$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: d4WZYXtNhU1WoQJNldQ+DF3rhYiKvzlR13wQri/vsSs= Subject key identifier: D2:C3:22:BB:A9:2B:4A:E9:49:10:38:F4:0A:DE:6D:F5:1D:F7:2D:AD Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 03CA Signing time: Sat 05 Sep 2026 00:15:59 +0000 Manifest this update: Sat 05 Sep 2026 00:15:59 +0000 Manifest next update: Sat 12 Sep 2026 00:15:59 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: GIRV1+9tLwk1MulheCpYWjtrBFtZgijwoA7L8psA+tA=) 2: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=) 3: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Sep 5 00:15:59 2026 GMT Not After : Sep 12 00:15:59 2026 GMT Subject: CN=6a9b5f3f-ff56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:fc:c3:9c:f0:c7:7a:d3:3b:de:bd:03:f4: 21:37:0e:83:75:35:5d:8d:2f:b5:bc:03:74:21:f0: 59:a5:f4:55:d2:62:e8:d2:19:a6:d0:f4:92:50:57: 2d:ad:99:1c:a4:fe:bb:d7:88:5c:0b:de:bf:cd:42: 73:86:0e:51:23:98:cb:6a:0e:3a:2a:a3:09:7a:55: d4:96:9f:c4:db:2b:3f:e5:e3:2a:67:29:61:65:21: e0:5d:76:8d:ce:19:45:a2:86:8d:a8:01:af:c8:b2: 8e:4e:12:84:57:8f:30:aa:8f:72:8e:92:ac:c0:fc: b2:5c:6f:bb:41:c8:72:39:c5:72:0e:60:f3:7e:69: b3:d9:19:32:c8:d2:72:db:e0:9f:ef:d9:4a:f5:d1: dd:7c:25:7c:68:aa:71:5b:c7:8b:c2:90:f7:f4:be: 6f:c3:80:16:d7:5d:e6:62:fa:05:c1:d4:13:7c:98: c2:46:ea:d9:32:3a:65:66:17:2d:99:7a:42:1b:20: e7:28:79:7d:79:a1:12:74:e2:34:08:a6:8f:e5:9c: 4b:21:1a:37:df:ec:ea:40:f6:4d:7c:ca:c6:23:bf: 83:de:55:b3:4e:84:7d:c7:05:dd:ba:74:37:8b:a6: 8c:43:f3:84:40:f4:cd:35:e6:1a:93:d2:81:37:4f: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C3:22:BB:A9:2B:4A:E9:49:10:38:F4:0A:DE:6D:F5:1D:F7:2D:AD X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f5:f0:49:35:8b:30:77:be:8a:16:03:a7:f9:b4:5e:68:cd: 68:6e:92:da:3e:2e:4a:81:77:d9:ed:0d:d9:86:1c:76:b8:47: b3:7a:fc:43:ba:08:2d:f4:57:2f:09:bb:a9:b9:cd:df:62:79: 83:7e:1a:e5:3e:a5:02:9a:19:25:49:00:0e:39:e2:2e:b8:c3: c6:ce:61:26:1d:b5:5b:cd:63:c3:79:92:9d:00:a1:7d:53:22: 80:70:92:89:d0:49:47:6a:45:2f:88:f0:0c:b7:f1:ff:d2:f6: dd:e2:a2:b2:88:fa:18:e2:d6:2a:36:8f:46:90:d1:e0:4a:d7: d6:df:c4:87:f8:04:4b:73:b9:55:e6:1c:74:72:05:45:e4:6e: c2:af:c0:a3:4b:6d:5e:d4:32:c3:cb:5d:95:bf:47:be:a1:c1: 88:c2:dc:f5:23:14:11:27:bf:e4:60:ac:eb:5d:f0:e8:f7:f0: 9d:f1:23:5a:91:05:91:2b:1c:79:82:b2:a7:9e:a9:21:3a:43: 17:b2:0e:69:a5:fe:0c:23:c2:c9:dc:d1:ae:f3:91:dd:15:3b: 04:df:bc:e2:00:1c:99:58:9c:b0:f7:9c:6e:f1:d9:b8:b1:da: 15:db:db:1f:86:cf:fd:29:47:99:9b:c9:c7:29:b7:6f:1c:2c: 66:e0:c2:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjYwOTA1MDAxNTU5WhcNMjYwOTEyMDAxNTU5WjAYMRYwFAYD VQQDEw02YTliNWYzZi1mZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKL8w5zwx3rTO969A/QhNw6DdTVdjS+1vAN0IfBZpfRV0mLo0hmm0PSSUFct rZkcpP6714hcC96/zUJzhg5RI5jLag46KqMJelXUlp/E2ys/5eMqZylhZSHgXXaN zhlFooaNqAGvyLKOThKEV48wqo9yjpKswPyyXG+7QchyOcVyDmDzfmmz2RkyyNJy 2+Cf79lK9dHdfCV8aKpxW8eLwpD39L5vw4AW113mYvoFwdQTfJjCRurZMjplZhct mXpCGyDnKHl9eaESdOI0CKaP5ZxLIRo33+zqQPZNfMrGI7+D3lWzToR9xwXdunQ3 i6aMQ/OEQPTNNeYak9KBN08nHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLDIrup K0rpSRA49ArebfUd9y2tMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmvXwSTWLMHe+ihYDp/m0XmjNaG6S2j4uSoF32e0N2YYcdrhHs3r8Q7oILfRX Lwm7qbnN32J5g34a5T6lApoZJUkADjniLrjDxs5hJh21W81jw3mSnQChfVMigHCS idBJR2pFL4jwDLfx/9L23eKisoj6GOLWKjaPRpDR4ErX1t/Eh/gES3O5VeYcdHIF ReRuwq/Ao0ttXtQyw8tdlb9HvqHBiMLc9SMUESe/5GCs613w6PfwnfEjWpEFkSsc eYKyp56pITpDF7IOaaX+DCPCydzRrvOR3RU7BN+84gAcmVicsPecbvHZuLHaFdvb H4bP/SlHmZvJxym3bxwsZuDCwA== -----END CERTIFICATE-----Generated at Sat Sep 5 09:44:38 2026 by rpki-client