$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: Vo4RbtIEe5spOYGMXb0nvYClArviCv887nUkxMnRrvM= Subject key identifier: C3:0D:DC:EB:7B:AA:2A:13:AF:8B:90:F1:FD:69:03:D3:BB:3E:D3:EB Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 0299 Signing time: Sat 05 Sep 2026 01:44:25 +0000 Manifest this update: Sat 05 Sep 2026 01:44:25 +0000 Manifest next update: Sat 12 Sep 2026 01:44:25 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: A79h06gZeDYQoVdhJ9VAxGIM7+obp1dQjQmxEb5ZdYg=) 2: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: +FOKSn3UMqNBdCkwTnN5e6gZKaXTHMKWX9i32crYuLc=) 3: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: WJy0DDE3R4DJLfi+G/eV3lsb3PxP1zjDf/s8mlf+RmM=) 4: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: BDN3eWU1QOvpwhp4B8qHZfh25EaapwZh0B/UqPtIRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Sep 5 01:44:25 2026 GMT Not After : Sep 12 01:44:25 2026 GMT Subject: CN=6a9b73f9-764c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:3b:e8:fd:bb:b4:47:b8:e0:94:e1:47:23: 88:c7:39:42:2d:b2:c8:60:be:4e:06:e3:93:6d:6a: c0:dc:a2:d0:47:d2:ad:59:62:de:c6:6e:c0:c9:5f: d8:67:e9:0f:72:e6:7d:ad:64:e3:56:8b:30:cf:bd: ff:a2:59:6f:32:60:67:70:06:58:1d:d1:02:77:2b: 8b:67:f4:86:2d:1a:ec:b1:78:c7:ca:c9:7a:ab:80: 1e:de:4a:9b:1e:ae:fa:69:72:0f:b4:ca:13:e7:e5: c1:a7:fa:9d:3d:56:2a:c8:1a:eb:be:51:31:ef:15: 31:c4:af:17:6a:05:ef:e6:f0:e6:06:cc:e0:39:ef: de:40:8c:5b:0b:9c:f2:34:e0:51:06:d8:a6:e4:37: d3:61:e1:2a:cf:58:73:32:a9:60:cb:bd:e2:22:e0: 10:a3:a4:6c:5b:d5:92:b1:26:08:f0:28:90:ed:d5: 09:81:d4:c2:c5:4f:38:9f:58:ec:6e:52:e8:78:c2: 22:cb:56:56:bf:0b:d6:3c:d7:b1:99:91:db:eb:d9: f8:2d:a7:a7:a5:76:da:c7:85:c5:f9:e5:8f:78:02: 8a:11:3f:b7:f8:9a:e5:f1:20:27:87:42:39:c2:4d: 1d:7f:e8:1e:89:36:0e:18:a5:c7:26:c4:68:69:1b: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0D:DC:EB:7B:AA:2A:13:AF:8B:90:F1:FD:69:03:D3:BB:3E:D3:EB X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:41:8e:e0:9c:a2:c4:34:28:be:f5:0c:50:24:3a:92:ed:32: ba:9a:7c:e6:a0:5a:73:2c:ec:93:5c:66:6d:8b:20:2d:29:0b: 6b:98:5d:41:76:5b:23:c9:c0:a8:57:79:64:75:63:c1:72:52: 4f:d8:7c:84:a6:cb:bd:e7:91:a0:2e:31:a8:22:c6:70:bf:ff: 40:74:a8:f1:92:af:1c:98:6a:f0:5a:2d:8d:6a:6e:5c:a4:67: 18:51:90:f6:a8:99:e6:84:ba:75:fc:76:cd:a2:5b:bf:33:48: d6:bd:a1:07:53:c8:31:18:77:26:0b:85:a2:e8:fb:a3:e0:76: d1:ad:59:7e:c3:18:d3:ef:2f:92:45:c3:e0:f1:4e:91:a0:6a: 6a:d6:63:9d:49:2f:9a:55:df:a6:38:25:59:e2:4b:02:e7:89: ad:87:a2:46:b3:34:f8:fb:3e:f2:9e:e6:ea:40:28:6e:6f:e8: 09:c0:1c:a3:dc:e2:09:93:e1:03:43:b3:eb:76:9d:71:ee:4f: ef:c2:93:5b:4b:52:f9:d1:85:e1:2d:67:5f:1b:c3:ec:f1:1b: 30:c6:ae:13:ef:03:86:5c:56:75:2c:dc:d4:59:9e:b1:64:17: f3:f1:df:b3:cc:60:3d:6c:86:2b:91:58:0b:15:97:f4:c7:f1: 27:c4:e2:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjYwOTA1MDE0NDI1WhcNMjYwOTEyMDE0NDI1WjAYMRYwFAYD VQQDEw02YTliNzNmOS03NjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H076P27tEe44JThRyOIxzlCLbLIYL5OBuOTbWrA3KLQR9KtWWLexm7AyV/Y Z+kPcuZ9rWTjVoswz73/ollvMmBncAZYHdECdyuLZ/SGLRrssXjHysl6q4Ae3kqb Hq76aXIPtMoT5+XBp/qdPVYqyBrrvlEx7xUxxK8XagXv5vDmBszgOe/eQIxbC5zy NOBRBtim5DfTYeEqz1hzMqlgy73iIuAQo6RsW9WSsSYI8CiQ7dUJgdTCxU84n1js blLoeMIiy1ZWvwvWPNexmZHb69n4LaenpXbax4XF+eWPeAKKET+3+Jrl8SAnh0I5 wk0df+geiTYOGKXHJsRoaRuj7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMN3Ot7 qioTr4uQ8f1pA9O7PtPrMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoUGO4JyixDQovvUMUCQ6ku0yupp85qBacyzsk1xmbYsgLSkLa5hdQXZbI8nA qFd5ZHVjwXJST9h8hKbLveeRoC4xqCLGcL//QHSo8ZKvHJhq8FotjWpuXKRnGFGQ 9qiZ5oS6dfx2zaJbvzNI1r2hB1PIMRh3JguFouj7o+B20a1ZfsMY0+8vkkXD4PFO kaBqatZjnUkvmlXfpjglWeJLAueJrYeiRrM0+Ps+8p7m6kAobm/oCcAco9ziCZPh A0Oz63adce5P78KTW0tS+dGF4S1nXxvD7PEbMMauE+8DhlxWdSzc1FmesWQX8/Hf s8xgPWyGK5FYCxWX9MfxJ8TiEA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:48:08 2026 by rpki-client