$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: xa/ouYLxdfirQUFTZIlHtwDuIYYXIvlnm0lcOzHF4+s= Subject key identifier: 4D:69:E7:AA:F6:51:30:58:AD:51:70:C2:33:25:90:52:AB:3A:32:69 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 0294 Signing time: Wed 19 Aug 2026 02:18:47 +0000 Manifest this update: Wed 19 Aug 2026 02:18:46 +0000 Manifest next update: Wed 26 Aug 2026 02:18:46 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: N7rMsr+GmNBS+cQvEkOdpkziAh5+b9kh/fKnZgdbnDM=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: 9aPuAfrv6U9JgTzd4m4UnxApaKEUV0ZT7nFSzZfe2yQ=) 3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: CSz19I4y5kF+WlyNFkJdkvlKJUnI/Eko4kr9Q3tcNIQ=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: tGMAIl3/k6G1q8dJnYI7hANKBUtFxchL1YEdgkkggUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Aug 19 02:18:46 2026 GMT Not After : Aug 26 02:18:46 2026 GMT Subject: CN=6a851287-8d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:b4:f7:c0:d7:eb:8f:b1:4e:d3:e3:a2:cd: 2c:56:5e:7c:d4:4b:a8:d7:5d:f8:14:2d:67:27:d9: 9e:b2:bd:2a:56:cd:0a:ed:4e:aa:85:bf:51:78:8e: 4b:0e:46:2e:ad:42:31:ae:df:c0:73:e4:0f:e6:c9: 37:77:50:ee:b5:91:e2:93:de:07:d6:7a:60:ec:a5: 7f:ec:2e:89:42:00:bc:70:ea:d9:3e:e4:96:23:85: 70:20:a8:cb:86:e3:de:54:ee:a5:7d:de:fc:4f:f7: 36:80:6f:0d:aa:27:a3:e0:93:2e:75:d1:37:68:3a: 1f:c8:26:66:9b:f5:f9:ae:4f:85:5d:ac:93:ac:5a: db:55:fe:0d:26:4a:47:1c:71:1a:a5:25:cc:17:e5: 25:93:df:00:4a:c2:c5:b7:5f:27:9d:e2:27:ac:cf: 6f:ea:1f:3e:5e:e0:73:a3:25:4f:30:a2:c4:80:7c: cc:f3:43:0f:39:4f:0a:0c:b5:c5:6b:3a:a3:f5:83: af:51:0e:13:11:40:f5:bc:14:11:b6:e7:fd:03:02: 40:b8:df:9e:fe:de:4b:9a:ae:0d:1b:04:72:b4:59: d9:1d:8d:d9:ad:f8:8f:bf:b5:bd:fa:7f:e3:0a:ba: 57:2b:48:9a:db:76:b4:00:49:41:6c:da:cf:3c:20: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:69:E7:AA:F6:51:30:58:AD:51:70:C2:33:25:90:52:AB:3A:32:69 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bf:c2:1c:2d:2f:ff:41:bb:11:ff:57:5d:61:7b:a7:0d:39: 2a:c7:26:21:fb:d9:c6:bc:f0:8b:f5:b4:f7:00:eb:d4:d6:66: 3b:bc:87:02:7a:61:ea:16:84:61:9e:f5:36:c1:41:51:81:1f: 36:a2:8f:ec:c7:60:9b:a7:fd:3c:73:a6:65:bf:e2:02:73:1c: 4e:6b:28:82:dd:b9:62:e2:ac:37:91:86:6e:37:f8:05:8b:a0: 28:1d:0d:e6:ef:96:96:27:71:15:f2:4e:09:0e:67:cd:a1:c8: 3c:17:f3:2b:00:27:c3:7f:b9:2a:b7:5d:ff:6d:49:1d:65:44: be:c8:38:72:15:07:14:87:ad:a7:2f:75:c0:36:ca:ae:3f:ac: a6:c9:04:bd:63:1f:4c:cc:18:0b:89:c5:25:ae:11:2d:e3:50: b4:32:91:9b:2a:63:24:65:67:33:d4:b3:73:b2:b4:63:5b:19: e0:cb:18:6f:80:3f:fe:9b:df:fa:c6:e6:c1:a6:2f:95:96:63: 90:8c:79:0c:30:09:b1:aa:9a:99:8b:b8:20:6a:4a:d9:3f:93: b4:11:97:29:41:aa:ad:f1:21:e9:36:28:ea:b0:4e:07:8c:ba: 8a:e1:cd:e2:89:9b:d6:83:5d:02:05:21:01:cc:72:13:c0:ac: ad:d8:17:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjYwODE5MDIxODQ2WhcNMjYwODI2MDIxODQ2WjAYMRYwFAYD VQQDEw02YTg1MTI4Ny04ZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw36098DX64+xTtPjos0sVl581Euo1134FC1nJ9mesr0qVs0K7U6qhb9ReI5L DkYurUIxrt/Ac+QP5sk3d1DutZHik94H1npg7KV/7C6JQgC8cOrZPuSWI4VwIKjL huPeVO6lfd78T/c2gG8Nqiej4JMuddE3aDofyCZmm/X5rk+FXayTrFrbVf4NJkpH HHEapSXMF+Ulk98ASsLFt18nneInrM9v6h8+XuBzoyVPMKLEgHzM80MPOU8KDLXF azqj9YOvUQ4TEUD1vBQRtuf9AwJAuN+e/t5Lmq4NGwRytFnZHY3ZrfiPv7W9+n/j CrpXK0ia23a0AElBbNrPPCBPowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1p56r2 UTBYrVFwwjMlkFKrOjJpMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL7/CHC0v/0G7Ef9XXWF7pw05KscmIfvZxrzwi/W09wDr1NZmO7yHAnph6haE YZ71NsFBUYEfNqKP7Mdgm6f9PHOmZb/iAnMcTmsogt25YuKsN5GGbjf4BYugKB0N 5u+WlidxFfJOCQ5nzaHIPBfzKwAnw3+5Krdd/21JHWVEvsg4chUHFIetpy91wDbK rj+spskEvWMfTMwYC4nFJa4RLeNQtDKRmypjJGVnM9Szc7K0Y1sZ4MsYb4A//pvf +sbmwaYvlZZjkIx5DDAJsaqamYu4IGpK2T+TtBGXKUGqrfEh6TYo6rBOB4y6iuHN 4omb1oNdAgUhAcxyE8CsrdgXUw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:51 2026 by rpki-client