$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft File: 38k2Rbnm9TdyUHTptErqgKn1YIg.mft (raw, json) Hash identifier: O0cOSe9zAavmmeL4DmIGb/qUzdFQO1O9YR85XCmCHHA= Subject key identifier: DA:D0:83:FE:3F:E2:6A:3C:52:DD:06:6F:0F:2C:11:44:0C:77:76:DD Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88 Certificate issuer: /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft Manifest number: 04 Signing time: Thu 03 Sep 2026 09:31:46 +0000 Manifest this update: Thu 03 Sep 2026 09:31:45 +0000 Manifest next update: Thu 10 Sep 2026 09:31:45 +0000 Files and hashes: 1: 38k2Rbnm9TdyUHTptErqgKn1YIg.crl (hash: 8SdgGIx68e1XTTh7FGsCvblzz0k9LZlb0oaIYO67kqw=) 2: 139EAF7AA5EA11F1AC5625803B11F970.roa (hash: q95EWgNnCkCkxtMkY8VhpsgjrKa5r4B4XasQmJ9Vq18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 09:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088 Validity Not Before: Sep 3 09:31:45 2026 GMT Not After : Sep 10 09:31:45 2026 GMT Subject: CN=6a993e82-bfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d1:20:10:2b:71:28:74:22:28:78:8e:a9:4c: 57:fe:cf:0e:07:ec:f0:ab:2d:fe:0a:6f:44:10:68: 63:0e:7d:43:00:00:20:1b:af:c9:19:6b:8a:35:15: 23:a0:a1:0f:d4:e3:45:81:65:30:4b:70:b4:bf:c4: 22:03:3f:87:04:50:9a:eb:db:cf:9c:0f:86:30:5c: 02:2c:c2:d1:39:d9:90:5e:c9:99:77:f5:24:30:3a: 55:af:a7:b5:f2:2e:06:51:42:05:f8:b4:07:c5:2f: 5e:e8:73:c1:fa:0b:e4:e4:88:1a:36:b9:4e:96:70: cc:af:a9:16:34:b4:56:71:94:48:d5:9e:b7:e0:2d: 91:2c:e3:bc:b2:d8:19:37:b0:76:6b:69:21:56:77: 46:ff:d9:a6:fd:86:d1:6c:de:94:3d:a5:a8:04:50: 8b:76:aa:3f:c9:d3:57:02:a7:bc:8a:2d:3f:75:06: 4a:e7:f1:c7:a0:19:0b:b8:85:cd:1e:1c:f0:62:c3: a6:d4:74:fa:13:7e:9a:f5:b1:5b:66:a8:ad:93:dd: ef:52:85:06:04:61:ca:e4:b0:ad:10:bc:e9:b3:d9: ef:66:3b:f8:61:cb:ee:ce:f0:45:51:1e:a5:ef:37: 22:45:cb:f8:b9:af:c2:3c:c1:14:38:ee:76:12:f7: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D0:83:FE:3F:E2:6A:3C:52:DD:06:6F:0F:2C:11:44:0C:77:76:DD X509v3 Authority Key Identifier: keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d5:e0:54:15:cf:1a:9b:2f:13:12:09:1c:16:e6:fd:af:65: 14:3e:bf:ff:42:7c:00:29:8c:09:9e:c9:54:46:64:ee:7e:bc: 7f:e4:98:06:61:9e:cc:a1:0a:42:58:fa:f8:2c:f2:05:0f:f3: 31:c3:60:56:2c:91:6f:5f:69:52:25:b4:95:66:8d:59:1c:8c: d6:bd:a5:64:c7:83:72:a6:36:1a:99:cb:7d:4d:05:c1:9a:6e: b2:f5:6e:d6:ba:d1:d7:56:d9:62:e5:39:a3:01:ed:7a:8c:21: 1f:c3:8b:74:67:ae:fd:dd:15:69:78:dd:38:23:a9:c4:b8:af: 27:88:be:43:c9:e2:87:f1:b7:92:14:f1:69:6b:1f:99:b8:9e: fd:09:b8:ea:84:ee:2b:98:31:ca:d0:df:96:73:fb:83:eb:c2: 22:c4:64:7a:f6:49:45:c7:ae:03:45:fd:63:5b:ba:60:6f:4c: c2:eb:95:1d:cb:73:19:5d:11:05:77:3b:7f:52:26:1c:23:6d: 5d:a8:25:e7:c1:ab:25:58:a6:53:bb:3d:8d:85:d6:41:b8:ad: ab:66:4a:05:7f:5c:c7:a4:ac:36:b0:87:29:13:5a:90:2a:ef: 36:08:d3:d0:cb:65:da:ed:c2:00:b5:46:77:56:4a:18:da:30: d5:1a:38:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTZCMjExMC8GA1UEBRMoREZDOTM2NDVCOUU2RjUzNzcyNTA3NEU5QjQ0QUVBODBB OUY1NjA4ODAeFw0yNjA5MDMwOTMxNDVaFw0yNjA5MTAwOTMxNDVaMBgxFjAUBgNV BAMTDTZhOTkzZTgyLWJmYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCE0SAQK3EodCIoeI6pTFf+zw4H7PCrLf4Kb0QQaGMOfUMAACAbr8kZa4o1FSOg oQ/U40WBZTBLcLS/xCIDP4cEUJrr28+cD4YwXAIswtE52ZBeyZl39SQwOlWvp7Xy LgZRQgX4tAfFL17oc8H6C+TkiBo2uU6WcMyvqRY0tFZxlEjVnrfgLZEs47yy2Bk3 sHZraSFWd0b/2ab9htFs3pQ9pagEUIt2qj/J01cCp7yKLT91Bkrn8cegGQu4hc0e HPBiw6bUdPoTfpr1sVtmqK2T3e9ShQYEYcrksK0QvOmz2e9mO/hhy+7O8EVRHqXv NyJFy/i5r8I8wRQ47nYS9/NdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2tCD/j/i ajxS3QZvDywRRAx3dt0wHwYDVR0jBBgwFoAU38k2Rbnm9TdyUHTptErqgKn1YIgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NkIyL0Q0QTQ4RUZDQTVF OTExRjE4RUQ0NTY3NTNCMTFGOTcwLzM4azJSYm5tOVRkeVVIVHB0RXJxZ0tuMVlJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzhrMlJibm05VGR5VUhUcHRFcnFnS24xWUlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 NkIyL0Q0QTQ4RUZDQTVFOTExRjE4RUQ0NTY3NTNCMTFGOTcwLzM4azJSYm5tOVRk eVVIVHB0RXJxZ0tuMVlJZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAD1eBUFc8amy8TEgkcFub9r2UUPr//QnwAKYwJnslURmTufrx/5JgGYZ7MoQpC WPr4LPIFD/Mxw2BWLJFvX2lSJbSVZo1ZHIzWvaVkx4NypjYamct9TQXBmm6y9W7W utHXVtli5TmjAe16jCEfw4t0Z6793RVpeN04I6nEuK8niL5DyeKH8beSFPFpax+Z uJ79CbjqhO4rmDHK0N+Wc/uD68IixGR69klFx64DRf1jW7pgb0zC65Udy3MZXREF dzt/UiYcI21dqCXnwaslWKZTuz2NhdZBuK2rZkoFf1zHpKw2sIcpE1qQKu82CNPQ y2Xa7cIAtUZ3VkoY2jDVGjgl -----END CERTIFICATE-----Generated at Fri Sep 4 22:49:02 2026 by rpki-client