$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft File: 33H2KoYwGsbTrKQJgyzDqdmcmhE.mft (raw, json) Hash identifier: rujasehv2C9LWSGMAkOlBfPVH/WppVaAfO0zckG0pwU= Subject key identifier: 40:CD:1E:0F:65:95:AA:34:F2:2C:7B:38:EB:5E:01:58:E0:99:8F:7A Authority key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 Certificate issuer: /CN=A91AE7C5/serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft Manifest number: 60 Signing time: Thu 03 Sep 2026 08:22:04 +0000 Manifest this update: Thu 03 Sep 2026 08:22:04 +0000 Manifest next update: Thu 10 Sep 2026 08:22:04 +0000 Files and hashes: 1: 33H2KoYwGsbTrKQJgyzDqdmcmhE.crl (hash: WX7hrok/adVS92lIW/gogFdNrt65MrS449EA1kx7TNU=) 2: 08A46B6A1B5111F18293DF0B253D8C67.roa (hash: paY1IgZglY+7jUPQLryJgAPBr5lC+wefahWE0iv9Cwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Validity Not Before: Sep 3 08:22:04 2026 GMT Not After : Sep 10 08:22:04 2026 GMT Subject: CN=6a992e2c-e033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:ca:6f:61:0a:e9:78:d2:ea:e8:9c:60:e9: f1:93:5c:b5:ff:72:2a:55:c3:67:cc:af:b5:33:ad: 73:b1:61:18:49:35:e0:47:e7:32:d0:0f:3a:1f:f1: 67:21:fb:09:ce:6a:0a:c9:87:ce:5c:91:88:49:c2: 3c:a9:59:3f:68:10:16:29:cf:30:77:79:90:31:9a: a9:e9:66:06:4b:cb:c4:32:14:53:64:66:36:ad:aa: 6e:2b:e1:51:19:b9:49:d9:27:59:0c:73:84:3e:01: 02:19:54:8e:f7:b3:ba:61:62:b2:1d:e8:b1:a0:d1: c6:29:39:d7:1a:72:25:7f:60:f8:d6:8f:06:79:62: 3d:1e:d8:ab:f0:20:e9:e2:77:58:f5:74:1f:77:d5: 33:9c:28:6c:a8:d0:19:8a:2f:95:96:95:f0:f4:04: d0:98:b1:73:0b:76:97:cc:36:b2:16:a4:70:34:aa: bb:21:b5:bd:76:98:bc:ce:b4:03:b7:58:b5:fc:58: 33:8f:ea:ff:80:82:cb:11:1a:45:57:2b:5d:2b:08: 1c:33:a0:33:80:8e:fe:52:c5:65:2e:03:ba:dc:0c: 6e:d9:07:dd:f9:7f:11:00:d2:c3:2e:1a:ff:98:dc: cc:6a:d7:0e:f5:4b:a4:91:a8:c1:a6:f9:12:4d:cc: 96:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CD:1E:0F:65:95:AA:34:F2:2C:7B:38:EB:5E:01:58:E0:99:8F:7A X509v3 Authority Key Identifier: keyid:DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cf:9e:9a:28:d7:44:c9:f3:1e:e4:5c:3b:c4:f0:67:33:69: 77:de:80:64:a5:7d:a1:8a:e7:00:8e:5a:5a:63:b9:f9:27:02: 6a:3c:87:09:4d:f0:24:02:0c:25:12:de:e6:08:0f:36:f6:a2: e8:0a:c2:fe:7a:a2:b4:2a:55:de:47:d7:da:68:b5:cc:da:7b: 63:dd:b1:6b:c3:c3:37:07:42:a2:7b:53:41:c2:f3:32:44:8b: b5:33:5f:09:a9:dc:ef:d3:0a:b0:de:5c:da:fd:37:c1:3e:9e: 9d:f0:83:e5:ca:27:41:d9:1e:0f:12:28:00:2c:6a:ad:7b:5e: 4a:cf:42:d8:67:6c:f9:46:10:3e:9c:99:40:87:46:dd:d2:ba: 2a:4f:9c:48:44:84:70:d8:2e:ce:58:ef:cd:31:22:a9:4d:1e: 4f:4a:f7:f3:70:1c:0d:95:03:6a:f9:9b:f4:10:e4:98:f5:50: c6:57:de:22:96:f3:cd:7b:4c:b1:6f:c8:4e:b1:6f:b1:94:47: e0:2a:11:27:5a:d4:ff:01:d8:fc:12:cb:46:e1:1e:6f:99:40: 46:03:9e:79:15:68:a0:4c:90:75:d5:bf:fd:05:60:69:55:99: de:cb:5c:66:90:6a:55:cf:c2:b9:6d:31:e4:93:f6:ae:b4:af: 05:6c:59:3b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTdDNTExMC8GA1UEBRMoREY3MUY2MkE4NjMwMUFDNkQzQUNBNDA5ODMyQ0MzQTlE OTlDOUExMTAeFw0yNjA5MDMwODIyMDRaFw0yNjA5MTAwODIyMDRaMBgxFjAUBgNV BAMTDTZhOTkyZTJjLWUwMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAIcpvYQrpeNLq6Jxg6fGTXLX/cipVw2fMr7UzrXOxYRhJNeBH5zLQDzof8Wch +wnOagrJh85ckYhJwjypWT9oEBYpzzB3eZAxmqnpZgZLy8QyFFNkZjatqm4r4VEZ uUnZJ1kMc4Q+AQIZVI73s7phYrId6LGg0cYpOdcaciV/YPjWjwZ5Yj0e2KvwIOni d1j1dB931TOcKGyo0BmKL5WWlfD0BNCYsXMLdpfMNrIWpHA0qrshtb12mLzOtAO3 WLX8WDOP6v+AgssRGkVXK10rCBwzoDOAjv5SxWUuA7rcDG7ZB935fxEA0sMuGv+Y 3Mxq1w71S6SRqMGm+RJNzJbrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQM0eD2WV qjTyLHs4614BWOCZj3owHwYDVR0jBBgwFoAU33H2KoYwGsbTrKQJgyzDqdmcmhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzMzMDc0OTQ2MUI1 MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3NiVHJLUUpneXpEcWRtY21o RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzNIMktvWXdHc2JUcktRSmd5ekRxZG1jbWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF N0M1LzMzMDc0OTQ2MUI1MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3Ni VHJLUUpneXpEcWRtY21oRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB8z56aKNdEyfMe5Fw7xPBnM2l33oBkpX2hiucAjlpaY7n5JwJqPIcJTfAkAgwl Et7mCA829qLoCsL+eqK0KlXeR9faaLXM2ntj3bFrw8M3B0Kie1NBwvMyRIu1M18J qdzv0wqw3lza/TfBPp6d8IPlyidB2R4PEigALGqte15Kz0LYZ2z5RhA+nJlAh0bd 0roqT5xIRIRw2C7OWO/NMSKpTR5PSvfzcBwNlQNq+Zv0EOSY9VDGV94ilvPNe0yx b8hOsW+xlEfgKhEnWtT/Adj8EstG4R5vmUBGA555FWigTJB11b/9BWBpVZney1xm kGpVz8K5bTHkk/autK8FbFk7 -----END CERTIFICATE-----Generated at Fri Sep 4 23:01:05 2026 by rpki-client