$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft File: 2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json) Hash identifier: I9xM4Uz8fQnbuxhcyz5QeqsE6tg9oU6HNV7pnOghFvw= Subject key identifier: C3:59:DC:90:38:B4:79:0D:E7:FD:DD:2D:FE:27:E1:D5:03:99:70:6A Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft Manifest number: 09B1 Signing time: Tue 18 Aug 2026 20:16:14 +0000 Manifest this update: Tue 18 Aug 2026 20:16:13 +0000 Manifest next update: Tue 25 Aug 2026 20:16:13 +0000 Files and hashes: 1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: l5pMF+0/nBEWzdCpqtbpN4GiEBM+Yf6jioVOEJPn7nc=) 2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: 0ne4K9JoSK2WlX9JqXTzRcGcBBHfVYU04ULkoNhTDPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Validity Not Before: Aug 18 20:16:13 2026 GMT Not After : Aug 25 20:16:13 2026 GMT Subject: CN=6a84bd8e-0380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:cb:21:62:a0:6b:7b:97:ae:e6:15:33:12:24: e5:67:90:4e:aa:f4:ef:ef:86:17:9f:da:d4:9f:a7: d2:70:fd:09:4f:37:68:27:fe:43:82:0e:8e:8d:cf: 8c:84:62:14:69:0c:9a:ee:2a:2e:86:c1:fd:fb:7b: 6a:dc:35:fd:69:e8:5a:cb:bb:51:23:6d:0f:f7:20: a1:0f:38:ff:c2:79:44:b2:b9:e2:07:0a:20:46:7a: 58:1d:61:5c:0d:62:f4:60:ef:a8:a7:7e:6d:18:44: ce:a6:9d:d2:23:04:d1:d1:f6:4c:ba:c5:ab:ee:02: 3b:69:b9:d9:91:8a:93:a7:83:21:76:9d:c7:d4:9b: 4b:2b:c2:ec:f7:6c:be:db:34:bf:cb:8a:e9:93:01: fa:98:ca:20:cb:f2:fc:3a:c9:1e:ea:0b:5c:15:e4: b8:19:7e:21:65:6e:ea:eb:30:6b:07:01:17:cd:0c: 0a:1e:36:f8:1b:db:d0:df:20:db:1a:60:36:30:9a: cf:d7:ff:71:2e:43:80:4e:e7:d8:85:7c:97:32:f4: b3:22:9d:d2:1c:82:ea:8b:49:06:9c:04:6d:ed:71: f5:44:7f:26:fd:03:c0:ec:3a:ec:07:1e:9d:ad:ce: 45:07:9d:7e:d1:b6:b6:40:81:79:df:29:5e:e3:c3: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:59:DC:90:38:B4:79:0D:E7:FD:DD:2D:FE:27:E1:D5:03:99:70:6A X509v3 Authority Key Identifier: keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:42:e0:ae:6d:e1:b8:8d:48:7f:c7:ad:56:22:de:0d:17:8a: 19:4f:f3:cd:ea:12:03:39:b0:50:89:37:a8:3e:7c:11:85:88: 21:c0:9b:38:7f:6e:55:53:d6:1d:32:99:73:04:50:99:75:cb: f7:a8:f1:0d:16:7c:7f:ef:43:4f:63:a2:56:b9:c4:e3:2e:c7: 7d:2a:b6:b1:b7:05:67:f8:1e:47:1c:66:14:34:c4:61:ac:5f: 57:04:c0:e5:d8:10:ab:b4:3c:ed:35:19:82:ca:ff:23:8e:21: 44:cc:72:50:f2:b0:6b:1f:08:46:2d:3e:f8:c0:95:b3:6b:5a: a7:c9:dc:fb:81:cb:af:38:9d:b9:a2:8d:af:3a:12:f8:32:4f: 42:99:8e:26:96:eb:4f:6d:44:46:02:33:67:3c:b7:6d:18:eb: e5:7c:9f:82:3d:f1:ee:92:3b:0c:d0:5a:74:c3:3e:ff:9c:6f: 30:a7:ea:6c:74:1c:30:b3:a5:c5:4b:c0:cd:ae:46:9a:bc:93: d5:60:f7:b5:1a:77:6f:3c:e2:b8:25:50:af:39:f3:e4:75:4f: b7:8c:aa:06:8b:ad:9f:82:59:b0:8f:e0:ad:81:74:3c:90:79: b7:fc:17:a4:9c:e7:4f:3a:34:af:40:12:93:0b:13:5e:ed:e1: cf:8b:52:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U2NTIxMTAvBgNVBAUTKERCMzdDRDI4MkM2QzdEQkMzQTkwQjEwM0I3QTIzOURD RDE1OEZGNjAwHhcNMjYwODE4MjAxNjEzWhcNMjYwODI1MjAxNjEzWjAYMRYwFAYD VQQDEw02YTg0YmQ4ZS0wMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/cshYqBre5eu5hUzEiTlZ5BOqvTv74YXn9rUn6fScP0JTzdoJ/5Dgg6Ojc+M hGIUaQya7iouhsH9+3tq3DX9aehay7tRI20P9yChDzj/wnlEsrniBwogRnpYHWFc DWL0YO+op35tGETOpp3SIwTR0fZMusWr7gI7abnZkYqTp4Mhdp3H1JtLK8Ls92y+ 2zS/y4rpkwH6mMogy/L8Oske6gtcFeS4GX4hZW7q6zBrBwEXzQwKHjb4G9vQ3yDb GmA2MJrP1/9xLkOATufYhXyXMvSzIp3SHILqi0kGnARt7XH1RH8m/QPA7DrsBx6d rc5FB51+0ba2QIF53yle48OHgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNZ3JA4 tHkN5/3dLf4n4dUDmXBqMB8GA1UdIwQYMBaAFNs3zSgsbH28OpCxA7eiOdzRWP9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTY1Mi82MDBBQjQ2NEIy QjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2ZidzZrTEVEdDZJNTNORllf MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6Zk5LQ3hzZmJ3NmtMRUR0Nkk1M05GWV8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTY1Mi82MDBBQjQ2NEIyQjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2Zi dzZrTEVEdDZJNTNORllfMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYkLgrm3huI1If8etViLeDReKGU/zzeoSAzmwUIk3qD58EYWIIcCbOH9uVVPW HTKZcwRQmXXL96jxDRZ8f+9DT2OiVrnE4y7HfSq2sbcFZ/geRxxmFDTEYaxfVwTA 5dgQq7Q87TUZgsr/I44hRMxyUPKwax8IRi0++MCVs2tap8nc+4HLrziduaKNrzoS +DJPQpmOJpbrT21ERgIzZzy3bRjr5Xyfgj3x7pI7DNBadMM+/5xvMKfqbHQcMLOl xUvAza5GmryT1WD3tRp3bzziuCVQrznz5HVPt4yqBoutn4JZsI/grYF0PJB5t/wX pJznTzo0r0ASkwsTXu3hz4tS/g== -----END CERTIFICATE-----Generated at Wed Aug 19 11:43:59 2026 by rpki-client