$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: NKrsQNLfVof+lloBjdDqsmm7JR0R52/gH9BfZ+ox9XA= Subject key identifier: A5:C1:B3:A0:64:8A:7B:51:6B:85:59:3F:84:05:49:5E:9A:3D:00:A8 Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 0887 Signing time: Mon 31 Aug 2026 20:42:02 +0000 Manifest this update: Mon 31 Aug 2026 20:42:02 +0000 Manifest next update: Mon 07 Sep 2026 20:42:02 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: VLsZs5RGsckS5sNpUDSjVp+AjwRgMHN99dECj0XI7xA=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 4jo636T6jYuAB4lWYCYJ4Jdk6gTR1xHLVvPQO5ElmxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 20:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Aug 31 20:42:02 2026 GMT Not After : Sep 7 20:42:02 2026 GMT Subject: CN=6a95e71a-122b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:aa:5d:61:40:ea:ec:70:1d:7b:19:f1:51: a4:bd:d3:df:c2:ef:c9:a3:4d:02:ae:60:13:3e:b8: c9:6a:6f:2b:8b:4b:42:e9:34:c5:98:0d:c2:3d:cd: b6:82:16:e3:99:30:23:c6:49:04:5e:99:8f:59:b0: 18:c1:aa:f9:08:a2:8c:89:ed:80:f8:72:27:59:e1: d0:a0:38:1d:21:9f:97:0e:ac:65:1e:fe:0b:bd:de: a8:c3:92:59:cd:d6:74:76:b4:56:c4:91:76:21:63: 80:9e:85:15:5c:64:c1:9e:56:dd:5f:b1:7b:2d:cc: 0e:83:e1:f5:a3:86:ce:cf:63:7e:c3:3b:e3:00:66: 16:92:29:9f:91:cd:13:0f:2b:7e:fb:0d:82:1e:45: 1a:dc:77:fa:36:71:98:9e:4f:ca:8b:ed:07:e1:1c: c8:f3:d7:b8:c1:bf:5a:2f:9a:54:6e:52:3b:1d:40: 63:93:77:69:d1:62:2c:e2:17:35:c5:ee:da:2d:47: 84:20:9b:72:4e:15:45:f6:35:f6:b0:43:fd:0a:93: ee:f0:57:3c:48:26:06:ee:49:9c:de:47:26:60:03: 58:d4:4e:5c:9e:e0:42:06:0c:3a:01:cc:a8:cf:58: 88:cc:7d:16:fd:9c:55:5f:2a:89:b8:e8:80:81:64: cf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C1:B3:A0:64:8A:7B:51:6B:85:59:3F:84:05:49:5E:9A:3D:00:A8 X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:65:5b:ca:66:d6:09:53:ee:f0:cf:13:04:bf:f8:3a:0c:a5: 6e:dc:4d:ef:58:c5:29:c6:89:f4:41:9e:71:eb:55:f8:39:c7: 7f:45:ea:9f:cf:76:9a:8f:ea:ac:4b:c7:9a:46:ed:25:2d:40: e8:f1:d5:65:ad:fb:a9:17:2e:1f:eb:59:c2:64:cc:14:14:c7: b6:8e:9b:e8:58:af:19:78:a9:bb:cf:5e:9b:56:ce:5e:5b:a3: 7f:03:4e:99:ee:a8:ae:49:17:eb:9e:91:4a:b4:70:2c:0d:bc: 24:d0:05:45:a6:a8:6c:35:7d:e6:6b:04:f1:15:2e:ab:85:aa: c5:56:30:b6:98:8d:81:1d:0f:c4:fc:50:fc:dd:3b:5f:52:43: ee:f0:17:e6:68:02:69:a0:32:27:a8:9a:e6:4e:d7:99:aa:27: 02:f0:bd:01:99:0a:5a:a3:67:09:8d:d7:eb:f2:7f:bb:43:0c: 0b:9f:20:3f:db:09:b1:f4:ca:1a:37:4e:ab:f0:70:23:92:ba: d1:3a:a3:8f:98:49:c0:92:97:46:39:6f:77:b2:d9:39:f0:ce: 2d:0d:a2:31:7d:2c:72:50:92:9e:e1:aa:87:79:5e:a3:26:0a: e3:1b:78:57:23:5b:4f:27:c3:94:8c:c3:45:a0:d1:f9:65:d3: 95:e5:5d:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjYwODMxMjA0MjAyWhcNMjYwOTA3MjA0MjAyWjAYMRYwFAYD VQQDEw02YTk1ZTcxYS0xMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxROqXWFA6uxwHXsZ8VGkvdPfwu/Jo00CrmATPrjJam8ri0tC6TTFmA3CPc22 ghbjmTAjxkkEXpmPWbAYwar5CKKMie2A+HInWeHQoDgdIZ+XDqxlHv4Lvd6ow5JZ zdZ0drRWxJF2IWOAnoUVXGTBnlbdX7F7LcwOg+H1o4bOz2N+wzvjAGYWkimfkc0T Dyt++w2CHkUa3Hf6NnGYnk/Ki+0H4RzI89e4wb9aL5pUblI7HUBjk3dp0WIs4hc1 xe7aLUeEIJtyThVF9jX2sEP9CpPu8Fc8SCYG7kmc3kcmYANY1E5cnuBCBgw6Acyo z1iIzH0W/ZxVXyqJuOiAgWTPWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXBs6Bk intRa4VZP4QFSV6aPQCoMB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO2VbymbWCVPu8M8TBL/4OgylbtxN71jFKcaJ9EGecetV+DnHf0Xqn892mo/q rEvHmkbtJS1A6PHVZa37qRcuH+tZwmTMFBTHto6b6FivGXipu89em1bOXlujfwNO me6orkkX656RSrRwLA28JNAFRaaobDV95msE8RUuq4WqxVYwtpiNgR0PxPxQ/N07 X1JD7vAX5mgCaaAyJ6ia5k7XmaonAvC9AZkKWqNnCY3X6/J/u0MMC58gP9sJsfTK GjdOq/BwI5K60Tqjj5hJwJKXRjlvd7LZOfDOLQ2iMX0sclCSnuGqh3leoyYK4xt4 VyNbTyfDlIzDRaDR+WXTleVd0g== -----END CERTIFICATE-----Generated at Tue Sep 1 05:07:31 2026 by rpki-client