$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft File: 3af4p0oKdM_262MEKLbJ1w1XvXY.mft (raw, json) Hash identifier: koWjMPANkwVGVViBy2PS0r769gi7NJ+dY93qkagrMls= Subject key identifier: 7A:13:A2:BF:51:BF:29:EE:D5:C5:1F:1A:51:BB:12:22:32:66:9D:0B Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0EB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft Manifest number: 0E6F Signing time: Fri 04 Sep 2026 17:45:09 +0000 Manifest this update: Fri 04 Sep 2026 17:45:09 +0000 Manifest next update: Fri 11 Sep 2026 17:45:09 +0000 Files and hashes: 1: 3af4p0oKdM_262MEKLbJ1w1XvXY.crl (hash: qhXNozW/5xZ7t5zrQXz5Gf3/IuqZelBoLI43+XamGBw=) 2: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (hash: V7vJC1rGtCuOdSFWDJjdd3JhuVIPp/Zsx063dJpSpzo=) 3: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (hash: GS10eEt1MCcAl1eDM0DD66Q/CuCpMh/GfO+nM5nY1Wc=) 4: CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa (hash: 8Ac19pb5+p9KK1Iemz1RgsRRRrnuxVd5vC2V5ZATZXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3769 (0xeb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Sep 4 17:45:09 2026 GMT Not After : Sep 11 17:45:09 2026 GMT Subject: CN=6a9b03a5-b738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:33:81:32:12:11:c1:a0:63:fe:59:a1:29: 0e:1f:99:30:cb:44:a0:ef:98:2e:42:c3:b1:23:ce: aa:8d:1d:76:87:f3:3c:ba:a8:64:22:60:97:f5:c0: 21:5d:f2:bf:97:d1:95:94:ff:22:0e:e0:12:96:81: fe:81:e0:a3:94:d5:4e:55:89:ae:33:d5:5c:ad:26: 4b:6c:d4:e1:ce:2b:06:72:0f:da:e2:a6:50:5e:bd: 56:98:68:d9:50:10:fe:d0:87:d7:71:47:a4:99:e1: 41:9d:bc:9a:fe:98:6e:e1:e7:a2:d5:8f:74:03:c5: 3a:22:60:7f:72:85:f0:99:f8:d0:ba:30:e1:94:c1: e3:6f:b9:db:44:91:50:a4:09:9f:ad:e5:ce:5e:82: 39:46:5e:21:71:cf:5f:e6:a3:f4:50:f6:ee:ac:1b: cb:90:73:27:2e:d0:ce:a9:ac:fb:70:70:ec:f2:65: 36:c4:f4:27:08:62:35:f4:ac:ca:ce:b4:66:01:40: d1:e3:db:0d:fb:0b:3c:1d:be:14:31:4c:76:77:fe: ba:86:84:bb:ba:2b:4c:95:1e:a4:db:c9:69:1e:be: 03:69:10:cf:83:7d:89:bb:e4:b0:c0:96:e1:c0:65: ec:47:45:e7:82:f2:48:eb:9d:d4:c9:73:b3:29:3b: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:13:A2:BF:51:BF:29:EE:D5:C5:1F:1A:51:BB:12:22:32:66:9D:0B X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:84:2e:40:c1:ed:62:6c:3a:16:9d:fb:75:15:1f:3c:37:c1: 24:fd:b4:6a:9e:f6:3c:70:31:55:4e:df:30:c7:73:af:bf:24: e1:fe:ba:55:b3:71:e4:ee:ec:37:ea:b5:79:7a:c5:b5:ff:fa: aa:c9:2f:ee:2d:d4:ec:e8:13:d6:f4:34:d8:9a:83:fb:c3:15: 7d:a8:a1:b4:bc:c3:54:77:a6:31:e0:95:31:5b:d8:73:b5:fa: dd:f7:43:cc:b6:13:9a:c1:3f:cb:60:91:09:ba:7e:a5:4c:00: dd:a6:d6:90:7c:40:2b:8a:e3:0c:de:26:c8:31:fc:1f:c3:40: 7a:59:3d:8a:91:2d:18:a6:05:34:6a:99:6d:be:82:0f:bd:29: bd:d0:b2:82:76:46:a3:9e:e6:2a:02:25:b5:77:c3:8a:20:2d: b9:ea:47:be:a7:52:44:8b:67:63:a6:1b:6b:71:68:64:2b:95: b0:89:c7:0c:1c:3f:cf:de:f3:c7:fa:1e:9d:eb:27:19:3a:0d: 87:a0:43:03:4b:59:cc:4e:47:a7:1a:31:a7:7a:02:0f:9d:c4: 58:3a:75:56:25:52:5f:1b:b8:e2:da:d6:6f:d4:78:9f:8d:1a: 14:87:d6:06:d4:50:37:d0:48:cc:75:b8:36:95:c2:89:e6:42: f3:28:d1:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjYwOTA0MTc0NTA5WhcNMjYwOTExMTc0NTA5WjAYMRYwFAYD VQQDEw02YTliMDNhNS1iNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NMzgTISEcGgY/5ZoSkOH5kwy0Sg75guQsOxI86qjR12h/M8uqhkImCX9cAh XfK/l9GVlP8iDuASloH+geCjlNVOVYmuM9VcrSZLbNThzisGcg/a4qZQXr1WmGjZ UBD+0IfXcUekmeFBnbya/phu4eei1Y90A8U6ImB/coXwmfjQujDhlMHjb7nbRJFQ pAmfreXOXoI5Rl4hcc9f5qP0UPburBvLkHMnLtDOqaz7cHDs8mU2xPQnCGI19KzK zrRmAUDR49sN+ws8Hb4UMUx2d/66hoS7uitMlR6k28lpHr4DaRDPg32Ju+SwwJbh wGXsR0XngvJI653UyXOzKTtRiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoTor9R vynu1cUfGlG7EiIyZp0LMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yRDFBNTk1QUQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RN XzI2Mk1FS0xiSjF3MVh2WFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL4QuQMHtYmw6Fp37dRUfPDfBJP20ap72PHAxVU7fMMdzr78k4f66VbNx5O7s N+q1eXrFtf/6qskv7i3U7OgT1vQ02JqD+8MVfaihtLzDVHemMeCVMVvYc7X63fdD zLYTmsE/y2CRCbp+pUwA3abWkHxAK4rjDN4myDH8H8NAelk9ipEtGKYFNGqZbb6C D70pvdCygnZGo57mKgIltXfDiiAtuepHvqdSRItnY6Yba3FoZCuVsInHDBw/z97z x/oenesnGToNh6BDA0tZzE5Hpxoxp3oCD53EWDp1ViVSXxu44trWb9R4n40aFIfW BtRQN9BIzHW4NpXCieZC8yjR8A== -----END CERTIFICATE-----Generated at Sat Sep 5 06:33:11 2026 by rpki-client