$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: /FNFgnvd4SNTMXHJmg+7VDVMxw805oqplioqnqbHk34= Subject key identifier: B1:6D:40:F9:80:40:D2:A0:D4:F7:4F:E5:8E:CE:6A:38:5B:1C:EA:70 Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 0290 Signing time: Wed 19 Aug 2026 02:46:21 +0000 Manifest this update: Wed 19 Aug 2026 02:46:20 +0000 Manifest next update: Wed 26 Aug 2026 02:46:20 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: K4kP6HAwwyYyO6JCct7xvagp6fgjkAHOWzMsxq3ahaU=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: 5qvqzmsbRW5LBUnnBo5pzofLXlPjmeRE2wzoeLfm3gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Aug 19 02:46:20 2026 GMT Not After : Aug 26 02:46:20 2026 GMT Subject: CN=6a8518fc-9699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b4:dd:e7:5b:48:f0:16:44:81:8c:a3:d9:8c: 57:1b:2d:12:c8:03:b4:fa:74:04:c2:93:4b:6a:11: f4:74:a0:43:a1:21:ac:f0:e1:41:84:a4:3f:5d:47: 17:83:da:10:4d:9a:5e:16:f0:72:4d:ed:aa:4b:72: f4:e9:5a:53:02:e4:bc:9c:19:60:b3:fb:cc:c0:f1: ee:2e:97:ba:89:81:2c:92:0c:44:96:26:86:6c:f1: e5:9c:b4:7f:29:1a:db:4d:51:b3:01:2b:10:e3:df: 93:50:b2:9f:ef:14:96:95:b0:5b:4f:b2:53:68:cf: 39:db:6a:23:f2:63:88:dc:39:b1:5f:f8:03:3b:19: 73:da:8f:18:b8:b6:b4:66:ea:7f:6d:59:fa:ed:d1: f4:9f:f2:8a:82:81:46:b6:16:62:20:a2:aa:fc:a5: c2:5c:f3:80:f2:d9:a2:d5:7c:d7:d9:ba:a7:ec:0d: 1a:90:8b:7d:bc:a4:49:a2:9d:94:ab:58:dc:76:be: 38:4c:45:44:02:f6:70:ae:40:b7:06:29:64:72:04: 08:88:6f:2f:22:e8:d5:e3:9a:54:3c:a9:ae:79:e1: 25:12:59:5c:a2:0f:ea:4e:35:c5:9a:84:56:cb:27: 4b:3c:96:6b:16:1e:61:11:19:ce:b1:2c:ff:8a:f5: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6D:40:F9:80:40:D2:A0:D4:F7:4F:E5:8E:CE:6A:38:5B:1C:EA:70 X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:df:57:4a:d1:ef:fd:01:3e:b3:56:9b:c9:15:07:42:74:0b: d5:65:42:3e:4a:e0:1e:f1:64:6d:78:54:ab:98:c3:b7:bb:a1: b9:5d:bb:04:c9:43:82:ea:99:7e:cc:7f:2f:cf:ac:21:10:99: 3f:74:cb:16:d3:fc:cc:22:97:23:08:48:04:b1:b2:fd:13:db: 00:1c:7b:c2:87:e3:8e:19:d7:12:3f:db:25:ac:8e:2a:1f:7a: c9:1e:1d:f6:4a:bd:9e:4f:4f:25:15:1a:d5:b6:20:48:06:62: b1:56:5d:59:61:fb:3c:d0:aa:03:0d:19:94:34:ad:58:76:13: 80:f3:f8:59:c6:73:81:da:83:d4:6e:e7:6a:22:63:75:c5:77: 79:17:df:57:f2:88:d3:09:03:0a:96:d3:ee:09:9e:cf:1f:ff: 18:27:fb:e7:0c:44:65:03:53:99:8b:20:62:4d:ff:0b:c0:b8: ee:74:c3:16:39:46:9f:23:d0:5e:d0:1f:ff:2e:0f:d0:d4:8a: 5d:36:3d:6b:94:e3:54:da:b4:03:24:44:ac:f7:02:7a:98:0e: 98:91:b1:ce:18:98:10:f7:0a:f5:1a:1d:40:38:d1:5e:78:87: d9:62:77:8d:64:07:c5:8a:e1:56:aa:80:16:89:a5:1d:fc:f8: 78:62:c0:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjYwODE5MDI0NjIwWhcNMjYwODI2MDI0NjIwWjAYMRYwFAYD VQQDEw02YTg1MThmYy05Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LTd51tI8BZEgYyj2YxXGy0SyAO0+nQEwpNLahH0dKBDoSGs8OFBhKQ/XUcX g9oQTZpeFvByTe2qS3L06VpTAuS8nBlgs/vMwPHuLpe6iYEskgxEliaGbPHlnLR/ KRrbTVGzASsQ49+TULKf7xSWlbBbT7JTaM8522oj8mOI3DmxX/gDOxlz2o8YuLa0 Zup/bVn67dH0n/KKgoFGthZiIKKq/KXCXPOA8tmi1XzX2bqn7A0akIt9vKRJop2U q1jcdr44TEVEAvZwrkC3BilkcgQIiG8vIujV45pUPKmueeElEllcog/qTjXFmoRW yydLPJZrFh5hERnOsSz/ivUCRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFtQPmA QNKg1PdP5Y7OajhbHOpwMB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASt9XStHv/QE+s1abyRUHQnQL1WVCPkrgHvFkbXhUq5jDt7uhuV27BMlDguqZ fsx/L8+sIRCZP3TLFtP8zCKXIwhIBLGy/RPbABx7wofjjhnXEj/bJayOKh96yR4d 9kq9nk9PJRUa1bYgSAZisVZdWWH7PNCqAw0ZlDStWHYTgPP4WcZzgdqD1G7naiJj dcV3eRffV/KI0wkDCpbT7gmezx//GCf75wxEZQNTmYsgYk3/C8C47nTDFjlGnyPQ XtAf/y4P0NSKXTY9a5TjVNq0AyRErPcCepgOmJGxzhiYEPcK9RodQDjRXniH2WJ3 jWQHxYrhVqqAFomlHfz4eGLAdw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:39 2026 by rpki-client