$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json) Hash identifier: gRWKB724u4wymr1Kreyp/m91NmfeDdb9juM1z5595KI= Subject key identifier: E5:97:DB:8C:58:FC:F4:71:44:E6:49:9C:34:02:A7:AD:C1:C5:01:64 Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft Manifest number: 8C Signing time: Mon 31 Aug 2026 06:26:22 +0000 Manifest this update: Mon 31 Aug 2026 06:26:21 +0000 Manifest next update: Mon 07 Sep 2026 06:26:21 +0000 Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: OP8sdAqD2GAD9t3C2dz6K6KkRtObEDQWn7w0Z4Jxhzw=) 2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=) 3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 06:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Aug 31 06:26:21 2026 GMT Not After : Sep 7 06:26:21 2026 GMT Subject: CN=6a951e8e-c798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:1b:25:83:e6:55:cb:ad:a7:18:52:f5:aa: 2f:06:39:a0:5b:9f:63:03:5b:40:14:f9:04:97:ca: 9a:7f:c5:d6:08:64:b9:13:a8:f4:90:82:d0:84:b8: 6b:5a:08:97:6c:51:7f:78:c3:f8:43:c8:27:00:92: bf:49:0c:06:c4:32:2e:7f:db:d1:42:e5:e5:cf:cb: c9:57:de:c9:06:3b:49:86:01:98:11:ac:9a:57:73: 95:ec:e0:83:bd:1f:bd:2b:24:7e:65:36:f2:38:ff: c8:ee:e0:b8:92:57:aa:ea:3b:cd:47:f6:e4:37:25: e8:5d:3e:71:b5:77:2c:40:fa:ce:5d:2a:8e:78:1e: 6a:dc:b1:b2:bf:05:bf:4c:44:42:74:ad:21:bc:4a: 13:a0:dd:e4:21:68:22:b1:9b:58:aa:af:f3:4c:6e: 17:5a:31:e0:8e:59:7b:d1:0b:eb:59:62:b4:f7:c6: 00:a7:7a:e1:27:bc:41:40:71:fa:99:96:b4:f5:a6: ac:6d:69:c3:7d:80:86:f5:9b:92:1e:f0:9a:ca:0a: c2:eb:8c:f3:92:df:17:a5:03:59:22:a1:79:3b:9b: bf:98:41:a7:14:a7:09:90:25:e9:5a:26:4b:af:ea: 90:9b:b6:10:e6:c0:de:d4:f0:6c:15:5a:b2:08:47: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:97:DB:8C:58:FC:F4:71:44:E6:49:9C:34:02:A7:AD:C1:C5:01:64 X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:13:a7:10:60:a2:87:84:1b:c0:06:82:67:76:d9:28:b6:a1: 3c:e0:75:08:08:21:25:42:7a:0d:b0:f5:f9:79:0f:8a:60:47: 86:60:2f:8c:d2:ff:fe:b1:ac:91:1d:87:8f:80:e1:e3:18:51: f2:db:5b:d3:8e:e7:36:61:78:f2:10:b4:c5:86:ff:f2:52:f5: 14:79:13:42:f0:e1:65:be:b4:68:71:b7:e8:40:60:56:e0:ab: d7:78:dc:04:68:81:2b:b3:39:5f:6a:21:79:71:fe:8d:99:a5: ab:80:39:27:ea:4f:41:9a:70:9b:2a:01:ad:09:01:d0:60:0a: 4e:6f:ab:24:2c:7c:d1:75:cb:3a:11:68:61:bf:59:c1:17:92: 7a:29:4c:87:c4:ab:6f:b3:54:18:80:17:2f:a0:da:14:0a:ce: 81:93:22:94:25:83:e0:08:b5:c7:e2:3e:93:54:33:91:53:91: bd:e8:52:09:dc:1f:d5:cd:b7:2e:79:95:d5:1b:bb:05:98:a6: e9:14:b7:be:cd:29:90:e3:6d:5d:88:24:be:35:b2:ab:ed:df: d5:82:f3:f1:f5:ce:18:d9:ce:6f:18:6f:5d:5c:67:d2:e8:f8: 6e:09:3d:1e:a2:4f:5a:5c:35:42:a0:fc:8f:d1:1d:95:4b:78: 2a:7d:b1:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDBDNThDNjk2OUVFNjRDNDE5MUFBQjY2OTYzRjQwOUQ0 NUFFQUY2OTgwHhcNMjYwODMxMDYyNjIxWhcNMjYwOTA3MDYyNjIxWjAYMRYwFAYD VQQDEw02YTk1MWU4ZS1jNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcAbJYPmVcutpxhS9aovBjmgW59jA1tAFPkEl8qaf8XWCGS5E6j0kILQhLhr WgiXbFF/eMP4Q8gnAJK/SQwGxDIuf9vRQuXlz8vJV97JBjtJhgGYEayaV3OV7OCD vR+9KyR+ZTbyOP/I7uC4kleq6jvNR/bkNyXoXT5xtXcsQPrOXSqOeB5q3LGyvwW/ TERCdK0hvEoToN3kIWgisZtYqq/zTG4XWjHgjll70QvrWWK098YAp3rhJ7xBQHH6 mZa09aasbWnDfYCG9ZuSHvCaygrC64zzkt8XpQNZIqF5O5u/mEGnFKcJkCXpWiZL r+qQm7YQ5sDe1PBsFVqyCEf3MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWX24xY /PRxROZJnDQCp63BxQFkMB8GA1UdIwQYMBaAFAxYxpae5kxBkaq2aWP0CdRa6vaY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9GQjI4RDlGMERD OUMxMUYwODE3RTg5NjFBMkVFNTI4RS9ERmpHbHA3bVRFR1JxclpwWV9RSjFGcnE5 cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9GQjI4RDlGMERDOUMxMUYwODE3RTg5NjFBMkVFNTI4RS9ERmpHbHA3bVRF R1JxclpwWV9RSjFGcnE5cGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARBOnEGCih4QbwAaCZ3bZKLahPOB1CAghJUJ6DbD1+XkPimBHhmAvjNL//rGs kR2Hj4Dh4xhR8ttb047nNmF48hC0xYb/8lL1FHkTQvDhZb60aHG36EBgVuCr13jc BGiBK7M5X2oheXH+jZmlq4A5J+pPQZpwmyoBrQkB0GAKTm+rJCx80XXLOhFoYb9Z wReSeilMh8Srb7NUGIAXL6DaFArOgZMilCWD4Ai1x+I+k1QzkVORvehSCdwf1c23 LnmV1Ru7BZim6RS3vs0pkONtXYgkvjWyq+3f1YLz8fXOGNnObxhvXVxn0uj4bgk9 HqJPWlw1QqD8j9EdlUt4Kn2x4w== -----END CERTIFICATE-----Generated at Tue Sep 1 02:30:05 2026 by rpki-client