$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: rNUmkYJSIbkZy7NGRjTyAyy8fNtuwOt7JhgATavLMeo= Subject key identifier: C2:F4:27:89:20:D2:21:1C:27:E3:66:4C:DE:8A:E6:F5:AF:9B:52:F7 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0C9C Signing time: Thu 20 Aug 2026 18:35:19 +0000 Manifest this update: Thu 20 Aug 2026 18:35:18 +0000 Manifest next update: Thu 27 Aug 2026 18:35:18 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: uPppS92YVW1ZJb/FtGBs7cMDbmaVPnyc9Hm4a0oJlOc=) 2: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=) 3: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Aug 20 18:35:18 2026 GMT Not After : Aug 27 18:35:18 2026 GMT Subject: CN=6a8748e7-d3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:f2:fa:c7:a8:9c:32:20:b3:d0:e3:c6:c5: b3:6b:fa:d7:57:1d:c8:d7:d6:0a:b2:f0:ae:9d:07: db:d0:f8:62:6f:b1:1d:a8:13:cd:11:2d:3a:1a:68: 7b:14:9c:ff:a0:9d:15:e1:df:66:dc:02:a9:55:0f: 6e:aa:18:02:11:33:9a:34:d8:9d:89:17:64:7e:72: 0f:35:0e:8d:9d:b3:d3:be:99:99:79:36:8b:f0:52: 9c:bd:39:e2:5d:dd:de:85:a1:6a:f3:3a:a9:1c:88: b8:6c:e2:7a:7b:77:c8:fa:81:0b:5a:de:c4:3a:d4: 07:fb:03:49:37:db:57:b9:e8:50:90:8c:07:e7:08: e5:94:89:02:ae:c6:e4:d9:56:04:f1:55:4a:b7:ea: 56:14:4b:e4:3d:f6:d0:2d:4b:07:8f:e9:c6:17:ff: 9a:4a:19:dc:a8:82:72:a6:62:85:81:10:ca:32:69: e4:ed:5c:e2:85:aa:b7:62:a9:10:f5:64:b9:62:6f: 2c:27:ea:ec:44:78:ea:6b:8b:98:b6:59:cd:27:ba: 48:4a:89:6c:16:95:f7:06:68:7e:c5:89:19:f5:94: dc:15:3e:ee:36:d5:f4:bd:52:53:54:81:af:4c:0f: ab:8e:e3:5f:53:78:32:51:0b:a1:13:eb:6a:d8:8e: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F4:27:89:20:D2:21:1C:27:E3:66:4C:DE:8A:E6:F5:AF:9B:52:F7 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:0e:f8:ae:ef:4a:80:28:2f:27:15:13:ff:c8:a8:be:9b:c8: b8:e2:64:0b:8b:af:4b:53:6b:5f:92:4b:15:8c:74:a5:4d:d9: 5e:cc:2d:3a:65:6b:04:ba:33:e4:34:16:3f:22:15:a3:e9:bb: f3:27:ff:0b:d1:77:97:d1:3f:e0:d3:d1:57:4d:af:f3:57:46: 3b:cf:04:11:4f:00:35:12:fc:63:93:56:f1:b8:c4:cb:ce:f6: 97:df:0c:2c:02:d5:f3:fb:e9:e9:f8:ec:39:a3:18:4c:39:38: f5:ff:1b:e5:ed:e3:d0:a7:63:92:7e:e9:bf:1b:f9:ef:d3:7d: 95:8c:e9:58:8a:ad:07:87:77:43:c7:7e:31:ca:11:29:4e:53: 43:af:af:9e:6b:7c:02:9d:b8:2f:80:fa:25:d8:1b:a9:1e:eb: 74:8b:50:84:73:3c:c9:85:54:6a:88:59:bb:10:bd:5e:ee:33: 60:7d:2d:c4:72:5a:05:0c:83:f3:30:dd:01:2a:01:e3:f5:01: 19:c8:09:fb:e2:a3:ba:a7:c5:0b:39:6b:a3:61:db:b8:fb:8e: 95:53:3f:25:a1:34:a7:fa:79:80:e5:6d:67:58:48:31:ed:9c: d6:4c:49:73:b4:5b:c6:00:37:85:d1:3b:45:b4:dd:12:d4:80: f3:fa:42:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjYwODIwMTgzNTE4WhcNMjYwODI3MTgzNTE4WjAYMRYwFAYD VQQDEw02YTg3NDhlNy1kM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/7y+seonDIgs9DjxsWza/rXVx3I19YKsvCunQfb0Phib7EdqBPNES06Gmh7 FJz/oJ0V4d9m3AKpVQ9uqhgCETOaNNidiRdkfnIPNQ6NnbPTvpmZeTaL8FKcvTni Xd3ehaFq8zqpHIi4bOJ6e3fI+oELWt7EOtQH+wNJN9tXuehQkIwH5wjllIkCrsbk 2VYE8VVKt+pWFEvkPfbQLUsHj+nGF/+aShncqIJypmKFgRDKMmnk7Vzihaq3YqkQ 9WS5Ym8sJ+rsRHjqa4uYtlnNJ7pISolsFpX3Bmh+xYkZ9ZTcFT7uNtX0vVJTVIGv TA+rjuNfU3gyUQuhE+tq2I4XBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFML0J4kg 0iEcJ+NmTN6K5vWvm1L3MB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtA74ru9KgCgvJxUT/8iovpvIuOJkC4uvS1NrX5JLFYx0pU3ZXswtOmVrBLoz 5DQWPyIVo+m78yf/C9F3l9E/4NPRV02v81dGO88EEU8ANRL8Y5NW8bjEy872l98M LALV8/vp6fjsOaMYTDk49f8b5e3j0Kdjkn7pvxv579N9lYzpWIqtB4d3Q8d+McoR KU5TQ6+vnmt8Ap24L4D6JdgbqR7rdItQhHM8yYVUaohZuxC9Xu4zYH0txHJaBQyD 8zDdASoB4/UBGcgJ++KjuqfFCzlro2HbuPuOlVM/JaE0p/p5gOVtZ1hIMe2c1kxJ c7RbxgA3hdE7RbTdEtSA8/pC5w== -----END CERTIFICATE-----Generated at Fri Aug 21 01:05:07 2026 by rpki-client