$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft File: 38I-PZBdDoNoEhlZbQgimmlPrxM.mft (raw, json) Hash identifier: fEmir7eyODf5wWvL/LFfjQsFgKXDYwHTwKoAMyou9Xg= Subject key identifier: 74:78:5A:89:D4:24:2B:0F:80:F0:E9:21:17:E5:19:79:65:AC:11:04 Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0F14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft Manifest number: 0EF3 Signing time: Tue 18 Aug 2026 17:52:12 +0000 Manifest this update: Tue 18 Aug 2026 17:52:11 +0000 Manifest next update: Tue 25 Aug 2026 17:52:11 +0000 Files and hashes: 1: 38I-PZBdDoNoEhlZbQgimmlPrxM.crl (hash: EsD8U5YxC0nVx06xWKcn3SSdXosRVay+Pf4tjGxxV/I=) 2: AC641C88B96B11ECB44AC533C4F9AE02.roa (hash: x2dbHHpd6lHu6U/D+Z5h6UrLSps4ACkU8JTV2sRYFDo=) 3: AB52C51AB96B11ECB44AC533C4F9AE02.roa (hash: 9DZO4gtEwqGm1N7r2iLEutY8W3IqMNDQEag8fkVAF7Q=) 4: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (hash: 8ERTDv7Mz23v2Rbdakt8Gt3XJ8tL5M1Uk1kQf/u/YMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3860 (0xf14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: Aug 18 17:52:11 2026 GMT Not After : Aug 25 17:52:11 2026 GMT Subject: CN=6a849bcc-b2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4a:2e:71:bf:6b:ce:4f:c6:ce:22:9d:92:46: 8b:21:41:69:7f:1a:a9:8b:23:55:7d:40:e8:7c:60: 55:28:e0:6d:6c:ee:18:1d:03:62:5b:1b:79:4d:06: 3c:46:4d:2c:53:73:15:c2:3c:cd:5e:30:95:9b:94: 99:80:1d:af:6c:55:71:8e:4b:0d:32:0c:cc:e0:e7: e7:92:01:b4:e9:8f:8a:74:92:8d:3c:fa:bf:75:73: b2:72:7f:6d:9b:5e:c0:67:13:ed:a1:53:b4:dd:67: 5f:76:92:5c:dd:cd:4e:d8:41:18:40:db:57:31:3b: 49:40:a6:e0:d8:46:7d:e7:38:a8:c7:e0:dc:b0:9a: b1:f9:c0:cc:6b:6c:9b:10:c5:4c:ff:ea:f9:83:c3: 48:f6:0f:a0:6e:ce:62:cb:f2:54:88:49:84:67:08: 7f:55:1d:f0:00:ce:e8:4e:af:00:45:30:1c:1b:f8: 7d:2f:7c:3b:8b:90:10:de:8d:2d:f4:9c:30:a3:a3: 74:53:bb:79:c0:ae:5d:30:3e:17:ef:4b:32:4d:74: 9f:96:db:04:48:9b:95:6c:83:41:fe:26:28:19:41: 10:f9:a8:1c:cf:bc:e0:f5:73:23:b3:68:9a:d9:f3: 18:80:f2:8c:fc:94:5a:a4:8c:89:44:1f:c7:d4:0b: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:78:5A:89:D4:24:2B:0F:80:F0:E9:21:17:E5:19:79:65:AC:11:04 X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:97:08:e5:1f:60:37:8e:3f:2c:bf:be:77:69:da:81:ef:ee: dd:5f:5b:26:8a:19:07:99:65:4e:0c:0f:8b:1b:8d:04:fa:59: 15:6a:55:32:55:ea:b1:3f:9b:dd:ca:76:fc:42:63:fd:16:69: 76:3d:b3:3d:b4:1e:6f:70:b9:70:c8:19:7b:b0:92:87:cd:20: a7:93:47:e9:46:0e:eb:d5:be:1a:93:66:2f:a2:e6:72:ab:5c: 6c:3b:be:54:82:ce:ca:d4:a6:32:66:2b:13:65:1e:8a:ee:a1: fa:eb:71:64:e0:87:f5:05:f5:66:78:09:2d:f5:28:a0:f6:46: 45:7b:e9:78:86:18:e5:e4:0f:aa:d5:97:08:81:47:a4:2f:09: 56:51:81:d3:ce:c0:56:84:6b:07:5e:0d:10:54:05:2d:f7:28: b1:25:4f:5d:4d:eb:73:48:c1:bc:f7:e9:7b:30:44:32:eb:96: 4f:b0:10:ad:4c:2f:15:f5:78:7f:22:23:60:03:b5:2a:9a:5d: d6:62:7c:b0:e6:f8:12:b9:69:d1:2e:2c:a3:aa:c9:a7:60:86: 8c:0a:be:34:2f:2c:46:70:8d:b3:68:51:35:b8:83:7d:be:3a: 1a:c9:c1:74:0f:bb:c0:1e:e1:97:c4:f5:41:e6:2c:59:9b:58: 2b:ca:6f:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjYwODE4MTc1MjExWhcNMjYwODI1MTc1MjExWjAYMRYwFAYD VQQDEw02YTg0OWJjYy1iMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60oucb9rzk/GziKdkkaLIUFpfxqpiyNVfUDofGBVKOBtbO4YHQNiWxt5TQY8 Rk0sU3MVwjzNXjCVm5SZgB2vbFVxjksNMgzM4OfnkgG06Y+KdJKNPPq/dXOycn9t m17AZxPtoVO03WdfdpJc3c1O2EEYQNtXMTtJQKbg2EZ95ziox+DcsJqx+cDMa2yb EMVM/+r5g8NI9g+gbs5iy/JUiEmEZwh/VR3wAM7oTq8ARTAcG/h9L3w7i5AQ3o0t 9Jwwo6N0U7t5wK5dMD4X70syTXSfltsESJuVbINB/iYoGUEQ+agcz7zg9XMjs2ia 2fMYgPKM/JRapIyJRB/H1AsO5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHR4WonU JCsPgPDpIRflGXllrBEEMB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QwNC83QTE3RkU4RUFERDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERv Tm9FaGxaYlFnaW1tbFByeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdpcI5R9gN44/LL++d2nage/u3V9bJooZB5llTgwPixuNBPpZFWpVMlXqsT+b 3cp2/EJj/RZpdj2zPbQeb3C5cMgZe7CSh80gp5NH6UYO69W+GpNmL6LmcqtcbDu+ VILOytSmMmYrE2Ueiu6h+utxZOCH9QX1ZngJLfUooPZGRXvpeIYY5eQPqtWXCIFH pC8JVlGB087AVoRrB14NEFQFLfcosSVPXU3rc0jBvPfpezBEMuuWT7AQrUwvFfV4 fyIjYAO1Kppd1mJ8sOb4Erlp0S4so6rJp2CGjAq+NC8sRnCNs2hRNbiDfb46GsnB dA+7wB7hl8T1QeYsWZtYK8pvOw== -----END CERTIFICATE-----Generated at Wed Aug 19 15:16:35 2026 by rpki-client