$ rpki-client -vvvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: 2pw5AY3AXz4mOqYyH2DPIDBXOHMp7LdoS1RJH6iBies= Subject key identifier: 4B:3E:9A:98:3C:6F:DC:81:73:C3:1F:11:4A:94:11:61:D3:CA:01:A1 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: D9 Signing time: Tue 25 Aug 2026 06:35:17 +0000 Manifest this update: Tue 25 Aug 2026 06:35:17 +0000 Manifest next update: Tue 01 Sep 2026 06:35:17 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: Rltvj0FjuJrm3GrC/TswLWt0XhFrYSxGxCkqSqTmo3w=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 06:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Aug 25 06:35:17 2026 GMT Not After : Sep 1 06:35:17 2026 GMT Subject: CN=6a8d37a5-696a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:db:15:83:b5:c2:26:25:05:85:ae:38:fe: 0b:66:77:a9:d9:10:54:8d:8c:ad:61:62:42:7c:b7: 85:e1:dc:de:62:b6:23:73:35:57:e1:9f:eb:75:f4: c0:8e:7a:ae:8c:3a:0b:f3:e7:96:d5:be:b2:d3:0b: 1a:bd:c8:72:71:2b:e1:32:9c:1f:ef:70:27:ec:45: 37:21:50:26:17:38:f3:5f:b7:27:da:d8:53:ec:45: 24:4f:39:9c:85:45:d4:fd:33:88:4b:5f:dc:06:6e: b1:e3:7e:7f:88:7e:26:d3:d2:ae:d7:23:e7:f3:d3: 7a:de:95:bb:7f:94:5e:a0:5c:e4:a0:a1:31:f4:eb: 22:4b:92:2b:9c:2b:84:9b:27:52:55:05:55:b0:8e: 51:ff:fc:1d:dc:38:88:4b:e2:23:32:71:e9:f1:11: af:17:5a:2a:cf:b5:c5:23:17:01:0a:29:e2:37:25: 09:12:02:df:2e:a0:ad:6a:fb:e3:89:e0:88:8e:46: 6f:31:56:8a:2e:69:95:02:bf:7d:ce:39:26:6e:ce: 7f:40:88:02:fa:90:61:0d:40:b4:bd:65:01:6f:7d: 37:ef:d6:42:d8:da:1c:75:4e:79:7b:9b:a8:5c:70: 9e:8d:a7:cc:63:28:f6:1d:28:2f:9b:5e:40:d6:28: 5e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3E:9A:98:3C:6F:DC:81:73:C3:1F:11:4A:94:11:61:D3:CA:01:A1 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:dd:63:6b:9e:7a:82:b7:e7:4f:b4:c8:17:64:c5:5b:58:cf: c6:c1:5a:70:60:c8:1e:56:f2:b1:f0:70:72:8a:75:cb:09:2e: a7:99:d1:7d:33:3d:d8:92:14:f2:a6:eb:e0:d0:54:c2:12:2a: 46:8a:7a:02:4a:7f:cf:68:e7:dd:0d:e5:06:7a:e4:75:f4:cc: e2:26:53:22:f4:b6:9c:5a:f9:b5:96:ad:65:ba:66:77:b2:57: 47:64:2b:b7:89:d3:08:a5:ee:7f:3c:f7:40:2d:96:39:60:d6: 42:8f:7f:e2:1b:c4:ee:c7:86:76:15:ef:23:01:0f:a2:2c:e7: 52:24:a1:f6:55:1f:a7:6a:96:08:e5:69:f1:13:1f:f6:1e:1f: 6f:bf:61:3b:e8:a4:14:e6:97:75:ee:2e:0c:5a:b4:29:7c:95: af:d7:cc:4f:10:da:76:18:4a:ca:cb:14:ee:75:99:9b:e8:02: e0:db:05:10:f3:bd:0e:9e:2d:79:c0:b4:bf:d8:bb:e7:9f:f3: 88:c0:f9:db:8e:9b:1c:78:e7:37:3d:fc:83:ed:51:56:9f:8b: 3a:b5:12:77:89:dc:e2:36:87:2e:50:4e:a6:f8:e0:2f:6d:8c: 5f:52:d0:8c:32:23:ed:b8:6c:6d:65:34:e6:27:8a:36:0c:5c: 22:97:fc:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzNEQxMTAvBgNVBAUTKDMwRDcxOUY5QzZEMzdFMkFDOUY0RDZENEIxRjdEOTc4 RUMyQTMyODkwHhcNMjYwODI1MDYzNTE3WhcNMjYwOTAxMDYzNTE3WjAYMRYwFAYD VQQDEw02YThkMzdhNS02OTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFnbFYO1wiYlBYWuOP4LZnep2RBUjYytYWJCfLeF4dzeYrYjczVX4Z/rdfTA jnqujDoL8+eW1b6y0wsavchycSvhMpwf73An7EU3IVAmFzjzX7cn2thT7EUkTzmc hUXU/TOIS1/cBm6x435/iH4m09Ku1yPn89N63pW7f5ReoFzkoKEx9OsiS5IrnCuE mydSVQVVsI5R//wd3DiIS+IjMnHp8RGvF1oqz7XFIxcBCiniNyUJEgLfLqCtavvj ieCIjkZvMVaKLmmVAr99zjkmbs5/QIgC+pBhDUC0vWUBb30379ZC2NocdU55e5uo XHCejafMYyj2HSgvm15A1ihe8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEs+mpg8 b9yBc8MfEUqUEWHTygGhMB8GA1UdIwQYMBaAFDDXGfnG034qyfTW1LH32XjsKjKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM0RC9GQzIwOTEzODU4 REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZpcko5TmJVc2ZmWmVPd3FN b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM0RC9GQzIwOTEzODU4REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZp cko5TmJVc2ZmWmVPd3FNb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWt1ja556grfnT7TIF2TFW1jPxsFacGDIHlbysfBwcop1ywkup5nRfTM92JIU 8qbr4NBUwhIqRop6Akp/z2jn3Q3lBnrkdfTM4iZTIvS2nFr5tZatZbpmd7JXR2Qr t4nTCKXufzz3QC2WOWDWQo9/4hvE7seGdhXvIwEPoiznUiSh9lUfp2qWCOVp8RMf 9h4fb79hO+ikFOaXde4uDFq0KXyVr9fMTxDadhhKyssU7nWZm+gC4NsFEPO9Dp4t ecC0v9i755/ziMD5246bHHjnNz38g+1RVp+LOrUSd4nc4jaHLlBOpvjgL22MX1LQ jDIj7bhsbWU05ieKNgxcIpf8sg== -----END CERTIFICATE-----Generated at Tue Aug 25 21:22:41 2026 by rpki-client