$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft File: CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json) Hash identifier: +Kt5Tfx3g8XZ+oGcTth0O5O2lqKXCQBXv+RCs8BqIKo= Subject key identifier: EB:BB:63:C1:96:9F:4C:E4:24:66:6D:64:68:FC:B4:A1:83:7C:7F:31 Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft Manifest number: 02B8 Signing time: Wed 19 Aug 2026 02:02:27 +0000 Manifest this update: Wed 19 Aug 2026 02:02:26 +0000 Manifest next update: Wed 26 Aug 2026 02:02:26 +0000 Files and hashes: 1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: cKmQcogIxwXP/+/ck1kwbdEIYvVxceNOHkEefVQwN6s=) 2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: ZBpZFHSjfj1bISXLZ4G9TvJh+gywnnw40Zr1cDFnGAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Validity Not Before: Aug 19 02:02:26 2026 GMT Not After : Aug 26 02:02:26 2026 GMT Subject: CN=6a850eb2-646b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:10:43:52:fc:70:0c:cb:20:e4:84:08:a3: c8:66:c1:25:a5:22:a2:c1:bc:43:31:74:01:fa:29: e3:b3:e2:fb:ee:b9:8b:eb:27:74:23:63:5b:bf:5b: 9c:ea:78:93:f6:c3:6e:14:70:eb:7b:49:bd:81:47: 7a:76:52:97:bc:01:55:7f:8c:08:09:b5:b5:ed:4c: 9d:5d:e1:4d:6a:6c:28:50:bd:45:04:7b:97:79:9e: 64:dd:2e:0b:01:0b:d4:10:3c:d6:2e:6f:28:38:50: 4d:c5:bf:5d:91:40:1c:29:66:c8:20:ab:8b:ba:8a: d3:35:eb:d9:ef:ad:3c:d1:16:23:3a:93:9b:3f:62: ed:95:de:55:8e:fa:6a:4a:9b:66:c2:91:d8:7e:74: 52:b3:a6:cb:08:79:4b:10:ba:19:55:b6:c0:a6:d4: 0e:17:61:d8:6c:bc:d2:ca:9a:4d:70:4a:5f:31:81: fc:21:2b:0f:a2:1a:53:08:eb:36:9f:db:01:43:59: 3d:6f:2e:ad:83:56:5f:4e:f7:aa:0a:fc:5f:61:9b: 2b:4c:be:a6:fc:e5:fe:73:87:39:d1:d0:41:13:7d: c2:99:00:eb:22:c2:ce:af:08:ca:6d:89:61:70:9d: 22:d9:8e:16:1e:63:41:d9:a5:f1:fe:f7:90:07:97: e7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BB:63:C1:96:9F:4C:E4:24:66:6D:64:68:FC:B4:A1:83:7C:7F:31 X509v3 Authority Key Identifier: keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4d:ea:57:89:bd:ac:c7:f5:4a:45:65:0d:6d:c3:a9:24:a7: f8:50:83:23:1e:d1:78:0b:f6:be:80:f9:74:d8:5c:bd:51:4a: 80:36:b2:fb:61:e1:ef:03:66:0f:2c:1b:4e:29:10:b5:92:1e: 72:7c:70:1c:c3:a5:8b:e8:80:d1:97:d6:e5:bd:d5:a1:f2:2d: b4:69:6d:26:1d:be:27:14:ea:84:61:e6:91:aa:82:51:2f:74: c9:83:86:e4:06:c6:9e:38:10:2e:c4:6b:ca:82:09:bc:1c:ae: 95:10:52:69:ea:c8:9d:2c:2d:40:ed:d0:1d:da:e3:1b:81:ce: 2d:f1:eb:58:95:7f:72:a2:3a:8c:a5:28:83:1f:30:49:49:19: 35:a9:e0:41:30:f7:f5:00:dc:0b:87:36:a1:a0:8a:a4:6a:65: c7:04:a4:9a:d9:28:24:1d:97:b2:a6:d4:84:03:f6:97:69:eb: 6c:0c:39:0f:5f:a9:97:fd:4d:44:81:49:cd:9e:b7:a5:04:20: d6:22:b7:9b:90:27:53:eb:2d:4f:31:1e:19:a9:9b:e5:72:22: 9b:7e:98:ab:7d:1b:a0:30:50:e1:48:2d:c2:3f:d7:36:0d:41: a6:32:43:1b:21:74:a2:33:e7:a1:35:1a:be:07:c5:b8:38:9a: 17:06:fe:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4 MkM4RDJDRTAwHhcNMjYwODE5MDIwMjI2WhcNMjYwODI2MDIwMjI2WjAYMRYwFAYD VQQDEw02YTg1MGViMi02NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKoQQ1L8cAzLIOSECKPIZsElpSKiwbxDMXQB+injs+L77rmL6yd0I2Nbv1uc 6niT9sNuFHDre0m9gUd6dlKXvAFVf4wICbW17UydXeFNamwoUL1FBHuXeZ5k3S4L AQvUEDzWLm8oOFBNxb9dkUAcKWbIIKuLuorTNevZ76080RYjOpObP2Ltld5Vjvpq SptmwpHYfnRSs6bLCHlLELoZVbbAptQOF2HYbLzSyppNcEpfMYH8ISsPohpTCOs2 n9sBQ1k9by6tg1ZfTveqCvxfYZsrTL6m/OX+c4c50dBBE33CmQDrIsLOrwjKbYlh cJ0i2Y4WHmNB2aXx/veQB5fn7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOu7Y8GW n0zkJGZtZGj8tKGDfH8xMB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1 NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVBMi8xNTI1MzQxNDg1NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJU X09Id3dOdXpHeHVDeU5MT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnk3qV4m9rMf1SkVlDW3DqSSn+FCDIx7ReAv2voD5dNhcvVFKgDay+2Hh7wNm DywbTikQtZIecnxwHMOli+iA0ZfW5b3VofIttGltJh2+JxTqhGHmkaqCUS90yYOG 5AbGnjgQLsRryoIJvByulRBSaerInSwtQO3QHdrjG4HOLfHrWJV/cqI6jKUogx8w SUkZNangQTD39QDcC4c2oaCKpGplxwSkmtkoJB2XsqbUhAP2l2nrbAw5D1+pl/1N RIFJzZ63pQQg1iK3m5AnU+stTzEeGamb5XIim36Yq30boDBQ4Ugtwj/XNg1BpjJD GyF0ojPnoTUavgfFuDiaFwb+ng== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:19 2026 by rpki-client