$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: JTHAuwwCin8ngGl6+hD8w8IqVdjkh9J807YY1lFHbag= Subject key identifier: 00:73:42:21:4D:59:B7:F0:DD:3B:38:6D:35:6B:31:25:19:C0:93:6C Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 02B1 Signing time: Thu 03 Sep 2026 01:38:04 +0000 Manifest this update: Thu 03 Sep 2026 01:38:03 +0000 Manifest next update: Thu 10 Sep 2026 01:38:03 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: fCr/SrJTuebtJD77ULiJH9IkmTJRxsIpkqJeNaGC2Dw=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 0qYn7E3SIHbzT9yJTx6pS9lXwvNIUC0KNk60lEWDjkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 01:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: Sep 3 01:38:03 2026 GMT Not After : Sep 10 01:38:03 2026 GMT Subject: CN=6a98cf7c-3fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:b8:27:23:61:72:f4:aa:72:ae:e8:b8:ed: b2:b2:d4:03:4f:56:2d:bd:97:bf:be:55:2d:07:13: e8:ba:0f:4d:62:60:a3:ef:a5:88:9a:50:63:d7:5c: 4b:69:d2:a1:fa:6f:75:0c:f0:2b:1a:92:3a:99:b7: a5:70:12:9d:75:1b:a6:f7:dc:a7:52:e2:49:05:24: bf:d6:30:f9:8a:27:84:ae:22:0a:09:ac:b7:ed:22: 05:ee:0f:2b:56:60:b6:40:20:29:ed:62:53:c9:f8: f1:cf:69:93:fa:6c:79:60:c4:c1:74:4a:db:c5:5d: 7e:97:a9:07:07:3d:85:bf:19:a9:4c:a9:32:53:61: 43:e2:1b:37:91:33:c4:d3:01:d1:c2:84:fd:d0:63: a3:ba:eb:74:7d:ec:85:0c:fe:2d:7b:85:61:e3:94: 5d:20:b4:da:98:b0:02:bd:87:2b:6a:a4:ac:1a:05: 5b:00:2b:6b:1d:f1:66:9d:1a:a6:c6:cc:b5:b0:c6: de:6a:20:2b:b2:ad:2d:b8:06:b7:8e:21:85:41:dd: bf:65:ea:9e:8f:ce:74:0f:fd:1d:16:07:07:ac:89: 08:8c:c9:ea:63:6e:8a:ac:98:82:b2:6b:3e:2f:44: da:d5:7f:f5:5a:87:d2:16:26:d0:cc:4e:e3:5a:28: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:73:42:21:4D:59:B7:F0:DD:3B:38:6D:35:6B:31:25:19:C0:93:6C X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:33:8f:f4:f4:b6:4b:99:3a:ef:7f:c3:40:2b:4a:8d:42:6e: a6:38:c4:84:d8:36:12:93:fe:68:90:b8:d5:7e:a3:b9:6d:17: c8:ac:4a:f6:83:6f:fc:6b:8e:2f:74:45:f6:26:30:8b:91:6a: 57:dc:67:e9:c9:2e:5d:27:26:68:9f:2d:36:e1:00:b7:d4:6c: 1e:7a:c4:19:84:45:1e:87:4e:b8:c0:4a:b5:cd:3f:b2:2b:7c: 31:39:ed:bf:ba:73:77:28:5a:8a:e5:f6:ca:d5:0d:07:5b:ef: b5:c8:94:98:11:e2:e1:1a:9f:f4:48:f6:6d:30:e5:ec:e5:9d: 44:56:74:1c:5d:64:4e:f9:64:a5:fe:6d:75:27:e0:e6:26:c4: 5f:9a:fb:d9:20:08:2a:4d:bf:41:d4:dd:2f:65:75:45:37:c8: c1:51:0d:f4:6d:02:b0:08:7a:e2:32:ca:b8:d7:6b:51:ad:d7: 36:e9:c8:37:6d:09:e4:91:ec:3d:dc:e9:2c:85:59:73:df:fa: 1d:1b:cf:07:8d:37:ab:e2:0c:1d:4d:95:9c:d3:25:8c:31:c7: f3:14:0b:5b:29:f3:5e:d8:2f:fe:df:b0:cc:81:08:4a:fd:7e: 26:05:6e:e0:90:53:b3:3b:8d:05:0f:7c:3a:89:7e:d2:91:01: 81:f9:5c:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjYwOTAzMDEzODAzWhcNMjYwOTEwMDEzODAzWjAYMRYwFAYD VQQDEw02YTk4Y2Y3Yy0zZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltC4JyNhcvSqcq7ouO2ystQDT1YtvZe/vlUtBxPoug9NYmCj76WImlBj11xL adKh+m91DPArGpI6mbelcBKddRum99ynUuJJBSS/1jD5iieEriIKCay37SIF7g8r VmC2QCAp7WJTyfjxz2mT+mx5YMTBdErbxV1+l6kHBz2FvxmpTKkyU2FD4hs3kTPE 0wHRwoT90GOjuut0feyFDP4te4Vh45RdILTamLACvYcraqSsGgVbACtrHfFmnRqm xsy1sMbeaiArsq0tuAa3jiGFQd2/Zeqej850D/0dFgcHrIkIjMnqY26KrJiCsms+ L0Ta1X/1WofSFibQzE7jWihkfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABzQiFN Wbfw3Ts4bTVrMSUZwJNsMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFzOP9PS2S5k673/DQCtKjUJupjjEhNg2EpP+aJC41X6juW0XyKxK9oNv/GuO L3RF9iYwi5FqV9xn6ckuXScmaJ8tNuEAt9RsHnrEGYRFHodOuMBKtc0/sit8MTnt v7pzdyhaiuX2ytUNB1vvtciUmBHi4Rqf9Ej2bTDl7OWdRFZ0HF1kTvlkpf5tdSfg 5ibEX5r72SAIKk2/QdTdL2V1RTfIwVEN9G0CsAh64jLKuNdrUa3XNunIN20J5JHs PdzpLIVZc9/6HRvPB403q+IMHU2VnNMljDHH8xQLWynzXtgv/t+wzIEISv1+JgVu 4JBTszuNBQ98Ool+0pEBgflcNg== -----END CERTIFICATE-----Generated at Sat Sep 5 02:39:02 2026 by rpki-client