$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: 3wEZS+aXi7fCRoq165/espkxGPj6924cYVgDNgnJwjc= Subject key identifier: FD:B0:DE:B3:3E:14:4D:CD:6D:0F:83:AF:7C:86:E6:2A:C5:64:09:3B Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0BAD Signing time: Thu 20 Aug 2026 19:01:15 +0000 Manifest this update: Thu 20 Aug 2026 19:01:14 +0000 Manifest next update: Thu 27 Aug 2026 19:01:14 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: XiqCtLOvv+Q1B4oDFD7bkPZEixN1t9K8htHsU3La9lo=) 2: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: WH/Wg/EO4nt6pgpoUx6Qd+KWgLY+/DrNoBzFsn4L0uA=) 3: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: KW6Vgg3PzapCzqZpqa4Hc7jhniagNU9VOgQ7KRnsJtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Aug 20 19:01:14 2026 GMT Not After : Aug 27 19:01:14 2026 GMT Subject: CN=6a874efb-2a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:b2:28:f6:e5:b4:b3:2e:fa:c0:73:cc:29: dc:af:8b:44:55:25:bb:a3:7a:0f:c7:7f:8c:93:80: 0e:b8:12:e8:b5:b5:8f:5d:d1:54:27:13:11:53:06: 70:f2:63:b1:dd:c3:4e:a8:ac:06:0e:45:e4:9d:f1: 13:25:f7:45:30:36:68:80:d1:ba:5c:ed:d7:48:02: 1d:93:4b:ba:29:c9:ee:35:21:22:a1:9e:0f:76:37: c5:40:66:77:0b:91:8b:a8:6f:15:ce:91:39:31:e5: 3d:62:38:5e:df:e4:8c:03:3f:3c:85:51:f8:3b:30: c8:68:55:5f:af:a6:74:b8:ca:2c:90:90:c1:7d:58: b4:93:cd:2d:9d:bd:1f:f7:cc:ec:a8:62:df:a0:f8: de:ec:ca:0e:6f:c1:a9:9b:56:b3:5b:53:98:bf:7e: 57:72:ed:99:7b:eb:f6:c9:7f:16:36:f6:a3:21:73: 9b:7f:8d:8e:24:9c:a4:77:00:89:bd:15:2d:52:5e: 4f:80:76:a2:c7:d1:15:25:71:ba:51:e9:1f:d3:f3: 06:7e:d6:30:50:d4:91:d7:85:30:43:1e:f2:ad:81: ef:71:13:9a:55:4f:da:c3:f8:35:ba:8b:2b:5d:f1: a9:27:16:7e:e4:ff:5a:f2:d3:b0:93:9c:d4:9c:21: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B0:DE:B3:3E:14:4D:CD:6D:0F:83:AF:7C:86:E6:2A:C5:64:09:3B X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:af:74:1e:27:21:70:7e:91:d6:b2:ff:ff:99:9f:63:f7:20: b4:30:51:92:5c:d6:cb:31:49:2a:90:03:66:86:9f:77:d8:81: 0a:9d:42:44:1f:c6:a9:97:2d:c0:96:ee:35:ac:06:84:82:c8: 0a:15:67:10:59:2f:bc:75:45:6e:80:02:8c:66:4c:6c:2e:a1: a8:be:3e:71:45:c5:ad:9f:5d:78:3f:b0:44:c4:a7:9f:60:cc: 57:bd:9b:08:68:28:1f:96:13:36:46:c1:63:5b:6f:4a:c8:80: 8a:fd:d4:11:64:a1:68:79:e3:f7:ca:c1:9e:a9:2a:18:a1:c1: 46:98:f1:ce:e1:bc:5c:42:0e:c5:dc:92:22:8b:ac:9c:d9:de: d5:0e:ca:46:e0:e6:38:d6:26:70:09:74:53:8b:be:21:e5:91: e1:4b:28:a7:27:2d:7c:14:5d:2d:b1:8b:c5:a7:a8:c9:f5:3f: 1e:68:a0:f9:32:db:c3:59:1c:7a:d5:ae:88:98:0c:0d:70:60: 76:2e:79:d3:38:50:f5:39:f4:81:9a:06:b7:97:30:3a:36:4d: 0c:c7:1e:d3:ab:cf:c9:65:d9:b3:59:30:6f:0d:ff:f3:b6:23: a8:86:90:c5:ae:82:ff:05:8c:69:95:5a:9a:00:31:db:6d:39: 24:bd:8a:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjYwODIwMTkwMTE0WhcNMjYwODI3MTkwMTE0WjAYMRYwFAYD VQQDEw02YTg3NGVmYi0yYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+ayKPbltLMu+sBzzCncr4tEVSW7o3oPx3+Mk4AOuBLotbWPXdFUJxMRUwZw 8mOx3cNOqKwGDkXknfETJfdFMDZogNG6XO3XSAIdk0u6KcnuNSEioZ4PdjfFQGZ3 C5GLqG8VzpE5MeU9Yjhe3+SMAz88hVH4OzDIaFVfr6Z0uMoskJDBfVi0k80tnb0f 98zsqGLfoPje7MoOb8Gpm1azW1OYv35Xcu2Ze+v2yX8WNvajIXObf42OJJykdwCJ vRUtUl5PgHaix9EVJXG6Uekf0/MGftYwUNSR14UwQx7yrYHvcROaVU/aw/g1uosr XfGpJxZ+5P9a8tOwk5zUnCEKhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2w3rM+ FE3NbQ+Dr3yG5irFZAk7MB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE690HichcH6R1rL//5mfY/cgtDBRklzWyzFJKpADZoafd9iBCp1CRB/GqZct wJbuNawGhILIChVnEFkvvHVFboACjGZMbC6hqL4+cUXFrZ9deD+wRMSnn2DMV72b CGgoH5YTNkbBY1tvSsiAiv3UEWShaHnj98rBnqkqGKHBRpjxzuG8XEIOxdySIous nNne1Q7KRuDmONYmcAl0U4u+IeWR4UsopyctfBRdLbGLxaeoyfU/Hmig+TLbw1kc etWuiJgMDXBgdi550zhQ9Tn0gZoGt5cwOjZNDMce06vPyWXZs1kwbw3/87YjqIaQ xa6C/wWMaZVamgAx2205JL2KwA== -----END CERTIFICATE-----Generated at Fri Aug 21 22:31:09 2026 by rpki-client