$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft File: imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft (raw, json) Hash identifier: ari0bXfuqBtwNFGZtftylOCC1WyOja4tE/pO+9iElNY= Subject key identifier: 33:7F:09:C6:3E:36:2E:AB:AE:E6:7D:2C:64:C6:9F:CD:47:4C:42:2B Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Certificate serial: 2E8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft Manifest number: 2E0F Signing time: Tue 18 Aug 2026 15:33:48 +0000 Manifest this update: Tue 18 Aug 2026 15:33:47 +0000 Manifest next update: Tue 25 Aug 2026 15:33:47 +0000 Files and hashes: 1: imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl (hash: rpagHdd2xry4NEkrCybn1Ka0KF8JLo75Zhj4O6unlIA=) 2: 4221CE240EC211EB9F6B1914C4F9AE02.roa (hash: 98d7Szz1xVrKOjRtTK04BwOwzNCfjc24NwJ5XcHSo3Y=) 3: 3E0A6ED49E7B11EFBD44280AC4F9AE02.roa (hash: I9utLoQOo+FgrMzcmZ+nktkwChduEwkgHWKAKFKVei8=) 4: EAB11C569E7A11EF9C2A9E09C4F9AE02.roa (hash: WjyM3KD8j7LYktjGDYnf9TzfHp76S+j3QqZZ2zALeh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11919 (0x2e8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127523, serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Validity Not Before: Aug 18 15:33:47 2026 GMT Not After : Aug 25 15:33:47 2026 GMT Subject: CN=6a847b5c-35b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:0f:ec:58:18:52:ae:b4:2c:39:0c:48:e7:ab: 2a:5c:62:db:00:7e:1e:94:0f:a7:bc:09:6d:0f:b9: 58:1b:c9:7c:9f:b7:3a:93:4e:31:03:28:8e:be:d5: 55:3b:8f:67:0e:fe:d4:6e:df:78:a2:ed:93:c5:f9: b4:c2:2b:65:ec:08:02:d9:99:97:9b:b6:31:5f:8d: cf:61:00:b2:31:cb:9f:eb:ee:6c:08:46:e8:33:b0: f6:70:4f:a5:cc:be:34:af:a6:56:79:7e:9d:27:22: 4f:a1:35:65:f7:58:2d:ed:6a:d4:b9:a2:24:08:6d: a8:cb:ed:1f:9f:59:e1:59:7a:cd:68:98:1c:35:ef: b0:b4:0d:f8:1c:20:95:18:ad:a7:45:2c:40:79:8a: e1:f6:1d:c2:c7:7c:ec:d0:e7:a4:ee:75:e0:3c:6b: 96:24:a3:a8:eb:5b:5a:c9:e6:ce:64:50:27:14:92: 9d:f4:b7:89:54:5c:63:53:84:97:36:a7:74:c2:25: fc:ec:3e:a2:b3:45:d5:38:93:52:ea:38:f8:7b:a5: 0e:c8:ee:ab:7d:cf:60:55:b8:7d:f0:35:f9:dc:8c: a6:63:5f:38:de:93:6f:20:82:b0:d4:7b:55:c8:94: c0:98:39:ff:b4:4b:9e:fb:0f:fb:c4:49:32:b9:52: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:09:C6:3E:36:2E:AB:AE:E6:7D:2C:64:C6:9F:CD:47:4C:42:2B X509v3 Authority Key Identifier: keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e0:85:f1:91:27:22:7a:c8:83:de:1b:de:b7:86:8b:51:ef: 9b:e9:5b:5b:37:6d:ae:28:ca:3f:ed:d5:98:03:d9:d9:4c:39: 8b:71:42:4c:7f:a4:b4:39:bf:b8:4c:1e:f2:36:a1:64:e7:9f: d6:25:1b:25:1d:3d:76:ed:93:4c:e8:2f:44:2d:53:f2:00:61: 49:96:e0:3f:7e:e9:b7:49:01:25:dd:95:1a:5b:a6:93:03:08: b3:c8:53:d3:20:43:3d:60:e0:65:d3:ae:af:b4:00:8a:eb:e0: 39:ac:0b:66:45:13:ab:14:c3:61:70:58:e1:28:ac:9a:4b:7e: e3:35:d0:10:f4:04:46:1a:b3:8b:66:f4:93:b7:0d:0b:70:90: 09:17:8b:80:e2:ee:f3:e0:8c:b9:b1:eb:46:28:f9:66:84:cd: be:b5:97:49:1b:c4:67:f3:50:a1:3a:90:90:9f:86:35:7c:54: 96:8b:b7:a7:08:9c:0a:f8:fb:35:71:ce:0f:2d:28:7b:41:42: 0c:51:9c:7d:b4:c8:a9:71:0a:f2:35:dd:c5:b0:70:f2:f8:86: 48:92:a5:de:07:54:1e:ac:1c:54:5b:c2:e0:1b:ef:be:a6:a1: ef:7b:ab:e5:35:ef:5a:d3:02:23:22:8e:59:4c:22:6e:4f:04: 9d:a1:06:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1MjMxMTAvBgNVBAUTKDhBNjgxREQwQzQzNzMxRDBGNDc2M0E0REJERDVENEND MDFGRDY0QzIwHhcNMjYwODE4MTUzMzQ3WhcNMjYwODI1MTUzMzQ3WjAYMRYwFAYD VQQDEw02YTg0N2I1Yy0zNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/g/sWBhSrrQsOQxI56sqXGLbAH4elA+nvAltD7lYG8l8n7c6k04xAyiOvtVV O49nDv7Ubt94ou2Txfm0witl7AgC2ZmXm7YxX43PYQCyMcuf6+5sCEboM7D2cE+l zL40r6ZWeX6dJyJPoTVl91gt7WrUuaIkCG2oy+0fn1nhWXrNaJgcNe+wtA34HCCV GK2nRSxAeYrh9h3Cx3zs0Oek7nXgPGuWJKOo61tayebOZFAnFJKd9LeJVFxjU4SX Nqd0wiX87D6is0XVOJNS6jj4e6UOyO6rfc9gVbh98DX53IymY1843pNvIIKw1HtV yJTAmDn/tEue+w/7xEkyuVKslwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDN/CcY+ Ni6rruZ9LGTGn81HTEIrMB8GA1UdIwQYMBaAFIpoHdDENzHQ9HY6Tb3V1MwB/WTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzUyMy8xMkI5OTdFODlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01kRDBkanBOdmRYVXpBSDla TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltZ2QwTVEzTWREMGRqcE52ZFhVekFIOVpNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzUyMy8xMkI5OTdFODlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01k RDBkanBOdmRYVXpBSDlaTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfuCF8ZEnInrIg94b3reGi1Hvm+lbWzdtrijKP+3VmAPZ2Uw5i3FCTH+ktDm/ uEwe8jahZOef1iUbJR09du2TTOgvRC1T8gBhSZbgP37pt0kBJd2VGlumkwMIs8hT 0yBDPWDgZdOur7QAiuvgOawLZkUTqxTDYXBY4Sismkt+4zXQEPQERhqzi2b0k7cN C3CQCReLgOLu8+CMubHrRij5ZoTNvrWXSRvEZ/NQoTqQkJ+GNXxUlou3pwicCvj7 NXHODy0oe0FCDFGcfbTIqXEK8jXdxbBw8viGSJKl3gdUHqwcVFvC4Bvvvqah73ur 5TXvWtMCIyKOWUwibk8EnaEGIg== -----END CERTIFICATE-----Generated at Wed Aug 19 15:17:34 2026 by rpki-client