$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft File: 5ufJDHY2LUCc0cpsRLrINSTV8C4.mft (raw, json) Hash identifier: pIgjxJMOqITntZ1ic3Nrwf+dz/uk5CszkSKrrWPHSXo= Subject key identifier: CD:29:78:EE:43:25:36:F9:73:18:62:C8:CE:59:44:DB:C7:E3:C4:8F Authority key identifier: E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E Certificate issuer: /CN=A9111C7F/serialNumber=E6E7C90C76362D409CD1CA6C44BAC83524D5F02E Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft Manifest number: 0D Signing time: Tue 25 Aug 2026 09:02:35 +0000 Manifest this update: Tue 25 Aug 2026 09:02:34 +0000 Manifest next update: Tue 01 Sep 2026 09:02:34 +0000 Files and hashes: 1: 5ufJDHY2LUCc0cpsRLrINSTV8C4.crl (hash: +LUfT7a/9bwx4P46OS7C6sBtM5OvnCGpZdi4aw2uvpI=) 2: 17ECE94A90EE11F18648EF8E4A11F970.roa (hash: oJfoZuTJOnL94a9OsvOMa2PCtBJV8NSsIokiHbMr0uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.crl rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 09:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C7F, serialNumber=E6E7C90C76362D409CD1CA6C44BAC83524D5F02E Validity Not Before: Aug 25 09:02:34 2026 GMT Not After : Sep 1 09:02:34 2026 GMT Subject: CN=6a8d5a2b-faaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:a7:79:3a:a6:32:f8:c6:d4:44:bc:1a:f3: 06:b8:3f:a7:e3:82:4b:5f:9a:23:d2:07:1a:2a:3e: 36:3e:13:53:d5:bc:04:a2:d0:a8:bc:b0:8b:d0:2f: 84:03:15:64:e8:7c:dd:fc:bc:f6:35:62:b1:6a:6c: 0b:c1:54:a6:a7:e5:23:1f:9b:7f:e6:e1:9a:47:f1: ad:52:97:39:0d:60:34:4c:81:4b:a3:e2:36:5a:5c: 25:87:02:2a:ef:3f:19:06:a6:d7:59:e7:ed:75:85: 5b:fd:90:7c:23:1b:36:ec:7a:88:6d:a3:2e:f3:11: d0:34:82:7f:db:f1:03:15:35:21:3f:b8:07:ea:cf: 89:3f:c9:25:e6:3c:47:bf:21:8c:b4:c1:4a:b4:34: 9a:a1:e6:87:49:90:90:3a:b8:ab:78:8a:b5:16:05: 90:4f:e0:3a:21:53:aa:9a:1a:20:48:0e:46:71:01: bc:de:34:52:e9:f6:8f:37:3c:56:5a:0e:73:92:d7: dc:58:57:35:9d:9d:94:fb:65:76:42:24:93:46:48: dd:51:4a:74:27:32:82:62:e8:7b:7c:e6:8a:e7:f6: db:73:b1:84:c5:58:36:68:61:9c:09:1f:89:5e:d8: 8a:87:14:36:29:36:32:8b:ce:97:f1:ba:53:a8:f4: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:29:78:EE:43:25:36:F9:73:18:62:C8:CE:59:44:DB:C7:E3:C4:8F X509v3 Authority Key Identifier: keyid:E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f9:20:61:fb:cf:a5:3f:99:38:38:39:9e:e7:c7:0a:9f:24: a2:bf:0d:dd:ed:88:79:3e:4b:86:ed:15:ef:90:99:e7:ca:1c: 42:50:42:16:1b:35:18:72:32:d0:4d:a4:41:4d:bc:a4:c2:3f: 39:a8:d4:e2:2e:c8:a8:ee:90:7c:2a:5a:77:e9:63:6f:ff:66: 16:39:e5:fb:24:63:a6:73:6a:3f:90:30:63:7a:57:f0:01:f8: d3:23:49:db:2a:eb:a5:9e:83:55:8a:bf:14:55:6f:93:84:87: 0b:ba:71:e9:c8:7d:f6:80:ac:b5:e5:29:ae:2e:a3:69:94:7c: d5:05:ca:9e:6d:e4:3e:c4:16:ee:f1:6b:7b:7e:5c:63:ad:f0: ee:bf:fb:1a:a6:86:8e:86:69:6c:bc:c7:b2:61:d8:46:6f:82: ea:dd:b3:3c:ef:75:de:86:56:c7:3e:c4:dd:b2:6b:ea:ce:74: af:19:ea:ea:2b:2c:17:de:d9:88:f0:82:a3:0d:a7:bd:ff:73: ee:05:12:ba:1b:dc:98:4c:64:83:f2:86:f4:6b:88:bd:f8:25: 14:d4:f3:5d:e1:ad:0c:c5:ff:3c:43:ef:54:52:3a:69:5e:bd: c1:f9:e7:e1:18:ff:34:54:18:d5:af:8e:4e:ba:50:0d:aa:93: 92:b2:a7:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUM3RjExMC8GA1UEBRMoRTZFN0M5MEM3NjM2MkQ0MDlDRDFDQTZDNDRCQUM4MzUy NEQ1RjAyRTAeFw0yNjA4MjUwOTAyMzRaFw0yNjA5MDEwOTAyMzRaMBgxFjAUBgNV BAMTDTZhOGQ1YTJiLWZhYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1t6d5OqYy+MbURLwa8wa4P6fjgktfmiPSBxoqPjY+E1PVvASi0Ki8sIvQL4QD FWTofN38vPY1YrFqbAvBVKan5SMfm3/m4ZpH8a1SlzkNYDRMgUuj4jZaXCWHAirv PxkGptdZ5+11hVv9kHwjGzbseohtoy7zEdA0gn/b8QMVNSE/uAfqz4k/ySXmPEe/ IYy0wUq0NJqh5odJkJA6uKt4irUWBZBP4DohU6qaGiBIDkZxAbzeNFLp9o83PFZa DnOS19xYVzWdnZT7ZXZCJJNGSN1RSnQnMoJi6Ht85orn9ttzsYTFWDZoYZwJH4le 2IqHFDYpNjKLzpfxulOo9KcnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzSl47kMl NvlzGGLIzllE28fjxI8wHwYDVR0jBBgwFoAU5ufJDHY2LUCc0cpsRLrINSTV8C4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExQzdGLzFDMzFGNUYwOTBF RDExRjE5MDMzNjM4NzRBMTFGOTcwLzV1ZkpESFkyTFVDYzBjcHNSTHJJTlNUVjhD NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNXVmSkRIWTJMVUNjMGNwc1JMcklOU1RWOEM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx QzdGLzFDMzFGNUYwOTBFRDExRjE5MDMzNjM4NzRBMTFGOTcwLzV1ZkpESFkyTFVD YzBjcHNSTHJJTlNUVjhDNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAO+SBh+8+lP5k4ODme58cKnySivw3d7Yh5PkuG7RXvkJnnyhxCUEIWGzUYcjLQ TaRBTbykwj85qNTiLsio7pB8Klp36WNv/2YWOeX7JGOmc2o/kDBjelfwAfjTI0nb KuulnoNVir8UVW+ThIcLunHpyH32gKy15SmuLqNplHzVBcqebeQ+xBbu8Wt7flxj rfDuv/sapoaOhmlsvMeyYdhGb4Lq3bM873XehlbHPsTdsmvqznSvGerqKywX3tmI 8IKjDae9/3PuBRK6G9yYTGSD8ob0a4i9+CUU1PNd4a0Mxf88Q+9UUjppXr3B+efh GP80VBjVr45OulANqpOSsqfw -----END CERTIFICATE-----Generated at Wed Aug 26 10:47:44 2026 by rpki-client