$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: Dviii+CTrnTRJsv3w+c54nzNaDLHYn6tY2f0oOhVa4M= Subject key identifier: 5E:19:7E:5E:A7:B4:DE:2B:28:E9:D8:66:4F:0E:1E:A2:E1:3D:06:33 Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 018E Signing time: Tue 25 Aug 2026 04:23:31 +0000 Manifest this update: Tue 25 Aug 2026 04:23:31 +0000 Manifest next update: Tue 01 Sep 2026 04:23:31 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: 000DJcOox0WmlypazSm1v+7DybXo0O0qc/k5rbXJwCk=) 2: 84B1619E8C4511F1A27F4BE95411F970.roa (hash: LCE4wuv/NAVwLN79rU8e9m63wNL34AoQs4Gj2EvZjig=) 3: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: /neZtyP8CB+i0xa/1UQQQx4y8u+LD3tIdTWWjj7eFPE=) 4: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: x8Gadu5mzZc6qu26lRbm5uUV5MWN8eTQq1KShULlErA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 04:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Aug 25 04:23:31 2026 GMT Not After : Sep 1 04:23:31 2026 GMT Subject: CN=6a8d18c3-04cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:e5:9c:c6:ef:92:65:37:6b:58:c0:4b:a5: be:18:45:e3:01:0c:f7:ba:29:36:54:a7:72:64:cb: 1e:ed:ef:e0:d0:7e:5e:05:34:32:8a:16:66:8b:23: 1f:2e:1a:81:a6:3e:b3:e1:0c:12:d3:6d:f4:38:25: 20:72:2c:7f:19:dc:38:e2:70:15:b8:bb:09:cc:30: 17:7e:d3:56:05:d8:df:e5:e9:55:19:0d:db:d6:b8: 2e:36:dc:dd:0a:b7:b1:51:a0:ea:39:ba:91:14:39: e7:94:f9:32:bc:4d:83:36:dd:d7:99:58:22:7e:a1: 14:3e:86:dc:58:24:4f:28:7e:19:90:71:59:f5:42: fa:88:ba:ad:fa:73:f4:c3:80:19:52:8a:fb:25:e1: ff:85:09:6e:87:36:33:0b:1c:63:23:90:1e:f6:f5: dc:e7:af:b3:ae:3d:e1:72:39:64:39:3d:e2:4b:07: 10:85:c5:9d:ec:f7:03:d7:eb:73:84:c3:0e:67:d9: 85:ae:ed:c1:57:6d:c9:1c:d0:6a:a9:77:a9:a8:e8: ae:f4:9f:52:08:a6:ad:c1:f5:a4:66:b7:2e:e3:eb: 75:fd:d7:d9:a2:cd:a6:0b:3f:6f:cf:28:59:8f:0d: b4:d4:9b:b9:68:41:5a:b9:36:7d:09:2e:2e:fc:1a: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:19:7E:5E:A7:B4:DE:2B:28:E9:D8:66:4F:0E:1E:A2:E1:3D:06:33 X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:63:8e:fb:8a:88:bf:f1:d4:2e:e2:c8:11:cd:6a:eb:54:1c: ab:52:ac:bb:6b:77:14:1d:15:4e:e6:d5:33:63:7b:00:ba:f4: 2f:bb:1b:8c:33:62:7c:6a:26:ec:ce:25:87:e7:a9:a9:3b:7d: a6:81:85:72:eb:f0:30:18:d6:11:81:98:3f:63:80:83:6b:b3: f4:50:ff:04:20:a3:fa:94:4d:c6:53:4c:51:70:9c:fa:8e:67: 1d:17:be:2d:a2:59:47:6c:dd:de:3f:48:9a:ee:b6:8a:20:4f: 20:ff:5c:cd:40:52:3d:fb:b6:a6:3c:62:1b:9f:30:f8:e1:3c: 3d:24:17:76:92:0a:67:36:ca:d0:91:cf:19:98:da:7e:5f:d8: 84:fb:b5:c0:8d:eb:50:6a:46:ad:28:b9:11:8e:d3:d5:28:92: 1f:d4:9e:90:a8:e4:1f:84:09:9b:9e:ef:6d:d0:28:59:f9:a6: cd:70:0e:55:ac:63:b6:d8:b7:fa:5a:37:57:10:9f:f8:e8:9d: a5:0e:11:69:d3:a2:0f:be:07:e9:8e:1b:bc:4d:68:f1:f3:67: e2:48:6c:a5:01:e5:e0:36:4a:85:5e:ca:6f:c7:dd:2a:bd:da: f9:47:23:b2:87:e9:8f:d3:e3:8a:b4:e5:8c:91:2b:1c:32:a2: 54:83:6c:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjYwODI1MDQyMzMxWhcNMjYwOTAxMDQyMzMxWjAYMRYwFAYD VQQDEw02YThkMThjMy0wNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpTlnMbvkmU3a1jAS6W+GEXjAQz3uik2VKdyZMse7e/g0H5eBTQyihZmiyMf LhqBpj6z4QwS0230OCUgcix/Gdw44nAVuLsJzDAXftNWBdjf5elVGQ3b1rguNtzd CrexUaDqObqRFDnnlPkyvE2DNt3XmVgifqEUPobcWCRPKH4ZkHFZ9UL6iLqt+nP0 w4AZUor7JeH/hQluhzYzCxxjI5Ae9vXc56+zrj3hcjlkOT3iSwcQhcWd7PcD1+tz hMMOZ9mFru3BV23JHNBqqXepqOiu9J9SCKatwfWkZrcu4+t1/dfZos2mCz9vzyhZ jw201Ju5aEFauTZ9CS4u/BovaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4Zfl6n tN4rKOnYZk8OHqLhPQYzMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi2OO+4qIv/HULuLIEc1q61Qcq1Ksu2t3FB0VTubVM2N7ALr0L7sbjDNifGom 7M4lh+epqTt9poGFcuvwMBjWEYGYP2OAg2uz9FD/BCCj+pRNxlNMUXCc+o5nHRe+ LaJZR2zd3j9Imu62iiBPIP9czUBSPfu2pjxiG58w+OE8PSQXdpIKZzbK0JHPGZja fl/YhPu1wI3rUGpGrSi5EY7T1SiSH9SekKjkH4QJm57vbdAoWfmmzXAOVaxjtti3 +lo3VxCf+OidpQ4RadOiD74H6Y4bvE1o8fNn4khspQHl4DZKhV7Kb8fdKr3a+Ucj sofpj9PjirTljJErHDKiVINszg== -----END CERTIFICATE-----Generated at Wed Aug 26 22:38:12 2026 by rpki-client