$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json) Hash identifier: 2pF1J8jWfwLkNW3ACHwoyaASy3nbjoinCC8oTIPfTYg= Subject key identifier: D8:9D:29:BB:0E:1E:18:23:12:AC:3B:A0:DA:53:FB:AA:B0:75:5A:95 Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft Manifest number: 84 Signing time: Sat 15 Aug 2026 07:51:49 +0000 Manifest this update: Sat 15 Aug 2026 07:51:48 +0000 Manifest next update: Sat 22 Aug 2026 07:51:48 +0000 Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: YwJx5FdQWUTZul4GeMKjMdIyYNmAMKa3Bawph1ZgljA=) 2: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=) 3: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=) 4: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Aug 15 07:51:48 2026 GMT Not After : Aug 22 07:51:48 2026 GMT Subject: CN=6a801a94-f1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:c8:b3:b6:be:7e:4d:8f:49:0d:3b:d9:9d: d4:1c:d5:fd:1f:f0:93:7b:4d:37:11:a0:83:d0:e4: 57:d5:f4:f8:9e:1b:43:88:66:b7:d0:b9:3f:1c:d4: 29:87:c0:de:3a:68:d9:9a:fe:3f:93:63:c0:66:73: e6:d1:9f:af:1d:f7:76:ac:b7:c2:45:e2:d9:bd:1d: 7c:1f:6c:ab:de:71:46:81:87:48:2b:1f:b6:e5:26: 86:bc:cd:93:2e:70:b8:aa:91:59:3d:20:76:65:83: e9:9f:d9:96:4a:ef:06:9c:b8:a9:af:d7:dd:4f:bd: 45:f2:01:15:ad:71:73:e8:b9:b6:a5:28:ba:29:e5: 92:b1:29:50:02:71:d6:44:3b:d7:ea:33:61:86:7d: 45:a2:8c:90:9c:26:b6:37:33:93:b7:52:6b:99:d7: 27:98:ec:0a:cc:70:c0:f1:12:fd:8f:0c:8a:fe:48: 0d:b9:9e:8e:57:0e:fc:d0:4d:3c:4d:c3:c9:cc:35: 18:a5:88:9b:ee:e7:a1:47:e0:34:a4:9b:64:99:97: a7:af:2a:17:57:cb:88:6b:97:ec:dd:92:78:35:01: 3d:6d:71:95:f4:c4:42:8f:cb:41:d9:34:52:f4:09: c5:c2:34:50:df:71:e4:ae:cd:94:05:f4:89:5c:93: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9D:29:BB:0E:1E:18:23:12:AC:3B:A0:DA:53:FB:AA:B0:75:5A:95 X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:26:41:fb:b9:c3:fd:db:31:44:4f:4a:b1:3a:d9:b2:a1:68: 50:a7:f5:23:ff:0e:e9:e9:34:86:de:22:f9:67:3c:a7:84:72: c6:ee:a4:b4:82:de:5c:78:3b:70:f7:d9:a4:c5:1f:b5:2f:a5: 4a:e2:3a:39:58:db:9a:35:45:03:83:99:bb:0e:9f:05:65:8a: 9a:02:af:b8:49:c9:7e:d7:db:5b:2a:32:90:73:58:6e:5c:fc: 0e:14:81:48:2a:3f:3b:04:5b:ff:c1:e0:cc:87:0d:56:f8:83: 85:ae:61:d0:6b:7e:2c:26:49:24:20:28:a4:6e:78:8e:ff:58: de:3c:60:07:f7:80:5a:30:d9:34:01:dc:70:11:bd:e6:a9:d6: 23:90:5e:87:6b:94:25:92:a7:07:58:ad:47:fa:28:c0:d8:08: 01:06:81:d9:b6:eb:76:5a:23:06:98:0e:59:65:a3:7b:c3:52: 51:79:bb:21:47:49:d3:99:2f:c9:42:0a:68:f3:3a:cf:7c:0f: 21:b7:37:72:57:11:87:c9:0b:e1:6f:cd:c0:02:75:14:9d:19: 11:a9:21:c3:94:ae:aa:d9:15:84:a1:1c:ce:b1:13:96:b6:38: b9:45:e7:c2:20:0a:69:cb:b1:69:96:18:29:13:55:2a:a5:78: b1:8f:ad:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxQTAxMTAvBgNVBAUTKERFOEMxMTY1NTEwNDJCRThFNzI2NEJFREI1ODJGMEEz NzdCQjI0QkQwHhcNMjYwODE1MDc1MTQ4WhcNMjYwODIyMDc1MTQ4WjAYMRYwFAYD VQQDEw02YTgwMWE5NC1mMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtE3Is7a+fk2PSQ072Z3UHNX9H/CTe003EaCD0ORX1fT4nhtDiGa30Lk/HNQp h8DeOmjZmv4/k2PAZnPm0Z+vHfd2rLfCReLZvR18H2yr3nFGgYdIKx+25SaGvM2T LnC4qpFZPSB2ZYPpn9mWSu8GnLipr9fdT71F8gEVrXFz6Lm2pSi6KeWSsSlQAnHW RDvX6jNhhn1FooyQnCa2NzOTt1JrmdcnmOwKzHDA8RL9jwyK/kgNuZ6OVw780E08 TcPJzDUYpYib7uehR+A0pJtkmZenryoXV8uIa5fs3ZJ4NQE9bXGV9MRCj8tB2TRS 9AnFwjRQ33Hkrs2UBfSJXJPwwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNidKbsO HhgjEqw7oNpT+6qwdVqVMB8GA1UdIwQYMBaAFN6MEWVRBCvo5yZL7bWC8KN3uyS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzFBMC9ENjk5NERFNkRB M0UxMUYwODFGNUE0NTc4RUQzNjQxRC8zb3dSWlZFRUstam5Ka3Z0dFlMd28zZTdK TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzFBMC9ENjk5NERFNkRBM0UxMUYwODFGNUE0NTc4RUQzNjQxRC8zb3dSWlZFRUst am5Ka3Z0dFlMd28zZTdKTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUyZB+7nD/dsxRE9KsTrZsqFoUKf1I/8O6ek0ht4i+Wc8p4Ryxu6ktILeXHg7 cPfZpMUftS+lSuI6OVjbmjVFA4OZuw6fBWWKmgKvuEnJftfbWyoykHNYblz8DhSB SCo/OwRb/8HgzIcNVviDha5h0Gt+LCZJJCAopG54jv9Y3jxgB/eAWjDZNAHccBG9 5qnWI5Beh2uUJZKnB1itR/oowNgIAQaB2bbrdlojBpgOWWWje8NSUXm7IUdJ05kv yUIKaPM6z3wPIbc3clcRh8kL4W/NwAJ1FJ0ZEakhw5SuqtkVhKEczrETlrY4uUXn wiAKacuxaZYYKRNVKqV4sY+t0g== -----END CERTIFICATE-----Generated at Sat Aug 15 12:59:12 2026 by rpki-client