$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft File: 2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft (raw, json) Hash identifier: hY+pRxNNkPItSytHT7rmkyOHGH+KZHCQUXSsM4wkvYI= Subject key identifier: A6:BC:BB:32:60:8C:49:C8:81:0B:1D:C6:9C:6C:57:53:5D:6E:79:A6 Authority key identifier: D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 Certificate issuer: /CN=A9138A44/serialNumber=D921C018F284F2574B671834A848DD934247FA00 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft Manifest number: 06 Signing time: Mon 31 Aug 2026 09:39:09 +0000 Manifest this update: Mon 31 Aug 2026 09:39:09 +0000 Manifest next update: Mon 07 Sep 2026 09:39:09 +0000 Files and hashes: 1: 2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl (hash: 55gvCaEpSP5bMUpb0q6q0izzZe++YDLU1AHjAzUpZsc=) 2: 53F5B3FAA11911F1AA6D5C983C11F970.roa (hash: W6FAy14Qs/4IBAuF6r/C27RQuwXDjcTuwQ+QiTmoY9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A44, serialNumber=D921C018F284F2574B671834A848DD934247FA00 Validity Not Before: Aug 31 09:39:09 2026 GMT Not After : Sep 7 09:39:09 2026 GMT Subject: CN=6a954bbd-b6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:ff:30:31:5b:8e:d4:03:2b:7c:0d:a1:31: cd:29:30:80:cd:1a:10:fc:0d:bd:50:00:ee:41:7d: 8a:89:a2:c3:a2:14:70:2c:0f:c0:28:24:f4:c3:6e: 2d:78:f1:d4:bb:a4:2d:4a:69:25:ec:bf:92:b8:5f: 53:8f:28:32:2b:5e:0a:58:1a:2f:03:ca:1c:fe:de: eb:f3:c8:1b:22:62:64:e5:7e:e2:14:ac:82:aa:25: ac:38:62:b4:ec:c2:7b:40:2d:39:90:7c:16:72:01: 9f:fa:ea:ae:c9:8e:a0:f7:71:3e:59:95:25:d2:91: 04:4b:76:c7:67:f2:9e:04:96:11:f0:5d:cb:56:0f: fe:70:c2:60:a5:55:2f:55:14:19:f6:af:9e:1b:7d: 4c:3c:ea:95:ba:ae:e6:92:84:96:3f:28:8e:84:8e: 6b:66:ba:14:eb:94:00:d7:a9:93:3a:58:25:32:f1: 1c:ee:2d:02:42:d1:d4:c9:be:cd:13:db:36:d4:fa: ad:4e:bb:6c:2e:ff:52:85:ca:e5:99:2e:c9:52:74: 05:23:97:5b:14:7c:78:fe:bf:3a:ea:ad:12:a2:97: 05:30:bb:3d:17:bf:e4:8a:85:69:0a:0f:0e:31:fb: 9f:0a:17:30:57:a3:2e:bd:57:08:dd:ce:15:cc:7c: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:BB:32:60:8C:49:C8:81:0B:1D:C6:9C:6C:57:53:5D:6E:79:A6 X509v3 Authority Key Identifier: keyid:D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:0d:71:60:e0:46:d9:c4:13:6b:c2:7c:4a:7b:d9:f3:10:d9: e7:ed:c3:90:91:3e:9a:39:c2:e1:cd:59:99:da:10:26:6c:e2: dc:d7:c0:85:2a:7a:2f:0d:9d:1b:f5:82:f7:9a:b8:a4:7a:3a: e5:b9:18:54:18:1b:cc:ee:d8:ec:86:df:4d:08:5e:30:ce:11: e8:13:e1:2b:c0:18:76:5a:85:39:62:f0:39:be:fb:01:cf:24: 57:d1:fd:82:87:5f:85:16:58:47:b1:30:c0:84:d1:cf:7e:fa: d8:6e:a3:2f:90:10:c8:80:c0:a8:78:18:80:85:26:64:cb:a2: 53:9e:94:85:cc:98:d4:10:5e:df:b2:58:08:3c:4d:0f:2c:42: c4:96:22:58:9c:1f:72:c7:cd:c5:64:4d:51:53:26:62:0e:d6: d3:c6:26:c7:cb:14:98:ca:de:5f:6b:d2:73:27:80:95:0b:cb: 05:8d:41:c3:ec:b8:89:d0:13:b0:e0:50:c7:88:6e:bb:88:c4: 82:3c:ba:8b:3e:d4:f8:3b:37:59:0f:8c:f0:ff:5e:23:86:0c: 93:20:41:12:d3:c5:e2:26:9b:21:e9:b1:02:9b:f3:5b:b2:77: 69:aa:c8:54:37:9b:47:77:cd:77:b6:d6:6c:bc:a0:c0:16:2e: b9:fd:0c:10 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEE0NDExMC8GA1UEBRMoRDkyMUMwMThGMjg0RjI1NzRCNjcxODM0QTg0OEREOTM0 MjQ3RkEwMDAeFw0yNjA4MzEwOTM5MDlaFw0yNjA5MDcwOTM5MDlaMBgxFjAUBgNV BAMTDTZhOTU0YmJkLWI2ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9/v8wMVuO1AMrfA2hMc0pMIDNGhD8Db1QAO5BfYqJosOiFHAsD8AoJPTDbi14 8dS7pC1KaSXsv5K4X1OPKDIrXgpYGi8Dyhz+3uvzyBsiYmTlfuIUrIKqJaw4YrTs wntALTmQfBZyAZ/66q7JjqD3cT5ZlSXSkQRLdsdn8p4ElhHwXctWD/5wwmClVS9V FBn2r54bfUw86pW6ruaShJY/KI6EjmtmuhTrlADXqZM6WCUy8RzuLQJC0dTJvs0T 2zbU+q1Ou2wu/1KFyuWZLslSdAUjl1sUfHj+vzrqrRKilwUwuz0Xv+SKhWkKDw4x +58KFzBXoy69VwjdzhXMfNLtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpry7MmCM SciBCx3GnGxXU11ueaYwHwYDVR0jBBgwFoAU2SHAGPKE8ldLZxg0qEjdk0JH+gAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QTQ0LzZERkU0QkQ2QTEw NTExRjE4MENFQjZFRjM1MTFGOTcwLzJTSEFHUEtFOGxkTFp4ZzBxRWpkazBKSC1n QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlNIQUdQS0U4bGRMWnhnMHFFamRrMEpILWdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QTQ0LzZERkU0QkQ2QTEwNTExRjE4MENFQjZFRjM1MTFGOTcwLzJTSEFHUEtFOGxk TFp4ZzBxRWpkazBKSC1nQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVDXFg4EbZxBNrwnxKe9nzENnn7cOQkT6aOcLhzVmZ2hAmbOLc18CFKnovDZ0b 9YL3mrikejrluRhUGBvM7tjsht9NCF4wzhHoE+ErwBh2WoU5YvA5vvsBzyRX0f2C h1+FFlhHsTDAhNHPfvrYbqMvkBDIgMCoeBiAhSZky6JTnpSFzJjUEF7fslgIPE0P LELEliJYnB9yx83FZE1RUyZiDtbTxibHyxSYyt5fa9JzJ4CVC8sFjUHD7LiJ0BOw 4FDHiG67iMSCPLqLPtT4OzdZD4zw/14jhgyTIEES08XiJpsh6bECm/NbsndpqshU N5tHd813ttZsvKDAFi65/QwQ -----END CERTIFICATE-----Generated at Tue Sep 1 02:29:59 2026 by rpki-client