$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: /CO/ty2GvMK+UfcpB8R1ODh1rfXI5iVSl4KY0j2bsqw= Subject key identifier: 2D:35:0A:DB:E8:5D:06:00:81:18:8A:F7:77:14:9A:98:F9:7C:75:BD Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: F0 Signing time: Thu 03 Sep 2026 06:42:07 +0000 Manifest this update: Thu 03 Sep 2026 06:42:06 +0000 Manifest next update: Thu 10 Sep 2026 06:42:06 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: umGJmJd8dzNLN1IXZPtsThaNew33DZKitu3E0oe2+jM=) 2: BA44C5C2FF3611F08F27381B8BEE528E.roa (hash: xTRiGomUlvw36ULHa1gsy9cQNKWIJENbJoJ/xOZCR7w=) 3: BB593434FF3611F08F27381B8BEE528E.roa (hash: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Sep 3 06:42:06 2026 GMT Not After : Sep 10 06:42:06 2026 GMT Subject: CN=6a9916bf-1701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:09:8c:d9:f7:b0:d6:06:41:a1:93:fc:a8:c4: de:01:43:7b:d4:d5:fd:37:91:53:c7:9e:4f:f2:fb: 39:ed:0e:8e:6e:7f:e3:c1:32:76:36:9a:53:92:6a: 81:2c:78:09:b4:98:1c:c4:76:10:09:2c:9c:dd:32: 3a:64:47:b8:bc:ef:01:2b:de:17:bf:4c:f1:41:50: 30:df:a1:16:e6:b5:a8:a6:0e:4c:fe:9a:cb:b3:e9: 80:f9:bf:9d:82:5f:cc:fe:ce:02:8e:cf:dc:8e:25: 27:bc:12:d3:a5:53:b0:ed:9d:5a:57:56:17:5b:8c: 57:f1:28:0a:02:43:fc:a5:19:87:4b:25:6d:4d:df: 92:94:25:bf:12:2e:d4:54:97:57:b1:1c:a6:de:53: fd:b0:a0:a6:95:2a:88:ba:01:89:db:d6:4d:e4:57: a2:a2:14:1d:ed:56:eb:cc:d4:ce:d1:a4:48:e9:d4: a8:e8:90:38:51:c4:37:e5:62:b5:2e:64:e4:58:7e: 9b:16:11:0e:60:cb:61:06:a6:a6:58:31:4f:1e:cf: a9:dc:84:f4:42:28:66:ed:17:97:43:3b:57:73:d9: f5:40:d4:cb:53:e2:03:95:7c:4c:08:38:07:f0:03: ff:2c:a8:b7:bf:d6:fa:fc:66:33:42:9f:af:95:ee: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:35:0A:DB:E8:5D:06:00:81:18:8A:F7:77:14:9A:98:F9:7C:75:BD X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ea:f6:0e:56:fd:fe:c7:71:b4:d9:0c:81:30:76:01:4f:10: 1d:ad:32:97:52:98:3b:4a:c4:7d:82:71:14:32:06:89:cf:a8: af:7e:37:40:9d:5a:74:3a:e6:3c:6d:a5:ff:b4:6e:29:6d:1e: ca:d3:fa:a0:30:e6:ab:a5:08:35:ca:e1:29:8a:a9:8b:b7:0c: c0:0d:47:0b:2e:26:80:e8:73:66:e0:c3:07:6f:33:15:29:0e: 18:52:ff:f3:83:94:c9:d6:24:a0:24:03:88:6c:09:29:60:8c: 25:59:ed:4e:48:5b:41:6a:a2:44:a7:a5:c7:c5:a4:d0:e9:91: df:7e:19:99:59:52:06:66:fc:ff:0c:49:7b:3a:af:ce:61:7e: c0:1b:5e:1d:e2:34:cb:f4:03:76:e7:35:01:88:9c:a7:69:f5: 73:75:9c:a7:9c:0a:ff:8f:2f:05:21:a8:8e:85:c3:c6:2d:9e: 10:7a:7f:2b:34:64:e0:26:29:34:e3:ca:f7:09:83:3c:b7:e1: 83:c0:5b:ce:20:3f:06:8d:74:5f:88:b3:16:8b:66:69:4c:af: a0:e7:e8:14:77:67:a8:4d:44:4c:fd:af:5e:92:e9:4c:b4:ec: 90:0c:3a:44:fd:8e:df:4b:96:99:eb:ea:8d:34:ee:4e:ea:1a: c4:d7:da:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx NzZFQUU5MzMwHhcNMjYwOTAzMDY0MjA2WhcNMjYwOTEwMDY0MjA2WjAYMRYwFAYD VQQDEw02YTk5MTZiZi0xNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wmM2few1gZBoZP8qMTeAUN71NX9N5FTx55P8vs57Q6Obn/jwTJ2NppTkmqB LHgJtJgcxHYQCSyc3TI6ZEe4vO8BK94Xv0zxQVAw36EW5rWopg5M/prLs+mA+b+d gl/M/s4Cjs/cjiUnvBLTpVOw7Z1aV1YXW4xX8SgKAkP8pRmHSyVtTd+SlCW/Ei7U VJdXsRym3lP9sKCmlSqIugGJ29ZN5FeiohQd7VbrzNTO0aRI6dSo6JA4UcQ35WK1 LmTkWH6bFhEOYMthBqamWDFPHs+p3IT0Qihm7ReXQztXc9n1QNTLU+IDlXxMCDgH 8AP/LKi3v9b6/GYzQp+vle57qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC01Ctvo XQYAgRiK93cUmpj5fHW9MB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRB LWdBTlEyaHByZzhYYnE2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPur2Dlb9/sdxtNkMgTB2AU8QHa0yl1KYO0rEfYJxFDIGic+or343QJ1adDrm PG2l/7RuKW0eytP6oDDmq6UINcrhKYqpi7cMwA1HCy4mgOhzZuDDB28zFSkOGFL/ 84OUydYkoCQDiGwJKWCMJVntTkhbQWqiRKelx8Wk0OmR334ZmVlSBmb8/wxJezqv zmF+wBteHeI0y/QDduc1AYicp2n1c3Wcp5wK/48vBSGojoXDxi2eEHp/KzRk4CYp NOPK9wmDPLfhg8BbziA/Bo10X4izFotmaUyvoOfoFHdnqE1ETP2vXpLpTLTskAw6 RP2O30uWmevqjTTuTuoaxNfaWw== -----END CERTIFICATE-----Generated at Thu Sep 3 09:35:49 2026 by rpki-client