$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: 3SdYXoMr+MZVSP5O1CoPktxPpY3NmvtlvvEtp4kzgRs= Subject key identifier: B5:EB:4E:5B:AD:D3:44:BB:13:E3:53:27:CB:42:DC:0A:1B:C1:33:F7 Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: D1 Signing time: Tue 25 Aug 2026 06:50:09 +0000 Manifest this update: Tue 25 Aug 2026 06:50:08 +0000 Manifest next update: Tue 01 Sep 2026 06:50:08 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: twpAAwBiDtEkQKsLmo7HBwlTyFGk8sSM0e/iGuKRVWs=) 2: C8E215DA72BD11F1A5B8119C6EA30FBC.roa (hash: 42F8H8tLM7SW8VbxSmhfljA+OlaX9YJW6w/yvaOHuEM=) 3: 48C2333271D011F18649332165A30FBC.roa (hash: LDP5Esly8VYRBXjaigIiSwQbm+Rq9+J2C6Fns5Nz1AU=) 4: 7E782718940B11F1AE7863F93E11F970.roa (hash: XTTBwDL+3ZX31Mb6Vk3dZi/vUMZFs0rfR5N64dJPp9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 06:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Aug 25 06:50:08 2026 GMT Not After : Sep 1 06:50:08 2026 GMT Subject: CN=6a8d3b21-0b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:60:d4:41:fb:56:c2:4a:00:49:cb:40:98: 7f:ba:4e:94:e2:42:1d:5c:a9:81:e0:78:29:d0:b0: a4:20:09:96:dc:0a:d1:5e:23:96:65:da:4a:bd:23: d0:15:27:55:80:44:af:4b:fa:6b:af:a8:6f:e0:e6: fe:e2:c8:af:cb:af:25:27:8a:16:a1:3a:19:ef:df: e9:12:f3:0a:59:7a:29:1f:28:6f:48:4e:ea:3c:95: 9c:6e:e1:7e:d7:3f:e9:97:1e:38:0a:07:f4:5f:0f: da:93:83:15:83:f8:ee:a0:48:ff:b9:28:e8:ac:d1: 72:bd:60:0a:57:65:9b:c2:73:3c:66:40:29:e5:2f: c9:7f:8a:ee:59:54:ff:32:31:d9:51:98:82:46:57: 72:94:af:a8:a0:27:14:9d:ef:d7:1b:68:d2:cf:5f: eb:c8:d1:08:49:f3:b3:d2:a1:d8:fb:4b:b3:58:60: ad:79:4c:0a:ca:a6:85:e6:78:65:e3:9d:9d:28:42: ba:c9:95:70:72:1b:d3:6e:a9:4b:a6:20:41:16:1d: 07:65:7d:aa:01:16:a3:1b:a8:30:db:4d:02:a3:c6: f7:67:9d:b4:9b:3c:f3:1a:ab:7a:33:04:6c:10:93: ed:d3:c6:1a:84:04:d4:35:8b:24:89:d7:98:34:c5: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EB:4E:5B:AD:D3:44:BB:13:E3:53:27:CB:42:DC:0A:1B:C1:33:F7 X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:09:f7:a2:00:17:18:82:fd:e4:d9:54:a4:d0:24:9f:14:a3: e1:79:d4:43:49:c4:b6:24:1a:c1:a3:09:9f:c4:9b:a2:8a:41: f7:bf:e4:4a:2a:3f:b3:46:97:61:1e:80:2e:b1:da:97:b6:06: a0:8f:c7:19:ce:b3:e0:c4:a2:71:b2:6d:dd:9e:ec:43:ed:4a: 24:60:55:10:cd:eb:8e:c3:22:9d:fa:04:39:3b:9c:a2:54:a9: 94:5a:cf:92:dc:12:d8:89:55:b5:6a:3d:d4:c4:52:42:47:81: 88:37:b8:7b:d7:84:95:6d:45:13:34:64:21:23:74:7a:d2:fd: 50:1a:30:98:c9:f8:93:d7:c4:68:72:17:ed:17:d7:c2:9c:68: 20:42:0c:9e:2e:07:dc:bb:59:41:25:37:50:bd:15:9e:d0:3f: b3:0e:a7:99:f5:c6:0e:c1:e0:ca:92:38:7e:4e:ff:75:3e:41: a0:2b:59:6d:a9:db:5f:69:65:ea:a7:a8:fa:19:ba:3f:60:0b: f7:45:af:db:71:af:b4:56:4c:b8:b6:53:d2:57:49:18:a0:49: 30:75:d2:f6:80:df:6d:4c:26:26:d5:b8:b2:58:a6:81:10:25: 46:a9:93:de:9e:5b:48:f9:73:a5:5e:0c:77:7e:64:c0:d7:4f: 11:29:e9:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwRTAxMTAvBgNVBAUTKDg5NzA3N0I3MUYyQzVBRURERTZDMURENDk1NDdEQ0M5 OTUyQ0RBQkUwHhcNMjYwODI1MDY1MDA4WhcNMjYwOTAxMDY1MDA4WjAYMRYwFAYD VQQDEw02YThkM2IyMS0wYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLdg1EH7VsJKAEnLQJh/uk6U4kIdXKmB4Hgp0LCkIAmW3ArRXiOWZdpKvSPQ FSdVgESvS/prr6hv4Ob+4sivy68lJ4oWoToZ79/pEvMKWXopHyhvSE7qPJWcbuF+ 1z/plx44Cgf0Xw/ak4MVg/juoEj/uSjorNFyvWAKV2WbwnM8ZkAp5S/Jf4ruWVT/ MjHZUZiCRldylK+ooCcUne/XG2jSz1/ryNEISfOz0qHY+0uzWGCteUwKyqaF5nhl 452dKEK6yZVwchvTbqlLpiBBFh0HZX2qARajG6gw200Co8b3Z520mzzzGqt6MwRs EJPt08YahATUNYskideYNMWrPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXrTlut 00S7E+NTJ8tC3AobwTP3MB8GA1UdIwQYMBaAFIlwd7cfLFrt3mwd1JVH3MmVLNq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDBFMC8zRkJCNUUwNDdC NTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1M2ViQjNVbFVmY3laVXMy cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDBFMC8zRkJCNUUwNDdCNTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1 M2ViQjNVbFVmY3laVXMycjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVQn3ogAXGIL95NlUpNAknxSj4XnUQ0nEtiQawaMJn8SboopB97/kSio/s0aX YR6ALrHal7YGoI/HGc6z4MSicbJt3Z7sQ+1KJGBVEM3rjsMinfoEOTucolSplFrP ktwS2IlVtWo91MRSQkeBiDe4e9eElW1FEzRkISN0etL9UBowmMn4k9fEaHIX7RfX wpxoIEIMni4H3LtZQSU3UL0VntA/sw6nmfXGDsHgypI4fk7/dT5BoCtZbanbX2ll 6qeo+hm6P2AL90Wv23GvtFZMuLZT0ldJGKBJMHXS9oDfbUwmJtW4slimgRAlRqmT 3p5bSPlzpV4Md35kwNdPESnp8Q== -----END CERTIFICATE-----Generated at Wed Aug 26 21:15:12 2026 by rpki-client