$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: zC/EmOGdE7XMJRaLnbVkWbxoprJT4Bj2vfhOc+JUr04= Subject key identifier: 2E:3C:06:F3:1F:61:C7:30:30:FA:1F:32:AC:41:64:AE:2E:A1:B1:61 Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 35B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 3590 Signing time: Wed 26 Aug 2026 15:13:10 +0000 Manifest this update: Wed 26 Aug 2026 15:13:09 +0000 Manifest next update: Wed 02 Sep 2026 15:13:09 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: yauqJy8Ucw6JLz3+9KuHFSl0SdVRpy6kjUiSJFIovN0=) 2: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: 2hfGsNVUmbO2vvpF424TRAk1BpXknhQcicom2XdbcDU=) 3: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 7bGtPyBGoN1SwqVRrEUHmbCfJdOGkrb5JuyAmWIVvAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 15:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13749 (0x35b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Aug 26 15:13:09 2026 GMT Not After : Sep 2 15:13:09 2026 GMT Subject: CN=6a8f0285-2ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:8d:22:53:f0:05:2b:67:14:0d:d9:fa:12: 2f:1d:45:69:64:47:18:9a:8d:d3:70:81:34:ba:fe: f4:8e:d7:92:34:9f:5b:70:f9:d8:c3:94:4a:f6:a1: c4:e9:49:e8:9e:44:92:40:42:3e:f6:c9:ed:b0:24: 73:54:5b:6d:22:5d:ee:56:98:91:d5:30:4a:f6:be: c1:04:e2:62:8a:63:db:72:8c:15:87:b3:9d:45:40: 52:89:9e:0e:75:3f:08:7c:2c:49:22:26:44:41:68: be:63:40:92:2a:2e:f9:cf:4b:da:dc:23:a6:d8:58: 80:78:62:4f:2c:98:08:85:19:f6:1e:92:5f:27:85: ea:f2:3c:92:5d:b5:13:7b:9c:7f:95:2e:06:c2:38: 2c:f1:5c:75:f9:57:5d:0b:f6:32:50:d8:6a:3b:4d: 2b:13:60:16:ed:13:97:40:7b:56:d9:a4:3f:85:2b: 7d:32:3b:e4:68:d1:1a:94:4d:0e:2c:3c:66:27:14: ba:dd:3e:3b:60:78:0e:ea:0a:17:62:1e:91:b8:18: 1b:15:49:3e:9a:7b:f8:d3:e9:ea:6b:8e:cb:a9:ec: a9:25:94:58:14:86:1d:22:fd:80:73:5b:57:29:c8: 7f:d2:7b:6d:05:52:98:f4:73:f6:e2:42:4c:6f:f2: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3C:06:F3:1F:61:C7:30:30:FA:1F:32:AC:41:64:AE:2E:A1:B1:61 X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:08:f8:38:82:fe:a9:a9:c6:41:3d:c9:af:3c:e8:7d:03:9b: ea:74:2b:4e:ac:3a:7e:5a:2e:fa:5b:26:78:e3:c2:31:64:76: d5:ff:51:8c:d7:06:6a:86:5e:4a:aa:25:ec:bf:55:63:7a:60: 06:cb:34:ca:e7:b0:43:8a:3d:94:34:51:6b:5d:a4:21:67:69: 21:10:9c:3e:0a:a4:07:ef:e1:2d:27:1c:99:c6:c7:26:19:c9: 43:7f:ed:1b:c2:ad:c2:de:87:92:0c:93:20:b8:8d:c1:83:f1: 5a:c8:44:ff:85:95:70:38:f1:fc:57:1f:dd:65:7a:2a:d4:cb: 5c:80:b1:d0:8c:e3:64:dc:0b:ee:1b:3d:4b:2c:14:50:6d:72: 3f:28:2c:6b:1e:b0:35:ad:8e:d5:b1:6c:cd:e8:ea:0f:c6:81: 9b:8c:f8:12:79:03:c9:fd:d3:d0:30:cf:8d:ac:2e:07:cc:05: 5a:8a:e5:bd:78:c2:ca:23:cf:f5:52:1f:29:e5:99:0f:03:85: 83:5b:64:55:8f:c4:e6:c0:6e:88:9c:86:92:67:f0:c0:07:43: e0:09:98:5e:8d:c8:fa:c1:a4:a8:29:6a:47:4f:fb:45:e1:f2: 7b:07:bc:6b:0a:40:11:a6:b3:a7:0a:80:f8:d1:3f:79:d0:b9: 0a:0d:16:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjYwODI2MTUxMzA5WhcNMjYwOTAyMTUxMzA5WjAYMRYwFAYD VQQDEw02YThmMDI4NS0yZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyt6NIlPwBStnFA3Z+hIvHUVpZEcYmo3TcIE0uv70jteSNJ9bcPnYw5RK9qHE 6UnonkSSQEI+9sntsCRzVFttIl3uVpiR1TBK9r7BBOJiimPbcowVh7OdRUBSiZ4O dT8IfCxJIiZEQWi+Y0CSKi75z0va3COm2FiAeGJPLJgIhRn2HpJfJ4Xq8jySXbUT e5x/lS4Gwjgs8Vx1+VddC/YyUNhqO00rE2AW7ROXQHtW2aQ/hSt9MjvkaNEalE0O LDxmJxS63T47YHgO6goXYh6RuBgbFUk+mnv40+nqa47LqeypJZRYFIYdIv2Ac1tX Kch/0nttBVKY9HP24kJMb/KdyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC48BvMf YccwMPofMqxBZK4uobFhMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbAj4OIL+qanGQT3JrzzofQOb6nQrTqw6flou+lsmeOPCMWR21f9RjNcGaoZe Sqol7L9VY3pgBss0yuewQ4o9lDRRa12kIWdpIRCcPgqkB+/hLSccmcbHJhnJQ3/t G8Ktwt6HkgyTILiNwYPxWshE/4WVcDjx/Fcf3WV6KtTLXICx0IzjZNwL7hs9SywU UG1yPygsax6wNa2O1bFszejqD8aBm4z4EnkDyf3T0DDPjawuB8wFWorlvXjCyiPP 9VIfKeWZDwOFg1tkVY/E5sBuiJyGkmfwwAdD4AmYXo3I+sGkqClqR0/7ReHyewe8 awpAEaazpwqA+NE/edC5Cg0WDw== -----END CERTIFICATE-----Generated at Thu Aug 27 07:56:48 2026 by rpki-client