$ rpki-client -vvvf rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft File: 2DV6n0vTGCELX3cfCV2G_dtycq8.mft (raw, json) Hash identifier: dxqpZrPh3Kdr7MQf/WZTX3+TYE/bEDZihCpVuyMo7OQ= Subject key identifier: BA:D2:20:60:C5:BF:2E:A7:37:7D:46:9A:A9:B0:3F:15:D2:0C:A4:3F Authority key identifier: D8:35:7A:9F:4B:D3:18:21:0B:5F:77:1F:09:5D:86:FD:DB:72:72:AF Certificate issuer: /CN=A91285B0/serialNumber=D8357A9F4BD318210B5F771F095D86FDDB7272AF Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DV6n0vTGCELX3cfCV2G_dtycq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft Manifest number: 09 Signing time: Tue 25 Aug 2026 09:06:01 +0000 Manifest this update: Tue 25 Aug 2026 09:06:01 +0000 Manifest next update: Tue 01 Sep 2026 09:06:01 +0000 Files and hashes: 1: 2DV6n0vTGCELX3cfCV2G_dtycq8.crl (hash: BSp5pRbJdoEaCe2MilKIHSWZOKpQ2lDtdmF28xvXXFc=) 2: B1F05BC897CC11F19AC96A7D6211F970.roa (hash: 4DI8XgGHG4T3ff5h2QztBlN6qygGWRJXhkGqL1S6tQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.crl rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DV6n0vTGCELX3cfCV2G_dtycq8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 09:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91285B0, serialNumber=D8357A9F4BD318210B5F771F095D86FDDB7272AF Validity Not Before: Aug 25 09:06:01 2026 GMT Not After : Sep 1 09:06:01 2026 GMT Subject: CN=6a8d5af9-6219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:88:0c:86:84:fb:03:dc:5d:2d:12:30:2d: ac:df:f6:e7:37:b9:34:b8:4d:0d:ae:9b:29:03:d0: 07:49:5d:5d:32:18:4c:24:81:c5:76:74:80:ae:f7: 7a:eb:c7:a9:d4:21:c0:9f:28:c6:a5:12:ff:b2:4f: 75:ab:30:90:6f:98:67:7e:17:0a:1e:9e:98:98:2c: 5a:a9:00:af:88:ae:05:67:ef:ba:a8:f6:31:c8:6e: b4:7e:a2:fd:c9:bb:0f:7e:9b:bb:0f:b7:94:da:52: 7f:77:0a:13:3e:e0:21:dc:78:d1:02:c6:00:7e:5d: cf:fa:fe:35:0d:96:55:75:97:06:2d:33:6c:2b:35: 0b:65:27:61:d5:1d:6e:c8:77:43:3c:33:0a:b4:d7: 7c:1e:39:8d:49:3e:cf:cb:28:66:32:c3:3f:1b:3c: c2:fa:2e:36:27:6f:2a:0a:c0:00:bd:ac:3f:e1:34: c0:bd:22:5a:d0:98:d1:f4:a3:0d:3e:33:f3:8f:0c: 89:0b:7d:d3:5f:0e:cb:37:8c:e1:e4:19:d7:6d:76: 05:bf:fa:bc:34:d4:64:96:46:b4:f0:5e:02:e1:b9: 3a:ca:b0:58:bf:0f:4a:11:24:66:32:f4:2e:df:16: 3c:42:2c:49:cc:02:9c:61:04:21:db:88:6b:0c:7f: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D2:20:60:C5:BF:2E:A7:37:7D:46:9A:A9:B0:3F:15:D2:0C:A4:3F X509v3 Authority Key Identifier: keyid:D8:35:7A:9F:4B:D3:18:21:0B:5F:77:1F:09:5D:86:FD:DB:72:72:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DV6n0vTGCELX3cfCV2G_dtycq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285B0/0BE8291296FB11F1905E2C516311F970/2DV6n0vTGCELX3cfCV2G_dtycq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:ae:39:c5:e4:1a:c1:a5:6a:52:de:0c:32:84:7b:05:19:02: 5a:59:71:5c:ef:43:61:99:eb:52:d1:5e:81:1b:92:cf:b3:b8: 6d:31:f6:4d:06:72:f0:63:0f:a9:b6:56:b2:7c:70:81:dd:d3: 05:ae:8c:13:a9:81:f5:c3:b1:1e:df:b5:43:02:47:1b:a7:ba: 5c:6e:78:aa:95:0f:5a:1c:d7:77:36:6a:08:19:32:29:fd:fb: ff:17:42:29:d1:79:67:28:31:6e:b6:16:a9:c4:ee:71:6d:5a: bd:5f:2c:b2:59:5b:19:98:d6:55:0f:63:e5:9f:ea:ec:cb:d3: af:52:40:83:d7:4f:f8:3e:a3:0d:3c:73:b6:96:da:60:e2:8b: e1:90:b3:f9:9e:a7:50:e2:43:1a:4c:cd:ad:b6:b3:b3:6a:6a: c7:dc:46:fa:9c:19:3a:f9:6d:1d:20:df:e4:d3:82:7d:9c:3b: 95:91:2d:95:26:4c:cd:19:37:c9:66:d5:9b:43:97:f9:ad:46: 01:92:30:d6:b5:03:78:08:4f:0c:d6:92:e0:50:b7:af:86:3c: 68:d9:44:e3:5c:2f:0b:66:46:16:9d:0d:a0:f7:46:27:f7:c2: 76:1c:66:e0:7f:50:75:90:7d:e1:2b:4e:d1:37:de:83:48:3a: 7e:8e:87:c4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODVCMDExMC8GA1UEBRMoRDgzNTdBOUY0QkQzMTgyMTBCNUY3NzFGMDk1RDg2RkRE QjcyNzJBRjAeFw0yNjA4MjUwOTA2MDFaFw0yNjA5MDEwOTA2MDFaMBgxFjAUBgNV BAMTDTZhOGQ1YWY5LTYyMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDBIgMhoT7A9xdLRIwLazf9uc3uTS4TQ2umykD0AdJXV0yGEwkgcV2dICu93rr x6nUIcCfKMalEv+yT3WrMJBvmGd+FwoenpiYLFqpAK+IrgVn77qo9jHIbrR+ov3J uw9+m7sPt5TaUn93ChM+4CHceNECxgB+Xc/6/jUNllV1lwYtM2wrNQtlJ2HVHW7I d0M8Mwq013weOY1JPs/LKGYywz8bPML6LjYnbyoKwAC9rD/hNMC9IlrQmNH0ow0+ M/OPDIkLfdNfDss3jOHkGddtdgW/+rw01GSWRrTwXgLhuTrKsFi/D0oRJGYy9C7f FjxCLEnMApxhBCHbiGsMf4FlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUutIgYMW/ Lqc3fUaaqbA/FdIMpD8wHwYDVR0jBBgwFoAU2DV6n0vTGCELX3cfCV2G/dtycq8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NUIwLzBCRTgyOTEyOTZG QjExRjE5MDVFMkM1MTYzMTFGOTcwLzJEVjZuMHZUR0NFTFgzY2ZDVjJHX2R0eWNx OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMkRWNm4wdlRHQ0VMWDNjZkNWMkdfZHR5Y3E4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NUIwLzBCRTgyOTEyOTZGQjExRjE5MDVFMkM1MTYzMTFGOTcwLzJEVjZuMHZUR0NF TFgzY2ZDVjJHX2R0eWNxOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC9rjnF5BrBpWpS3gwyhHsFGQJaWXFc70NhmetS0V6BG5LPs7htMfZNBnLwYw+p tlayfHCB3dMFrowTqYH1w7Ee37VDAkcbp7pcbniqlQ9aHNd3NmoIGTIp/fv/F0Ip 0XlnKDFuthapxO5xbVq9XyyyWVsZmNZVD2Pln+rsy9OvUkCD10/4PqMNPHO2ltpg 4ovhkLP5nqdQ4kMaTM2ttrOzamrH3Eb6nBk6+W0dIN/k04J9nDuVkS2VJkzNGTfJ ZtWbQ5f5rUYBkjDWtQN4CE8M1pLgULevhjxo2UTjXC8LZkYWnQ2g90Yn98J2HGbg f1B1kH3hK07RN96DSDp+jofE -----END CERTIFICATE-----Generated at Thu Aug 27 04:49:25 2026 by rpki-client