$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: 1nJfwVq+fbRKyHG+VCt4TwNokXInJSskox/1+gHEWnA= Subject key identifier: 52:26:B0:DD:1C:DB:F7:E6:2C:2A:BA:B0:A6:3D:05:C1:1C:32:7B:93 Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 0252 Signing time: Wed 09 Sep 2026 02:33:51 +0000 Manifest this update: Wed 09 Sep 2026 02:33:50 +0000 Manifest next update: Wed 16 Sep 2026 02:33:50 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: DZH1ED4SHxvtrqZ6jcIm1rYBu8Ooa0WQ/tCXGa0DsNE=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: BKPtg7HeDu7JSoWpyLKk1keMXR9Vj+kENI1xPmqvGCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 02:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Sep 9 02:33:50 2026 GMT Not After : Sep 16 02:33:50 2026 GMT Subject: CN=6aa0c58f-8bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2a:a2:66:36:68:84:9e:8e:82:ac:c4:1c:d9: 2a:54:39:88:63:2a:63:e1:f5:70:c4:2e:5a:9f:69: ac:7e:67:28:75:2f:25:7c:7e:8b:b3:03:88:d6:dc: 3d:de:84:fb:18:9e:c1:bc:e7:b0:2a:36:e1:4d:6a: 00:45:84:88:cf:d9:a1:4d:71:5e:ae:1c:cd:a5:0f: 1e:dd:f3:a9:9f:8c:43:02:6d:69:63:f5:8a:84:7e: 34:3d:81:f3:d9:8c:ef:e2:e5:ed:0e:aa:ae:9c:2f: 1b:b9:c4:ec:37:3f:f5:e8:13:46:d0:96:1a:ef:8e: 6a:2a:8b:b6:75:0e:ee:b8:fe:30:c0:e7:2c:fb:83: ef:d2:95:3a:d0:c8:47:36:4b:8a:96:f6:7c:fd:6d: 2f:67:01:01:24:90:a6:8b:03:62:fd:ba:ce:8a:e3: 62:f4:c6:29:8a:cd:b0:e4:a7:c0:96:d1:d1:04:55: ca:49:a1:12:3a:fe:41:11:12:06:7a:04:95:37:4b: c7:85:28:86:82:24:2c:47:ff:6f:a3:bf:b5:c8:69: 40:2b:df:80:df:c1:ba:5f:a8:40:85:f2:e3:28:95: 51:18:36:2c:3a:3d:65:63:44:6f:75:bc:62:3a:cb: 4b:1e:35:9a:6d:58:a4:c7:72:60:79:3c:f6:c2:fc: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:26:B0:DD:1C:DB:F7:E6:2C:2A:BA:B0:A6:3D:05:C1:1C:32:7B:93 X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0a:6c:be:47:99:a1:68:de:c5:61:d3:ab:a9:cc:87:6b:62: fd:4e:0b:db:7e:1e:b1:35:75:91:02:a2:87:42:fc:a8:61:4e: ae:e3:79:f7:67:9a:01:26:f1:cf:84:7b:70:b3:48:ae:84:1f: 69:ea:2d:05:03:05:f8:fa:03:e7:f8:d4:c4:dc:58:26:75:68: 03:8c:cf:31:bf:e2:8d:c0:00:eb:db:94:6e:09:19:fb:74:4e: a1:2e:36:7f:53:11:1a:3e:ba:c8:b3:2e:9d:d4:fd:5c:3e:b6: 30:f8:b9:fc:c5:7a:1d:a2:54:a3:24:55:00:9c:3a:0a:dc:33: 47:be:71:ee:00:85:68:66:96:89:b0:d5:c8:20:85:7b:86:0a: 83:ce:21:94:4e:97:55:04:2f:c1:f3:f9:f5:53:93:9e:15:09: 11:5d:ba:5b:32:d4:42:a5:c1:65:fe:fa:fa:b8:36:cc:5b:90: db:e9:40:8a:31:44:de:78:a0:d7:25:d7:dd:93:6d:94:3c:5f: 41:2d:63:5b:4f:5e:44:63:82:9c:48:b9:4f:76:46:72:9e:3f: 33:82:03:ab:7b:2d:3a:be:30:e5:82:56:cc:c2:ea:cc:65:31: cb:63:90:41:13:94:d2:5f:63:3c:6f:89:64:09:c2:68:54:4a: 9b:c7:78:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjYwOTA5MDIzMzUwWhcNMjYwOTE2MDIzMzUwWjAYMRYwFAYD VQQDEw02YWEwYzU4Zi04YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliqiZjZohJ6OgqzEHNkqVDmIYypj4fVwxC5an2msfmcodS8lfH6LswOI1tw9 3oT7GJ7BvOewKjbhTWoARYSIz9mhTXFerhzNpQ8e3fOpn4xDAm1pY/WKhH40PYHz 2Yzv4uXtDqqunC8bucTsNz/16BNG0JYa745qKou2dQ7uuP4wwOcs+4Pv0pU60MhH NkuKlvZ8/W0vZwEBJJCmiwNi/brOiuNi9MYpis2w5KfAltHRBFXKSaESOv5BERIG egSVN0vHhSiGgiQsR/9vo7+1yGlAK9+A38G6X6hAhfLjKJVRGDYsOj1lY0Rvdbxi OstLHjWabVikx3JgeTz2wvzaSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFImsN0c 2/fmLCq6sKY9BcEcMnuTMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANwpsvkeZoWjexWHTq6nMh2ti/U4L234esTV1kQKih0L8qGFOruN592eaASbx z4R7cLNIroQfaeotBQMF+PoD5/jUxNxYJnVoA4zPMb/ijcAA69uUbgkZ+3ROoS42 f1MRGj66yLMundT9XD62MPi5/MV6HaJUoyRVAJw6CtwzR75x7gCFaGaWibDVyCCF e4YKg84hlE6XVQQvwfP59VOTnhUJEV26WzLUQqXBZf76+rg2zFuQ2+lAijFE3nig 1yXX3ZNtlDxfQS1jW09eRGOCnEi5T3ZGcp4/M4IDq3stOr4w5YJWzMLqzGUxy2OQ QROU0l9jPG+JZAnCaFRKm8d4tg== -----END CERTIFICATE-----Generated at Thu Sep 10 13:15:07 2026 by rpki-client