$ rpki-client -vvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft File: H2wzTrxkYqJkUoZ6u1-E72itwCw.mft (raw, json) Hash identifier: /oVSoJaCphLWFePVTobvEycZ+LfhJXcaQbWYWRaPkV4= Subject key identifier: 2E:49:2A:1A:04:7F:A4:95:90:C1:A0:48:43:AC:28:27:B9:B1:7A:2E Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C Certificate issuer: /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Certificate serial: 09D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft Manifest number: 09C4 Signing time: Tue 18 Aug 2026 20:14:49 +0000 Manifest this update: Tue 18 Aug 2026 20:14:48 +0000 Manifest next update: Tue 25 Aug 2026 20:14:48 +0000 Files and hashes: 1: H2wzTrxkYqJkUoZ6u1-E72itwCw.crl (hash: TNJy54/hK4GO6zMEG6rsizpiT/IJS3rqTikNiIczoJA=) 2: 46F4E81842B611F1BDBC0B88BD833773.roa (hash: bjvoF+HUltCMZqOM/EeOs1/NfOSmFvhkJtwfMjdbJBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2518 (0x9d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138447, serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Validity Not Before: Aug 18 20:14:48 2026 GMT Not After : Aug 25 20:14:48 2026 GMT Subject: CN=6a84bd39-62a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:e6:28:7f:8d:c7:45:72:fc:76:b2:d5:ad: b5:82:71:22:d3:34:71:d8:f2:d0:cd:6a:25:59:54: f2:7b:21:17:35:c5:d4:19:bd:66:51:dd:9a:79:56: 76:d1:00:39:b5:85:2a:2d:46:4b:97:18:ec:d2:8f: f7:13:b4:30:9f:9b:fe:13:83:7a:7d:63:6d:de:51: b0:81:df:e8:5c:7c:82:c4:0c:4c:f2:3b:64:be:f1: 39:c3:6a:a7:29:97:9e:50:96:71:76:ca:ea:d2:8a: 26:c4:a9:a0:e7:25:a8:13:e0:9b:6c:18:a9:a2:8a: 77:a6:c7:66:0a:03:02:df:c5:7f:48:b7:a0:95:b8: 14:8c:09:be:f1:ae:b0:62:9b:ad:0f:4a:0f:a2:8e: 20:8b:35:9c:bc:43:3f:f1:3a:13:c4:40:e8:a9:df: 78:f1:e3:06:ab:80:14:73:3c:2f:29:33:2e:8c:8e: e3:c2:f1:20:e0:cf:a6:a7:ba:29:4d:3c:84:72:6b: e8:b8:f2:a3:20:d0:57:7b:22:69:b0:98:e5:4c:3c: f2:6d:c4:e3:f5:62:72:43:07:ef:7f:2b:cb:b3:9a: f9:f8:45:48:c7:d7:15:98:87:8d:cb:46:1a:13:4b: e2:cf:78:21:c9:0c:27:c4:ad:6a:64:ae:53:d1:18: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:49:2A:1A:04:7F:A4:95:90:C1:A0:48:43:AC:28:27:B9:B1:7A:2E X509v3 Authority Key Identifier: keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c9:5d:91:64:e7:d2:51:5c:a9:15:12:be:eb:b4:21:27:5a: b5:69:19:de:54:e6:00:59:b8:d3:16:03:cd:64:42:20:cd:45: de:62:85:fd:c8:db:3a:ae:04:5c:a4:e1:e2:ce:f4:7d:d3:eb: cf:d8:83:55:f0:df:fb:19:bf:b3:64:a7:f8:ea:b1:5b:18:e8: 51:19:58:45:ec:88:3c:c3:27:08:70:34:a1:75:0f:36:48:ba: 87:ad:4d:5a:71:32:54:fc:b1:51:c8:02:9c:de:2f:fb:fe:83: 6d:42:34:65:6c:1a:cc:60:26:12:9c:bf:2d:b8:a5:1f:99:43: 26:29:65:5e:08:6b:51:a5:88:a5:e3:2a:a5:b9:3c:b1:1a:a6: 43:37:de:51:74:8c:3c:3e:fe:6f:7e:5d:52:66:c8:d8:73:ea: 78:de:97:5d:ca:20:49:9e:97:16:dc:7d:2d:de:c5:90:7b:12: 04:07:0c:89:5b:ed:d4:ec:d9:88:5d:e8:03:40:a4:a8:c9:e0: 12:0f:b8:74:12:2f:2a:ba:4a:e1:64:d6:d5:ad:2b:cd:04:1b: ec:18:c6:9a:11:85:b9:c2:91:34:a6:f2:38:da:16:71:c6:a3: a3:9a:f2:13:fe:6a:b2:f6:f9:8c:28:3c:f0:6b:ef:ba:d8:5f: b6:9d:ba:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NDcxMTAvBgNVBAUTKDFGNkMzMzRFQkM2NDYyQTI2NDUyODY3QUJCNUY4NEVG NjhBREMwMkMwHhcNMjYwODE4MjAxNDQ4WhcNMjYwODI1MjAxNDQ4WjAYMRYwFAYD VQQDEw02YTg0YmQzOS02MmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzPmKH+Nx0Vy/Hay1a21gnEi0zRx2PLQzWolWVTyeyEXNcXUGb1mUd2aeVZ2 0QA5tYUqLUZLlxjs0o/3E7Qwn5v+E4N6fWNt3lGwgd/oXHyCxAxM8jtkvvE5w2qn KZeeUJZxdsrq0oomxKmg5yWoE+CbbBipoop3psdmCgMC38V/SLeglbgUjAm+8a6w YputD0oPoo4gizWcvEM/8ToTxEDoqd948eMGq4AUczwvKTMujI7jwvEg4M+mp7op TTyEcmvouPKjINBXeyJpsJjlTDzybcTj9WJyQwfvfyvLs5r5+EVIx9cVmIeNy0Ya E0viz3ghyQwnxK1qZK5T0RgpZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5JKhoE f6SVkMGgSEOsKCe5sXouMB8GA1UdIwQYMBaAFB9sM068ZGKiZFKGertfhO9orcAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ0Ny80Q0VCM0MzQ0Iw RkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4a1lxSmtVb1o2dTEtRTcyaXR3 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyd3pUcnhrWXFKa1VvWjZ1MS1FNzJpdHdDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ0Ny80Q0VCM0MzQ0IwRkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4a1lx SmtVb1o2dTEtRTcyaXR3Q3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhsldkWTn0lFcqRUSvuu0ISdatWkZ3lTmAFm40xYDzWRCIM1F3mKF/cjbOq4E XKTh4s70fdPrz9iDVfDf+xm/s2Sn+OqxWxjoURlYReyIPMMnCHA0oXUPNki6h61N WnEyVPyxUcgCnN4v+/6DbUI0ZWwazGAmEpy/LbilH5lDJillXghrUaWIpeMqpbk8 sRqmQzfeUXSMPD7+b35dUmbI2HPqeN6XXcogSZ6XFtx9Ld7FkHsSBAcMiVvt1OzZ iF3oA0CkqMngEg+4dBIvKrpK4WTW1a0rzQQb7BjGmhGFucKRNKbyONoWccajo5ry E/5qsvb5jCg88Gvvuthftp26PA== -----END CERTIFICATE-----Generated at Wed Aug 19 16:04:21 2026 by rpki-client