$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft File: tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json) Hash identifier: fdvetwPbQG5SXoSgwtHo6rw5j7lOmAcqF3OVln1E+WU= Subject key identifier: 3A:C3:A2:CD:4D:8B:0D:93:15:4D:29:A0:48:23:B2:06:77:4C:29:1E Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF Certificate issuer: /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft Manifest number: C3 Signing time: Thu 03 Sep 2026 07:04:21 +0000 Manifest this update: Thu 03 Sep 2026 07:04:21 +0000 Manifest next update: Thu 10 Sep 2026 07:04:21 +0000 Files and hashes: 1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: nO0wKTm70L7mJKTMXi8FVvYA3FamkrqyA/FRSbmF+EI=) 2: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: PtxDOStSKg5v1Xktyj+xGCbDFKA4GPkHNsN6+Bx9sn0=) 3: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: uyOU7OWturYo16z8/9jzgKBsXU3ESi7wumKHXnMPiW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 07:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Validity Not Before: Sep 3 07:04:21 2026 GMT Not After : Sep 10 07:04:21 2026 GMT Subject: CN=6a991bf5-e200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:eb:50:e9:ce:19:7e:16:eb:b5:ce:cd:8b: 70:04:fa:8a:76:4f:d2:d5:cb:f3:ba:9e:18:58:8d: 6f:ef:3a:27:10:92:06:61:57:d4:c8:5b:d4:22:dc: 1f:cf:e0:85:37:6f:8c:ad:ae:d4:12:22:4d:4e:22: 66:2f:d9:61:a2:c6:f2:7b:41:84:9b:de:a3:11:3c: 6d:84:ed:dc:1e:36:38:59:60:41:82:4d:a0:ee:9a: 51:87:7f:e3:c9:75:a5:6f:25:8a:05:46:66:2d:bb: 06:d6:2e:c4:f9:fc:e3:3e:ee:3a:0f:05:bf:d7:d7: bc:73:8e:3a:c5:56:e3:0d:30:ff:13:a3:31:72:a7: 63:7b:64:49:a0:22:47:89:e3:67:c2:ca:46:a8:04: 6d:a9:ff:4e:ad:d3:57:84:23:e3:f4:d4:11:1a:22: 2b:a5:42:99:8d:4f:19:76:c6:20:49:ca:7b:2f:de: b4:44:26:3b:1e:3a:e4:f7:61:ae:7f:65:20:84:f3: 95:01:7a:ed:38:20:41:5b:8d:52:73:4d:a1:cf:c1: a6:58:e9:e6:23:1d:0d:53:db:e5:7f:47:78:b3:ac: 8c:a3:31:d1:9d:61:0f:d1:00:f5:8d:5c:73:c6:79: bd:d1:13:00:f0:57:dc:e6:74:36:53:e9:30:d3:18: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C3:A2:CD:4D:8B:0D:93:15:4D:29:A0:48:23:B2:06:77:4C:29:1E X509v3 Authority Key Identifier: keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:cc:3b:b5:29:7c:b0:af:a9:98:a2:43:2f:a9:f2:8c:14:fe: 9e:fc:2a:ca:a6:31:9a:2e:36:31:57:55:d7:72:10:11:d3:cb: 6a:d0:dc:fc:9a:fb:0a:be:f0:8e:7f:19:19:0d:29:30:2b:7a: ef:d1:a9:d4:f0:f8:e7:57:1d:bd:80:56:0d:c1:63:10:5b:46: 65:92:1d:2a:14:d6:97:e1:0c:8c:87:e7:0d:ba:2f:e1:07:d6: 43:5c:35:6d:fc:59:31:66:fd:73:a7:73:c8:b5:a5:ff:55:db: 00:ea:db:2c:db:a1:bf:05:de:82:da:b1:7e:26:a1:bb:34:43: 9d:6b:5e:71:da:59:3d:dd:63:45:3e:cf:71:79:57:40:3d:b1: 43:08:35:c2:ad:98:64:f7:c4:37:4a:4f:2c:00:9b:b8:20:e9: d3:df:e6:e8:87:58:d8:d1:93:f3:13:d1:5a:3b:12:f5:f8:2a: ea:cc:96:7f:24:3a:c4:58:44:c0:04:28:53:2a:d4:13:fe:dc: 09:a0:3f:47:95:97:d0:cb:46:e2:15:99:94:82:1c:94:0b:7a: 13:fb:67:cb:c9:be:5d:67:14:14:f6:96:13:1e:af:4d:9b:45: 21:b0:b5:1f:38:33:55:bf:bb:2f:73:cb:7e:aa:cf:8b:01:3d: e1:0c:d2:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY2Q0QxMTAvBgNVBAUTKEI0RkJFMzRBQjc2NjEyQTlEMjBBRTUyQjBBREI0MUZD RjgwQTEyRkYwHhcNMjYwOTAzMDcwNDIxWhcNMjYwOTEwMDcwNDIxWjAYMRYwFAYD VQQDEw02YTk5MWJmNS1lMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0v3rUOnOGX4W67XOzYtwBPqKdk/S1cvzup4YWI1v7zonEJIGYVfUyFvUItwf z+CFN2+Mra7UEiJNTiJmL9lhosbye0GEm96jETxthO3cHjY4WWBBgk2g7ppRh3/j yXWlbyWKBUZmLbsG1i7E+fzjPu46DwW/19e8c446xVbjDTD/E6Mxcqdje2RJoCJH ieNnwspGqARtqf9OrdNXhCPj9NQRGiIrpUKZjU8ZdsYgScp7L960RCY7Hjrk92Gu f2UghPOVAXrtOCBBW41Sc02hz8GmWOnmIx0NU9vlf0d4s6yMozHRnWEP0QD1jVxz xnm90RMA8Ffc5nQ2U+kw0xiFTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrDos1N iw2TFU0poEgjsgZ3TCkeMB8GA1UdIwQYMBaAFLT740q3ZhKp0grlKwrbQfz4ChL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjZDRC8zMzNCQzYwODgx NkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVxblNDdVVyQ3R0Ql9QZ0tF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQdmpTcmRtRXFuU0N1VXJDdHRCX1BnS0V2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjZDRC8zMzNCQzYwODgxNkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVx blNDdVVyQ3R0Ql9QZ0tFdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhsw7tSl8sK+pmKJDL6nyjBT+nvwqyqYxmi42MVdV13IQEdPLatDc/Jr7Cr7w jn8ZGQ0pMCt679Gp1PD451cdvYBWDcFjEFtGZZIdKhTWl+EMjIfnDbov4QfWQ1w1 bfxZMWb9c6dzyLWl/1XbAOrbLNuhvwXegtqxfiahuzRDnWtecdpZPd1jRT7PcXlX QD2xQwg1wq2YZPfEN0pPLACbuCDp09/m6IdY2NGT8xPRWjsS9fgq6syWfyQ6xFhE wAQoUyrUE/7cCaA/R5WX0MtG4hWZlIIclAt6E/tny8m+XWcUFPaWEx6vTZtFIbC1 HzgzVb+7L3PLfqrPiwE94QzS6Q== -----END CERTIFICATE-----Generated at Sat Sep 5 06:40:14 2026 by rpki-client