$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json) Hash identifier: jgPvJ43XTTaA/mZmrO7X1WLjk46GRZrXIbM0dUs5Ygk= Subject key identifier: 89:F1:81:CE:E1:F0:E2:97:E5:69:75:6E:0C:EE:80:7F:3A:43:1A:B1 Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Certificate serial: 3609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft Manifest number: 35B4 Signing time: Fri 04 Sep 2026 14:22:33 +0000 Manifest this update: Fri 04 Sep 2026 14:22:32 +0000 Manifest next update: Fri 11 Sep 2026 14:22:32 +0000 Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: 9HzR52v31/QUSTSMOMsA3ZgRXjcaz+oovbraCfnXtDQ=) 2: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: vOyegaR5JJSUQOjhLZ6HxjzSX6xypEzpGZlpHWRdUcE=) 3: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: yIdjqnTmZ+HqSiiYs29cxCLQvArNG95hY2OgROFWMog=) 4: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: guwFqD3altsZHbc1dAy4+jYBLpjvPALMbPm6i0aYzrc=) 5: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: G3AZcfArLBgVhuokmF/dQxJk3out8og0ZVXYVtVJ8gU=) 6: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: mRHLmD+WT0k5/h+bHDnrdCDBqIL+VXOXAAhCSmlrQck=) 7: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: K3NPwS93LI39vDCydod4QMQz06LNTlu8HQCmLQ09JU0=) 8: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: cYXAizbDFkYc4+qxaI9fGjQHetEUsCO8dm+QjI7b2mE=) 9: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: 7mgw4y6gg1SBlVNEQHsCERtFq1CWUXWcJo30iKspb4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13833 (0x3609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Validity Not Before: Sep 4 14:22:32 2026 GMT Not After : Sep 11 14:22:32 2026 GMT Subject: CN=6a9ad428-a7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:85:6b:f7:1e:d0:5b:1f:ec:5b:ea:57:1a:54: 0d:be:11:38:5f:c2:89:65:1e:99:cb:5f:09:4d:2d: 63:c4:f4:25:9d:a9:bf:62:7e:56:dd:ec:bf:a7:0c: d1:16:3d:0b:b4:fe:6c:58:53:81:74:49:a6:8c:ed: 1c:bb:a7:13:e7:88:25:1c:9d:e8:bd:5b:28:48:2f: e3:f4:d8:92:10:76:31:65:77:5a:20:7f:cd:f9:ae: c1:25:42:10:b9:ef:14:f9:a6:b9:e0:c7:99:18:91: e7:6c:37:a3:89:87:83:69:c2:f0:10:a0:dc:b6:41: f2:20:86:89:ec:ef:a5:68:2d:ad:b2:05:6a:14:dd: 38:63:1a:b4:4a:63:28:45:3a:7b:25:0e:b5:d5:aa: 4e:f4:f2:fa:4c:a1:45:d6:fc:92:a3:db:14:7d:fb: 70:9a:fc:4d:85:74:55:d4:22:58:41:97:e9:d0:44: 50:46:e4:87:34:1b:56:64:a7:66:c9:58:19:c1:2d: c3:47:c1:93:fe:f9:5b:b3:2d:5d:8f:4e:83:2d:0f: f5:b5:ed:a4:50:ff:95:63:00:73:a6:2a:d3:b8:fa: b7:28:a3:5e:f2:ea:21:c3:37:00:ec:e9:49:ec:77: a4:d2:95:88:08:3c:2a:1c:10:6a:69:fe:44:00:47: 3b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F1:81:CE:E1:F0:E2:97:E5:69:75:6E:0C:EE:80:7F:3A:43:1A:B1 X509v3 Authority Key Identifier: keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6c:5a:3d:ec:76:e9:db:be:3c:dc:2e:a4:47:ae:e7:12:03: 37:09:16:f1:00:56:fd:33:bb:4b:4a:8e:ba:84:3a:2c:98:12: 9c:b1:1a:5a:de:8f:7b:16:9b:5a:8a:39:ff:96:42:c0:7a:46: 33:26:c7:37:4f:59:80:f5:de:36:49:46:1f:ca:b8:28:9e:14: 9b:83:f4:a7:98:ff:ef:0e:23:50:99:14:08:9c:54:b8:3b:40: 5f:71:5c:c3:15:a8:70:e9:c6:30:c0:88:5d:d1:7a:67:76:fa: 82:49:91:40:3c:23:91:a1:65:67:8e:d4:c7:91:f7:c5:e5:c4: ed:e1:02:09:1c:6e:91:3b:5a:f4:9c:52:62:6c:e6:c5:48:9e: 8a:06:5c:78:0c:e8:fe:74:4a:f6:e2:e0:47:d8:25:2e:c7:31: ee:a4:e4:50:09:6f:09:d5:9f:c1:f3:0f:1d:9b:ec:25:de:bf: 9c:a4:25:fc:c0:8a:8b:9d:d9:5d:9f:13:0f:c0:19:68:97:6a: d3:16:1a:1a:b3:27:3e:ae:01:e0:e7:e1:34:4e:16:0e:35:08: 51:af:bb:84:69:54:f7:8b:18:c3:dc:5e:87:6a:4a:6b:bb:aa: 7c:40:aa:7b:d0:d1:be:64:3a:2e:d6:7a:d9:1f:f0:e0:0c:c0: 69:45:02:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG NzMzQTJGMUEwHhcNMjYwOTA0MTQyMjMyWhcNMjYwOTExMTQyMjMyWjAYMRYwFAYD VQQDEw02YTlhZDQyOC1hN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IVr9x7QWx/sW+pXGlQNvhE4X8KJZR6Zy18JTS1jxPQlnam/Yn5W3ey/pwzR Fj0LtP5sWFOBdEmmjO0cu6cT54glHJ3ovVsoSC/j9NiSEHYxZXdaIH/N+a7BJUIQ ue8U+aa54MeZGJHnbDejiYeDacLwEKDctkHyIIaJ7O+laC2tsgVqFN04Yxq0SmMo RTp7JQ611apO9PL6TKFF1vySo9sUfftwmvxNhXRV1CJYQZfp0ERQRuSHNBtWZKdm yVgZwS3DR8GT/vlbsy1dj06DLQ/1te2kUP+VYwBzpirTuPq3KKNe8uohwzcA7OlJ 7Hek0pWICDwqHBBqaf5EAEc73QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInxgc7h 8OKX5Wl1bgzugH86QxqxMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzVCMC80MEM4RDVBNjFEODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNx MEttX21TVm9PNjczTTZMeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjGxaPex26du+PNwupEeu5xIDNwkW8QBW/TO7S0qOuoQ6LJgSnLEaWt6Pexab Woo5/5ZCwHpGMybHN09ZgPXeNklGH8q4KJ4Um4P0p5j/7w4jUJkUCJxUuDtAX3Fc wxWocOnGMMCIXdF6Z3b6gkmRQDwjkaFlZ47Ux5H3xeXE7eECCRxukTta9JxSYmzm xUieigZceAzo/nRK9uLgR9glLscx7qTkUAlvCdWfwfMPHZvsJd6/nKQl/MCKi53Z XZ8TD8AZaJdq0xYaGrMnPq4B4OfhNE4WDjUIUa+7hGlU94sYw9xeh2pKa7uqfECq e9DRvmQ6LtZ62R/w4AzAaUUCBw== -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:19 2026 by rpki-client