$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft File: MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft (raw, json) Hash identifier: /xV7EwiSJHKwIxtArPHuqTK0Q5JKL7PgSSW1FwMnCO4= Subject key identifier: D8:54:92:55:64:DB:79:81:56:B2:D6:5F:DA:15:ED:F9:BC:5B:8A:4B Authority key identifier: 31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 Certificate issuer: /CN=A91FF21A/serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft Manifest number: 1B Signing time: Tue 25 Aug 2026 08:59:56 +0000 Manifest this update: Tue 25 Aug 2026 08:59:56 +0000 Manifest next update: Tue 01 Sep 2026 08:59:56 +0000 Files and hashes: 1: MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl (hash: LXGw3uW3cWQiLcY4Mb+a23ybGcafG4RVh1I7sl+4StE=) 2: 5C878D268DAB11F189A852AF4511F970.roa (hash: I/jr3tgpLyEseQdfcMV7kCau5f4YQ1NsnEo0xyEHwzc=) 3: 5D1D397A8DAB11F189A852AF4511F970.roa (hash: 8SHLMBij6okm9+8J31gc2FeJFmgTdVNdbizMOipyo0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF21A, serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Validity Not Before: Aug 25 08:59:56 2026 GMT Not After : Sep 1 08:59:56 2026 GMT Subject: CN=6a8d598c-3811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6a:16:27:ea:76:ab:ab:8e:4f:7e:9c:b2:59: c9:bc:3a:ce:c6:06:57:e0:93:6b:25:43:fd:1b:93: 96:61:00:66:43:24:eb:37:5a:9b:76:6c:d6:9c:74: 92:14:c8:1a:97:f4:4f:e0:02:ce:61:c3:4d:31:32: b4:0c:8c:24:00:0c:3c:bc:8f:81:2b:e2:4f:70:b1: 28:b5:44:83:29:21:8d:d2:fe:ad:47:7c:ba:da:bb: 27:98:87:54:b4:f7:b6:af:97:55:8e:16:8b:1d:88: 0a:1d:1f:bb:6b:68:4c:15:38:d8:de:87:60:4b:ca: 96:eb:fe:b3:5c:3a:2d:6e:ce:af:a6:51:75:d5:78: 53:97:56:ce:1c:94:40:68:b9:fc:44:e5:fa:5a:ec: 59:36:51:43:bf:5c:c9:1c:bc:c1:5d:16:00:ff:ec: a8:fa:4d:14:86:64:fb:91:8c:54:cb:56:63:74:3e: 37:63:7a:5a:26:d4:06:66:35:9d:24:1a:15:e5:9a: c0:0d:13:ca:49:c1:d2:b5:12:11:f2:f3:c6:3c:b1: 55:34:b4:a8:28:f6:4c:e4:e5:c2:f4:49:ab:b4:80: 6d:6e:82:22:37:5e:9f:bc:3c:b7:4d:a3:8e:94:74: f8:0c:ba:c6:f2:b3:69:3a:09:96:7f:de:e2:32:65: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:54:92:55:64:DB:79:81:56:B2:D6:5F:DA:15:ED:F9:BC:5B:8A:4B X509v3 Authority Key Identifier: keyid:31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:eb:6b:73:96:6c:c4:a9:d0:5e:6e:cb:7e:13:58:5a:d8:e7: 54:31:bb:ed:e6:1d:09:8f:1d:dd:9e:eb:41:71:3b:be:1b:8d: f1:da:7c:16:6c:35:0f:ec:6a:dd:2e:cc:88:bf:40:c7:41:a4: c8:a7:95:21:2e:04:b8:01:a9:e8:15:79:69:52:bc:28:5e:33: db:4c:6c:97:4a:eb:39:73:29:72:ea:25:f5:07:6c:cb:0a:3c: e8:4c:80:85:4c:a8:14:04:ae:01:ab:7d:24:12:45:85:22:48: 84:07:96:16:46:9e:54:3f:0a:78:05:32:72:9d:69:af:b2:81: f7:c6:73:bb:1f:b6:9d:95:a4:56:03:2f:d9:b7:08:00:f4:4f: 89:18:37:05:7d:ed:d3:ba:1c:1a:cb:c8:2e:8c:81:3d:b9:21: d9:61:09:44:36:fd:f9:d4:74:35:8e:57:26:84:42:71:33:91: 22:71:df:e0:0b:54:14:96:52:5a:72:51:8a:28:91:97:68:1e: ae:21:db:41:7c:1c:d2:56:d2:b7:59:ba:7f:36:af:82:7c:ee: 1d:56:28:a3:65:b9:85:a7:53:49:8c:f7:c6:f3:99:db:09:86: a5:fc:38:56:30:ab:82:29:a2:3a:2a:82:d3:18:2f:8f:88:21: 31:d5:1f:65 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjIxQTExMC8GA1UEBRMoMzE0NDAzRDA0OTFGMEQ3MjFGRDg3NzI5OEJFREVFQkFB RUJFMTE3ODAeFw0yNjA4MjUwODU5NTZaFw0yNjA5MDEwODU5NTZaMBgxFjAUBgNV BAMTDTZhOGQ1OThjLTM4MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOahYn6narq45PfpyyWcm8Os7GBlfgk2slQ/0bk5ZhAGZDJOs3Wpt2bNacdJIU yBqX9E/gAs5hw00xMrQMjCQADDy8j4Er4k9wsSi1RIMpIY3S/q1HfLrauyeYh1S0 97avl1WOFosdiAodH7traEwVONjeh2BLypbr/rNcOi1uzq+mUXXVeFOXVs4clEBo ufxE5fpa7Fk2UUO/XMkcvMFdFgD/7Kj6TRSGZPuRjFTLVmN0Pjdjelom1AZmNZ0k GhXlmsANE8pJwdK1EhHy88Y8sVU0tKgo9kzk5cL0Sau0gG1ugiI3Xp+8PLdNo46U dPgMusbys2k6CZZ/3uIyZUKrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2FSSVWTb eYFWstZf2hXt+bxbikswHwYDVR0jBBgwFoAUMUQD0EkfDXIf2Hcpi+3uuq6+EXgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMjFBLzc5QjlENzg4OEJG QzExRjE5QUIxNUQ1NTNEMTFGOTcwL01VUUQwRWtmRFhJZjJIY3BpLTN1dXE2LUVY Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVVRRDBFa2ZEWElmMkhjcGktM3V1cTYtRVhnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MjFBLzc5QjlENzg4OEJGQzExRjE5QUIxNUQ1NTNEMTFGOTcwL01VUUQwRWtmRFhJ ZjJIY3BpLTN1dXE2LUVYZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQ62tzlmzEqdBebst+E1ha2OdUMbvt5h0Jjx3dnutBcTu+G43x2nwWbDUP7Grd LsyIv0DHQaTIp5UhLgS4AanoFXlpUrwoXjPbTGyXSus5cyly6iX1B2zLCjzoTICF TKgUBK4Bq30kEkWFIkiEB5YWRp5UPwp4BTJynWmvsoH3xnO7H7adlaRWAy/ZtwgA 9E+JGDcFfe3Tuhway8gujIE9uSHZYQlENv351HQ1jlcmhEJxM5Eicd/gC1QUllJa clGKKJGXaB6uIdtBfBzSVtK3Wbp/Nq+CfO4dViijZbmFp1NJjPfG85nbCYal/DhW MKuCKaI6KoLTGC+PiCEx1R9l -----END CERTIFICATE-----Generated at Wed Aug 26 20:28:07 2026 by rpki-client