$ rpki-client -vvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft File: 3Bh_yEFs5bNHuvIho2E6O0eCjog.mft (raw, json) Hash identifier: 1CxW5hxEVeQ+TabZ1+C37vWctzLOwvpGBXF3Ghmt+T4= Subject key identifier: 50:97:08:7C:3D:96:33:80:B7:B8:6F:8E:C8:63:75:FE:BD:09:40:EB Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 Certificate issuer: /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Certificate serial: 0FDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft Manifest number: 0FC4 Signing time: Tue 18 Aug 2026 17:41:57 +0000 Manifest this update: Tue 18 Aug 2026 17:41:56 +0000 Manifest next update: Tue 25 Aug 2026 17:41:56 +0000 Files and hashes: 1: 3Bh_yEFs5bNHuvIho2E6O0eCjog.crl (hash: IZjO5d/vwt5vHrQvJyZoTZ2E1QObz6KLWsGxBkQ6fvQ=) 2: 0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (hash: dENkyXnpATnLgb025SowCVq24fI5D1cqXlVYxDEMzio=) 3: 085B4576C35711EC9F5ADC3DC4F9AE02.roa (hash: OiI4GeqY5mB+sQeThF/k2nzv6QjlYZCXjncPTYDZnR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4058 (0xfda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717D1, serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Validity Not Before: Aug 18 17:41:56 2026 GMT Not After : Aug 25 17:41:56 2026 GMT Subject: CN=6a849965-d3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:20:d5:e4:34:52:ac:96:58:78:45:9b:1c: 36:56:7a:88:2a:ae:cd:9c:97:5d:ed:28:3d:cc:f1: 87:f7:23:d1:30:ca:a5:ad:77:59:4c:d3:3e:70:51: 0c:3a:f6:ae:29:1c:ab:62:24:21:e1:f1:95:06:55: 3d:e3:93:0a:db:5e:fd:51:f4:2f:2d:ac:f5:87:9a: fe:52:ac:f3:41:5e:7c:9c:ea:59:d2:68:7c:76:1b: d0:ca:1a:c5:32:4b:2c:13:8c:37:a5:64:34:b1:ce: e8:b4:29:0f:e5:55:8b:2f:1b:24:d8:b7:d2:56:71: e7:b0:15:f1:82:80:d6:80:54:be:fa:77:4d:85:e0: e2:85:24:eb:a0:26:88:dd:6e:b7:e7:64:b1:62:a7: 49:36:3a:b1:13:a4:fa:32:8c:2c:8f:d4:c1:04:fd: 2e:11:1b:fa:95:2d:bf:1e:50:ae:e1:0a:da:4c:e2: 69:d9:a6:11:00:00:df:23:29:aa:59:a8:26:75:b7: 84:92:02:99:29:e5:08:98:fc:98:27:d4:db:cd:e5: 5f:c0:2a:5b:3f:bb:1a:ee:99:f1:29:55:f5:95:57: 43:ae:a1:b1:3d:99:38:ef:b4:c0:5b:b2:27:66:b0: 87:84:29:d7:98:46:c4:98:f5:2e:f4:dc:d0:60:1f: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:97:08:7C:3D:96:33:80:B7:B8:6F:8E:C8:63:75:FE:BD:09:40:EB X509v3 Authority Key Identifier: keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:2c:38:49:f6:83:c3:2f:7c:18:9c:47:97:b4:b5:56:b5:dc: 8a:57:79:3f:ed:c9:0a:7a:c5:1c:29:b6:26:06:4f:92:36:4f: d2:18:47:4c:f7:99:ea:a1:67:a7:25:be:d4:25:d8:ca:fd:95: f7:36:4a:f2:58:97:80:20:4e:3d:f8:0e:ff:50:62:03:d9:00: 3e:82:9a:c5:2a:8c:03:a2:3d:98:12:81:9b:ea:28:ac:91:b4: ca:06:3e:ba:79:42:7e:fe:3f:dc:69:71:4f:96:77:c1:24:2c: df:6b:d7:38:17:8c:ec:d7:d5:f2:69:c5:db:91:3e:b2:c9:23: 96:eb:28:70:4a:94:10:4a:3e:b5:ae:f3:27:2c:eb:a9:0e:ac: 47:5d:3f:bb:f6:2a:11:1f:0b:50:49:38:77:37:09:ec:b6:88: 29:94:06:3f:e0:a5:86:b6:b4:48:1f:71:7b:7c:75:0c:a0:e6: 02:35:0b:3a:4d:cd:3d:78:a8:9c:69:a6:56:36:2f:6d:04:04: 78:da:32:54:f7:02:e9:62:3a:a3:ec:16:ea:36:78:57:85:fa: 6f:e6:ed:ae:08:30:27:91:3c:5c:c8:98:38:4c:9b:75:e1:f3: 51:64:9b:67:2e:eb:3f:e4:2e:5a:bb:cd:73:be:02:cc:be:c3: 52:d5:45:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3RDExMTAvBgNVBAUTKERDMTg3RkM4NDE2Q0U1QjM0N0JBRjIyMUEzNjEzQTNC NDc4MjhFODgwHhcNMjYwODE4MTc0MTU2WhcNMjYwODI1MTc0MTU2WjAYMRYwFAYD VQQDEw02YTg0OTk2NS1kM2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2Ag1eQ0UqyWWHhFmxw2VnqIKq7NnJdd7Sg9zPGH9yPRMMqlrXdZTNM+cFEM OvauKRyrYiQh4fGVBlU945MK2179UfQvLaz1h5r+UqzzQV58nOpZ0mh8dhvQyhrF MkssE4w3pWQ0sc7otCkP5VWLLxsk2LfSVnHnsBXxgoDWgFS++ndNheDihSTroCaI 3W6352SxYqdJNjqxE6T6Mowsj9TBBP0uERv6lS2/HlCu4QraTOJp2aYRAADfIymq WagmdbeEkgKZKeUImPyYJ9TbzeVfwCpbP7sa7pnxKVX1lVdDrqGxPZk477TAW7In ZrCHhCnXmEbEmPUu9NzQYB85PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCXCHw9 ljOAt7hvjshjdf69CUDrMB8GA1UdIwQYMBaAFNwYf8hBbOWzR7ryIaNhOjtHgo6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdEMS85QTlCNDhBMjgy QTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczViTkh1dklobzJFNk8wZUNq b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCaF95RUZzNWJOSHV2SWhvMkU2TzBlQ2pvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdEMS85QTlCNDhBMjgyQTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczVi Tkh1dklobzJFNk8wZUNqb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASSw4SfaDwy98GJxHl7S1VrXcild5P+3JCnrFHCm2JgZPkjZP0hhHTPeZ6qFn pyW+1CXYyv2V9zZK8liXgCBOPfgO/1BiA9kAPoKaxSqMA6I9mBKBm+oorJG0ygY+ unlCfv4/3GlxT5Z3wSQs32vXOBeM7NfV8mnF25E+sskjlusocEqUEEo+ta7zJyzr qQ6sR10/u/YqER8LUEk4dzcJ7LaIKZQGP+Clhra0SB9xe3x1DKDmAjULOk3NPXio nGmmVjYvbQQEeNoyVPcC6WI6o+wW6jZ4V4X6b+btrggwJ5E8XMiYOEybdeHzUWSb Zy7rP+QuWrvNc74CzL7DUtVFrg== -----END CERTIFICATE-----Generated at Wed Aug 19 15:17:06 2026 by rpki-client