$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft File: daQM7SSsrWLFirKOoOD3xeXhx4g.mft (raw, json) Hash identifier: 4OlkB3eS3S7NGA+OOZ3oaDcYApgoyP4ZF/gYvRUh3TY= Subject key identifier: 2C:EB:8F:5A:40:96:D0:C9:F4:61:63:77:1F:4E:51:1F:A5:F7:60:AB Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88 Certificate issuer: /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft Manifest number: 01B5 Signing time: Mon 31 Aug 2026 04:28:17 +0000 Manifest this update: Mon 31 Aug 2026 04:28:16 +0000 Manifest next update: Mon 07 Sep 2026 04:28:16 +0000 Files and hashes: 1: daQM7SSsrWLFirKOoOD3xeXhx4g.crl (hash: y3gQsAgVK8yQW3rXgK/iIVPdN4qdETMpdCfpH6/kivc=) 2: 7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa (hash: dZhz63yVCeTBzWMY75L0Bm2evDQYzA/h1Cy1vJR1+hs=) 3: F22762F4741011EF9E049760C4F9AE02.roa (hash: U0KGzRthmkm1zRt+uEMqhBQuI1kS3OQDqLIRZ8rjx1Y=) 4: 118CC10A1E2D11EFBD391A28C4F9AE02.roa (hash: L8spoNSm7g/u/EwRwbHS8dvjBfOIf2WmgkHCF85+Xfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 04:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788 Validity Not Before: Aug 31 04:28:16 2026 GMT Not After : Sep 7 04:28:16 2026 GMT Subject: CN=6a9502e0-a667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7b:5e:c5:56:40:3b:53:09:df:85:c0:e3:00: 25:26:21:10:0f:0f:14:ef:93:98:ea:49:01:cc:b0: 35:06:28:a0:74:61:44:53:d8:8c:44:6a:50:99:60: 51:62:03:4d:a5:43:79:f0:8d:52:ae:3d:c6:55:5b: a0:a5:2b:72:f3:19:af:4e:99:a9:eb:10:4c:3c:6d: bf:29:eb:58:91:ec:6b:37:b3:80:df:be:09:32:25: 9c:fb:0d:00:5c:47:cb:dc:9f:85:26:77:79:06:2f: aa:29:d3:1e:f2:7c:44:23:ff:53:4e:8c:79:7a:ef: 9e:5e:aa:ce:cb:2b:2f:33:74:04:a0:50:ad:2b:2a: a1:7a:75:87:13:c2:1e:cb:22:f7:ac:10:cb:98:a5: c7:8e:98:6e:ad:fe:da:26:a3:b2:75:32:9e:c3:15: a4:ba:f1:4a:e5:62:20:10:ee:8f:ba:d9:dc:d8:90: fd:ae:62:a4:76:f4:d9:1a:23:2a:32:07:c5:30:f1: 31:e2:38:c1:53:0c:84:d3:11:67:98:04:ba:45:39: 4f:11:6d:6a:50:3c:57:67:88:eb:f6:23:39:c1:54: 8c:e7:05:3c:dd:cb:0f:2f:49:54:ed:63:5e:43:5a: 74:34:9d:58:32:09:75:49:85:37:f2:af:b5:5a:72: 26:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EB:8F:5A:40:96:D0:C9:F4:61:63:77:1F:4E:51:1F:A5:F7:60:AB X509v3 Authority Key Identifier: keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:78:ca:16:cb:8b:70:93:ab:b6:af:54:e0:53:f8:6c:4a:51: f1:72:7e:e3:c0:7b:d4:9b:dd:d1:a1:98:32:9b:62:cc:0c:3b: 73:e5:f2:4b:9f:f4:bc:6f:60:6b:e3:86:bf:ad:6b:aa:ca:4c: 67:86:75:5c:bf:a9:31:76:d2:1b:79:98:7f:a3:39:7d:fb:05: 86:8d:69:35:ea:2b:82:7e:b5:b4:96:63:7b:43:10:6c:55:75: 55:00:cf:97:8a:c4:c4:04:26:6d:62:2f:c5:62:fe:5d:eb:7d: 6a:68:44:62:b9:51:62:e2:11:38:29:f2:bd:c9:52:c8:44:75: 8e:a5:a2:06:8e:c5:63:ad:15:44:9d:7e:20:fb:0a:00:7e:9b: fd:52:bb:aa:95:56:0f:85:aa:c4:f4:b3:38:f3:65:6f:2c:b3: ca:0c:f4:3e:04:cd:c6:31:2c:8b:bf:4b:79:1c:eb:ea:17:32: 85:ca:71:dc:0f:5b:35:3d:fe:4a:fd:4a:3e:99:a0:0f:0b:b5: d3:5a:92:12:f5:f2:05:d2:f8:37:45:73:e7:cd:a8:b0:cd:18: 1c:40:60:f7:39:0b:1f:41:82:47:f4:70:e2:6c:76:fe:91:f6: 4e:fe:c3:a8:ce:05:c8:dc:a1:fe:2e:96:ee:d2:44:1a:3c:7b: b0:45:22:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE4NjcxMTAvBgNVBAUTKDc1QTQwQ0VEMjRBQ0FENjJDNThBQjI4RUEwRTBGN0M1 RTVFMUM3ODgwHhcNMjYwODMxMDQyODE2WhcNMjYwOTA3MDQyODE2WjAYMRYwFAYD VQQDEw02YTk1MDJlMC1hNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63texVZAO1MJ34XA4wAlJiEQDw8U75OY6kkBzLA1BiigdGFEU9iMRGpQmWBR YgNNpUN58I1Srj3GVVugpSty8xmvTpmp6xBMPG2/KetYkexrN7OA374JMiWc+w0A XEfL3J+FJnd5Bi+qKdMe8nxEI/9TTox5eu+eXqrOyysvM3QEoFCtKyqhenWHE8Ie yyL3rBDLmKXHjphurf7aJqOydTKewxWkuvFK5WIgEO6Putnc2JD9rmKkdvTZGiMq MgfFMPEx4jjBUwyE0xFnmAS6RTlPEW1qUDxXZ4jr9iM5wVSM5wU83csPL0lU7WNe Q1p0NJ1YMgl1SYU38q+1WnImqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzrj1pA ltDJ9GFjdx9OUR+l92CrMB8GA1UdIwQYMBaAFHWkDO0krK1ixYqyjqDg98Xl4ceI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTg2Ny84MTZFNzQ2MjE5 N0YxMUVGOEQxNjY4NEZDNEY5QUUwMi9kYVFNN1NTc3JXTEZpcktPb09EM3hlWGh4 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhUU03U1NzcldMRmlyS09vT0QzeGVYaHg0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTg2Ny84MTZFNzQ2MjE5N0YxMUVGOEQxNjY4NEZDNEY5QUUwMi9kYVFNN1NTc3JX TEZpcktPb09EM3hlWGh4NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK3jKFsuLcJOrtq9U4FP4bEpR8XJ+48B71Jvd0aGYMptizAw7c+XyS5/0vG9g a+OGv61rqspMZ4Z1XL+pMXbSG3mYf6M5ffsFho1pNeorgn61tJZje0MQbFV1VQDP l4rExAQmbWIvxWL+Xet9amhEYrlRYuIROCnyvclSyER1jqWiBo7FY60VRJ1+IPsK AH6b/VK7qpVWD4WqxPSzOPNlbyyzygz0PgTNxjEsi79LeRzr6hcyhcpx3A9bNT3+ Sv1KPpmgDwu101qSEvXyBdL4N0Vz582osM0YHEBg9zkLH0GCR/Rw4mx2/pH2Tv7D qM4FyNyh/i6W7tJEGjx7sEUiHw== -----END CERTIFICATE-----Generated at Tue Sep 1 04:07:23 2026 by rpki-client