$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: DktFPo1G6mBD++ZUh749OYVk3I8FRMjjkkZ4+6yYPnY= Subject key identifier: F9:3F:A9:5D:E4:45:3C:70:F7:A2:CD:03:6B:AC:C5:0E:D5:6B:34:03 Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 0A3C Signing time: Tue 18 Aug 2026 20:00:33 +0000 Manifest this update: Tue 18 Aug 2026 20:00:33 +0000 Manifest next update: Tue 25 Aug 2026 20:00:33 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: pIMjVl6RxyN+PWw+aQ0mv+qAihHNm6nfGMwWW+BJod0=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: OYi6iPOzlWh6eoXqX49fJiVTJCcfXyryKflqKEAnvYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Aug 18 20:00:33 2026 GMT Not After : Aug 25 20:00:33 2026 GMT Subject: CN=6a84b9e1-b4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:d1:03:d0:38:b0:a8:0b:71:08:f3:23:b0: d7:fd:65:8a:23:ab:41:ad:84:aa:81:bb:18:bf:11: eb:91:ae:5d:21:4a:43:7b:7c:f0:f8:c5:f9:2f:f6: 02:5a:5c:66:48:be:64:a5:c3:11:cf:dd:ef:b0:4c: 59:e1:14:25:9c:81:e0:d2:0e:b7:7c:b4:4a:ca:50: a6:e4:c6:dd:72:a4:e0:a3:45:ea:ff:c4:09:72:5f: 1c:06:a6:1b:19:33:8b:8f:b2:e7:ae:8f:27:21:71: 26:61:0b:b1:9a:42:59:f7:c7:6b:3b:0b:e3:ce:8d: b2:ba:25:75:c9:78:8e:7d:d3:7b:c9:56:b5:40:40: e3:b6:9f:63:03:70:40:bc:a6:29:05:41:5b:1b:05: c4:dc:d8:d4:45:8d:3d:c9:50:95:51:61:c6:61:8d: 0a:90:f0:3d:d5:7b:65:ef:6c:c5:69:f4:85:55:ac: 37:1a:84:e3:f2:64:e5:62:88:c1:32:ba:db:41:a3: 7b:2a:51:05:2f:1f:06:e8:08:07:31:a3:c6:d8:05: ad:01:1c:0f:11:57:38:4c:3b:19:55:f6:33:be:ac: ac:1b:d4:c4:27:43:74:25:99:a5:98:84:5f:cf:50: ae:3c:45:dc:6f:a7:a2:f6:25:a3:0f:8e:a9:cf:ad: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3F:A9:5D:E4:45:3C:70:F7:A2:CD:03:6B:AC:C5:0E:D5:6B:34:03 X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:22:a7:6e:47:52:0e:4c:37:dc:e8:87:78:c5:b9:13:e7:cc: 98:45:4e:d1:a2:a0:71:57:95:13:0f:ed:5b:02:4e:4a:7e:17: 54:d6:26:ad:d2:b6:ce:04:db:b5:b4:b5:a0:00:27:45:31:31: 5e:59:07:ff:55:7f:53:ad:cd:6a:3b:08:77:8c:93:79:cc:22: 20:e7:cb:d3:91:1c:8d:75:f5:ab:24:8c:be:9b:f7:0e:9a:b9: fc:5d:e1:79:6a:91:8d:f4:25:6f:82:03:c3:48:06:e6:36:80: 0f:69:76:a4:dc:62:09:0b:4c:c9:87:05:5b:53:50:fe:66:b6: 78:bc:14:2b:91:80:d8:82:50:a0:31:22:c3:9e:31:84:e4:32: d8:af:41:30:db:7b:31:b3:ac:ce:ca:02:f6:da:3c:6b:60:8c: 31:30:cb:18:2e:6a:c9:60:ab:3d:25:17:17:7d:1a:5c:ec:c4: da:8d:d2:47:4d:8d:65:55:51:67:15:0d:d0:f8:ce:b3:cf:6b: 5d:02:6c:66:5c:00:e2:18:45:44:dd:82:8f:f0:9c:e8:1d:0d: 8a:d5:bd:82:c0:6e:43:b8:0a:17:f1:b5:04:b4:88:43:de:70: 52:ee:81:bd:d7:66:16:e6:9b:ef:0e:2f:94:a0:50:2f:9d:af: 7c:c0:8d:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjYwODE4MjAwMDMzWhcNMjYwODI1MjAwMDMzWjAYMRYwFAYD VQQDEw02YTg0YjllMS1iNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRXRA9A4sKgLcQjzI7DX/WWKI6tBrYSqgbsYvxHrka5dIUpDe3zw+MX5L/YC WlxmSL5kpcMRz93vsExZ4RQlnIHg0g63fLRKylCm5MbdcqTgo0Xq/8QJcl8cBqYb GTOLj7Lnro8nIXEmYQuxmkJZ98drOwvjzo2yuiV1yXiOfdN7yVa1QEDjtp9jA3BA vKYpBUFbGwXE3NjURY09yVCVUWHGYY0KkPA91Xtl72zFafSFVaw3GoTj8mTlYojB MrrbQaN7KlEFLx8G6AgHMaPG2AWtARwPEVc4TDsZVfYzvqysG9TEJ0N0JZmlmIRf z1CuPEXcb6ei9iWjD46pz63iEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPk/qV3k RTxw96LNA2usxQ7VazQDMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQyKnbkdSDkw33OiHeMW5E+fMmEVO0aKgcVeVEw/tWwJOSn4XVNYmrdK2zgTb tbS1oAAnRTExXlkH/1V/U63NajsId4yTecwiIOfL05EcjXX1qySMvpv3Dpq5/F3h eWqRjfQlb4IDw0gG5jaAD2l2pNxiCQtMyYcFW1NQ/ma2eLwUK5GA2IJQoDEiw54x hOQy2K9BMNt7MbOszsoC9to8a2CMMTDLGC5qyWCrPSUXF30aXOzE2o3SR02NZVVR ZxUN0PjOs89rXQJsZlwA4hhFRN2Cj/Cc6B0NitW9gsBuQ7gKF/G1BLSIQ95wUu6B vddmFuab7w4vlKBQL52vfMCNdA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:43:52 2026 by rpki-client