$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json) Hash identifier: 4pwo0JSmhtWRTViedn3rxjNsYajGU+/z5W/04vhpBeA= Subject key identifier: 8F:37:C0:C2:38:0F:89:03:09:A9:78:94:1F:B1:D8:88:C1:65:07:E0 Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft Manifest number: 05A8 Signing time: Fri 04 Sep 2026 22:55:19 +0000 Manifest this update: Fri 04 Sep 2026 22:55:19 +0000 Manifest next update: Fri 11 Sep 2026 22:55:19 +0000 Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: UbDA7GyXnTn57bGtQPJMo+wKhddeNnxv7FRj76gaz+s=) 2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: y8fOQUHUEDgFmtL9MQBSGb81f+TiCWn3yini6uVHoSM=) 3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: qi4jN4NH1cHfCHOBZAPI1Wv+ZZRVyRsB2Qs3k377dDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Sep 4 22:55:19 2026 GMT Not After : Sep 11 22:55:19 2026 GMT Subject: CN=6a9b4c57-c29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a5:3e:0d:c8:37:7b:d4:2b:1c:55:25:c3:39: 43:fe:80:36:10:d8:26:9a:38:31:da:03:7b:06:ca: 37:ff:40:91:7a:2a:69:1b:6b:47:60:14:bc:e7:eb: 7b:4c:25:bd:d2:86:1e:d7:15:2c:5d:5a:4f:a2:49: 6b:dd:1f:b5:4b:eb:27:0c:58:ae:ef:8e:70:bb:95: 68:f9:84:0a:08:b4:56:76:c9:c4:2e:6d:b0:90:2f: d6:1b:2f:5e:b2:ca:08:15:07:2d:01:a0:6a:54:87: 04:39:11:bf:7d:87:84:be:14:10:d2:ec:40:8a:ea: ed:0f:fb:83:e2:84:b9:98:25:f1:f0:8a:be:18:3e: bd:aa:17:0c:80:77:d6:7c:05:83:31:94:42:6b:c6: bf:0c:16:cf:83:d9:af:89:a7:10:3c:86:c7:30:c8: 93:6d:ad:5e:df:a5:ca:df:a9:1c:ee:12:e8:d2:7e: e9:c9:3b:43:05:ea:06:57:a9:7b:ac:1a:4e:1e:78: 96:36:1c:9a:94:16:ff:fb:66:87:a7:c4:33:ec:ad: 4e:f6:85:b3:8b:4b:d4:87:25:2c:f8:ba:03:2f:a5: 8d:40:a2:a6:8a:49:2d:5e:a8:c7:f5:cb:79:17:21: f5:34:4c:81:c7:25:a6:0e:f8:e9:b3:4e:69:da:b3: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:C0:C2:38:0F:89:03:09:A9:78:94:1F:B1:D8:88:C1:65:07:E0 X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:3a:e7:04:b8:0d:54:4b:87:5d:d5:51:11:77:48:80:4a:07: 28:45:78:87:02:0b:91:b3:3b:84:16:f5:35:f1:bb:12:5a:81: bc:0f:fd:3f:c5:82:0d:b2:46:18:f6:45:5f:9b:89:fa:d2:a9: 49:80:0c:e0:e3:93:10:e7:e1:99:39:31:b7:b3:b7:93:4c:6a: 47:dd:06:a0:e8:48:5b:ec:63:bf:f2:77:21:8d:27:64:72:fd: fb:5c:35:47:2d:b8:d2:bc:9c:8e:33:d9:59:c7:5f:cf:b2:37: 2e:92:53:0e:58:f4:ee:d5:41:e6:62:da:a2:5d:e7:a1:43:a0: 36:66:ab:91:ed:36:dd:09:ab:e2:e5:5c:b2:1e:5c:52:5b:a5: 29:1b:61:bc:d7:89:0f:63:e8:db:90:b6:bd:b9:60:bd:75:b3: b1:5b:a7:6f:1c:cd:c0:94:45:89:df:b7:b6:98:69:ab:d2:63: d4:9f:23:f4:53:06:6d:76:bb:96:31:b2:55:38:dc:24:49:3f: 5d:36:f8:20:ca:3a:e8:a0:de:3e:90:24:04:cd:de:f8:7a:27: af:a0:b5:b6:04:78:9a:1e:d3:e1:14:f4:68:33:94:91:5e:88: ad:12:ad:ac:87:91:01:25:b3:17:1b:ce:3c:91:ee:c8:56:36: 59:06:0a:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjYwOTA0MjI1NTE5WhcNMjYwOTExMjI1NTE5WjAYMRYwFAYD VQQDEw02YTliNGM1Ny1jMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiaU+Dcg3e9QrHFUlwzlD/oA2ENgmmjgx2gN7Bso3/0CReippG2tHYBS85+t7 TCW90oYe1xUsXVpPoklr3R+1S+snDFiu745wu5Vo+YQKCLRWdsnELm2wkC/WGy9e ssoIFQctAaBqVIcEORG/fYeEvhQQ0uxAiurtD/uD4oS5mCXx8Iq+GD69qhcMgHfW fAWDMZRCa8a/DBbPg9mviacQPIbHMMiTba1e36XK36kc7hLo0n7pyTtDBeoGV6l7 rBpOHniWNhyalBb/+2aHp8Qz7K1O9oWzi0vUhyUs+LoDL6WNQKKmikktXqjH9ct5 FyH1NEyBxyWmDvjps05p2rNfOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI83wMI4 D4kDCal4lB+x2IjBZQfgMB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNFRi9DNDAxOUQyNDJDMTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4 VmNRcDFBaGE2MnotQnJ6Z0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5jrnBLgNVEuHXdVREXdIgEoHKEV4hwILkbM7hBb1NfG7ElqBvA/9P8WCDbJG GPZFX5uJ+tKpSYAM4OOTEOfhmTkxt7O3k0xqR90GoOhIW+xjv/J3IY0nZHL9+1w1 Ry240rycjjPZWcdfz7I3LpJTDlj07tVB5mLaol3noUOgNmarke023Qmr4uVcsh5c UlulKRthvNeJD2Po25C2vblgvXWzsVunbxzNwJRFid+3tphpq9Jj1J8j9FMGbXa7 ljGyVTjcJEk/XTb4IMo66KDePpAkBM3e+Honr6C1tgR4mh7T4RT0aDOUkV6IrRKt rIeRASWzFxvOPJHuyFY2WQYKFg== -----END CERTIFICATE-----Generated at Sat Sep 5 09:17:11 2026 by rpki-client