$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft File: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft (raw, json) Hash identifier: CrW0jiNDzuxqD42IR4e/MLrWVYrv7DIEMfz1clKYfzM= Subject key identifier: D6:5D:CC:EB:22:49:42:CA:20:69:2E:06:40:CB:B7:B7:C3:DA:83:D1 Authority key identifier: 23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB Certificate issuer: /CN=A9122796/serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft Manifest number: 07 Signing time: Mon 31 Aug 2026 09:37:16 +0000 Manifest this update: Mon 31 Aug 2026 09:37:15 +0000 Manifest next update: Mon 07 Sep 2026 09:37:15 +0000 Files and hashes: 1: I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl (hash: yW8aGqjmjpCHq5Ep0h2+/fINNqdmapiKhjLSBjz3eHI=) 2: B6E9F4E89E0411F192F8ACA34A11F970.roa (hash: i+mz8RKuF8p3hv1YLSt70vMBBM5Cu/pBQuz04gTb5ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122796, serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB Validity Not Before: Aug 31 09:37:15 2026 GMT Not After : Sep 7 09:37:15 2026 GMT Subject: CN=6a954b4b-a8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:ee:f6:ba:75:d3:fa:92:dc:87:00:4a:3f: e9:09:94:8e:95:5c:df:32:1a:94:6d:a1:22:c2:d2: 8c:9a:8c:82:72:c2:c6:d7:5f:4c:6f:0b:a0:b4:39: 29:fb:ed:66:67:5e:d2:7d:53:00:01:f9:50:2d:40: ee:8e:2b:e5:e9:29:4a:06:50:a4:e8:50:6b:14:4f: 5b:00:c9:b8:34:05:1c:89:23:8e:d9:e5:63:97:75: 1f:fc:1d:1c:18:19:20:3a:ee:64:7c:6d:20:89:65: 7d:0f:fe:65:83:a4:fe:67:9c:f4:12:09:15:7d:94: b7:e9:38:de:ef:d0:a5:9b:29:e8:90:c1:b5:49:dc: d5:c0:4e:e9:70:3e:0b:bd:80:3a:7e:3f:43:12:ca: 77:a9:e0:1c:2a:2a:e6:6c:a9:40:3a:53:34:51:7f: 17:14:05:e0:8e:e4:2d:d7:59:35:74:fd:13:d7:fb: 4c:8f:05:c7:0e:98:cb:32:ac:43:2b:d9:60:4e:6d: fc:76:81:d7:ca:87:c0:8b:9f:f6:b9:cb:34:fd:06: e6:92:7e:41:43:6a:af:13:6e:8b:39:80:e3:44:a5: 2f:be:ab:5f:f5:91:f0:29:b0:0c:e0:e0:39:61:5a: aa:8f:25:4f:f0:22:52:4c:d1:98:d7:32:70:a4:f4: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5D:CC:EB:22:49:42:CA:20:69:2E:06:40:CB:B7:B7:C3:DA:83:D1 X509v3 Authority Key Identifier: keyid:23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:fe:0e:08:8b:8d:7d:e8:a4:89:a2:3e:e5:51:2f:15:92:78: 41:8a:46:88:01:66:f3:1d:97:90:9f:56:d9:33:f7:79:a5:9f: 24:99:a9:bb:43:00:51:30:38:bd:19:8b:eb:cb:92:86:8b:af: c2:37:df:9c:3b:1d:dc:d2:df:85:d3:a7:a8:99:9d:dc:e5:49: a2:22:aa:db:9b:79:d2:ac:24:75:31:19:50:f5:7b:c5:28:ba: a5:85:6d:51:ce:95:99:1c:e7:7b:05:79:34:ab:f4:5a:20:69: f1:f3:a0:10:e6:3b:0a:33:f5:f9:b1:3d:f8:8e:24:a0:82:a0: 95:27:9e:42:fb:92:d4:bc:ea:af:fa:90:39:c5:97:68:68:eb: 95:65:ed:47:43:95:32:8e:39:49:2f:8d:ef:38:0e:d1:ac:27: e9:1f:5d:d9:da:e0:b5:9c:e0:11:a9:50:5d:16:20:a9:9e:79: d2:21:15:d6:d8:ee:32:62:b3:ee:0a:36:75:e5:99:0c:5d:2d: be:18:5e:66:85:bb:eb:16:eb:d2:5c:04:76:41:95:18:f5:62: 75:a0:3b:66:d1:77:c6:e0:6d:31:8e:e9:c4:cc:b1:68:15:90: f3:a6:e1:db:58:91:8d:bc:ce:b6:18:cb:50:e6:7e:84:be:04: 30:11:3a:24 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Mjc5NjExMC8GA1UEBRMoMjM5N0E5RDU5ODM2ODM2MjZCQUQyQzE0N0ZCN0QzM0M0 OUJEQzZCQjAeFw0yNjA4MzEwOTM3MTVaFw0yNjA5MDcwOTM3MTVaMBgxFjAUBgNV BAMTDTZhOTU0YjRiLWE4ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7c+72unXT+pLchwBKP+kJlI6VXN8yGpRtoSLC0oyajIJywsbXX0xvC6C0OSn7 7WZnXtJ9UwAB+VAtQO6OK+XpKUoGUKToUGsUT1sAybg0BRyJI47Z5WOXdR/8HRwY GSA67mR8bSCJZX0P/mWDpP5nnPQSCRV9lLfpON7v0KWbKeiQwbVJ3NXATulwPgu9 gDp+P0MSynep4BwqKuZsqUA6UzRRfxcUBeCO5C3XWTV0/RPX+0yPBccOmMsyrEMr 2WBObfx2gdfKh8CLn/a5yzT9BuaSfkFDaq8Tbos5gONEpS++q1/1kfApsAzg4Dlh WqqPJU/wIlJM0ZjXMnCk9H+pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1l3M6yJJ QsogaS4GQMu3t8Pag9EwHwYDVR0jBBgwFoAUI5ep1Zg2g2JrrSwUf7fTPEm9xrsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyNzk2L0JEQUI1MTEyOUUw MTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJKcnJTd1VmN2ZUUEVtOXhy cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTVlcDFaZzJnMkpyclN3VWY3ZlRQRW05eHJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Nzk2L0JEQUI1MTEyOUUwMTExRjFBMUM5Q0M1ODQ4MTFGOTcwL0k1ZXAxWmcyZzJK cnJTd1VmN2ZUUEVtOXhycy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCY/g4Ii4196KSJoj7lUS8VknhBikaIAWbzHZeQn1bZM/d5pZ8kmam7QwBRMDi9 GYvry5KGi6/CN9+cOx3c0t+F06eomZ3c5UmiIqrbm3nSrCR1MRlQ9XvFKLqlhW1R zpWZHOd7BXk0q/RaIGnx86AQ5jsKM/X5sT34jiSggqCVJ55C+5LUvOqv+pA5xZdo aOuVZe1HQ5UyjjlJL43vOA7RrCfpH13Z2uC1nOARqVBdFiCpnnnSIRXW2O4yYrPu CjZ15ZkMXS2+GF5mhbvrFuvSXAR2QZUY9WJ1oDtm0XfG4G0xjunEzLFoFZDzpuHb WJGNvM62GMtQ5n6EvgQwETok -----END CERTIFICATE-----Generated at Tue Sep 1 03:33:32 2026 by rpki-client