$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: uYvR2UfLsZakwcqth6XqjkuGrMRDYEbnejiEYlv+JJs= Subject key identifier: 77:04:A4:DF:58:26:C7:DD:D6:FC:FF:94:D6:FD:4A:A4:EB:54:5B:74 Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 0214 Signing time: Tue 25 Aug 2026 02:57:19 +0000 Manifest this update: Tue 25 Aug 2026 02:57:18 +0000 Manifest next update: Tue 01 Sep 2026 02:57:18 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: b6MrtTmGrdUtuaTKETcpKuGQTt0+fBB2+OE178FCWMI=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SzmtgdmOFJZhk9jVTnV/yTe6X6D8nfk0jT/tOuImmRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 02:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: Aug 25 02:57:18 2026 GMT Not After : Sep 1 02:57:18 2026 GMT Subject: CN=6a8d048e-cf8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:51:ca:08:a2:19:e6:93:a6:61:63:50:e6:52: c7:19:bf:72:4e:b1:8d:e4:e7:ff:80:a0:d5:f4:a0: 64:a7:d5:59:78:9c:0b:18:b7:3f:0b:bb:4a:00:01: ae:98:98:9d:c0:28:68:1b:49:82:29:d1:88:3e:44: 3b:5b:bc:60:34:81:4a:e1:76:67:65:45:5c:35:3d: e4:2e:76:f5:51:82:28:57:f3:70:b8:20:a2:25:33: 2a:ae:f1:98:fb:5c:d3:b4:6b:01:68:ca:9e:76:a5: 12:91:d6:0d:b8:08:e3:a3:26:38:b3:e7:7d:21:c7: d4:48:3c:c9:d4:af:8e:b5:4e:5b:fa:c6:db:87:6c: fc:40:a8:8b:40:e7:ee:16:f7:25:7d:4b:dd:ed:21: 8a:53:ec:17:fc:a2:e5:81:2b:d4:36:37:77:8b:ee: ee:b0:cd:ee:9e:92:50:18:08:2c:43:69:27:53:b6: c3:db:85:51:bc:9a:88:f7:da:b1:90:88:e4:64:1d: 2c:8a:f0:ae:60:0a:6e:49:16:97:b6:48:36:89:38: f0:4f:84:e5:cc:71:85:ca:50:86:71:ec:46:96:7e: 06:c9:70:06:3c:5f:c5:28:4f:57:a9:00:68:cf:5d: d4:0a:94:81:95:c2:9e:5a:75:7d:31:00:e5:55:36: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:04:A4:DF:58:26:C7:DD:D6:FC:FF:94:D6:FD:4A:A4:EB:54:5B:74 X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c8:18:9e:3e:45:01:57:77:2f:b1:30:95:60:53:45:d4:70: 9f:41:5a:78:c7:5c:04:18:97:48:66:ba:6a:c6:24:c9:75:bf: c2:33:c9:84:fd:7e:96:7f:1d:84:87:40:85:07:b4:95:c1:7e: b4:f7:e0:99:a0:c6:33:cc:5f:f4:b5:5f:16:8a:65:d0:e8:e1: f4:19:21:e4:01:69:59:70:e8:31:97:9f:17:e4:a3:71:2b:bd: d2:51:34:83:46:c6:b5:ad:a2:8d:1f:4d:cb:40:d1:2c:5e:75: 14:0a:08:fa:1d:9a:87:2b:54:e7:0f:d6:2a:73:af:b7:16:a5: 61:b8:79:c8:01:e2:2d:c9:cf:9b:1e:0c:a1:4b:ab:42:65:13: 95:95:8d:c0:4f:32:e3:63:1d:bb:c7:0a:80:7c:8c:ef:2f:47: e7:59:3f:00:c7:1c:02:ab:ed:d2:06:15:de:d3:16:93:a9:06: 83:73:80:d7:cb:8b:b9:46:3f:83:1b:a5:34:61:67:b8:f4:cd: 3c:d5:0d:68:b6:a4:52:43:37:5c:1d:b4:a0:2c:0d:bb:cb:d0: a6:99:da:f8:da:ff:ef:1c:77:5e:fa:2b:71:d1:1e:4c:2d:8d: ea:64:fd:ce:89:ac:4d:5b:cc:10:c7:40:39:ed:bc:85:91:3c: 5e:7f:8e:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjYwODI1MDI1NzE4WhcNMjYwOTAxMDI1NzE4WjAYMRYwFAYD VQQDEw02YThkMDQ4ZS1jZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVHKCKIZ5pOmYWNQ5lLHGb9yTrGN5Of/gKDV9KBkp9VZeJwLGLc/C7tKAAGu mJidwChoG0mCKdGIPkQ7W7xgNIFK4XZnZUVcNT3kLnb1UYIoV/NwuCCiJTMqrvGY +1zTtGsBaMqedqUSkdYNuAjjoyY4s+d9IcfUSDzJ1K+OtU5b+sbbh2z8QKiLQOfu FvclfUvd7SGKU+wX/KLlgSvUNjd3i+7usM3unpJQGAgsQ2knU7bD24VRvJqI99qx kIjkZB0sivCuYApuSRaXtkg2iTjwT4TlzHGFylCGcexGln4GyXAGPF/FKE9XqQBo z13UCpSBlcKeWnV9MQDlVTYM7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcEpN9Y Jsfd1vz/lNb9SqTrVFt0MB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbMgYnj5FAVd3L7EwlWBTRdRwn0FaeMdcBBiXSGa6asYkyXW/wjPJhP1+ln8d hIdAhQe0lcF+tPfgmaDGM8xf9LVfFopl0Ojh9Bkh5AFpWXDoMZefF+SjcSu90lE0 g0bGta2ijR9Ny0DRLF51FAoI+h2ahytU5w/WKnOvtxalYbh5yAHiLcnPmx4MoUur QmUTlZWNwE8y42Mdu8cKgHyM7y9H51k/AMccAqvt0gYV3tMWk6kGg3OA18uLuUY/ gxulNGFnuPTNPNUNaLakUkM3XB20oCwNu8vQppna+Nr/7xx3XvorcdEeTC2N6mT9 zomsTVvMEMdAOe28hZE8Xn+Osg== -----END CERTIFICATE-----Generated at Tue Aug 25 05:34:42 2026 by rpki-client