$ rpki-client -vvvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft File: dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json) Hash identifier: pc8PGP3mTrpO820zG5tIj2bLzqhuhBDZ4rD1Iz7Ejto= Subject key identifier: 31:94:67:FF:8D:28:2D:7A:53:FD:85:D5:B8:22:95:5F:27:83:D5:60 Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17 Certificate issuer: /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft Manifest number: C3 Signing time: Sat 05 Sep 2026 06:36:26 +0000 Manifest this update: Sat 05 Sep 2026 06:36:25 +0000 Manifest next update: Sat 12 Sep 2026 06:36:25 +0000 Files and hashes: 1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: ckHjhQqOXLIB+YL1bl8SJ/UIXqUfn5VrChY7kMC5Kbg=) 2: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: zqRSIq7TQ9YhehrRszjYHmmXVsq7Z1RZBr7dzybRlhI=) 3: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: O2t9f2ogcGV3x7WMv8XiYkP5DDfbHONXGddoSTXjm4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 06:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317 Validity Not Before: Sep 5 06:36:25 2026 GMT Not After : Sep 12 06:36:25 2026 GMT Subject: CN=6a9bb86a-cbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:74:d5:4f:d3:39:7d:e1:6a:67:36:21:f9:9a: 03:3e:f5:3f:0e:c1:d9:fe:a1:9e:25:71:d2:47:8e: 88:b5:ac:43:85:76:c5:70:1d:4a:8a:c6:d2:28:7e: e4:dc:8e:3c:65:11:e3:cd:8f:a3:7a:15:1a:64:cb: 76:35:b3:4c:3c:83:8d:e5:e0:c8:54:91:74:73:e7: a3:8c:0a:70:12:ee:35:d0:ad:c1:a8:6e:73:36:6b: 46:b7:77:59:81:26:ca:26:ab:23:bb:75:be:5f:2d: c7:97:cb:f6:4f:05:23:fd:db:af:44:35:e2:d1:c0: 21:1d:08:8c:e3:59:70:d2:d9:fe:60:fb:f9:a3:f4: d0:a4:78:b1:0a:cb:ce:b6:ee:7d:cb:90:23:e6:a6: 1e:de:a7:4d:d2:b4:c2:02:31:29:2b:d8:4d:88:78: 57:6c:87:4b:c8:aa:35:47:96:d1:2d:b8:5f:1a:f6: 6b:c0:94:70:fc:64:3f:e5:24:d5:95:72:b8:67:ef: 4c:e2:7d:58:c9:12:02:ef:7a:e7:1a:cd:2f:a3:2b: fb:a4:af:83:ac:55:88:48:6e:4e:ce:70:0d:9b:f6: fa:ca:14:ae:c8:46:c2:a1:94:55:54:03:87:b7:4c: 90:18:83:8b:9c:54:d7:ff:7f:01:9f:7f:09:3d:2c: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:94:67:FF:8D:28:2D:7A:53:FD:85:D5:B8:22:95:5F:27:83:D5:60 X509v3 Authority Key Identifier: keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:08:4a:7c:c9:aa:8b:97:93:50:27:67:df:2e:1c:91:54:6f: 3a:8e:e0:1b:c3:9b:e5:fa:f6:9c:1a:82:b7:24:4c:8c:ed:36: c4:a8:1e:8b:38:fd:66:73:48:07:1c:3b:d6:08:74:46:96:b6: a9:51:3d:4d:49:a7:58:95:a8:39:c4:96:6e:0f:ed:98:ae:d4: c2:d5:1c:c3:6e:f8:67:95:55:d2:f5:61:09:38:64:ad:fd:e4: 82:5b:5a:3d:08:a4:2c:03:10:66:7b:5c:d2:5f:93:7a:8b:2b: 34:95:58:e7:cc:87:2f:ff:5d:f7:91:18:8f:51:0c:ce:98:ae: a8:25:47:a0:01:15:29:ca:02:aa:f1:4e:09:13:69:b8:cd:39: 30:7e:8f:47:59:2d:41:92:0b:84:16:37:44:8b:82:d3:b0:7c: 1f:fd:b2:9b:87:96:ef:91:56:6c:b0:7f:2e:34:ba:bc:b6:dd: 98:e2:27:66:44:24:dc:d4:20:b7:14:50:39:17:3d:3e:d8:47: a6:b0:bb:5f:7f:a7:36:80:ac:0f:83:04:92:1d:79:93:34:bb: 0a:d3:f6:0b:39:6a:f2:58:4e:7e:6d:f5:00:e5:db:ad:0a:c6: 50:9d:87:7d:fa:ec:1e:75:0a:8d:1d:84:13:67:d1:ee:83:cd: ef:be:a9:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczQjYxMTAvBgNVBAUTKDc1MTFDQjMxM0VCODNGMUMzOTAyQUE2M0M0M0I3QTAz NkFDQzYzMTcwHhcNMjYwOTA1MDYzNjI1WhcNMjYwOTEyMDYzNjI1WjAYMRYwFAYD VQQDEw02YTliYjg2YS1jYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43TVT9M5feFqZzYh+ZoDPvU/DsHZ/qGeJXHSR46ItaxDhXbFcB1KisbSKH7k 3I48ZRHjzY+jehUaZMt2NbNMPION5eDIVJF0c+ejjApwEu410K3BqG5zNmtGt3dZ gSbKJqsju3W+Xy3Hl8v2TwUj/duvRDXi0cAhHQiM41lw0tn+YPv5o/TQpHixCsvO tu59y5Aj5qYe3qdN0rTCAjEpK9hNiHhXbIdLyKo1R5bRLbhfGvZrwJRw/GQ/5STV lXK4Z+9M4n1YyRIC73rnGs0voyv7pK+DrFWISG5OznANm/b6yhSuyEbCoZRVVAOH t0yQGIOLnFTX/38Bn38JPSy57QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGUZ/+N KC16U/2F1bgilV8ng9VgMB8GA1UdIwQYMBaAFHURyzE+uD8cOQKqY8Q7egNqzGMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNCNi81NDgxQUZDMDgx QUExMUYwQjRDREFEMUNDNEY5QUUwMi9kUkhMTVQ2NFB4dzVBcXBqeER0NkEyck1Z eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSExNVDY0UHh3NUFxcGp4RHQ2QTJyTVl4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNCNi81NDgxQUZDMDgxQUExMUYwQjRDREFEMUNDNEY5QUUwMi9kUkhMTVQ2NFB4 dzVBcXBqeER0NkEyck1ZeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArQhKfMmqi5eTUCdn3y4ckVRvOo7gG8Ob5fr2nBqCtyRMjO02xKgeizj9ZnNI Bxw71gh0Rpa2qVE9TUmnWJWoOcSWbg/tmK7UwtUcw274Z5VV0vVhCThkrf3kglta PQikLAMQZntc0l+TeosrNJVY58yHL/9d95EYj1EMzpiuqCVHoAEVKcoCqvFOCRNp uM05MH6PR1ktQZILhBY3RIuC07B8H/2ym4eW75FWbLB/LjS6vLbdmOInZkQk3NQg txRQORc9PthHprC7X3+nNoCsD4MEkh15kzS7CtP2Czlq8lhOfm31AOXbrQrGUJ2H ffrsHnUKjR2EE2fR7oPN776p2Q== -----END CERTIFICATE-----Generated at Sat Sep 5 14:16:20 2026 by rpki-client