$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: QvSRs9XzJIYUolKuizbaRUTKqdtnMFq5JBX0xx8mEic= Subject key identifier: 49:47:9A:EC:FD:C5:18:D1:49:BE:2E:10:93:63:BD:8A:A1:3D:08:07 Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 0160 Signing time: Thu 03 Sep 2026 05:22:35 +0000 Manifest this update: Thu 03 Sep 2026 05:22:34 +0000 Manifest next update: Thu 10 Sep 2026 05:22:34 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: 2c0jr0B9B3ClXAD6/q3crUu/wzxdvHCKBp+q/hzacFA=) 2: E8E690809A2811F1AC58E4345911F970.roa (hash: m9m0P1oed7W/3ZAbI8jvAxoQb72mghkUJhemhrbvgNI=) 3: 1E388DB49A2511F1832A4CB45711F970.roa (hash: TiT9lGln0Eh4KjjUpQfi3tArVwegKeJ1yIafSY4m8LM=) 4: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 05:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Sep 3 05:22:34 2026 GMT Not After : Sep 10 05:22:34 2026 GMT Subject: CN=6a99041b-eb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c9:ca:91:05:3d:9c:ff:74:85:6f:e0:38:79: 20:88:3c:38:22:fe:56:10:7c:80:fc:c3:c7:11:7d: ea:51:e2:a7:7d:42:78:64:f7:b8:bd:9b:24:42:eb: 8a:d2:e8:d5:32:fa:68:d1:23:5c:ed:15:f2:fd:8e: b4:10:3e:ca:4a:17:77:53:a5:e9:26:79:22:6c:8d: 6d:83:77:fe:0a:b0:86:bd:8a:bc:15:80:99:4f:47: 48:a6:e1:69:1d:fc:72:66:c6:3d:6b:9b:2e:d4:aa: 16:b4:67:0d:d5:48:39:93:5b:92:6c:9a:4c:f0:75: 98:c0:7e:31:46:07:01:e1:fb:9a:f5:11:79:f5:67: 32:64:e2:60:e5:ba:de:30:2b:0e:3b:0e:38:76:27: 75:d8:22:50:83:ab:f1:2e:57:36:4d:d7:8b:42:3a: 6e:e5:08:5f:02:7e:93:48:6f:47:a1:89:34:51:e8: 46:6d:e5:51:a5:85:3a:e3:e1:14:42:3d:fc:6c:1b: 94:2e:5d:49:14:18:20:80:7e:9b:2d:61:39:46:25: 3e:59:48:d2:94:2c:82:91:bf:66:3c:d9:e8:5c:ea: 72:78:81:c8:2b:53:39:6f:2c:1c:d1:eb:e3:77:03: 2d:6d:f3:02:69:bb:15:3c:a1:4d:34:03:34:e3:a8: 0d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:47:9A:EC:FD:C5:18:D1:49:BE:2E:10:93:63:BD:8A:A1:3D:08:07 X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b5:27:8b:7e:ac:56:2f:fa:da:2e:e0:e1:33:3d:a6:05:c0: 11:6a:05:68:49:79:f4:31:af:16:87:70:1c:7f:e2:5e:da:bd: 1b:db:4b:6f:91:47:97:36:4c:5d:32:4d:62:87:3e:9e:02:d4: 83:49:ca:f8:de:37:06:cd:fd:a7:f9:09:40:2f:52:f8:60:4b: 4f:e8:b0:9e:9f:a5:0e:f9:20:a2:da:84:c5:65:c6:55:84:30: b9:93:64:71:0f:7f:09:18:d9:f1:4a:5c:cb:27:af:39:4f:55: 71:37:92:11:52:17:49:81:b2:bf:54:34:1d:37:75:6f:f0:91: e1:c7:79:4f:80:4b:d1:b0:b8:a5:49:1b:bd:19:a7:c7:63:a5: 93:40:ba:93:0b:9b:04:23:7a:3f:27:e0:bf:e8:c2:46:51:91: 52:a7:c8:e4:98:13:d8:3c:46:c9:bd:5e:1c:a5:b1:ec:29:fd: 45:a1:3d:9a:da:1e:12:fa:28:d2:38:95:5a:b3:04:46:5f:de: fe:aa:8f:a4:25:97:51:81:ff:69:55:25:4b:24:0f:01:57:9a: 0e:e0:7f:a5:6c:f3:c7:8d:e7:dc:fb:2c:ad:e9:cc:b4:40:93: b6:4a:e5:df:f0:07:c2:b5:ad:d4:27:40:9b:63:17:68:be:aa: 10:74:ef:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2 NjNEMkIzNEUwHhcNMjYwOTAzMDUyMjM0WhcNMjYwOTEwMDUyMjM0WjAYMRYwFAYD VQQDEw02YTk5MDQxYi1lYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMnKkQU9nP90hW/gOHkgiDw4Iv5WEHyA/MPHEX3qUeKnfUJ4ZPe4vZskQuuK 0ujVMvpo0SNc7RXy/Y60ED7KShd3U6XpJnkibI1tg3f+CrCGvYq8FYCZT0dIpuFp HfxyZsY9a5su1KoWtGcN1Ug5k1uSbJpM8HWYwH4xRgcB4fua9RF59WcyZOJg5bre MCsOOw44did12CJQg6vxLlc2TdeLQjpu5QhfAn6TSG9HoYk0UehGbeVRpYU64+EU Qj38bBuULl1JFBgggH6bLWE5RiU+WUjSlCyCkb9mPNnoXOpyeIHIK1M5bywc0evj dwMtbfMCabsVPKFNNAM046gN2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElHmuz9 xRjRSb4uEJNjvYqhPQgHMB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo V1RSSEY1VFlzSEJtUFNzMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATrUni36sVi/62i7g4TM9pgXAEWoFaEl59DGvFodwHH/iXtq9G9tLb5FHlzZM XTJNYoc+ngLUg0nK+N43Bs39p/kJQC9S+GBLT+iwnp+lDvkgotqExWXGVYQwuZNk cQ9/CRjZ8UpcyyevOU9VcTeSEVIXSYGyv1Q0HTd1b/CR4cd5T4BL0bC4pUkbvRmn x2Olk0C6kwubBCN6Pyfgv+jCRlGRUqfI5JgT2DxGyb1eHKWx7Cn9RaE9mtoeEvoo 0jiVWrMERl/e/qqPpCWXUYH/aVUlSyQPAVeaDuB/pWzzx43n3PssrenMtECTtkrl 3/AHwrWt1CdAm2MXaL6qEHTvVg== -----END CERTIFICATE-----Generated at Sat Sep 5 06:44:48 2026 by rpki-client