:26:41:b0:ad:be:e1:f0:93:ef:59: 32:9f:07:47:3c:2a:32:57:2e:c1:cc:0e:26:db:b6: 7c:0a:a4:10:ed:ae:c0:dc:b2:32:0e:d9:8b:05:b1: 63:e4:73:b2:30:e2:41:c9:fe:7b:ac:15:4f:01:07: 8d:c3:04:50:d2:12:44:37:a5:fc:58:95:55:7d:92: cd:4c:27:05:07:fb:22:25:30:d4:17:a6:85:ef:16: 33:f6:f4:b1:71:58:32:5b:f5:ae:3e:80:0d:8e:87: 0a:3c:d6:de:24:e8:41:45:95:8b:89:58:f6:4d:45: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E1:90:29:00:21:1A:5A:CA:87:80:B3:99:08:E8:11:7F:47:CB:53 X509v3 Authority Key Identifier: keyid:B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7b:e7:83:24:49:67:58:ab:f0:58:15:5f:de:36:b6:e6:00: 72:ab:5a:97:e5:75:57:2a:f3:a7:c7:fd:a2:e6:92:c9:ff:7f: 1b:47:2c:1c:17:bc:91:de:b8:1b:db:c4:85:4e:bc:52:3c:84: cb:55:44:57:b2:80:c9:3d:e3:d6:52:2e:73:9c:c5:ce:e5:04: 2d:9e:0f:ea:3d:93:63:f3:6b:36:b3:97:45:00:ee:f5:17:ac: 3c:11:e9:22:62:53:a3:35:ce:17:e4:85:e0:c1:53:93:0d:fc: bc:c1:47:82:40:84:6c:35:aa:5d:56:1d:4d:1a:99:b1:44:c2: 3e:24:68:79:ac:e8:75:3f:e0:80:11:5a:14:4c:a6:97:c6:57: d4:c9:62:41:45:17:e5:4b:f1:89:e6:10:a2:33:a3:e9:8c:fe: d0:24:09:5b:bb:42:58:57:e0:0d:2e:05:6a:72:c9:3d:1d:63: 2d:9c:ce:8b:dd:f5:17:c9:73:76:28:d5:30:8b:20:63:8b:9c: 0f:61:85:45:46:1a:27:ed:e5:a8:7d:4e:79:12:35:ee:14:99: ac:44:cd:ed:be:85:e4:e6:23:b8:1e:10:b3:4c:c7:5b:91:e3: cf:1a:82:97:f5:c1:49:2f:f1:ad:e8:f1:43:2b:5a:96:3d:a2: b1:71:34:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjhDOTExMC8GA1UEBRMoQjFGNjA5OUQ5NjJGQzkyNzY0RTcxN0I4OTdEMTExM0NC N0U3NkQyOTAeFw0yNjA4MTkwOTU4NDZaFw0yNjA4MjYwOTU4NDZaMBgxFjAUBgNV BAMTDTZhODU3ZTU2LWZhZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0MhaWwIzns4jz0FcJ+FEgMSugjBLN36lGj6/9MZrTNOs4S2MIaYZVhtZAGIpP JrzmEhEFLArrAstOQdfTOjW2f+YctFZV7qgKLMrohTJoAPRm2pdFesb2QrPrpnh+ QbjQdNcYDCnC1Eztp230NA0J6cw9tX51ae4RwDy1KTDfCFvPYhXOcz9KbIgQJkGw rb7h8JPvWTKfB0c8KjJXLsHMDibbtnwKpBDtrsDcsjIO2YsFsWPkc7Iw4kHJ/nus FU8BB43DBFDSEkQ3pfxYlVV9ks1MJwUH+yIlMNQXpoXvFjP29LFxWDJb9a4+gA2O hwo81t4k6EFFlYuJWPZNRcALAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQuGQKQAh GlrKh4CzmQjoEX9Hy1MwHwYDVR0jBBgwFoAUsfYJnZYvySdk5xe4l9ERPLfnbSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGOEM5LzcwNjQ4RDg4OTc3 QjExRjFCNzUzOUUyRTQ5MTFGOTcwL3NmWUpuWll2eVNkazV4ZTRsOUVSUExmbmJT ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2ZZSm5aWXZ5U2RrNXhlNGw5RVJQTGZuYlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG OEM5LzcwNjQ4RDg4OTc3QjExRjFCNzUzOUUyRTQ5MTFGOTcwL3NmWUpuWll2eVNk azV4ZTRsOUVSUExmbmJTay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCce+eDJElnWKvwWBVf3ja25gByq1qX5XVXKvOnx/2i5pLJ/38bRywcF7yR3rgb 28SFTrxSPITLVURXsoDJPePWUi5znMXO5QQtng/qPZNj82s2s5dFAO71F6w8Eeki YlOjNc4X5IXgwVOTDfy8wUeCQIRsNapdVh1NGpmxRMI+JGh5rOh1P+CAEVoUTKaX xlfUyWJBRRflS/GJ5hCiM6PpjP7QJAlbu0JYV+ANLgVqcsk9HWMtnM6L3fUXyXN2 KNUwiyBji5wPYYVFRhon7eWofU55EjXuFJmsRM3tvoXk5iO4HhCzTMdbkePPGoKX 9cFJL/Gt6PFDK1qWPaKxcTSV -----END CERTIFICATE-----Generated at Wed Aug 19 12:44:41 2026 by rpki-client