$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: LYkR3PQvVz/Zh5RI5+3/J/j5ukK1AX9NP4yRFY8UQd8= Subject key identifier: 75:AF:8B:2F:2E:EB:76:5B:23:DC:C7:07:77:EF:A0:DA:3C:56:5C:C4 Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 013E Signing time: Mon 31 Aug 2026 05:54:59 +0000 Manifest this update: Mon 31 Aug 2026 05:54:59 +0000 Manifest next update: Mon 07 Sep 2026 05:54:59 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: eSlMXQyArll69vBt/aQ9nOh0ufbVhuyhP29u1pZXx8U=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: OlddN+1Btn05jfz7izHATCAFLY0/IBXnBfKOwKNZEMU=) 3: 9D269AE068A111F1B35136357747A888.roa (hash: Gf69RYkyEiyVqtQXBLOZ3FGll0UR1zPQP9SnHZMHYUs=) 4: C168AD504F2C11F1ABC5AA8AB2833773.roa (hash: L5WX9m+gsDcb4Xkr5gwSf+uci5kp8CuE133PRLJNs5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 05:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Aug 31 05:54:59 2026 GMT Not After : Sep 7 05:54:59 2026 GMT Subject: CN=6a951733-5df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:dc:c7:a2:8e:3e:0f:49:93:3d:87:f9:79: e5:21:ea:60:5b:d9:b8:42:45:35:c6:52:89:80:ea: c8:06:24:d5:3b:9e:a4:83:fa:cd:26:fa:10:c2:cc: 14:7f:cc:38:e4:12:27:d8:71:b5:a4:fb:84:c8:0c: 7c:7e:15:6a:ae:c1:bf:9f:bf:ed:34:6c:04:f8:f1: be:ce:d5:51:dd:4a:5d:8e:87:df:0e:68:b8:93:f0: af:15:8a:bf:59:62:1f:11:c8:7b:1c:1d:3b:7b:38: ae:6d:3f:b8:f2:c9:76:e7:6e:fe:bc:20:0e:b0:a9: b9:3c:c4:72:39:75:25:43:79:a4:1e:ca:2d:4d:30: f9:54:62:b1:8f:12:9f:2c:0e:41:19:0b:db:d0:17: de:e5:b2:05:06:93:76:6a:9f:52:90:77:8d:24:27: f7:fc:d6:4c:ea:71:19:17:fe:a2:5b:38:3d:87:11: 52:62:b4:02:5f:7a:e4:be:f8:a6:3c:fc:5a:9c:7d: 80:19:03:c3:75:37:04:21:f6:75:e2:10:55:79:f3: 58:da:0b:c1:fb:86:11:f6:9b:37:29:e2:6f:ff:a0: 03:cf:8d:21:81:06:a5:ab:8c:02:94:f7:d7:73:5f: 62:b1:10:8a:8a:42:b5:0b:f7:81:70:5b:ba:87:54: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:8B:2F:2E:EB:76:5B:23:DC:C7:07:77:EF:A0:DA:3C:56:5C:C4 X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:9b:ac:d5:27:49:2c:62:b8:26:08:a4:c4:e2:56:0d:c1:4c: 6a:94:55:04:92:66:a4:41:24:ab:f9:d8:60:b3:bf:f6:fa:87: 7c:e4:14:ce:3b:30:85:9b:01:33:01:e4:48:65:f5:e8:a6:d4: c0:72:c2:c3:e5:35:72:db:f6:da:cb:f0:99:80:2f:0d:83:70: 4d:b4:a4:db:e9:fc:61:80:53:3e:40:3d:1d:34:be:cd:eb:01: 06:7f:23:4d:ff:a9:a9:8c:c5:42:e2:14:d4:4e:10:67:6a:79: 5d:25:70:66:d8:a5:9f:89:10:f0:cc:f0:1b:a3:1c:9e:9e:3b: 31:ad:e8:a4:2e:b5:04:ce:95:b7:28:d1:aa:d0:b7:e4:10:d0: d1:1d:b9:26:ca:44:e3:ee:ac:8f:24:10:d1:dc:83:a0:92:ac: b3:52:b5:be:ca:df:76:d1:00:b0:72:5c:17:67:e0:d0:b6:03: 4e:99:a7:f5:0a:0d:b1:35:15:43:35:e3:1d:13:c6:0c:30:07: b8:c1:1b:db:a4:62:e2:7b:c1:52:43:dc:c7:43:c1:92:52:e2: 2d:12:ed:9b:9e:4a:a5:53:2d:a6:0c:62:4e:f4:4c:88:64:01: 6b:3c:54:16:0e:fc:68:9e:1a:ef:1a:9e:83:7b:53:6d:c0:b2: b5:e2:3f:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0 RDFCOUExNTEwHhcNMjYwODMxMDU1NDU5WhcNMjYwOTA3MDU1NDU5WjAYMRYwFAYD VQQDEw02YTk1MTczMy01ZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBHcx6KOPg9Jkz2H+XnlIepgW9m4QkU1xlKJgOrIBiTVO56kg/rNJvoQwswU f8w45BIn2HG1pPuEyAx8fhVqrsG/n7/tNGwE+PG+ztVR3UpdjoffDmi4k/CvFYq/ WWIfEch7HB07eziubT+48sl2527+vCAOsKm5PMRyOXUlQ3mkHsotTTD5VGKxjxKf LA5BGQvb0Bfe5bIFBpN2ap9SkHeNJCf3/NZM6nEZF/6iWzg9hxFSYrQCX3rkvvim PPxanH2AGQPDdTcEIfZ14hBVefNY2gvB+4YR9ps3KeJv/6ADz40hgQalq4wClPfX c19isRCKikK1C/eBcFu6h1SjdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWviy8u 63ZbI9zHB3fvoNo8VlzEMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy SV9wdU1kdXJTYUpORzVvVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdpus1SdJLGK4JgikxOJWDcFMapRVBJJmpEEkq/nYYLO/9vqHfOQUzjswhZsB MwHkSGX16KbUwHLCw+U1ctv22svwmYAvDYNwTbSk2+n8YYBTPkA9HTS+zesBBn8j Tf+pqYzFQuIU1E4QZ2p5XSVwZtiln4kQ8MzwG6Mcnp47Ma3opC61BM6VtyjRqtC3 5BDQ0R25JspE4+6sjyQQ0dyDoJKss1K1vsrfdtEAsHJcF2fg0LYDTpmn9QoNsTUV QzXjHRPGDDAHuMEb26Ri4nvBUkPcx0PBklLiLRLtm55KpVMtpgxiTvRMiGQBazxU Fg78aJ4a7xqeg3tTbcCyteI/8w== -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:41 2026 by rpki-client