$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json) Hash identifier: FGCBepW6kOCvtcu4/LFXB+kitc7E44gd3I0TQTTepbg= Subject key identifier: 4A:DE:E0:30:A0:EF:CD:36:55:13:7D:8A:49:EC:8F:16:8C:0B:99:EE Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 10BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft Manifest number: 1074 Signing time: Fri 04 Sep 2026 17:20:28 +0000 Manifest this update: Fri 04 Sep 2026 17:20:28 +0000 Manifest next update: Fri 11 Sep 2026 17:20:28 +0000 Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: LdbQAO8eIwIEK8mDjjPT56jDBJPh9wu5e0FF+56Jq/E=) 2: B3876B1821C911EB991D562EC4F9AE02.roa (hash: PAJXVnplsOIegEPXMbATwr923PfH+sXu4QP6bOY+9aU=) 3: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: m1jd0Q2D9k3+2i/d4GmRzebyVctCB9sAwMGAQxkAF/8=) 4: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: j42PYjWNb/mnyEI0E6+iq6JxrFxqeSi6M5a2jMZwTdM=) 5: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: Ep5ULjpLJ97bV5VifiZFQEn0w2yErIZH+uUxSWGKvrg=) 6: B490CD0621C911EB991D562EC4F9AE02.roa (hash: WR/88pfaCczDigHpfgd4GYy1P6qmyhWsOy4WabOWrlU=) 7: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: bx80odAXkY0MYIUdPq3Se5Z99i5ov0hqTySdt08ambI=) 8: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: RfbqC8GS1hHzeb5ag3voBDbpoO632YWZC1e96BmW8tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4286 (0x10be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: Sep 4 17:20:28 2026 GMT Not After : Sep 11 17:20:28 2026 GMT Subject: CN=6a9afddc-4cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cb:b1:73:dd:ab:4c:b2:97:93:31:a2:a4:74: 1a:41:70:8f:68:a6:a6:d6:3c:bd:1f:19:f0:f4:a8: ee:8c:e6:25:11:b7:91:96:86:05:9a:d1:1b:49:ab: 65:74:47:ad:73:c9:56:36:ae:29:71:bd:e6:37:30: 71:b1:75:ab:58:5d:e8:90:a7:fe:e5:b3:44:ca:e3: 5d:4a:79:a0:17:f6:57:36:c6:b9:34:64:c3:77:a1: 02:6b:ec:a3:bb:d3:b7:56:09:de:a3:95:30:07:19: f4:36:c0:3a:6f:70:63:2c:7e:8d:c5:e1:5b:bf:ab: ad:7b:8b:d0:89:72:8a:6b:ff:42:94:14:4f:54:05: 37:f0:bd:75:3a:dc:41:1f:cb:c7:b2:24:2b:c3:65: 8a:28:17:11:e6:df:d2:fb:e8:d8:27:33:a5:56:4c: 08:33:a8:36:45:1e:f4:9f:12:53:f9:4b:0e:7a:17: 7b:b8:a1:6b:2b:4f:71:9b:86:e7:20:01:29:c2:d5: de:d4:c7:73:22:b2:5e:cc:0c:85:0f:98:7c:ed:07: 9e:17:b3:dd:72:2a:41:c1:32:6b:23:b2:b3:88:ce: 22:f2:94:99:d8:4a:ee:c4:2b:7d:b3:3b:cb:b3:34: 57:20:17:f2:d8:7a:45:c9:5b:69:00:e2:86:83:45: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DE:E0:30:A0:EF:CD:36:55:13:7D:8A:49:EC:8F:16:8C:0B:99:EE X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a4:cf:54:ac:76:43:ad:85:48:1d:48:60:87:da:47:a6:20: c8:8c:8d:24:40:e1:4d:11:cf:56:6b:fc:62:6b:05:5e:51:16: df:0d:71:0f:70:ea:19:e3:95:07:76:6a:b7:67:9a:1f:d6:28: 81:4a:66:55:b8:20:dd:c4:9a:a9:b9:2c:ff:bc:47:cd:a3:1c: b6:e2:14:be:4d:0b:05:da:69:76:91:45:87:33:61:2d:9c:67: 74:e7:b2:3d:ad:b4:2b:8b:a4:d2:82:2f:71:f5:bc:60:8a:19: 16:b2:a2:b5:ff:ab:fd:ae:9a:3a:81:35:31:00:f5:97:db:a0: fd:a9:a7:70:c3:04:8c:c2:b3:5e:06:28:7c:ef:e4:d2:c9:55: c5:ea:e7:fe:ee:18:68:e1:52:81:28:ef:96:f8:47:c6:3b:3b: 75:da:cf:ea:54:6c:98:79:32:47:c8:7b:e4:34:50:70:e7:32: 36:bb:81:0e:3b:a0:e5:43:dd:d1:1d:46:e3:6a:83:6a:4e:44: bb:2d:d5:f0:85:7f:44:2f:e0:44:c0:ac:71:7c:7d:8e:89:e7: ef:18:d8:aa:47:9b:ec:82:a1:4e:31:f7:65:15:88:a1:65:d5: 04:88:cc:79:b0:32:bf:a4:1d:0a:31:4c:0c:1f:24:2c:1f:61: 71:2b:f8:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjYwOTA0MTcyMDI4WhcNMjYwOTExMTcyMDI4WjAYMRYwFAYD VQQDEw02YTlhZmRkYy00Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Muxc92rTLKXkzGipHQaQXCPaKam1jy9Hxnw9KjujOYlEbeRloYFmtEbSatl dEetc8lWNq4pcb3mNzBxsXWrWF3okKf+5bNEyuNdSnmgF/ZXNsa5NGTDd6ECa+yj u9O3Vgneo5UwBxn0NsA6b3BjLH6NxeFbv6ute4vQiXKKa/9ClBRPVAU38L11OtxB H8vHsiQrw2WKKBcR5t/S++jYJzOlVkwIM6g2RR70nxJT+UsOehd7uKFrK09xm4bn IAEpwtXe1MdzIrJezAyFD5h87QeeF7PdcipBwTJrI7KziM4i8pSZ2EruxCt9szvL szRXIBfy2HpFyVtpAOKGg0VcpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEre4DCg 7802VRN9iknsjxaMC5nuMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0YwMi9DQ0FCNTc1MDYzRjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JB WHBsMVJiQ05ONU52LXNSbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUqTPVKx2Q62FSB1IYIfaR6YgyIyNJEDhTRHPVmv8YmsFXlEW3w1xD3DqGeOV B3Zqt2eaH9YogUpmVbgg3cSaqbks/7xHzaMctuIUvk0LBdppdpFFhzNhLZxndOey Pa20K4uk0oIvcfW8YIoZFrKitf+r/a6aOoE1MQD1l9ug/amncMMEjMKzXgYofO/k 0slVxern/u4YaOFSgSjvlvhHxjs7ddrP6lRsmHkyR8h75DRQcOcyNruBDjug5UPd 0R1G42qDak5Euy3V8IV/RC/gRMCscXx9jonn7xjYqkeb7IKhTjH3ZRWIoWXVBIjM ebAyv6QdCjFMDB8kLB9hcSv4RQ== -----END CERTIFICATE-----Generated at Sat Sep 5 08:06:02 2026 by rpki-client