$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: J1YTDiXnLR8JGG/O6dOj3YZ8i/RPuVPoFxJcKr89+ic= Subject key identifier: 4D:1C:2C:D7:74:25:1E:3F:37:29:2C:3E:5F:26:4F:BB:5E:3E:6B:7D Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 0263 Signing time: Sat 05 Sep 2026 02:03:52 +0000 Manifest this update: Sat 05 Sep 2026 02:03:51 +0000 Manifest next update: Sat 12 Sep 2026 02:03:51 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: LkiZ+p7nE+5fcVL47BCrz2QsnRXI7e1trVR/+C5ySoc=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: 68scz8WaLeDgN6QMKP6YxSS8bPvMLdvzqUKIuG+ai78=) 3: E40FA6ECA53A11F185933D3A4611F970.roa (hash: LgJkzUYDs/93oe3f1rx4Ur7cXfh8aWj0lMvFUfeP3jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Sep 5 02:03:51 2026 GMT Not After : Sep 12 02:03:51 2026 GMT Subject: CN=6a9b7887-c9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:f8:ed:81:63:dd:5e:c0:05:2f:82:5e:d0: 37:13:32:db:84:cc:5f:2f:c1:e6:5f:c8:46:d9:3c: b7:9e:9b:02:a3:bc:74:13:ea:24:bb:28:09:2c:a0: 6b:f5:9a:44:c9:05:c7:8f:28:24:6a:de:22:4a:9d: 47:99:f8:69:6f:70:68:d1:cc:66:0d:be:47:7c:0a: 07:62:f2:31:68:5b:2f:a8:73:73:11:49:a5:59:bd: 95:b7:19:9e:e5:b1:bc:ab:93:32:9f:8c:c5:d4:e3: 02:44:5b:b9:6c:76:31:d9:43:1c:ea:66:05:02:2e: ad:0d:d4:40:58:2f:8f:9c:b6:eb:f6:32:28:45:1c: 77:31:56:25:e5:0f:9f:80:f6:a6:ce:a7:44:6d:6e: 39:a7:0e:97:9f:05:33:60:3f:43:30:d7:31:ab:c0: dd:9f:25:78:4a:60:43:ef:41:18:54:6e:d5:df:95: 2f:29:b6:c7:c2:a2:f4:61:cc:be:28:cf:fc:36:09: 80:de:c8:b6:b4:0a:df:f6:91:73:ea:42:c7:08:9e: 0e:bb:74:93:b1:9e:68:90:18:4e:c6:b8:25:da:6f: b9:5e:13:46:46:6f:df:de:cc:d7:75:4c:cd:95:4e: b7:83:85:60:7d:0e:43:0a:12:21:8d:a0:e5:da:1f: b5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1C:2C:D7:74:25:1E:3F:37:29:2C:3E:5F:26:4F:BB:5E:3E:6B:7D X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:76:a0:09:6a:db:69:d3:d4:38:be:bf:66:e7:f2:67:da:b2: 09:0c:38:fd:82:09:00:d1:07:d3:1b:df:9d:0b:ec:f9:eb:24: 5a:94:d9:6e:b7:57:0b:99:66:d6:34:5b:d0:73:34:6c:66:fa: 62:d0:e7:4a:9e:90:9d:01:7a:49:7f:3f:11:70:5c:9d:20:4f: 72:99:9b:6d:66:0d:35:4d:60:12:14:a9:69:35:ef:1c:42:35: 8b:6c:9d:fb:6d:00:61:99:23:2e:54:b2:86:bd:44:ca:cb:67: 91:62:d5:cc:7e:0a:ad:86:e6:30:bd:0b:f6:28:7f:7e:05:6e: fa:f7:71:44:02:6d:0f:3d:0d:c0:b5:a0:da:ec:2d:07:c9:56: 79:f9:ea:c2:32:16:41:56:9c:1d:a9:58:2f:35:f9:98:60:37: 0f:fd:d3:70:27:22:b1:37:30:91:66:e0:aa:df:74:f7:f0:24: 95:a3:fd:a7:bb:3c:be:23:22:c4:cb:ba:99:a3:3e:83:02:da: 39:c5:33:28:b8:59:9f:46:9e:cf:51:f1:2b:b0:12:bb:b1:88: 23:8b:54:e5:fb:ce:83:d5:e5:04:15:a8:87:ae:16:ee:48:61: 1c:68:63:51:74:fd:d8:04:67:27:52:bc:aa:d4:2a:ad:a5:41: 1c:8d:b8:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjYwOTA1MDIwMzUxWhcNMjYwOTEyMDIwMzUxWjAYMRYwFAYD VQQDEw02YTliNzg4Ny1jOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3347YFj3V7ABS+CXtA3EzLbhMxfL8HmX8hG2Ty3npsCo7x0E+okuygJLKBr 9ZpEyQXHjygkat4iSp1Hmfhpb3Bo0cxmDb5HfAoHYvIxaFsvqHNzEUmlWb2Vtxme 5bG8q5Myn4zF1OMCRFu5bHYx2UMc6mYFAi6tDdRAWC+PnLbr9jIoRRx3MVYl5Q+f gPamzqdEbW45pw6XnwUzYD9DMNcxq8DdnyV4SmBD70EYVG7V35UvKbbHwqL0Ycy+ KM/8NgmA3si2tArf9pFz6kLHCJ4Ou3STsZ5okBhOxrgl2m+5XhNGRm/f3szXdUzN lU63g4VgfQ5DChIhjaDl2h+18wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0cLNd0 JR4/NyksPl8mT7tePmt9MB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFnagCWrbadPUOL6/ZufyZ9qyCQw4/YIJANEH0xvfnQvs+eskWpTZbrdXC5lm 1jRb0HM0bGb6YtDnSp6QnQF6SX8/EXBcnSBPcpmbbWYNNU1gEhSpaTXvHEI1i2yd +20AYZkjLlSyhr1EystnkWLVzH4KrYbmML0L9ih/fgVu+vdxRAJtDz0NwLWg2uwt B8lWefnqwjIWQVacHalYLzX5mGA3D/3TcCcisTcwkWbgqt909/AklaP9p7s8viMi xMu6maM+gwLaOcUzKLhZn0aez1HxK7ASu7GII4tU5fvOg9XlBBWoh64W7khhHGhj UXT92ARnJ1K8qtQqraVBHI24GQ== -----END CERTIFICATE-----Generated at Sat Sep 5 08:44:57 2026 by rpki-client