$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json) Hash identifier: VQwfiks+sBIguYv3PYj7anMC4KeX524Ug/OEuZElb28= Subject key identifier: 3E:42:9D:03:4C:78:68:8A:98:06:FA:9F:FF:3B:1A:98:E8:22:8B:C3 Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Certificate serial: 16B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft Manifest number: 16A7 Signing time: Tue 18 Aug 2026 16:50:30 +0000 Manifest this update: Tue 18 Aug 2026 16:50:29 +0000 Manifest next update: Tue 25 Aug 2026 16:50:29 +0000 Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: Vf3wo7B8qmKxE9gwwaGwNWz2BYY2rmCPriu5WJ7uYSk=) 2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: VHKrRamBzI5Z2a2wNY14oKOBu6LJFzzc8akNzDVPDyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5810 (0x16b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Validity Not Before: Aug 18 16:50:29 2026 GMT Not After : Aug 25 16:50:29 2026 GMT Subject: CN=6a848d56-82f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:cd:68:dc:39:15:36:61:04:13:10:f5:76: 80:ba:92:06:8a:1e:e3:33:40:f3:8d:ab:f3:5f:6e: 0a:cb:17:e3:9c:f1:94:48:a1:b7:f8:14:8e:e1:c0: e4:12:ce:45:40:70:dc:cc:69:81:75:f4:5c:c5:22: 85:9b:ab:13:35:2e:3a:89:e4:99:00:dc:b6:9d:b9: 4f:46:d6:ca:77:9c:c6:a5:1c:bc:f4:45:0e:b2:a5: 1f:19:ae:b9:35:73:38:6c:da:d9:82:be:da:8c:2e: cb:fd:e0:4d:b8:38:e7:4a:7b:8d:1a:ea:4d:11:8d: 78:10:7b:91:6d:33:32:4b:55:ad:85:ef:bd:43:cd: 94:5d:6b:41:76:c9:28:9e:60:55:b6:15:91:96:86: 67:e1:a6:a1:e9:27:9b:41:7d:09:df:7c:40:9a:7e: a3:04:84:0a:38:fb:37:ab:9b:5b:cf:b1:f1:a6:56: c7:3c:00:62:0c:5a:4b:3b:8d:c7:ea:1f:12:c5:40: 98:a8:a9:ed:83:2d:23:4d:da:7d:da:98:d0:fb:bf: ea:92:81:d0:33:ec:e0:4d:8e:cd:47:9a:72:cc:dc: 30:e2:0a:92:80:4f:07:87:8b:51:33:9b:0f:61:e5: 6e:11:7f:c1:02:4e:b3:38:ac:54:d1:df:99:1c:43: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:9D:03:4C:78:68:8A:98:06:FA:9F:FF:3B:1A:98:E8:22:8B:C3 X509v3 Authority Key Identifier: keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d5:6f:7d:a5:c7:4d:cb:b3:8d:63:3a:ab:e4:df:55:6c:de: 4c:73:64:b6:c6:b9:81:83:05:e5:86:0b:8e:f4:1c:7e:21:33: 31:6d:a3:a2:06:5c:39:54:e2:49:f1:60:f5:be:c6:50:7c:c6: bf:77:56:36:e2:5e:23:08:f1:77:52:93:7f:92:b4:b0:65:11: 10:bc:a9:c8:a3:bc:ba:53:61:16:ed:2f:19:42:97:76:c1:3b: 30:74:a7:46:b5:ae:7c:b1:45:04:69:51:59:76:00:3b:1b:d2: 12:76:48:5e:bf:1e:6b:88:0c:25:e4:ea:98:52:cc:ae:d1:75: b3:74:6e:69:c9:58:da:0f:2e:a5:f8:36:0c:bf:cb:c1:6a:6a: f3:d9:88:2e:83:83:99:75:74:8b:f0:81:92:d3:23:54:cb:39: 52:e0:45:f7:dd:e8:54:a1:54:53:4d:d8:f7:41:a0:67:35:91: 8a:cb:c5:1a:f4:3d:75:27:51:73:2b:ad:ab:a0:85:ba:e8:86: f4:e3:c5:d2:c2:bd:12:5d:72:d6:82:b2:6d:91:aa:70:e6:d5: ba:34:8c:7c:1b:3c:c2:aa:54:19:a8:a5:54:4b:9f:02:07:1d: 66:19:50:b3:5a:b2:11:75:2b:a6:cd:b2:e4:0c:7c:72:a4:30: 20:e9:d7:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFQjYxMTAvBgNVBAUTKERENTMzRDExQTlERTJBQjkxODA4NTA4M0JFODJENTE0 MzRERjQ1NDAwHhcNMjYwODE4MTY1MDI5WhcNMjYwODI1MTY1MDI5WjAYMRYwFAYD VQQDEw02YTg0OGQ1Ni04MmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApenNaNw5FTZhBBMQ9XaAupIGih7jM0DzjavzX24KyxfjnPGUSKG3+BSO4cDk Es5FQHDczGmBdfRcxSKFm6sTNS46ieSZANy2nblPRtbKd5zGpRy89EUOsqUfGa65 NXM4bNrZgr7ajC7L/eBNuDjnSnuNGupNEY14EHuRbTMyS1Wthe+9Q82UXWtBdsko nmBVthWRloZn4aah6SebQX0J33xAmn6jBIQKOPs3q5tbz7HxplbHPABiDFpLO43H 6h8SxUCYqKntgy0jTdp92pjQ+7/qkoHQM+zgTY7NR5pyzNww4gqSgE8Hh4tRM5sP YeVuEX/BAk6zOKxU0d+ZHEPCVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5CnQNM eGiKmAb6n/87GpjoIovDMB8GA1UdIwQYMBaAFN1TPRGp3iq5GAhQg76C1RQ030VA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVCNi8xMDhGNTNBRTI4 MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUtya1lDRkNEdm9MVkZEVGZS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNWTTlFYW5lS3JrWUNGQ0R2b0xWRkRUZlJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVCNi8xMDhGNTNBRTI4MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUty a1lDRkNEdm9MVkZEVGZSVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABNVvfaXHTcuzjWM6q+TfVWzeTHNktsa5gYMF5YYLjvQcfiEzMW2jogZcOVTi SfFg9b7GUHzGv3dWNuJeIwjxd1KTf5K0sGURELypyKO8ulNhFu0vGUKXdsE7MHSn RrWufLFFBGlRWXYAOxvSEnZIXr8ea4gMJeTqmFLMrtF1s3RuaclY2g8upfg2DL/L wWpq89mILoODmXV0i/CBktMjVMs5UuBF993oVKFUU03Y90GgZzWRisvFGvQ9dSdR cyutq6CFuuiG9OPF0sK9El1y1oKybZGqcObVujSMfBs8wqpUGailVEufAgcdZhlQ s1qyEXUrps2y5Ax8cqQwIOnXpA== -----END CERTIFICATE-----Generated at Wed Aug 19 13:40:45 2026 by rpki-client