$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: S5ppRkI0l8gtTjdOs3uTHZGoKepv1823exVtrvRRy2w= Subject key identifier: 51:DF:C2:C4:77:83:6E:98:AB:5F:FC:24:D9:76:5C:0C:ED:05:F6:38 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 08A8 Signing time: Mon 31 Aug 2026 20:40:45 +0000 Manifest this update: Mon 31 Aug 2026 20:40:44 +0000 Manifest next update: Mon 07 Sep 2026 20:40:44 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: LrAHuoa2uhKBONypXbq9reTW+X1IqiwNJ76B5ci9co0=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: cXh6EKmO4mNgo6W7SACQlk54+m7ofX19QIFxCjJGshk=) 3: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: Oay45StLaCFy3ElLitbFqzSRt2aPUrYuOR3+p3SZq8E=) 4: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: j/nx+4vpcVwnZKmSSpLKnqMW2rDHsGt2fGRTh04AQY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 20:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Aug 31 20:40:44 2026 GMT Not After : Sep 7 20:40:44 2026 GMT Subject: CN=6a95e6cd-a7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:f9:a5:a5:0f:4e:16:be:2e:b3:7c:2d:bc: 1c:89:9c:a8:ee:0f:c8:fd:0c:05:59:87:09:41:4b: 0f:08:32:b7:dc:b3:00:be:db:4e:c8:6a:1a:d4:76: 9e:cd:37:cb:5a:43:2e:bc:2b:fb:ee:2f:71:cc:aa: 27:c7:15:60:5c:65:c2:2b:1a:38:38:ac:49:34:48: 19:e1:70:9e:c1:5c:35:2d:1c:05:be:06:72:ab:a4: f2:0e:bb:b4:bc:27:80:30:e4:9f:8a:af:95:80:d0: d3:6c:4a:6a:66:36:3e:83:4e:68:36:a2:a1:1d:fe: 3f:2e:f1:77:bb:bd:a5:b8:ba:3b:f9:f7:81:b0:ac: 81:bc:01:07:15:f2:4f:b3:4b:ba:38:0b:de:0b:f3: 50:42:ee:f3:cb:31:7e:53:c6:1b:20:ce:6b:59:01: be:a3:97:59:cd:57:77:73:48:d4:25:37:f5:33:b0: 39:48:3d:3c:fe:6b:e2:0f:ff:82:4a:12:d2:91:ef: 34:08:c8:d8:b9:00:76:a3:ed:dd:f3:6e:02:0e:bb: 63:ed:43:27:f5:86:37:bf:76:47:6a:39:71:63:fd: a1:af:e7:fe:61:cd:c9:26:28:4a:62:fb:02:d3:d1: 75:03:79:e9:2e:54:90:cb:be:66:54:09:4a:1b:1f: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DF:C2:C4:77:83:6E:98:AB:5F:FC:24:D9:76:5C:0C:ED:05:F6:38 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:54:20:23:aa:dc:7b:ae:07:64:60:10:de:ca:d7:30:db:cf: 9c:25:45:ab:07:73:5e:ad:a2:be:05:24:df:d6:46:f2:4f:5f: e0:0b:40:77:ef:11:54:49:d6:97:b3:65:3c:a2:18:b2:e4:a4: 76:14:9c:c3:bf:66:cf:36:3f:d7:b2:ad:f8:ed:2c:e9:de:30: 1c:de:5f:5a:00:93:fe:e2:a1:7d:b2:46:3f:f2:25:f8:dd:1f: de:0c:cf:0e:30:a0:28:f9:e8:30:90:53:55:64:9a:a3:0b:94: b6:74:69:ea:77:b4:4f:ab:fc:f0:c6:6a:1d:09:1f:fe:77:0d: 6c:54:d9:d5:70:85:5d:88:d2:fa:88:b1:49:3b:2d:a2:b6:8a: eb:9d:d7:87:6d:99:05:55:2f:3a:e6:83:f9:f6:71:d4:35:ac: 59:5c:48:bf:05:29:e8:e8:08:3f:56:13:77:76:4f:be:b5:a6: 6a:1d:cf:d6:33:93:33:0e:5f:b3:e0:37:f8:7e:d0:91:be:e4: 83:24:b8:1d:53:41:7c:76:2a:6c:a6:10:45:0a:6e:28:2b:d1: 1f:32:00:18:4a:77:29:bc:11:a3:04:b2:e9:15:65:d8:b6:ed: e2:2c:b7:1f:9f:a6:9b:7f:90:61:c0:26:af:f8:09:4b:03:9b: a0:3e:34:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjYwODMxMjA0MDQ0WhcNMjYwOTA3MjA0MDQ0WjAYMRYwFAYD VQQDEw02YTk1ZTZjZC1hN2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui75paUPTha+LrN8LbwciZyo7g/I/QwFWYcJQUsPCDK33LMAvttOyGoa1Hae zTfLWkMuvCv77i9xzKonxxVgXGXCKxo4OKxJNEgZ4XCewVw1LRwFvgZyq6TyDru0 vCeAMOSfiq+VgNDTbEpqZjY+g05oNqKhHf4/LvF3u72luLo7+feBsKyBvAEHFfJP s0u6OAveC/NQQu7zyzF+U8YbIM5rWQG+o5dZzVd3c0jUJTf1M7A5SD08/mviD/+C ShLSke80CMjYuQB2o+3d824CDrtj7UMn9YY3v3ZHajlxY/2hr+f+Yc3JJihKYvsC 09F1A3npLlSQy75mVAlKGx852QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHfwsR3 g26Yq1/8JNl2XAztBfY4MB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUFQgI6rce64HZGAQ3srXMNvPnCVFqwdzXq2ivgUk39ZG8k9f4AtAd+8RVEnW l7NlPKIYsuSkdhScw79mzzY/17Kt+O0s6d4wHN5fWgCT/uKhfbJGP/Il+N0f3gzP DjCgKPnoMJBTVWSaowuUtnRp6ne0T6v88MZqHQkf/ncNbFTZ1XCFXYjS+oixSTst oraK653Xh22ZBVUvOuaD+fZx1DWsWVxIvwUp6OgIP1YTd3ZPvrWmah3P1jOTMw5f s+A3+H7Qkb7kgyS4HVNBfHYqbKYQRQpuKCvRHzIAGEp3KbwRowSy6RVl2Lbt4iy3 H5+mm3+QYcAmr/gJSwOboD40Vw== -----END CERTIFICATE-----Generated at Tue Sep 1 05:21:30 2026 by rpki-client