$ rpki-client -vvvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: 9NypQGq1eUp6gnJWQjykX+weiaaG3X7tyqgj7Rtpgug= Subject key identifier: 06:33:13:9B:18:60:A1:D2:2D:53:95:55:2F:ED:6C:70:D3:E2:4D:CF Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 01D5 Signing time: Thu 03 Sep 2026 04:01:47 +0000 Manifest this update: Thu 03 Sep 2026 04:01:46 +0000 Manifest next update: Thu 10 Sep 2026 04:01:46 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: mu2sHu8QLTcHmVD015bCi6BbtWm4f23a/s/4cno7TC0=) 2: B7B28B24B29611F091864D65C4F9AE02.roa (hash: 1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=) 3: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=) 4: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: E5hqQqMyoQ9aOSGCT2wM7hBxXm+pQQiTCiLoJNmSSp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Sep 3 04:01:46 2026 GMT Not After : Sep 10 04:01:46 2026 GMT Subject: CN=6a98f12a-798d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:a1:82:ad:ab:f4:6b:8e:a0:06:11:44:4c: 3e:6a:0a:ac:f7:16:ce:46:0a:28:4a:36:78:32:12: 8e:1b:2d:36:37:53:e5:2b:22:19:a9:b3:c9:dc:04: ee:72:8c:97:2a:7b:f0:f8:01:90:90:d4:2b:62:25: fb:c3:e5:91:be:be:74:20:02:e7:49:58:c4:fe:c1: 47:56:c8:b1:7f:71:6f:2c:52:8c:8d:6a:d0:7e:2a: 25:9f:4c:a6:a7:c0:6c:00:fc:eb:3c:8b:45:c8:d0: 4d:11:16:50:ce:76:f6:70:3c:ef:03:4c:f3:1f:7c: de:9b:34:f1:d5:c2:63:df:22:04:30:f1:10:0f:54: 3c:43:ed:00:8a:6c:8d:d1:d5:62:35:7f:34:b7:0f: ab:21:fd:d1:88:71:e1:bd:6e:d3:60:20:cf:89:7b: ed:c6:1f:cf:19:e5:2f:b4:da:96:36:eb:8a:27:ab: 6e:1c:77:71:f0:e5:f1:20:b9:29:db:a6:af:39:a4: 5d:93:7f:70:20:9b:99:d1:f7:20:2f:d7:a0:c3:76: 33:3e:f2:0b:fd:82:b0:c3:e3:a9:ac:ca:62:5d:4c: 76:ee:ce:f3:a6:23:2a:bc:68:39:04:a1:18:6f:63: b8:2f:79:9c:cf:ff:fd:73:d2:fc:6d:ef:6c:0a:c2: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:33:13:9B:18:60:A1:D2:2D:53:95:55:2F:ED:6C:70:D3:E2:4D:CF X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:9e:cc:82:72:ac:7b:f6:fb:64:1d:a7:83:39:5f:9a:15:66: 0e:9f:c3:35:5c:2b:04:eb:8a:bc:e7:98:0a:c1:7d:83:65:40: 7a:ff:16:fb:5a:d4:10:39:bd:f2:ee:c7:fa:df:36:1e:5b:80: bc:41:e5:1b:c0:55:9e:48:47:ec:ee:74:7f:cd:61:00:67:50: be:ef:8c:13:83:6e:dd:e1:6b:14:68:d2:a9:c8:34:6c:5d:3e: 32:36:5c:48:50:4c:a9:8c:44:b5:38:71:39:ba:e0:30:fc:5e: d6:8d:dd:2d:4e:65:9a:bb:cb:e2:c3:dd:79:c9:84:b8:22:dd: 8f:e3:bf:41:e9:53:ba:3e:da:26:16:f3:88:4b:ec:cc:62:e5: 13:98:d4:66:cb:82:e5:6a:b5:c1:b9:de:4d:55:11:96:b9:05: 34:25:e9:e2:db:6d:d8:8e:ac:16:bf:34:ff:ed:4f:60:d4:5a: 6c:d1:5e:ec:ba:ff:11:eb:72:9b:23:3c:46:70:54:3d:13:2c: c9:db:c1:23:e0:6c:84:dd:bc:bb:f2:7d:d7:be:5e:4f:75:93: fb:dc:8f:24:ad:80:f0:01:ad:00:ad:01:63:52:24:c6:22:7a: 7e:c7:30:f9:e1:bc:a0:a1:b5:e6:52:42:68:f1:e1:a8:1a:a4: dd:7b:4f:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYwOTAzMDQwMTQ2WhcNMjYwOTEwMDQwMTQ2WjAYMRYwFAYD VQQDEw02YTk4ZjEyYS03OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IOhgq2r9GuOoAYRREw+agqs9xbORgooSjZ4MhKOGy02N1PlKyIZqbPJ3ATu coyXKnvw+AGQkNQrYiX7w+WRvr50IALnSVjE/sFHVsixf3FvLFKMjWrQfioln0ym p8BsAPzrPItFyNBNERZQznb2cDzvA0zzH3zemzTx1cJj3yIEMPEQD1Q8Q+0AimyN 0dViNX80tw+rIf3RiHHhvW7TYCDPiXvtxh/PGeUvtNqWNuuKJ6tuHHdx8OXxILkp 26avOaRdk39wIJuZ0fcgL9egw3YzPvIL/YKww+OprMpiXUx27s7zpiMqvGg5BKEY b2O4L3mcz//9c9L8be9sCsJt/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYzE5sY YKHSLVOVVS/tbHDT4k3PMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiZ7MgnKse/b7ZB2ngzlfmhVmDp/DNVwrBOuKvOeYCsF9g2VAev8W+1rUEDm9 8u7H+t82HluAvEHlG8BVnkhH7O50f81hAGdQvu+ME4Nu3eFrFGjSqcg0bF0+MjZc SFBMqYxEtThxObrgMPxe1o3dLU5lmrvL4sPdecmEuCLdj+O/QelTuj7aJhbziEvs zGLlE5jUZsuC5Wq1wbneTVURlrkFNCXp4ttt2I6sFr80/+1PYNRabNFe7Lr/Eety myM8RnBUPRMsydvBI+BshN28u/J9175eT3WT+9yPJK2A8AGtAK0BY1IkxiJ6fscw +eG8oKG15lJCaPHhqBqk3XtPxA== -----END CERTIFICATE-----Generated at Sat Sep 5 01:47:26 2026 by rpki-client