$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: RIpmJZcFK4s4O/ILq8GR/TyEihoBS28Rv5l7M+FQoUc= Subject key identifier: 8B:AC:92:2B:0A:2F:06:71:6E:D5:09:1B:58:EE:C7:73:E9:9D:92:ED Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 021D Signing time: Wed 19 Aug 2026 03:25:15 +0000 Manifest this update: Wed 19 Aug 2026 03:25:14 +0000 Manifest next update: Wed 26 Aug 2026 03:25:14 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: TkwYEzzAhWRiLwlN7r9nH2zSlqgkvSQjS66+5j0SXGA=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: S+Y8oP//RYaIR2kO19UxtIdNUz76sF0XE/tof0f/xOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Aug 19 03:25:14 2026 GMT Not After : Aug 26 03:25:14 2026 GMT Subject: CN=6a85221b-245e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:10:c3:78:b6:54:8c:67:05:d1:43:bb:33: b1:b1:4c:5e:5b:09:44:1f:fc:89:40:2b:9c:23:61: 25:d4:a8:a0:d2:08:34:9f:2c:b7:0a:92:eb:56:02: c9:5e:f7:eb:7d:d1:d0:6d:b7:5c:6b:a3:dc:6f:bd: fb:7f:b2:8f:6d:fd:be:e4:24:0a:96:6e:90:b5:63: de:ce:7c:4e:8a:cd:fd:fb:2c:52:2b:31:e5:62:18: cd:fe:1f:5a:ea:53:f9:44:6e:9b:6f:e7:52:e2:48: 8e:47:54:60:ea:46:3e:61:83:43:1a:e1:2b:b5:8f: 81:a3:ce:ff:ca:d6:b0:54:ca:d5:8d:6a:af:da:7e: 35:6e:0b:55:04:f3:cd:a5:57:6b:d1:ce:b5:11:0f: 78:84:6c:d9:9a:e8:be:08:66:85:0e:f7:f9:0a:1c: 23:ba:09:f2:1e:77:55:c0:71:29:be:5c:81:d0:8b: 9e:85:d5:c5:8c:33:41:c6:b0:e0:6b:b0:a1:9e:62: 9f:5e:7d:17:1c:8f:c1:00:bf:c1:c3:69:0c:9b:2c: af:ae:68:5c:99:63:1d:60:7e:59:00:bf:bc:9c:da: a2:b3:de:ca:08:b5:60:92:c7:c4:d7:98:82:97:af: e4:a6:a5:b0:1e:3b:40:6b:02:6e:a8:3d:90:fb:30: 8c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AC:92:2B:0A:2F:06:71:6E:D5:09:1B:58:EE:C7:73:E9:9D:92:ED X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:5c:c8:c6:e2:53:2f:0c:37:ad:76:ba:df:8a:ec:6c:a0:53: 89:2f:1b:47:65:cb:40:cb:fe:04:c8:82:ba:01:97:81:85:bc: 08:b8:ba:dd:9c:42:de:49:2b:a4:37:62:92:75:f7:8f:a5:7d: 4f:5b:5b:b7:28:3f:36:8f:49:9b:30:7d:99:e5:23:92:d6:48: f0:95:39:4a:be:74:59:67:38:c6:35:28:40:d1:34:0d:d6:5d: 7f:5e:e1:1b:0d:4e:8b:54:ec:51:11:d8:51:ab:ac:e8:36:77: 42:96:ff:06:12:56:e5:97:c3:30:8c:e3:21:2c:39:da:57:eb: a2:e2:c9:03:13:88:c9:d9:a3:21:71:8b:d3:f7:99:f9:b9:a5: b3:f1:17:15:88:13:d3:19:e7:b9:a7:12:05:2f:c0:e7:dc:67: a3:05:58:16:6b:96:b3:76:66:41:5a:32:4a:33:e7:11:5c:b6: 01:10:35:c3:6b:00:46:42:81:db:d1:a5:9c:37:3d:80:57:42: 1f:55:ad:7e:57:ff:4a:05:ab:a9:a5:7d:b0:9d:d4:de:63:c1: d1:89:6a:a2:08:28:bf:60:be:71:72:71:e7:6a:25:df:82:57: 24:32:3e:ed:71:f7:bd:66:80:cd:9f:c8:f6:8c:45:32:a0:fe: 35:fe:df:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjYwODE5MDMyNTE0WhcNMjYwODI2MDMyNTE0WjAYMRYwFAYD VQQDEw02YTg1MjIxYi0yNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbgQw3i2VIxnBdFDuzOxsUxeWwlEH/yJQCucI2El1Kig0gg0nyy3CpLrVgLJ XvfrfdHQbbdca6Pcb737f7KPbf2+5CQKlm6QtWPeznxOis39+yxSKzHlYhjN/h9a 6lP5RG6bb+dS4kiOR1Rg6kY+YYNDGuErtY+Bo87/ytawVMrVjWqv2n41bgtVBPPN pVdr0c61EQ94hGzZmui+CGaFDvf5ChwjugnyHndVwHEpvlyB0IuehdXFjDNBxrDg a7ChnmKfXn0XHI/BAL/Bw2kMmyyvrmhcmWMdYH5ZAL+8nNqis97KCLVgksfE15iC l6/kpqWwHjtAawJuqD2Q+zCM3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuskisK LwZxbtUJG1jux3PpnZLtMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxlzIxuJTLww3rXa634rsbKBTiS8bR2XLQMv+BMiCugGXgYW8CLi63ZxC3kkr pDdiknX3j6V9T1tbtyg/No9JmzB9meUjktZI8JU5Sr50WWc4xjUoQNE0DdZdf17h Gw1Oi1TsURHYUaus6DZ3Qpb/BhJW5ZfDMIzjISw52lfrouLJAxOIydmjIXGL0/eZ +bmls/EXFYgT0xnnuacSBS/A59xnowVYFmuWs3ZmQVoySjPnEVy2ARA1w2sARkKB 29GlnDc9gFdCH1Wtflf/SgWrqaV9sJ3U3mPB0Ylqoggov2C+cXJx52ol34JXJDI+ 7XH3vWaAzZ/I9oxFMqD+Nf7fsA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:50 2026 by rpki-client