$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json) Hash identifier: yiPE4Jiw1g5rZufcvHBPAGc4EY2VrupGx90vfNjEDvk= Subject key identifier: 08:21:23:F0:1E:5A:61:8E:D6:21:5B:38:55:10:98:6C:31:64:E5:EB Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft Manifest number: 09D8 Signing time: Tue 18 Aug 2026 20:10:34 +0000 Manifest this update: Tue 18 Aug 2026 20:10:34 +0000 Manifest next update: Tue 25 Aug 2026 20:10:34 +0000 Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: goZYyEryzKrVFioh6Ht2aZ9KHxY+gmQBBE6v0yQJafk=) 2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: 3mYXKQGPTclvrVN59MFw/zfTsvZixKAABlHasf+SFZU=) 3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: K9ygKHUO5qXA1XG+AYxwcORvRSOsX7Vi56bxTzrxJe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: Aug 18 20:10:34 2026 GMT Not After : Aug 25 20:10:34 2026 GMT Subject: CN=6a84bc3a-35c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:da:01:d7:69:e4:2c:70:98:dd:1a:7d:6c:dc: b9:41:ff:1c:ce:c9:4c:9b:0b:bb:02:e7:91:ca:a7: 32:ae:1f:8d:9a:a8:23:a4:83:31:c2:d8:9c:88:e0: 53:66:32:cd:01:71:f3:e0:e6:54:dc:e9:43:f1:c5: 9e:7a:6e:dd:3c:2b:f3:ce:48:35:16:70:f3:c6:f8: 83:4c:6d:c1:c9:e8:d4:f7:24:1c:0a:5f:a6:4c:a0: bb:4c:7b:c2:37:9c:26:15:73:f2:11:55:d9:e3:67: b9:9d:14:b0:fd:43:e3:61:b6:aa:ce:f5:59:64:93: 75:7a:fd:27:5a:d0:46:c6:43:90:ec:18:a6:5f:2e: 1c:a0:db:dd:6f:27:41:02:50:69:9a:4a:8f:61:cb: 7a:f0:c8:02:af:85:5e:f6:07:a3:95:84:7e:2e:39: 9f:6c:c2:8b:86:dd:58:5a:d4:b2:f9:1e:87:2b:50: 82:fa:9a:7c:c0:ae:00:da:81:88:31:cb:b5:14:72: c0:0e:11:4b:ef:39:08:5c:f5:fe:9e:f9:9e:ec:d5: c7:0b:4a:6e:52:24:c4:0e:80:94:ab:7d:ea:a0:93: 25:a5:d9:05:b7:6e:52:99:2f:2f:30:cf:c1:23:bc: d8:ae:e0:60:50:16:4a:c7:8f:ed:dc:39:30:bb:88: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:21:23:F0:1E:5A:61:8E:D6:21:5B:38:55:10:98:6C:31:64:E5:EB X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:c1:34:97:c4:ef:2b:72:2f:8c:fc:69:82:11:16:42:5e:1c: cf:70:87:c9:98:bc:98:0e:45:11:bd:68:d6:a1:91:9d:ab:6e: 06:1e:40:28:d9:2a:58:f2:9b:65:61:9a:9f:ce:8f:b5:21:1a: 9c:a9:f7:83:99:0a:1c:d5:3d:71:73:87:24:4b:f9:6b:ce:63: eb:a1:72:dc:48:d3:05:a6:d4:4b:32:2a:dc:d4:d4:87:cb:1c: c4:77:f2:86:21:b7:f2:0c:ba:7e:47:ba:96:e4:d2:8e:c4:a7: 64:29:2b:81:98:83:41:0f:1a:5a:e9:bf:0a:fe:55:b4:03:2e: 36:0b:7e:0e:f9:7f:fd:00:94:51:0c:19:4e:cf:3d:16:62:2a: 26:50:34:66:86:b6:fc:cd:88:8e:d5:3d:20:51:5a:d0:bc:9e: bd:3e:6d:ad:ea:f4:b0:6c:f2:77:d6:29:0e:27:38:03:42:64: 47:4f:e1:a0:2c:db:95:83:71:43:41:53:4c:2d:a1:e8:1e:43: b3:1c:1d:96:09:0d:dc:3a:a0:0d:3e:3e:54:bf:83:4e:2b:f3: 17:85:b7:b2:9c:42:d7:4f:7c:65:b4:1e:5f:a8:f7:13:3d:5e: f8:d3:e6:6d:97:02:06:47:99:c6:ed:10:65:de:60:45:34:52: 70:2a:03:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjYwODE4MjAxMDM0WhcNMjYwODI1MjAxMDM0WjAYMRYwFAYD VQQDEw02YTg0YmMzYS0zNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAidoB12nkLHCY3Rp9bNy5Qf8czslMmwu7AueRyqcyrh+NmqgjpIMxwticiOBT ZjLNAXHz4OZU3OlD8cWeem7dPCvzzkg1FnDzxviDTG3ByejU9yQcCl+mTKC7THvC N5wmFXPyEVXZ42e5nRSw/UPjYbaqzvVZZJN1ev0nWtBGxkOQ7BimXy4coNvdbydB AlBpmkqPYct68MgCr4Ve9gejlYR+LjmfbMKLht1YWtSy+R6HK1CC+pp8wK4A2oGI Mcu1FHLADhFL7zkIXPX+nvme7NXHC0puUiTEDoCUq33qoJMlpdkFt25SmS8vMM/B I7zYruBgUBZKx4/t3Dkwu4i3kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAghI/Ae WmGO1iFbOFUQmGwxZOXrMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEE1My83MUI3RDQ3MEFCNEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2 Y0NkTURPZHpnNUlfRldKeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoME0l8TvK3IvjPxpghEWQl4cz3CHyZi8mA5FEb1o1qGRnatuBh5AKNkqWPKb ZWGan86PtSEanKn3g5kKHNU9cXOHJEv5a85j66Fy3EjTBabUSzIq3NTUh8scxHfy hiG38gy6fke6luTSjsSnZCkrgZiDQQ8aWum/Cv5VtAMuNgt+Dvl//QCUUQwZTs89 FmIqJlA0Zoa2/M2IjtU9IFFa0LyevT5trer0sGzyd9YpDic4A0JkR0/hoCzblYNx Q0FTTC2h6B5DsxwdlgkN3DqgDT4+VL+DTivzF4W3spxC1098ZbQeX6j3Ez1e+NPm bZcCBkeZxu0QZd5gRTRScCoDog== -----END CERTIFICATE-----Generated at Wed Aug 19 16:47:51 2026 by rpki-client