$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft File: sTgy_KSTRJYjasOJSZjD3VE9fAk.mft (raw, json) Hash identifier: nHGuRU9FyNSlBdpPg8roOKMZMVrarjmmw5d5r6ya8yM= Subject key identifier: 3D:2B:EA:7B:C1:D2:AF:74:6B:B7:B0:72:F5:D3:6D:28:E6:00:22:74 Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09 Certificate issuer: /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft Manifest number: 0280 Signing time: Wed 19 Aug 2026 02:27:51 +0000 Manifest this update: Wed 19 Aug 2026 02:27:50 +0000 Manifest next update: Wed 26 Aug 2026 02:27:50 +0000 Files and hashes: 1: sTgy_KSTRJYjasOJSZjD3VE9fAk.crl (hash: XaGzWL06p4IMbylPKgll+kQDvzEJ7DLpdu7oQgj4GFY=) 2: 61DBE422A88B11EFAF507987C4F9AE02.roa (hash: dsx+NKPNaeGu5VjwmCjHB3rJ2l0LHRp9QzffSXcc09g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A16, serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09 Validity Not Before: Aug 19 02:27:50 2026 GMT Not After : Aug 26 02:27:50 2026 GMT Subject: CN=6a8514a7-ab42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:ea:85:d0:f0:bd:23:61:5e:05:ed:6f:8b: a4:38:b9:3c:5b:26:ad:64:19:6a:4e:3d:70:af:b5: 5d:be:1a:b8:71:3a:31:58:78:44:e8:92:75:ee:a4: d4:b7:83:d1:0b:f2:42:73:7f:cd:03:fe:a5:2a:de: a9:c7:97:ce:dd:aa:2d:c7:40:84:fe:e7:4a:f3:4a: fa:83:be:d4:fd:08:08:f6:46:ea:2e:4e:53:23:e7: e5:8e:7f:29:c0:f7:4d:0e:c6:08:39:81:1f:1f:b9: 66:92:03:ee:62:4a:1f:5c:cd:ff:f8:ed:11:c9:c2: e3:46:a2:34:64:10:aa:8d:4b:fc:7e:6f:af:b4:61: 6e:5b:ea:b5:12:92:de:dd:9f:53:1e:82:32:52:cd: 69:61:ee:d3:4b:5a:8a:cf:93:16:91:b3:46:cf:7c: 65:d8:47:dc:9d:43:fb:f4:fc:d7:8b:15:5e:d4:ec: b3:e8:7a:ff:c6:be:0b:2a:0e:ca:d8:f1:cc:23:40: 24:01:bf:d6:1b:00:40:7e:77:05:e5:3a:2e:75:fa: cc:c2:77:58:fd:03:20:cd:23:67:9d:5a:61:de:e6: 7b:06:05:9f:bc:7f:9c:2c:30:c6:e7:f4:9d:c1:1a: 9b:78:4c:dd:a6:a3:d6:55:1a:59:cb:30:15:f9:0d: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:EA:7B:C1:D2:AF:74:6B:B7:B0:72:F5:D3:6D:28:E6:00:22:74 X509v3 Authority Key Identifier: keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:0a:0a:e5:f2:a1:11:10:66:7d:6f:ef:b2:02:4e:58:6e:c5: 89:a9:84:d3:ce:ce:44:1c:58:5b:09:29:34:d4:8f:eb:71:16: 81:5b:fe:89:1e:2b:a5:d0:be:f2:0c:57:cd:35:70:32:bb:69: e5:d8:4f:48:f3:f5:46:bc:0f:72:97:97:28:0d:c5:cd:f5:7a: 17:8f:44:84:57:ce:53:0d:f5:1e:65:c1:b3:9a:b6:78:a5:77: 37:c7:e1:b4:24:06:e6:a3:f5:4a:82:aa:0c:c2:34:f9:13:d8: b7:ef:b3:57:d3:6c:5e:5c:de:81:4b:a9:38:29:15:bb:b2:fc: 54:12:0a:70:9f:51:2f:b5:b5:0b:a3:b3:98:5b:bc:7d:a6:96: 63:0b:76:54:2b:1a:25:85:3a:0a:c0:b1:e6:1c:80:7b:8f:59: 0e:3f:a9:86:3b:76:50:79:3d:d2:5c:57:41:6a:db:30:63:69: c7:20:8e:1d:f5:38:2b:01:74:60:49:45:e2:03:17:a6:55:20: df:35:67:f1:91:61:06:6b:f0:3e:82:5b:f3:ef:2f:e7:6f:d1: e5:32:a3:3b:07:d4:de:d6:bc:3f:7f:4a:af:6a:5c:1e:3c:9c: 88:2a:00:ef:1b:b4:84:d1:84:b6:cd:56:d1:20:56:5b:34:45: 14:ca:96:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBMTYxMTAvBgNVBAUTKEIxMzgzMkZDQTQ5MzQ0OTYyMzZBQzM4OTQ5OThDM0RE NTEzRDdDMDkwHhcNMjYwODE5MDIyNzUwWhcNMjYwODI2MDIyNzUwWjAYMRYwFAYD VQQDEw02YTg1MTRhNy1hYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQvqhdDwvSNhXgXtb4ukOLk8WyatZBlqTj1wr7Vdvhq4cToxWHhE6JJ17qTU t4PRC/JCc3/NA/6lKt6px5fO3aotx0CE/udK80r6g77U/QgI9kbqLk5TI+fljn8p wPdNDsYIOYEfH7lmkgPuYkofXM3/+O0RycLjRqI0ZBCqjUv8fm+vtGFuW+q1EpLe 3Z9THoIyUs1pYe7TS1qKz5MWkbNGz3xl2EfcnUP79PzXixVe1Oyz6Hr/xr4LKg7K 2PHMI0AkAb/WGwBAfncF5ToudfrMwndY/QMgzSNnnVph3uZ7BgWfvH+cLDDG5/Sd wRqbeEzdpqPWVRpZyzAV+Q3g7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0r6nvB 0q90a7ewcvXTbSjmACJ0MB8GA1UdIwQYMBaAFLE4Mvykk0SWI2rDiUmYw91RPXwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEExNi9CQUU3RUZGRUND NTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJKWWphc09KU1pqRDNWRTlm QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NUZ3lfS1NUUkpZamFzT0pTWmpEM1ZFOWZBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEExNi9CQUU3RUZGRUNDNTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJK WWphc09KU1pqRDNWRTlmQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQoK5fKhERBmfW/vsgJOWG7FiamE087ORBxYWwkpNNSP63EWgVv+iR4rpdC+ 8gxXzTVwMrtp5dhPSPP1RrwPcpeXKA3FzfV6F49EhFfOUw31HmXBs5q2eKV3N8fh tCQG5qP1SoKqDMI0+RPYt++zV9NsXlzegUupOCkVu7L8VBIKcJ9RL7W1C6OzmFu8 faaWYwt2VCsaJYU6CsCx5hyAe49ZDj+phjt2UHk90lxXQWrbMGNpxyCOHfU4KwF0 YElF4gMXplUg3zVn8ZFhBmvwPoJb8+8v52/R5TKjOwfU3ta8P39Kr2pcHjyciCoA 7xu0hNGEts1W0SBWWzRFFMqWuw== -----END CERTIFICATE-----Generated at Wed Aug 19 13:39:06 2026 by rpki-client