$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: Wlcuj5HXuh6ld0qGOx4r4y5x4SBuJJNyvjD0mH4hZZs= Subject key identifier: F7:EA:43:31:1B:3C:BE:AE:38:93:5B:5A:FB:CC:4A:B6:9D:84:28:A3 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 05F0 Signing time: Mon 24 Aug 2026 22:59:27 +0000 Manifest this update: Mon 24 Aug 2026 22:59:26 +0000 Manifest next update: Mon 31 Aug 2026 22:59:26 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: iUE6YhlsWdquwUs7JoWAFmid8HZkfzOog7Sl6prIq+E=) 2: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ=) 3: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: 1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=) 4: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: AgzdJ8YeczC0jH58Lt1PJBql93I4ssj/fkdCRiuIJTQ=) 5: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9T7eAkjvrOk7zwMcNgqYoD07VX3V7BOca4enSrOlqyo=) 6: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: p0QtasiXfN8/dE9L47jUX4sIVuhY7a3tPfYaZVlyQMU=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 22:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Aug 24 22:59:26 2026 GMT Not After : Aug 31 22:59:26 2026 GMT Subject: CN=6a8ccccf-d0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:03:e0:ba:6b:ae:c4:20:57:9c:91:6c:f8: 82:80:8f:04:b9:e3:5d:36:5f:49:af:23:7c:81:dc: d9:67:d7:95:04:fa:1b:8f:a3:61:5e:50:02:e5:50: 1c:bb:45:44:56:ae:fc:88:bb:56:f2:e5:08:51:37: 0c:a7:c5:c5:c6:d6:d0:d8:e7:7b:c9:b0:4f:c5:b6: f5:ea:69:e9:a6:a6:68:2c:d2:fc:30:36:38:62:da: fd:c8:71:46:c5:af:49:a6:d1:09:0d:d3:38:2b:c9: 52:95:56:7f:c6:0d:e1:0c:08:4d:28:0e:c7:fb:c5: 4e:8e:97:24:1f:94:19:2c:df:c2:44:a0:d8:62:57: ad:9f:50:b5:42:af:4c:f0:fb:fa:6e:47:f0:32:70: 69:2d:0c:e6:7c:4a:e0:1c:1c:af:d4:ad:5f:29:23: 56:ae:d9:47:9e:95:f3:c6:8f:4e:65:df:ec:07:27: f6:29:0d:42:f9:5e:60:99:9c:bd:02:49:4a:74:78: 9d:68:38:1a:94:67:8e:bf:74:62:c0:1c:d6:3b:44: 84:24:dd:f9:43:85:da:23:f4:1a:7f:5f:98:ba:4a: 42:db:67:c8:f8:be:9b:0e:61:54:5c:5b:3c:81:83: a5:14:cd:e5:66:ee:32:f8:b9:af:2a:54:cb:7a:c0: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EA:43:31:1B:3C:BE:AE:38:93:5B:5A:FB:CC:4A:B6:9D:84:28:A3 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:48:c7:cd:3e:54:6f:48:26:6d:87:5c:4b:5d:bb:22:4f:c6: db:a9:e8:df:5f:f3:fa:95:b4:8d:30:67:79:6b:20:e9:02:ba: a9:52:a5:ba:22:28:85:ac:c3:15:b6:02:6e:39:c9:ff:c3:e6: 57:b4:29:db:1a:01:bf:5c:1a:0c:00:d6:f0:7d:27:e5:ed:f2: 53:bf:14:54:df:db:81:d8:9d:37:0c:70:39:04:cd:5e:db:83: 3d:aa:d4:63:59:41:ac:63:27:79:83:d3:db:c8:21:18:82:59: 22:3a:a9:d7:8c:46:2c:6b:87:80:83:b5:37:e1:e3:93:d7:98: 9c:b6:8d:b9:75:50:47:ce:bd:00:af:ca:0a:e2:2b:ea:4c:88: 15:6f:84:8d:ff:a2:55:7d:70:8e:fd:87:98:c9:b3:84:1c:72: 3e:75:84:4e:09:66:23:41:98:20:a4:44:7f:6d:fc:6f:04:5c: a2:02:d9:ef:16:01:6f:05:d5:f7:75:c7:7d:11:64:69:ba:85: 9c:8c:5a:f9:18:ef:1a:9b:62:38:a2:bc:53:f7:95:1b:cc:ac: 09:8b:94:48:77:9a:04:f8:b0:01:45:d4:f4:33:6d:61:41:75: 67:c7:60:03:b5:f2:e7:a7:29:30:b0:94:0c:fd:9c:a0:1e:16: 82:c8:3e:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjYwODI0MjI1OTI2WhcNMjYwODMxMjI1OTI2WjAYMRYwFAYD VQQDEw02YThjY2NjZi1kMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzu0D4LprrsQgV5yRbPiCgI8EueNdNl9JryN8gdzZZ9eVBPobj6NhXlAC5VAc u0VEVq78iLtW8uUIUTcMp8XFxtbQ2Od7ybBPxbb16mnppqZoLNL8MDY4Ytr9yHFG xa9JptEJDdM4K8lSlVZ/xg3hDAhNKA7H+8VOjpckH5QZLN/CRKDYYletn1C1Qq9M 8Pv6bkfwMnBpLQzmfErgHByv1K1fKSNWrtlHnpXzxo9OZd/sByf2KQ1C+V5gmZy9 AklKdHidaDgalGeOv3RiwBzWO0SEJN35Q4XaI/Qaf1+YukpC22fI+L6bDmFUXFs8 gYOlFM3lZu4y+LmvKlTLesBEcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfqQzEb PL6uOJNbWvvMSradhCijMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnkjHzT5Ub0gmbYdcS127Ik/G26no31/z+pW0jTBneWsg6QK6qVKluiIohazD FbYCbjnJ/8PmV7Qp2xoBv1waDADW8H0n5e3yU78UVN/bgdidNwxwOQTNXtuDParU Y1lBrGMneYPT28ghGIJZIjqp14xGLGuHgIO1N+Hjk9eYnLaNuXVQR869AK/KCuIr 6kyIFW+Ejf+iVX1wjv2HmMmzhBxyPnWETglmI0GYIKREf238bwRcogLZ7xYBbwXV 93XHfRFkabqFnIxa+RjvGptiOKK8U/eVG8ysCYuUSHeaBPiwAUXU9DNtYUF1Z8dg A7Xy56cpMLCUDP2coB4Wgsg+tQ== -----END CERTIFICATE-----Generated at Wed Aug 26 16:06:46 2026 by rpki-client