$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: jQSYL0dPPm042ppfc68dnUW339iGgzKsoocQ4VMcoGE= Subject key identifier: F8:9B:AF:32:98:19:DF:40:DC:3C:4A:F1:A5:33:94:42:1E:05:A6:43 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 0178 Signing time: Tue 25 Aug 2026 05:00:10 +0000 Manifest this update: Tue 25 Aug 2026 05:00:10 +0000 Manifest next update: Tue 01 Sep 2026 05:00:10 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: nbmHPWvx4ti2PLAR+NM8hESYiZEwZzepOzXFOH1mPws=) 2: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: D4NRCko3MZFYJkLZPgAkzijOJifErlno5imf5X3ylHY=) 3: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: GzfRPUDBbDs4K4+434Sr5sRN49sS17wbw5wNG+NNvFM=) 4: 1E17772C282A11F18C2E09ECC4833773.roa (hash: oLpFDhJAkBM0IvUW0GrLcFvZpoWVqor11OTJu0OVZZ0=) 5: 0153CD24917111F1B35E84E13111F970.roa (hash: gpbfqZ64C5JfvxlcGssQB3FMKbhNFMGDd3/tTDBuG6k=) 6: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: rnduJ2NpU+LIFZlZ+rkpxldWRpJwaPya7QDINOEsPrs=) 7: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: eKzsF8gwTHd0fONSYl3Z08RvmhJ05i8QkQx5Tz+KBCU=) 8: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: vEc2jHNpgXkle7usC6cdkDSSfCMVfaEYA5yavxzJttQ=) 9: 2D6E98583F0511F1B91814A8C9833773.roa (hash: cvsxFrKYwzXfmPTCt/kaQm7QbHYPT/Bov3jLYon6Aw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 05:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Aug 25 05:00:10 2026 GMT Not After : Sep 1 05:00:10 2026 GMT Subject: CN=6a8d215a-2d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:1b:4f:3a:70:ba:1b:df:c9:ac:01:93:9c: 7a:0c:ef:66:f6:bd:b6:c7:8e:10:0a:5a:97:be:26: d4:c5:e9:5a:4d:1e:0e:f5:47:26:11:0e:b8:b5:6f: 74:29:b7:6b:86:2a:1f:03:fb:0f:4e:4b:cb:e8:57: 10:76:48:61:1a:03:b9:5e:bb:61:ee:3a:a5:97:40: f2:7d:d6:6c:93:03:38:85:d9:07:b0:cf:83:b8:4e: 22:0e:ff:ff:fe:84:a9:f7:4c:7e:3e:8e:89:13:38: 14:1d:94:c1:2e:71:9a:c4:28:24:82:c5:0c:2a:fb: ac:0c:31:f2:6b:63:f2:77:25:a7:a1:1a:ab:87:0a: a3:0b:85:5e:a4:07:e8:d9:2a:92:38:4f:01:79:81: 57:16:d1:0f:ab:e6:ca:36:3e:cc:fb:5d:3a:9f:68: 30:59:53:b3:3b:77:91:93:46:26:12:5a:31:05:68: a2:a9:c4:a7:f6:81:e0:cd:7a:7f:70:f0:d4:58:57: d6:82:39:c8:e3:79:1d:99:84:9a:e6:d6:d8:31:ac: 06:87:3d:a8:99:67:da:7a:99:05:5a:8a:1f:e0:17: 9f:59:f1:12:8b:ae:d8:8e:3f:4f:f2:68:24:16:84: d7:e3:dd:64:09:1b:02:89:5a:cb:9b:cb:cf:28:e5: df:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9B:AF:32:98:19:DF:40:DC:3C:4A:F1:A5:33:94:42:1E:05:A6:43 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:67:ab:42:33:10:16:a3:af:43:25:0e:b6:70:30:92:e7:0d: 5a:18:a9:db:d4:30:dd:dd:ad:d3:4c:94:a6:73:5f:91:d5:2d: b6:8c:e4:f5:ed:f3:5e:e7:6d:d1:68:20:4c:c7:92:57:e8:13: 89:c2:fd:53:35:f2:ec:2c:62:bd:26:ed:1d:7a:a4:34:94:d0: 5b:4f:e4:e5:c5:64:64:67:89:b1:cc:de:73:90:d1:10:de:ce: a0:e8:28:c2:c8:2c:44:04:a7:49:66:21:1d:19:cb:c9:ec:2d: 90:21:d4:35:1a:e5:10:7f:aa:ad:9e:ca:8d:b0:bb:19:d1:4f: f5:74:20:a2:b4:6a:43:44:92:42:cc:7f:20:4a:d1:70:05:19: 51:23:0b:d7:50:16:ae:ef:4d:56:64:77:07:9f:40:5a:b5:ff: c0:84:b5:ef:f5:a8:2f:0f:90:4b:f4:e4:18:63:54:98:96:26: 5d:f6:29:5a:65:af:20:8d:1a:27:7f:5e:4b:c5:a5:e6:19:f1: a2:f8:27:bd:d7:69:b1:6e:d7:0b:f8:53:e3:0c:6c:c0:44:2b: 03:f4:5b:74:b9:ab:31:37:9a:b9:47:3a:b7:06:07:bc:c4:c3: 4b:a5:50:03:c3:52:33:e0:b3:80:ae:04:92:4c:3c:5d:93:21: ca:21:52:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjYwODI1MDUwMDEwWhcNMjYwOTAxMDUwMDEwWjAYMRYwFAYD VQQDEw02YThkMjE1YS0yZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlUbTzpwuhvfyawBk5x6DO9m9r22x44QClqXvibUxelaTR4O9UcmEQ64tW90 KbdrhiofA/sPTkvL6FcQdkhhGgO5Xrth7jqll0DyfdZskwM4hdkHsM+DuE4iDv// /oSp90x+Po6JEzgUHZTBLnGaxCgkgsUMKvusDDHya2PydyWnoRqrhwqjC4VepAfo 2SqSOE8BeYFXFtEPq+bKNj7M+106n2gwWVOzO3eRk0YmEloxBWiiqcSn9oHgzXp/ cPDUWFfWgjnI43kdmYSa5tbYMawGhz2omWfaepkFWoof4BefWfESi67Yjj9P8mgk FoTX491kCRsCiVrLm8vPKOXflwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPibrzKY Gd9A3DxK8aUzlEIeBaZDMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR QjI1UFhfUW9hRjlqLXdqdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY2erQjMQFqOvQyUOtnAwkucNWhip29Qw3d2t00yUpnNfkdUttozk9e3zXudt 0WggTMeSV+gTicL9UzXy7CxivSbtHXqkNJTQW0/k5cVkZGeJsczec5DREN7OoOgo wsgsRASnSWYhHRnLyewtkCHUNRrlEH+qrZ7KjbC7GdFP9XQgorRqQ0SSQsx/IErR cAUZUSML11AWru9NVmR3B59AWrX/wIS17/WoLw+QS/TkGGNUmJYmXfYpWmWvII0a J39eS8Wl5hnxovgnvddpsW7XC/hT4wxswEQrA/RbdLmrMTeauUc6twYHvMTDS6VQ A8NSM+CzgK4Ekkw8XZMhyiFS3A== -----END CERTIFICATE-----Generated at Wed Aug 26 18:58:32 2026 by rpki-client