$ rpki-client -vvvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: 6vNs5DMEx1Oj/Vis0fuYxoJbkeC9b73fIImuNRi/Xu8= Subject key identifier: 98:68:B2:82:61:0F:66:9F:65:CC:67:BD:57:AE:E2:99:04:5C:63:C1 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 0119 Signing time: Thu 03 Sep 2026 06:16:17 +0000 Manifest this update: Thu 03 Sep 2026 06:16:17 +0000 Manifest next update: Thu 10 Sep 2026 06:16:17 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: Gj4cLXWdoYJzAAnHJbAVrjvHAZ7iC3tzT8hny0ZziQ4=) 2: bnK0NbUw8bBQTqHVz5DDKSrXEe4.asa (hash: 7A6SI6CQLWVcX0yr/SArmbn6gtHpeEIz0aBxOGnQ4bM=) 3: 692243D640AA11F096F2746AC4F9AE02.roa (hash: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=) 4: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: FmJuf298hS3Cq5FkDNYaTuFTUFK1cdgTe8R72xFRVHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Sep 3 06:16:17 2026 GMT Not After : Sep 10 06:16:17 2026 GMT Subject: CN=6a9910b1-aede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ad:7e:06:21:5e:7a:91:cc:96:93:80:3e:ab: 0e:e3:29:ca:01:ec:d2:d4:6b:b5:01:de:14:1d:b3: 0d:de:5f:09:37:78:17:a7:4b:d6:3c:ca:70:9e:06: 8d:7e:bd:72:50:4f:55:e2:93:38:08:b0:6c:1e:77: b7:10:4f:39:a6:09:5a:f8:33:e4:76:5e:62:8e:d0: 76:88:63:be:3c:de:a8:ca:e1:a9:0f:ad:a5:d0:87: 9d:1c:b4:8d:f7:76:ab:81:f2:51:a3:61:28:75:18: b5:14:30:f9:04:42:76:db:d3:87:6a:e6:08:fe:42: bb:1c:ce:1a:2d:0a:7b:14:70:1d:90:d4:26:7e:5f: e9:a7:48:ba:46:1b:90:70:44:2c:e8:04:c7:b9:a8: 05:47:1f:73:39:f4:0d:59:81:f3:33:22:e5:d7:de: ec:48:4e:4b:5b:1a:59:c8:4a:84:fa:24:2a:9b:c1: 9d:39:64:94:5d:b1:75:e4:42:c1:d4:ac:a8:c2:21: 6a:74:62:b8:c3:22:48:1e:7a:9f:60:4a:e7:5a:bd: 12:98:fc:12:a8:67:3f:79:60:90:6c:05:e6:02:ed: 3e:20:7e:d3:e0:b1:00:1b:39:5c:05:38:4f:5f:0c: 35:d3:4b:7a:1d:32:90:bd:25:47:eb:bb:be:40:36: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:68:B2:82:61:0F:66:9F:65:CC:67:BD:57:AE:E2:99:04:5C:63:C1 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:7f:70:25:bd:c3:82:7a:a9:80:4f:65:f6:5e:a4:ed:8c:42: 83:f5:5b:39:59:5b:dc:bf:2e:8d:0b:d1:9e:f8:cc:78:ba:f5: 28:96:52:9b:ab:69:f3:ad:2a:04:bb:83:fa:01:ac:76:c3:90: ed:ea:9f:aa:f6:b8:85:0a:fd:7b:c1:cc:d3:07:31:bd:13:93: 79:ba:40:e2:d8:7e:f4:be:84:30:3f:da:65:63:98:7e:70:4c: 53:c7:82:77:c1:fa:ca:14:4a:c6:65:81:3e:d9:7c:e9:fa:f7: a4:c7:8e:c4:a8:cd:f3:77:63:a8:a4:ac:2a:d1:f1:50:97:39: 80:d8:f5:8d:db:15:63:23:bf:55:cc:2e:0a:ac:9e:c0:93:f9: 65:4e:b3:cf:6e:7e:c9:04:9a:80:ea:3a:fc:13:e2:d4:19:2b: c1:06:a4:e4:79:eb:cf:04:ef:78:ba:f8:a8:74:39:d4:01:63: 0b:84:46:5f:1d:2a:cb:33:d5:3a:7b:94:9e:32:e0:e4:b6:7a: aa:64:ec:f8:e0:a7:da:0a:1e:10:5f:41:7d:da:c6:7b:7b:d0: d9:a9:46:39:1d:dd:b2:1d:a9:2f:55:49:32:a5:6d:79:c6:0e: 72:5d:80:a1:38:10:aa:3b:16:5c:8b:66:70:68:39:f7:e5:7e: 86:33:3f:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjYwOTAzMDYxNjE3WhcNMjYwOTEwMDYxNjE3WjAYMRYwFAYD VQQDEw02YTk5MTBiMS1hZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmq1+BiFeepHMlpOAPqsO4ynKAezS1Gu1Ad4UHbMN3l8JN3gXp0vWPMpwngaN fr1yUE9V4pM4CLBsHne3EE85pgla+DPkdl5ijtB2iGO+PN6oyuGpD62l0IedHLSN 93argfJRo2EodRi1FDD5BEJ229OHauYI/kK7HM4aLQp7FHAdkNQmfl/pp0i6RhuQ cEQs6ATHuagFRx9zOfQNWYHzMyLl197sSE5LWxpZyEqE+iQqm8GdOWSUXbF15ELB 1KyowiFqdGK4wyJIHnqfYErnWr0SmPwSqGc/eWCQbAXmAu0+IH7T4LEAGzlcBThP Xww100t6HTKQvSVH67u+QDbMyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhosoJh D2afZcxnvVeu4pkEXGPBMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE39wJb3DgnqpgE9l9l6k7YxCg/VbOVlb3L8ujQvRnvjMeLr1KJZSm6tp860q BLuD+gGsdsOQ7eqfqva4hQr9e8HM0wcxvROTebpA4th+9L6EMD/aZWOYfnBMU8eC d8H6yhRKxmWBPtl86fr3pMeOxKjN83djqKSsKtHxUJc5gNj1jdsVYyO/VcwuCqye wJP5ZU6zz25+yQSagOo6/BPi1BkrwQak5HnrzwTveLr4qHQ51AFjC4RGXx0qyzPV OnuUnjLg5LZ6qmTs+OCn2goeEF9BfdrGe3vQ2alGOR3dsh2pL1VJMqVtecYOcl2A oTgQqjsWXItmcGg59+V+hjM/1A== -----END CERTIFICATE-----Generated at Sat Sep 5 03:47:53 2026 by rpki-client