$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: kHt7IOKH2N7bumklwHbKr0Ikwv0N89T2spp/v2UkSqM= Subject key identifier: E2:19:52:35:CD:79:0C:6E:6D:DC:D8:F9:2D:B1:F3:3A:85:4F:04:8E Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 022E Signing time: Fri 21 Aug 2026 02:40:38 +0000 Manifest this update: Fri 21 Aug 2026 02:40:37 +0000 Manifest next update: Fri 28 Aug 2026 02:40:37 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: /CAm/mjTcyn0eMfV8bFv8kskD99huyyEbRsSf0wPy7s=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: GghlvZSMgFSIPZl/c13nz5F4JJXOhoiY0qEmjni18nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Aug 21 02:40:37 2026 GMT Not After : Aug 28 02:40:37 2026 GMT Subject: CN=6a87baa6-a24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:04:64:29:7d:bd:d1:c2:22:2d:a9:9d:bd: c4:f6:97:fe:ab:f3:63:47:c9:4a:1d:fd:51:aa:4f: cb:d0:12:96:3c:e0:1b:61:2a:6a:b9:3c:33:6a:fc: 05:ab:93:0b:09:67:e8:ad:08:e0:2e:2c:f5:6e:79: b6:9e:d1:22:59:d4:02:a6:8a:a2:97:78:fa:28:57: 8f:4c:a6:3d:54:ae:cd:6b:62:cb:30:10:72:4d:19: 03:6f:7d:e3:98:8b:43:04:20:81:4b:bd:79:71:10: 01:e2:42:48:1d:b1:77:e3:bd:81:c2:e1:c4:11:6a: dc:1f:e7:ad:bc:6a:c6:e7:c8:22:e3:cf:fd:6b:9f: c7:93:26:12:c2:6f:15:4c:c9:7c:4a:c7:78:65:11: 06:2e:7b:ec:65:6e:b0:fc:90:2a:58:a5:ba:96:39: 6a:be:ee:5c:b2:38:3e:5b:49:b7:a0:d3:73:84:c4: 84:ea:09:7b:33:c6:6f:34:83:b4:08:84:9a:b1:9c: 97:97:b9:15:ff:e9:4d:1d:2e:e5:f7:0d:27:2f:f7: 17:8b:4d:32:3d:3a:ef:ed:93:b7:4f:1d:00:82:3c: 59:8d:16:66:6c:03:ea:4a:77:e4:ed:7f:f7:4e:f2: 58:c4:4e:02:43:7c:1d:f0:3c:58:06:02:64:21:54: 84:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:19:52:35:CD:79:0C:6E:6D:DC:D8:F9:2D:B1:F3:3A:85:4F:04:8E X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:10:58:db:de:b6:cb:48:83:66:83:d1:4d:43:43:40:62:3d: c6:5b:c1:44:38:5a:75:99:db:ad:5a:1b:07:ff:e3:24:c3:e3: de:a3:ac:f4:23:ba:e8:3f:58:b7:5b:7a:7c:e8:9f:0f:32:f3: ff:18:5e:f4:90:42:21:ae:69:ab:38:97:27:84:11:c6:5b:fb: b4:46:a3:1f:e9:c3:e0:9d:39:c7:95:29:43:2a:08:f4:a1:4b: ad:6a:86:39:8e:50:d8:2e:ed:37:2f:a6:fb:e2:6a:c7:89:31: 88:15:45:91:78:58:8c:48:d8:d3:2f:78:5e:82:f1:fa:fa:1c: 22:39:a8:28:b6:78:b2:5e:ca:f8:23:74:6a:e7:0a:00:6f:a9: ab:1d:77:0c:cb:1c:f5:bc:ba:e8:6b:6e:4b:e2:a9:dc:aa:69: 87:c2:90:1b:8c:2a:6c:06:b2:aa:c0:23:34:79:5b:45:18:6c: 82:12:0f:d9:37:a5:2b:d7:aa:f0:c8:ab:ef:4c:2e:08:30:64: 2c:d5:1f:5a:3b:0e:6f:c1:65:27:fd:68:e6:4c:87:14:f3:d1: 25:a0:84:5d:da:c8:63:3b:e8:75:d7:40:ee:b4:96:9d:44:9f: 98:c1:66:8d:d3:7f:ee:ba:15:69:01:ee:c8:9f:0f:21:6b:dd: e0:9e:71:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjYwODIxMDI0MDM3WhcNMjYwODI4MDI0MDM3WjAYMRYwFAYD VQQDEw02YTg3YmFhNi1hMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlQEZCl9vdHCIi2pnb3E9pf+q/NjR8lKHf1Rqk/L0BKWPOAbYSpquTwzavwF q5MLCWforQjgLiz1bnm2ntEiWdQCpoqil3j6KFePTKY9VK7Na2LLMBByTRkDb33j mItDBCCBS715cRAB4kJIHbF3472BwuHEEWrcH+etvGrG58gi48/9a5/HkyYSwm8V TMl8Ssd4ZREGLnvsZW6w/JAqWKW6ljlqvu5csjg+W0m3oNNzhMSE6gl7M8ZvNIO0 CISasZyXl7kV/+lNHS7l9w0nL/cXi00yPTrv7ZO3Tx0AgjxZjRZmbAPqSnfk7X/3 TvJYxE4CQ3wd8DxYBgJkIVSEwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIZUjXN eQxubdzY+S2x8zqFTwSOMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVxBY2962y0iDZoPRTUNDQGI9xlvBRDhadZnbrVobB//jJMPj3qOs9CO66D9Y t1t6fOifDzLz/xhe9JBCIa5pqziXJ4QRxlv7tEajH+nD4J05x5UpQyoI9KFLrWqG OY5Q2C7tNy+m++Jqx4kxiBVFkXhYjEjY0y94XoLx+vocIjmoKLZ4sl7K+CN0aucK AG+pqx13DMsc9by66GtuS+Kp3Kpph8KQG4wqbAayqsAjNHlbRRhsghIP2TelK9eq 8Mir70wuCDBkLNUfWjsOb8FlJ/1o5kyHFPPRJaCEXdrIYzvodddA7rSWnUSfmMFm jdN/7roVaQHuyJ8PIWvd4J5x5w== -----END CERTIFICATE-----Generated at Sat Aug 22 21:09:08 2026 by rpki-client