$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: f18B4ehvkMTF876nZFPH/NtRoAou+V7FQlDh4IoUdfs= Subject key identifier: C5:3B:CF:A9:1B:B2:A7:E9:60:89:02:37:FA:13:B2:3C:18:5E:3A:5F Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 02CA Signing time: Wed 19 Aug 2026 01:55:32 +0000 Manifest this update: Wed 19 Aug 2026 01:55:32 +0000 Manifest next update: Wed 26 Aug 2026 01:55:32 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: s4Oj/WToN4zMwf3W+ZV24hBIeRV1mRVaMUZHt0+DLqk=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: ncn7Gjv5/K5v/CMdlLouui8Rvj7iaqS9f9pgwJ6xHLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Aug 19 01:55:32 2026 GMT Not After : Aug 26 01:55:32 2026 GMT Subject: CN=6a850d14-0f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:22:7b:30:c2:6b:51:c0:48:df:4d:aa:08: 2a:7c:09:56:e9:11:d1:b3:05:e2:4b:67:7f:db:a5: e5:40:92:10:09:78:98:54:18:aa:f1:56:ec:97:89: ce:1a:cc:8c:21:bd:11:2d:d9:9c:06:f9:0f:3a:ce: 94:78:38:58:f5:9d:12:d6:30:2c:b7:19:15:c4:91: 1e:a7:25:57:32:b1:53:80:bc:20:2b:30:de:a0:22: 3f:6e:dc:81:d2:07:f5:ab:79:ce:66:72:e9:0c:6a: 33:8b:17:53:8f:66:ba:3c:dc:51:ef:b8:17:95:da: 24:ac:03:97:7c:40:73:c1:42:f1:8a:d1:d6:bc:41: 0d:c5:16:fe:95:75:54:ca:62:25:80:00:9c:d4:3d: e6:ef:1d:48:4e:e7:38:d4:5e:df:39:48:78:b4:04: 96:ec:b0:d7:3c:02:a3:35:3b:4d:51:0b:d6:9d:dc: 98:81:91:46:d3:7f:d4:cd:57:c9:6c:87:2e:d0:55: 42:52:c7:35:a3:cd:26:b1:6c:72:f8:f9:62:20:eb: 58:58:38:fc:2a:23:b0:7d:9a:30:64:30:f8:be:67: c1:62:5b:90:25:67:27:44:5c:e9:37:03:3e:e9:7b: fa:b5:f6:f6:60:d0:e3:fe:f7:ed:9b:ea:79:53:12: b0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:CF:A9:1B:B2:A7:E9:60:89:02:37:FA:13:B2:3C:18:5E:3A:5F X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c4:73:cb:37:ed:63:6a:45:90:d6:c5:d7:3d:a7:22:ec:de: fe:91:fb:13:6a:bc:35:83:be:5d:f6:a1:94:54:86:a2:de:8a: 76:7e:90:80:60:4f:3e:82:cc:f0:89:f9:af:14:e1:e9:4f:84: ae:fa:e9:b3:9d:71:51:3b:4b:29:64:99:04:80:68:8c:4d:50: a3:64:ea:0f:87:1c:97:6d:8f:9e:4c:e5:ec:03:32:2a:bd:5e: 9f:fe:cb:a0:d6:85:2b:04:7f:ab:00:70:9f:a6:ef:4e:1f:91: d6:99:7f:ad:bb:ee:c2:b8:49:a0:c7:24:52:5d:57:37:a2:97: 36:c7:8b:d7:7f:8d:15:d8:0e:72:6b:ac:ba:a6:72:d0:71:1c: 4f:82:75:da:ea:c2:ff:6b:93:12:14:07:a5:db:b6:46:c7:55: 5e:56:26:7e:64:4f:2a:0c:c4:98:f0:f6:b5:35:ca:9c:84:16: 88:fc:d0:80:35:aa:9d:b0:c0:eb:8c:53:81:20:b0:11:c3:bc: 60:4f:22:98:ce:eb:fe:64:9c:fd:b4:8a:10:51:27:45:8f:53: 2f:85:6b:1e:8e:76:f9:7c:1f:b1:9c:40:dc:10:0a:90:95:0b: b6:c0:dc:de:2f:13:38:4a:31:e7:8f:1f:36:95:0b:79:30:ca: 2a:64:11:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjYwODE5MDE1NTMyWhcNMjYwODI2MDE1NTMyWjAYMRYwFAYD VQQDEw02YTg1MGQxNC0wZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqYiezDCa1HASN9NqggqfAlW6RHRswXiS2d/26XlQJIQCXiYVBiq8Vbsl4nO GsyMIb0RLdmcBvkPOs6UeDhY9Z0S1jAstxkVxJEepyVXMrFTgLwgKzDeoCI/btyB 0gf1q3nOZnLpDGozixdTj2a6PNxR77gXldokrAOXfEBzwULxitHWvEENxRb+lXVU ymIlgACc1D3m7x1ITuc41F7fOUh4tASW7LDXPAKjNTtNUQvWndyYgZFG03/UzVfJ bIcu0FVCUsc1o80msWxy+PliIOtYWDj8KiOwfZowZDD4vmfBYluQJWcnRFzpNwM+ 6Xv6tfb2YNDj/vftm+p5UxKwEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMU7z6kb sqfpYIkCN/oTsjwYXjpfMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh8RzyzftY2pFkNbF1z2nIuze/pH7E2q8NYO+XfahlFSGot6Kdn6QgGBPPoLM 8In5rxTh6U+Ervrps51xUTtLKWSZBIBojE1Qo2TqD4ccl22Pnkzl7AMyKr1en/7L oNaFKwR/qwBwn6bvTh+R1pl/rbvuwrhJoMckUl1XN6KXNseL13+NFdgOcmusuqZy 0HEcT4J12urC/2uTEhQHpdu2RsdVXlYmfmRPKgzEmPD2tTXKnIQWiPzQgDWqnbDA 64xTgSCwEcO8YE8imM7r/mSc/bSKEFEnRY9TL4VrHo52+XwfsZxA3BAKkJULtsDc 3i8TOEox548fNpULeTDKKmQRmA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:38 2026 by rpki-client