$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json) Hash identifier: tw6LN60ydwDEvZMwJcLW8ITJVBJUIGfxSzoj/tetEnc= Subject key identifier: E2:51:D9:69:C9:56:88:3F:91:16:14:A0:C9:38:5B:02:19:A6:5D:7C Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft Manifest number: 0F7D Signing time: Wed 26 Aug 2026 17:28:28 +0000 Manifest this update: Wed 26 Aug 2026 17:28:27 +0000 Manifest next update: Wed 02 Sep 2026 17:28:27 +0000 Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: JmJKYfFkkP025hZB/5EKxM4cwW9IlrAJ/Ng+LlFekSg=) 2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: on6AtAQDJPoil+F6Z95IgUqRZ62ucuYmOFjMm5FOGeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 15:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: Aug 26 17:28:27 2026 GMT Not After : Sep 2 17:28:27 2026 GMT Subject: CN=6a8f223c-0a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:a6:4e:13:3e:71:6c:08:8c:d2:45:42:f4: cf:89:24:fd:d5:98:28:df:88:d2:4e:55:c6:fb:29: 57:02:9f:97:90:79:e0:4d:5d:c9:db:95:79:42:0c: db:9c:ff:34:af:b4:e4:3c:dd:f1:2c:1c:9e:60:ac: 5e:0b:cc:8d:7f:23:e4:48:2d:22:ed:51:2b:ff:86: 39:5a:29:e2:a5:8a:71:f8:46:25:45:68:88:5b:c6: 55:a7:5b:83:68:b5:3b:c8:e8:27:11:52:2f:52:ae: 21:94:41:c8:83:f0:71:25:89:01:b2:2d:82:39:fd: e7:99:65:25:3a:97:73:16:30:d9:51:25:6b:c2:cd: 2e:b7:72:f0:a5:a6:82:c6:99:e2:cb:e7:91:3f:fc: 8e:6d:1b:fd:dd:54:48:08:87:cf:d6:5d:7c:59:aa: 4d:aa:6d:16:8f:3f:5d:31:f7:79:65:4e:59:9a:cc: e1:6e:cd:5b:64:0e:f7:8c:ac:6c:cf:3c:26:58:7c: d8:ed:19:e0:b4:f8:a3:5d:6e:45:c5:61:93:e3:2b: c1:1a:ab:12:d5:52:93:0a:ef:ef:34:a3:9d:f7:c7: 47:dc:42:d7:3d:b6:81:a0:6a:e2:97:57:ca:86:48: 83:e1:c2:3e:1d:b4:a5:13:c7:1e:fb:2d:f5:62:cc: 0e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:51:D9:69:C9:56:88:3F:91:16:14:A0:C9:38:5B:02:19:A6:5D:7C X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8e:90:92:30:85:52:64:cc:ad:9d:49:d9:8e:06:d0:44:ab: 3e:01:ff:25:85:93:bb:49:64:69:1e:c6:aa:84:9e:b2:41:23: 85:01:1d:87:14:93:d7:47:f4:83:a2:35:59:1b:fb:28:4c:30: f8:10:fa:01:a2:c8:28:b8:5e:c9:1d:a7:e2:88:82:da:83:59: a4:53:2f:6c:91:58:0c:de:12:9e:e8:8a:4a:aa:f3:94:59:34: 25:5e:f1:66:90:5c:77:52:c0:b1:c3:62:f5:6b:35:ca:24:63: 0a:cd:5c:20:1e:ee:ed:3d:d7:ac:28:b9:5a:b0:ee:0b:2f:59: 52:42:4b:3a:07:fa:e2:69:85:dd:41:f9:ab:17:46:70:34:d4: 17:4f:5f:7a:f1:4f:ef:09:1d:f5:f3:f3:67:5f:28:77:a5:30: c2:92:be:c6:1d:b6:0e:cc:d2:21:ad:fb:6e:09:83:23:de:38: 8b:86:00:f5:91:e0:b2:a4:7f:8c:17:95:80:b9:0f:cb:af:78: 87:ae:5d:30:89:37:81:de:18:77:eb:d6:93:f0:b7:f8:82:2e: c0:79:8f:16:3d:b2:15:2c:8c:ad:33:7e:2a:e3:d4:d3:0a:4d: df:0d:73:3d:b1:39:e4:86:30:64:38:e6:1f:13:ba:05:b2:a9: ba:b8:d6:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjYwODI2MTcyODI3WhcNMjYwOTAyMTcyODI3WjAYMRYwFAYD VQQDEw02YThmMjIzYy0wYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5amThM+cWwIjNJFQvTPiST91Zgo34jSTlXG+ylXAp+XkHngTV3J25V5Qgzb nP80r7TkPN3xLByeYKxeC8yNfyPkSC0i7VEr/4Y5WinipYpx+EYlRWiIW8ZVp1uD aLU7yOgnEVIvUq4hlEHIg/BxJYkBsi2COf3nmWUlOpdzFjDZUSVrws0ut3LwpaaC xpniy+eRP/yObRv93VRICIfP1l18WapNqm0Wjz9dMfd5ZU5Zmszhbs1bZA73jKxs zzwmWHzY7RngtPijXW5FxWGT4yvBGqsS1VKTCu/vNKOd98dH3ELXPbaBoGril1fK hkiD4cI+HbSlE8ce+y31YswOewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJR2WnJ Vog/kRYUoMk4WwIZpl18MB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm cml5NXRGdVFpY3dtSTlsS00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlI6QkjCFUmTMrZ1J2Y4G0ESrPgH/JYWTu0lkaR7GqoSeskEjhQEdhxST10f0 g6I1WRv7KEww+BD6AaLIKLheyR2n4oiC2oNZpFMvbJFYDN4SnuiKSqrzlFk0JV7x ZpBcd1LAscNi9Ws1yiRjCs1cIB7u7T3XrCi5WrDuCy9ZUkJLOgf64mmF3UH5qxdG cDTUF09fevFP7wkd9fPzZ18od6UwwpK+xh22DszSIa37bgmDI944i4YA9ZHgsqR/ jBeVgLkPy694h65dMIk3gd4Yd+vWk/C3+IIuwHmPFj2yFSyMrTN+KuPU0wpN3w1z PbE55IYwZDjmHxO6BbKpurjWZQ== -----END CERTIFICATE-----Generated at Wed Aug 26 21:09:09 2026 by rpki-client