$ rpki-client -vvvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft File: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft (raw, json) Hash identifier: X2rIn5CKcPITellgY4EdjWvYc7hmGthGxj43n/r61Qc= Subject key identifier: 81:CC:5E:C8:C7:3C:9E:E1:F0:7B:05:C4:5C:5F:D4:3F:42:DB:B1:D8 Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft Manifest number: 031E Signing time: Tue 01 Sep 2026 01:02:44 +0000 Manifest this update: Tue 01 Sep 2026 01:02:44 +0000 Manifest next update: Tue 08 Sep 2026 01:02:44 +0000 Files and hashes: 1: Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl (hash: ts9W/pb+9XKhz7AxgFZGxn57V+AOoxIaaJrE30YJals=) 2: C124669A0CD811F1BF03794C353D8C67.roa (hash: JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=) 3: 3DD9ED2C4AE811EF9BCF4B47C4F9AE02.roa (hash: BHSpV+Gq6Gws2/o0c53RF67bnt9NJJ0SuvXjhdlyU8E=) 4: 7CC6F3AAE53311EF884A4360C4F9AE02.roa (hash: cguhOR+xPL8URC9dUBq79E0ITjnACQb9yWGRdabBMUI=) 5: 042F9468894511F0A3D3DD77C4F9AE02.roa (hash: IVE5poi3yydi8SlwCdQ3nRz2hkXDmU5nSFi26BuWNlw=) 6: 04F02E3CCA7F11F0BFDF2176C4F9AE02.roa (hash: 8etvzVCQlv8A6DpHOmE8u7H0WVlTzHo4atT3hewiuX8=) 7: 602984F09C0611EE93EA142EC4F9AE02.roa (hash: waRb+W/EddftZM4PQoXqjw50HJa1a9eIg2sGtm1oeLs=) 8: 8C9B0E9EF6A111F098FCFC673E6F56BC.roa (hash: 0qxJG/dx6ek62/cWcpjHsvl/DAnlmfiH48mGwMfnrHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Sep 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B Validity Not Before: Sep 1 01:02:44 2026 GMT Not After : Sep 8 01:02:44 2026 GMT Subject: CN=6a962434-4a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:66:f6:9d:08:4f:08:df:df:e2:db:d3:fd: 43:7f:58:7a:a1:f4:f7:23:f6:2c:7d:25:13:36:31: 0f:4e:24:57:6c:6b:71:7c:7d:a3:8d:81:b3:72:df: ad:2a:61:aa:5b:ff:78:4d:53:e7:6e:cd:77:c5:9d: cc:df:fa:4f:12:fa:4b:d6:c9:c7:bd:02:fe:b5:94: 7b:49:91:04:21:39:4f:b8:63:f1:f9:97:a6:e7:33: d8:e5:ff:1f:a2:f5:f2:17:2c:b5:5b:e7:41:a5:cb: 50:21:34:02:91:b4:22:5f:b4:15:38:44:60:71:0e: d7:38:95:58:82:e9:3d:f7:70:21:c8:15:c7:84:6c: 21:33:2c:33:27:cc:41:55:46:ee:db:9a:12:29:e1: 69:1c:9d:5c:77:43:c0:5d:0d:30:e7:b0:d0:47:4e: 8d:d9:38:3c:e2:83:1a:95:b2:ec:2b:c0:c9:ea:f2: c8:b9:93:95:a5:dc:c8:fa:62:e8:38:73:22:f4:13: 3f:1b:35:1c:6f:7f:18:9b:bf:3c:2d:e8:8c:df:f9: b5:e8:b6:05:ba:14:1f:2c:42:b3:f3:48:f4:06:a8: bb:72:95:28:66:99:91:ac:98:de:23:5f:aa:f9:8d: c1:aa:c1:3b:f1:0b:54:d7:0d:28:11:5d:fc:13:b1: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CC:5E:C8:C7:3C:9E:E1:F0:7B:05:C4:5C:5F:D4:3F:42:DB:B1:D8 X509v3 Authority Key Identifier: keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:46:be:f2:e1:79:ea:39:e7:a7:b8:ef:f5:b7:c7:de:65:50: 79:4d:64:0a:a4:fc:f9:23:f0:7c:30:33:ef:8b:ee:16:e7:cd: c3:97:e8:ac:50:16:2d:9b:09:98:96:42:04:e6:cf:52:f0:8f: 74:b2:2b:a8:97:b3:49:14:89:bc:c6:5e:c2:89:b5:a6:be:3c: 00:ca:82:84:bd:92:99:03:50:4b:b5:87:1b:df:39:b4:b4:7f: 25:7e:de:70:ab:8a:5e:c4:60:39:64:b3:9c:0a:2b:4e:a9:5e: 38:e0:50:11:e4:d6:e1:09:7c:ef:fd:2b:e6:ac:25:a9:6f:0e: 87:68:10:d5:e3:1c:04:d1:c7:ab:e7:99:03:4d:0b:9f:41:ac: 72:f4:71:35:a9:4b:6c:c5:b4:5f:6a:21:01:1f:18:cf:65:e6: 51:27:1b:a2:76:23:7e:d3:f2:5c:70:a1:82:61:6d:c5:84:ad: dd:e3:57:d1:32:31:3c:82:f2:c6:52:8a:a0:76:84:ce:10:fa: a5:ed:dd:95:2d:2e:7f:95:50:08:dc:1d:9e:19:7e:79:03:ae: 56:c6:0a:a3:69:c4:ab:46:e8:7c:70:37:af:69:6b:e9:df:19: 6b:3e:cd:ac:88:22:e2:99:9a:4b:df:1f:6c:e3:73:f6:bc:e0: cb:2f:bd:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4N0YxMTAvBgNVBAUTKDNBNkRENEI3MEM0NTYwRUFDMzdFODFFNjIyQ0M0Mzgw OUY1MjNCNEIwHhcNMjYwOTAxMDEwMjQ0WhcNMjYwOTA4MDEwMjQ0WjAYMRYwFAYD VQQDEw02YTk2MjQzNC00YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmetm9p0ITwjf3+Lb0/1Df1h6ofT3I/YsfSUTNjEPTiRXbGtxfH2jjYGzct+t KmGqW/94TVPnbs13xZ3M3/pPEvpL1snHvQL+tZR7SZEEITlPuGPx+Zem5zPY5f8f ovXyFyy1W+dBpctQITQCkbQiX7QVOERgcQ7XOJVYguk993AhyBXHhGwhMywzJ8xB VUbu25oSKeFpHJ1cd0PAXQ0w57DQR06N2Tg84oMalbLsK8DJ6vLIuZOVpdzI+mLo OHMi9BM/GzUcb38Ym788LeiM3/m16LYFuhQfLEKz80j0Bqi7cpUoZpmRrJjeI1+q +Y3BqsE78QtU1w0oEV38E7FnAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHMXsjH PJ7h8HsFxFxf1D9C27HYMB8GA1UdIwQYMBaAFDpt1LcMRWDqw36B5iLMQ4CfUjtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg3Ri9GNzMxOTZBQTMz RTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllPckRmb0htSXN4RGdKOVNP MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09tM1V0d3hGWU9yRGZvSG1Jc3hEZ0o5U08wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDg3Ri9GNzMxOTZBQTMzRTExMUVEQjNBMEVBNThDNEY5QUUwMi9PbTNVdHd4RllP ckRmb0htSXN4RGdKOVNPMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWUa+8uF56jnnp7jv9bfH3mVQeU1kCqT8+SPwfDAz74vuFufNw5forFAWLZsJ mJZCBObPUvCPdLIrqJezSRSJvMZewom1pr48AMqChL2SmQNQS7WHG985tLR/JX7e cKuKXsRgOWSznAorTqleOOBQEeTW4Ql87/0r5qwlqW8Oh2gQ1eMcBNHHq+eZA00L n0GscvRxNalLbMW0X2ohAR8Yz2XmUScbonYjftPyXHChgmFtxYSt3eNX0TIxPILy xlKKoHaEzhD6pe3dlS0uf5VQCNwdnhl+eQOuVsYKo2nEq0bofHA3r2lr6d8Zaz7N rIgi4pmaS98fbONz9rzgyy+9wg== -----END CERTIFICATE-----Generated at Tue Sep 1 03:21:31 2026 by rpki-client