$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json) Hash identifier: 9BCO4EHN+QJbc8BmHZQFD18afGV+EPCeqBNWqllAYlA= Subject key identifier: 4F:8B:28:A9:D3:CF:D1:DD:99:FA:5A:45:0A:9E:1D:67:6D:01:E9:84 Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0D74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft Manifest number: 0D47 Signing time: Tue 18 Aug 2026 18:24:52 +0000 Manifest this update: Tue 18 Aug 2026 18:24:51 +0000 Manifest next update: Tue 25 Aug 2026 18:24:51 +0000 Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: vz+6i5kiaGyTEiCF5A4tJeaafRXpSsjoH8MowkzXYUE=) 2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: R7rZtnSJJ0QZFo5Ja/uQYwMCd6fNJf9hdwEvNCJu1OA=) 3: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: Dw3nMUxEhyHX5ev98aRNWPLfcsu+JByGF2YmsWZl+nQ=) 4: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: FMrV9a339leH9QraYW+j9/idX+LpdB6y6EvY3B6c48k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: Aug 18 18:24:51 2026 GMT Not After : Aug 25 18:24:51 2026 GMT Subject: CN=6a84a373-136e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:91:6e:b6:9f:f7:56:44:95:4e:5c:4a:4b: 49:08:84:9d:9c:44:c0:09:07:3c:c8:ba:9d:3a:f2: 67:0b:eb:60:d7:96:51:fa:6f:c9:65:54:42:c1:6e: eb:19:fa:20:cb:4c:1e:63:af:a9:93:9f:88:54:13: 68:42:41:5b:23:f1:7d:8f:9a:86:c2:d0:ff:15:3f: 1b:18:12:a8:b8:fa:60:84:df:66:37:e5:54:b0:3a: fd:3a:36:55:4a:e6:74:24:dd:8c:ba:8a:f2:ff:70: de:dc:2c:ea:f7:6a:c4:78:f1:ca:54:b8:93:3f:6a: 47:97:15:a8:d2:bf:87:e2:50:84:95:e7:df:c6:06: 68:20:8f:1f:31:f4:83:a6:ce:41:a1:59:68:c0:dc: 83:be:4d:ac:aa:ac:fc:98:78:5a:34:23:76:42:3d: f4:e6:82:7f:64:10:d5:5a:41:53:ca:70:9a:3e:e0: 0c:3b:44:a0:99:52:c4:fe:03:65:b8:4f:aa:bc:ca: bb:cd:38:d2:4f:5e:1f:34:ba:f9:dd:5a:a9:a3:e2: c2:f8:77:aa:df:1e:b4:8d:85:1f:62:b7:54:dc:12: 94:d7:10:ae:66:9d:51:a1:45:d3:fa:57:4d:02:61: ff:0f:76:c2:aa:e6:39:64:76:95:0f:8a:92:28:69: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8B:28:A9:D3:CF:D1:DD:99:FA:5A:45:0A:9E:1D:67:6D:01:E9:84 X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:32:e4:9e:68:f0:92:e6:8b:d3:7a:af:3e:8f:a5:fc:d7:26: d3:70:2c:bd:f8:94:fb:0f:0c:62:b4:9c:9d:0c:fc:df:ee:bd: 2e:93:4a:97:c8:f3:b9:c4:76:3c:2c:b9:02:82:68:b9:10:b5: 93:94:2e:0e:b1:b0:11:e9:dc:f2:19:70:d1:b1:ac:76:36:76: 5f:99:b1:35:4d:34:97:56:e2:db:f4:fe:31:95:db:2e:cb:ad: 3c:01:ad:bc:ba:e9:85:47:3f:15:d4:50:d6:7c:66:29:db:69: 8b:21:2d:29:75:62:7d:99:bf:95:86:8b:5a:1b:74:dd:60:68: 4d:a2:a1:e3:62:05:49:fc:78:37:56:b9:c3:b8:a1:75:8a:00: 1b:c9:d5:8d:de:9d:1a:61:8d:18:7f:d7:d6:fe:f9:e5:6f:81: bb:e6:89:4d:e5:f0:54:f0:f4:94:4c:a3:f4:79:6a:f3:b5:2a: fb:e3:85:11:ed:28:ff:16:5e:dc:02:9d:54:1f:b0:48:92:79: 6d:a5:3e:84:f4:ce:8e:1f:a1:ef:12:7f:3c:ac:91:9f:c2:3d: 77:b0:87:79:31:a5:f6:1b:84:54:c5:a8:91:cb:ac:d7:70:c9: 9b:0d:74:67:7e:69:34:0a:ff:3f:62:fa:61:12:15:11:4d:e1: 23:9c:0b:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjYwODE4MTgyNDUxWhcNMjYwODI1MTgyNDUxWjAYMRYwFAYD VQQDEw02YTg0YTM3My0xMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqCRbraf91ZElU5cSktJCISdnETACQc8yLqdOvJnC+tg15ZR+m/JZVRCwW7r Gfogy0weY6+pk5+IVBNoQkFbI/F9j5qGwtD/FT8bGBKouPpghN9mN+VUsDr9OjZV SuZ0JN2Muory/3De3Czq92rEePHKVLiTP2pHlxWo0r+H4lCEleffxgZoII8fMfSD ps5BoVlowNyDvk2sqqz8mHhaNCN2Qj305oJ/ZBDVWkFTynCaPuAMO0SgmVLE/gNl uE+qvMq7zTjST14fNLr53Vqpo+LC+Heq3x60jYUfYrdU3BKU1xCuZp1RoUXT+ldN AmH/D3bCquY5ZHaVD4qSKGmdIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+LKKnT z9HdmfpaRQqeHWdtAemEMB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5 Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjzLknmjwkuaL03qvPo+l/Ncm03AsvfiU+w8MYrScnQz83+69LpNKl8jzucR2 PCy5AoJouRC1k5QuDrGwEenc8hlw0bGsdjZ2X5mxNU00l1bi2/T+MZXbLsutPAGt vLrphUc/FdRQ1nxmKdtpiyEtKXVifZm/lYaLWht03WBoTaKh42IFSfx4N1a5w7ih dYoAG8nVjd6dGmGNGH/X1v755W+Bu+aJTeXwVPD0lEyj9Hlq87Uq++OFEe0o/xZe 3AKdVB+wSJJ5baU+hPTOjh+h7xJ/PKyRn8I9d7CHeTGl9huEVMWokcus13DJmw10 Z35pNAr/P2L6YRIVEU3hI5wLOw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:02 2026 by rpki-client