$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json) Hash identifier: Innx5Y91tdxCAGVSuV+KxvMSbzkuf4DMn7lQqDVM2Xo= Subject key identifier: E5:8D:B4:B9:A2:DA:6F:CC:27:48:E8:59:1F:DE:5E:F8:D8:0A:68:0F Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft Manifest number: 025D Signing time: Sat 05 Sep 2026 02:04:54 +0000 Manifest this update: Sat 05 Sep 2026 02:04:54 +0000 Manifest next update: Sat 12 Sep 2026 02:04:54 +0000 Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: NtLrf9vArw149Nbkz2PGX+v9ev1hmaL7j3ugOIsnrjE=) 2: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=) 3: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: Sep 5 02:04:54 2026 GMT Not After : Sep 12 02:04:54 2026 GMT Subject: CN=6a9b78c6-3b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:5f:c1:99:9b:30:47:2d:6d:fa:6c:f1:ad: 28:20:0d:3c:b9:c4:67:e3:ce:2e:d1:ea:95:93:1b: 56:df:d8:d5:97:34:2f:6d:64:dc:82:d1:51:96:01: a8:f4:9c:29:2c:45:0d:3d:f6:90:5f:8c:27:9a:79: d6:a2:39:51:3c:b5:90:54:d4:57:1d:e9:ef:cd:88: ac:43:de:00:a6:ad:29:07:d1:03:53:23:e9:b9:36: 22:b5:d3:e1:47:06:72:d4:cd:f9:d7:fe:8d:ee:3e: 68:1e:3a:50:a4:b0:d5:a2:ac:9f:b5:13:5e:26:fd: 93:dc:b3:92:bb:05:e1:07:ce:ee:00:79:fe:6d:d7: 4a:88:e7:ec:30:90:88:1c:85:ab:b4:fc:7e:ca:be: 96:84:56:28:4d:a6:80:95:fd:6f:2c:a7:91:93:77: 1c:36:ff:9c:ff:49:7f:cf:a9:bd:b0:1d:02:b9:c3: ca:82:bd:b1:23:cf:ba:80:32:23:1b:12:cf:d9:58: 0a:3b:4d:2b:b7:c6:64:2c:dc:8d:05:bc:be:0a:f5: c4:9a:4b:63:b9:e0:85:86:88:10:21:e1:80:e0:5a: 18:fb:66:f9:25:02:87:3c:02:7f:b7:8d:f7:05:02: 4b:38:8f:f8:f4:09:dd:01:64:ab:6d:ab:30:d5:6a: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8D:B4:B9:A2:DA:6F:CC:27:48:E8:59:1F:DE:5E:F8:D8:0A:68:0F X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c1:fb:2f:3f:37:81:fc:67:39:08:42:a6:8a:a8:f0:41:4b: 51:89:73:15:b2:12:16:33:6d:30:92:0e:68:3e:8b:2b:f5:05: b1:56:39:5d:fb:7e:2e:52:80:b9:74:8d:23:4f:ff:91:9d:db: 27:7b:50:b3:00:2e:1b:64:b8:f1:70:28:11:5c:b5:4b:0e:eb: 2c:3a:59:2b:f6:dd:99:fe:b8:ab:ee:71:3b:5a:1b:07:23:e4: 83:31:34:51:c6:0b:13:88:ea:27:78:e7:d4:c1:04:43:6d:ac: 35:1c:64:a1:f6:0f:3f:64:2b:94:92:17:3a:bb:8c:63:91:ad: 0f:7b:9e:e9:00:69:31:b7:65:32:19:85:27:0b:40:3c:ab:6d: cc:01:bf:c3:ce:97:b7:1e:cb:d4:dc:dd:38:25:a0:d5:ff:07: be:7a:6f:1a:10:70:df:00:6c:b2:fe:ef:1f:8e:68:68:d8:b1: 0c:56:5b:bc:e4:05:5f:c8:21:44:71:69:92:89:9a:7b:b0:ee: 3d:06:20:b0:6c:0e:6d:61:fe:c0:02:e6:16:08:0a:31:f2:08: e7:a4:9a:9c:fa:33:61:9b:3c:0d:38:e1:15:c3:fa:7c:a3:94: 9c:7c:5f:ae:bc:11:d4:41:ee:3f:45:95:e3:3a:09:33:13:11: 55:fb:00:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjYwOTA1MDIwNDU0WhcNMjYwOTEyMDIwNDU0WjAYMRYwFAYD VQQDEw02YTliNzhjNi0zYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdZfwZmbMEctbfps8a0oIA08ucRn484u0eqVkxtW39jVlzQvbWTcgtFRlgGo 9JwpLEUNPfaQX4wnmnnWojlRPLWQVNRXHenvzYisQ94Apq0pB9EDUyPpuTYitdPh RwZy1M351/6N7j5oHjpQpLDVoqyftRNeJv2T3LOSuwXhB87uAHn+bddKiOfsMJCI HIWrtPx+yr6WhFYoTaaAlf1vLKeRk3ccNv+c/0l/z6m9sB0CucPKgr2xI8+6gDIj GxLP2VgKO00rt8ZkLNyNBby+CvXEmktjueCFhogQIeGA4FoY+2b5JQKHPAJ/t433 BQJLOI/49AndAWSrbasw1WqClQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWNtLmi 2m/MJ0joWR/eXvjYCmgPMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5 S1RTVFhuVWdjaXZWTXoyazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUsH7Lz83gfxnOQhCpoqo8EFLUYlzFbISFjNtMJIOaD6LK/UFsVY5Xft+LlKA uXSNI0//kZ3bJ3tQswAuG2S48XAoEVy1Sw7rLDpZK/bdmf64q+5xO1obByPkgzE0 UcYLE4jqJ3jn1MEEQ22sNRxkofYPP2QrlJIXOruMY5GtD3ue6QBpMbdlMhmFJwtA PKttzAG/w86Xtx7L1NzdOCWg1f8HvnpvGhBw3wBssv7vH45oaNixDFZbvOQFX8gh RHFpkomae7DuPQYgsGwObWH+wALmFggKMfII56SanPozYZs8DTjhFcP6fKOUnHxf rrwR1EHuP0WV4zoJMxMRVfsA7w== -----END CERTIFICATE-----Generated at Sat Sep 5 07:35:00 2026 by rpki-client