$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: pVqQ3kUyRWwHY/+ez+bD6RVOS2KHItrskFvb6hY/2IY= Subject key identifier: 0A:43:C4:0C:3C:28:E6:AF:DF:39:31:6B:B0:A1:72:5E:CB:89:D6:38 Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 0132 Signing time: Thu 03 Sep 2026 05:47:56 +0000 Manifest this update: Thu 03 Sep 2026 05:47:56 +0000 Manifest next update: Thu 10 Sep 2026 05:47:56 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: OHnykw9bFxI841RSr2HNGOb4ja5Pe2nfQDYOtFtj0pg=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: VY1rUPr6EXTZh6NWaqpR1v2JRKFtMHVjZuzu+EK7FeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 05:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Sep 3 05:47:56 2026 GMT Not After : Sep 10 05:47:56 2026 GMT Subject: CN=6a990a0c-9b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:d8:4c:43:36:89:e6:30:8c:69:20:7a:66: f1:da:bc:62:4a:7a:a8:7f:7e:f4:04:72:29:c1:1e: ba:40:16:83:b4:ef:71:44:63:33:d9:4e:e2:00:1e: 2b:d4:88:5b:9e:d6:f5:5a:c9:d2:e6:91:67:e2:b1: 13:84:d3:a1:8c:e0:ce:ba:96:0a:f0:39:12:f6:73: 17:48:df:1a:e8:89:7f:6b:f3:53:a2:50:af:68:57: 37:9c:54:b7:6a:89:52:60:07:22:0c:b2:57:27:18: db:32:52:e9:d3:d5:f6:a0:5b:54:c1:b5:f2:20:cf: c8:00:f2:e5:b0:f4:c6:73:ac:23:3d:fc:72:4c:83: 96:00:27:34:e3:c6:53:a9:df:0d:00:df:89:2a:7b: 85:f8:a8:bc:86:e6:50:6f:c5:51:23:3e:56:b5:0a: b5:eb:1d:8b:e2:f4:8a:5a:28:97:62:1e:de:85:16: 18:fb:fb:71:71:90:ae:fd:2d:42:6c:fc:c0:24:5d: 9b:43:93:db:0f:eb:80:07:93:65:48:c0:7d:8e:0f: 34:0c:03:10:f2:db:27:23:bc:49:8a:e2:d8:f4:35: e8:14:26:0a:e0:f7:40:e3:98:29:d7:4d:d6:a3:51: f7:99:4f:7b:39:61:db:15:da:c7:8c:63:4c:8f:45: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:43:C4:0C:3C:28:E6:AF:DF:39:31:6B:B0:A1:72:5E:CB:89:D6:38 X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:91:7c:a0:ae:1c:b9:d1:5b:59:2c:d0:81:89:e4:09:24:d1: 41:94:b5:42:9f:e1:61:6c:bb:b0:ee:bd:3b:f4:2a:51:6c:9d: 25:af:5c:6b:2f:e9:ff:ae:5c:00:9f:06:ca:e4:b9:09:19:17: ed:53:93:af:97:a8:85:6c:40:4d:b2:97:39:f4:a7:67:fb:d3: 89:a7:a9:9e:03:ab:d8:a9:cb:67:95:06:92:62:38:f3:98:34: 8d:1f:e3:36:3e:68:9b:b8:87:dc:81:f2:49:2e:ea:95:3f:28: 36:a5:ed:99:9f:d7:01:b4:95:bc:98:26:62:70:a8:ad:e1:96: d1:a5:bd:a2:e5:b1:2c:04:c5:e6:41:aa:f5:9c:e1:31:b8:10: c4:c7:b4:ed:dc:67:e3:46:43:12:99:6a:0b:89:2a:ed:2c:f4: 57:9f:8c:a1:4e:0a:f8:dc:c7:74:f2:98:86:ce:39:15:ca:08: 89:40:fd:7c:ce:c1:9f:c9:f9:b1:eb:50:83:69:89:7e:4b:d3: c8:40:52:c9:61:39:94:ed:08:68:ea:23:44:7a:7e:c2:70:61: 31:0e:cf:1f:49:14:ae:4c:74:31:b8:31:3f:98:74:26:d3:d1: 87:ec:fd:0d:49:57:dc:45:32:52:27:a9:54:a5:ce:f5:74:bc: 3e:c3:57:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMxRjUxMTAvBgNVBAUTKDQ5MTM2Njc1RTdFMjM0RTdEMkY4ODQ1OTk4RTJDNjJE QjQ4ODgyQ0EwHhcNMjYwOTAzMDU0NzU2WhcNMjYwOTEwMDU0NzU2WjAYMRYwFAYD VQQDEw02YTk5MGEwYy05YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldnYTEM2ieYwjGkgembx2rxiSnqof370BHIpwR66QBaDtO9xRGMz2U7iAB4r 1Ihbntb1WsnS5pFn4rEThNOhjODOupYK8DkS9nMXSN8a6Il/a/NTolCvaFc3nFS3 aolSYAciDLJXJxjbMlLp09X2oFtUwbXyIM/IAPLlsPTGc6wjPfxyTIOWACc048ZT qd8NAN+JKnuF+Ki8huZQb8VRIz5WtQq16x2L4vSKWiiXYh7ehRYY+/txcZCu/S1C bPzAJF2bQ5PbD+uAB5NlSMB9jg80DAMQ8tsnI7xJiuLY9DXoFCYK4PdA45gp103W o1H3mU97OWHbFdrHjGNMj0W/bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFApDxAw8 KOav3zkxa7Chcl7LidY4MB8GA1UdIwQYMBaAFEkTZnXn4jTn0viEWZjixi20iILK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzFGNS9BNzU0RDM4MEQ2 RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5PZlMtSVJabU9MR0xiU0ln c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzFGNS9BNzU0RDM4MEQ2RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5P ZlMtSVJabU9MR0xiU0lnc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPJF8oK4cudFbWSzQgYnkCSTRQZS1Qp/hYWy7sO69O/QqUWydJa9cay/p/65c AJ8GyuS5CRkX7VOTr5eohWxATbKXOfSnZ/vTiaepngOr2KnLZ5UGkmI485g0jR/j Nj5om7iH3IHySS7qlT8oNqXtmZ/XAbSVvJgmYnCoreGW0aW9ouWxLATF5kGq9Zzh MbgQxMe07dxn40ZDEplqC4kq7Sz0V5+MoU4K+NzHdPKYhs45FcoIiUD9fM7Bn8n5 setQg2mJfkvTyEBSyWE5lO0IaOojRHp+wnBhMQ7PH0kUrkx0MbgxP5h0JtPRh+z9 DUlX3EUyUiepVKXO9XS8PsNX6A== -----END CERTIFICATE-----Generated at Sat Sep 5 04:11:56 2026 by rpki-client