$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft File: 3yKppXt9OorrEk1pDHkXBmtNtZ4.mft (raw, json) Hash identifier: n4ZCYNTHziz4dVu44398sSsjyGtvmF2VJySxTrUyk4M= Subject key identifier: 2C:53:9E:D6:EE:50:F7:6C:8F:1E:13:38:A2:FB:8A:48:F9:50:8C:CD Authority key identifier: DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E Certificate issuer: /CN=A91DE19B/serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft Manifest number: B1 Signing time: Wed 19 Aug 2026 07:54:04 +0000 Manifest this update: Wed 19 Aug 2026 07:54:04 +0000 Manifest next update: Wed 26 Aug 2026 07:54:04 +0000 Files and hashes: 1: 3yKppXt9OorrEk1pDHkXBmtNtZ4.crl (hash: p2wIDfYB6sEyxB9YSpQcvxbGahrsGy5jvavroRisFVM=) 2: 5A3CD118919611F1B67C33A881EE528E.roa (hash: zdLjE/EGWkfjrDMkEsokmmRyblKFb7V9ugMSSFqd5os=) 3: AFAE3E5E918011F18FBECB883611F970.roa (hash: P12qj923E/5jr1ZhYk275Y94yn2Tp1wO6IKREp3e+oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE19B, serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Validity Not Before: Aug 19 07:54:04 2026 GMT Not After : Aug 26 07:54:04 2026 GMT Subject: CN=6a85611c-c0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:2d:70:9a:97:59:9f:af:72:aa:66:4e:ce: 1c:41:f4:a4:92:4c:5e:9f:4e:e0:a3:fe:36:9f:4d: 93:2a:9a:4e:93:2f:b0:e9:be:03:42:ea:90:ca:a7: cb:3d:88:a9:cd:34:1d:cb:0b:40:d8:ff:b9:12:51: 2c:b9:ad:cc:b0:c9:9c:4c:56:f0:28:22:49:ae:e4: 0b:03:fa:f6:23:1b:2c:26:54:b9:f5:33:42:be:d9: a4:83:91:7a:fe:15:8e:c9:92:32:d5:fb:b7:19:43: ec:0e:4c:1a:13:5d:f9:20:1f:3e:35:37:ee:b8:7b: d3:9d:3e:a1:d4:f5:59:89:dc:a5:24:a6:f6:0b:5c: 73:93:37:45:f4:87:00:a4:86:dc:03:02:36:15:ad: a6:f1:18:a0:0d:7f:f0:a1:fd:d0:72:6b:a9:12:89: 61:e9:e8:77:83:56:17:f0:8f:dd:9f:e0:ab:1e:34: d6:a7:6c:88:d1:b5:16:56:c7:80:5f:52:9e:3a:75: b4:39:6d:05:85:be:82:6c:5d:28:f4:8c:b3:70:ce: b4:74:25:3a:b0:68:f0:26:21:5e:95:06:f9:a8:d9: 2f:91:10:a4:fa:97:39:70:9f:50:b1:48:d1:2c:09: 91:c9:cf:24:11:a8:05:e3:72:2b:ed:5a:40:60:f0: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:53:9E:D6:EE:50:F7:6C:8F:1E:13:38:A2:FB:8A:48:F9:50:8C:CD X509v3 Authority Key Identifier: keyid:DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8f:7c:a9:ab:ff:54:4f:9b:ae:db:6a:64:5b:79:ea:30:92: 48:c3:35:a6:2d:9e:57:4f:80:5f:97:50:e1:81:3b:28:10:13: 71:61:c5:36:78:e7:11:8e:e8:62:e9:8d:65:37:53:89:7b:9c: 3f:9c:f6:de:7c:32:b4:c4:17:da:f4:ab:50:89:17:73:1a:eb: 5d:10:32:f7:02:8b:2c:5f:28:ae:7a:c0:d7:e1:49:ec:28:83: 50:4f:98:1b:a0:9b:b6:aa:16:cb:18:53:ca:cb:ef:d5:41:cd: 6e:ae:2e:28:60:9f:67:71:aa:0e:31:d2:03:87:58:ed:75:ce: 0d:7e:3a:18:6c:56:c0:29:98:50:37:a0:41:0a:21:52:6d:f1: 5d:70:b9:5f:e0:82:ce:be:87:44:a9:a6:27:a7:41:d6:c1:fc: 0a:33:60:2a:3c:96:51:de:83:63:f4:06:19:cd:ac:db:47:4f: 9d:2b:23:fc:d9:20:58:5c:51:92:e6:3a:59:ce:ff:d5:f4:b9: b3:02:82:81:46:52:c7:7c:00:60:0c:dc:98:52:63:05:37:02: a6:a3:89:c3:d2:0c:68:e7:60:04:81:68:c1:50:08:35:a0:f0: e0:ef:04:06:a0:54:87:63:08:5c:80:bd:82:51:41:07:43:71: 68:28:f8:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxOUIxMTAvBgNVBAUTKERGMjJBOUE1N0I3RDNBOEFFQjEyNEQ2OTBDNzkxNzA2 NkI0REI1OUUwHhcNMjYwODE5MDc1NDA0WhcNMjYwODI2MDc1NDA0WjAYMRYwFAYD VQQDEw02YTg1NjExYy1jMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR4tcJqXWZ+vcqpmTs4cQfSkkkxen07go/42n02TKppOky+w6b4DQuqQyqfL PYipzTQdywtA2P+5ElEsua3MsMmcTFbwKCJJruQLA/r2IxssJlS59TNCvtmkg5F6 /hWOyZIy1fu3GUPsDkwaE135IB8+NTfuuHvTnT6h1PVZidylJKb2C1xzkzdF9IcA pIbcAwI2Fa2m8RigDX/wof3QcmupEolh6eh3g1YX8I/dn+CrHjTWp2yI0bUWVseA X1KeOnW0OW0Fhb6CbF0o9IyzcM60dCU6sGjwJiFelQb5qNkvkRCk+pc5cJ9QsUjR LAmRyc8kEagF43Ir7VpAYPBT/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxTntbu UPdsjx4TOKL7ikj5UIzNMB8GA1UdIwQYMBaAFN8iqaV7fTqK6xJNaQx5FwZrTbWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTE5Qi9EQUI4NUUyOEEz NzMxMUYwOEY4OTFDMzdDNEY5QUUwMi8zeUtwcFh0OU9vcnJFazFwREhrWEJtdE50 WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5S3BwWHQ5T29yckVrMXBESGtYQm10TnRaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTE5Qi9EQUI4NUUyOEEzNzMxMUYwOEY4OTFDMzdDNEY5QUUwMi8zeUtwcFh0OU9v cnJFazFwREhrWEJtdE50WjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgY98qav/VE+brttqZFt56jCSSMM1pi2eV0+AX5dQ4YE7KBATcWHFNnjnEY7o YumNZTdTiXucP5z23nwytMQX2vSrUIkXcxrrXRAy9wKLLF8ornrA1+FJ7CiDUE+Y G6CbtqoWyxhTysvv1UHNbq4uKGCfZ3GqDjHSA4dY7XXODX46GGxWwCmYUDegQQoh Um3xXXC5X+CCzr6HRKmmJ6dB1sH8CjNgKjyWUd6DY/QGGc2s20dPnSsj/NkgWFxR kuY6Wc7/1fS5swKCgUZSx3wAYAzcmFJjBTcCpqOJw9IMaOdgBIFowVAINaDw4O8E BqBUh2MIXIC9glFBB0NxaCj4/g== -----END CERTIFICATE-----Generated at Wed Aug 19 13:41:41 2026 by rpki-client