$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json) Hash identifier: IwPC6MSV7FpqcGNSEoxiPpqWUO31tjTsjI+tbzI6ei8= Subject key identifier: 43:E2:78:89:CC:97:F8:E7:AA:63:75:FB:28:67:2E:F5:4E:98:55:5D Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Certificate serial: 356B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft Manifest number: 356B Signing time: Tue 18 Aug 2026 14:51:23 +0000 Manifest this update: Tue 18 Aug 2026 14:51:23 +0000 Manifest next update: Tue 25 Aug 2026 14:51:23 +0000 Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: BlHwBo+WE7/9q8RCYjGyjHdUSsqTSyo1dPWhcNxyqf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13675 (0x356b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Validity Not Before: Aug 18 14:51:23 2026 GMT Not After : Aug 25 14:51:23 2026 GMT Subject: CN=6a84716b-f36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:c7:5d:f6:6d:c9:6e:70:4c:16:f8:0b:6b: 87:f6:90:54:e0:49:c8:ec:21:fa:d1:4a:49:39:88: 67:84:9f:fb:6b:45:dc:2e:83:f1:20:5b:e0:ee:75: 71:ca:ba:66:0d:91:58:b4:1d:68:b4:26:d1:21:8e: 2a:72:ef:25:a7:e3:52:8e:8e:5e:a6:d9:54:61:63: 01:46:ba:3d:e3:3b:22:31:97:e9:31:b5:ea:94:7b: b3:53:2c:cc:c1:e8:d8:1c:56:df:1e:49:d5:b7:c8: 80:7d:1d:e8:0f:3f:47:fb:89:ca:f6:07:69:95:45: 12:1c:14:45:14:c5:6c:af:0d:2a:6c:54:b1:d2:d9: d6:fb:d3:4d:f7:f1:a4:d7:b6:4b:de:55:46:e4:87: e9:01:78:98:71:af:a9:e2:58:9f:2f:0d:a7:7a:63: a4:bd:c0:1a:e9:0d:b5:cf:81:71:2a:b0:83:30:13: 51:d2:4e:98:01:26:b0:c8:e0:84:26:7e:61:7c:4b: 93:e0:e6:1f:c7:50:fe:eb:9f:11:51:44:de:b5:c1: 32:47:77:d9:77:70:04:0c:6c:19:11:e7:8b:03:98: 7c:80:ff:1e:1b:03:7a:f8:9c:54:85:15:41:a9:d8: 04:1e:0e:7e:e5:59:30:e1:17:d1:61:ae:8d:1c:1a: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E2:78:89:CC:97:F8:E7:AA:63:75:FB:28:67:2E:F5:4E:98:55:5D X509v3 Authority Key Identifier: keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7e:14:fb:17:4f:6d:f5:e6:fb:7c:83:67:4f:2b:89:7a:0a: 56:e3:20:17:38:31:44:35:57:53:4c:e5:70:44:7d:2b:c0:b1: d4:26:13:d4:87:82:26:ad:44:b5:29:f6:b7:e1:22:e3:db:6c: 52:b6:13:18:09:fb:64:12:d9:d2:4a:fc:12:cb:16:15:ff:8f: 3e:dd:3d:cf:b3:c4:b5:24:30:5b:91:32:ef:91:22:83:2d:b9: 87:6c:13:cc:c7:14:a2:29:80:09:a2:98:98:25:2a:3d:78:35: 36:51:ef:74:4a:d6:61:07:c3:a4:d7:3e:1b:cb:a3:d1:0c:9d: 28:ca:8f:f1:3b:d5:c4:5c:86:0a:cf:8c:9b:e7:b5:0c:3a:d5: 10:e4:1c:e9:e5:c6:37:ea:ba:de:d8:87:21:cb:fe:80:7e:dc: 53:ee:fc:f6:87:23:26:5a:d6:cb:f8:34:60:41:4d:4a:f8:cf: 58:90:60:ef:6f:39:dc:24:91:dc:b6:56:ae:e9:49:f9:57:b7: 4f:8d:f6:12:3c:ec:9e:e1:7b:14:53:f9:6e:c8:f4:fe:cf:26: 36:ba:21:13:2b:8a:08:11:b0:8b:54:95:65:13:33:ff:71:c0: 8b:43:b7:1b:fc:2f:d5:62:cc:29:94:cb:04:73:fa:d0:24:a8: e3:de:36:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3NEFCMEZDNjNF MDU1OEU1REMwHhcNMjYwODE4MTQ1MTIzWhcNMjYwODI1MTQ1MTIzWjAYMRYwFAYD VQQDEw02YTg0NzE2Yi1mMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVLHXfZtyW5wTBb4C2uH9pBU4EnI7CH60UpJOYhnhJ/7a0XcLoPxIFvg7nVx yrpmDZFYtB1otCbRIY4qcu8lp+NSjo5eptlUYWMBRro94zsiMZfpMbXqlHuzUyzM wejYHFbfHknVt8iAfR3oDz9H+4nK9gdplUUSHBRFFMVsrw0qbFSx0tnW+9NN9/Gk 17ZL3lVG5IfpAXiYca+p4lifLw2nemOkvcAa6Q21z4FxKrCDMBNR0k6YASawyOCE Jn5hfEuT4OYfx1D+658RUUTetcEyR3fZd3AEDGwZEeeLA5h8gP8eGwN6+JxUhRVB qdgEHg5+5Vkw4RfRYa6NHBrlhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPieInM l/jnqmN1+yhnLvVOmFVdMB8GA1UdIwQYMBaAFNpgTP2ycwqN5yX8dKsPxj4FWOXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0E5Qi9GQzA1OEU1NjFE OTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNvM25KZngwcXdfR1BnVlk1 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtQk1fYkp6Q28zbkpmeDBxd19HUGdWWTVkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNv M25KZngwcXdfR1BnVlk1ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcX4U+xdPbfXm+3yDZ08riXoKVuMgFzgxRDVXU0zlcER9K8Cx1CYT1IeCJq1E tSn2t+Ei49tsUrYTGAn7ZBLZ0kr8EssWFf+PPt09z7PEtSQwW5Ey75Eigy25h2wT zMcUoimACaKYmCUqPXg1NlHvdErWYQfDpNc+G8uj0QydKMqP8TvVxFyGCs+Mm+e1 DDrVEOQc6eXGN+q63tiHIcv+gH7cU+789ocjJlrWy/g0YEFNSvjPWJBg72853CSR 3LZWrulJ+Ve3T432EjzsnuF7FFP5bsj0/s8mNrohEyuKCBGwi1SVZRMz/3HAi0O3 G/wv1WLMKZTLBHP60CSo4942lw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:10 2026 by rpki-client