$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: jU6UTdvVORXDtIbmeyl3jrA8FYow8QQ5Ib2sBvfjs8w= Subject key identifier: A3:0B:76:50:BC:E6:29:49:B2:54:7F:D6:D8:3E:05:50:B0:DB:17:2D Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 024A Signing time: Thu 27 Aug 2026 02:15:02 +0000 Manifest this update: Thu 27 Aug 2026 02:15:01 +0000 Manifest next update: Thu 03 Sep 2026 02:15:01 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: 1LDpZJMj9BA5wf5ZsYICYRu60sRYV7MUFl6/JcTHN/k=) 2: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: eCvLkEbyNwc9r0JGvwSvHfQB+uiRQQDtRICORSigmQw=) 3: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: L7PzMw/RqglxuX4TAKGHddkS6szpM6BUVLIqh8w+1Fk=) 4: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: 6I5YlsRFDMiAw2+6p+Np4QlkoPsG3b9oYbhxF6uNgBY=) 5: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: /+ba2nQszpmA32xw8Q2bNwCocgAiAxht6R/PF25M/+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 02:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Aug 27 02:15:01 2026 GMT Not After : Sep 3 02:15:01 2026 GMT Subject: CN=6a8f9da6-ad6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:29:57:89:33:53:d9:9c:37:71:93:56:3b: 60:a5:44:cd:82:31:5f:73:ee:ac:8e:70:26:05:47: 2b:30:52:f9:3c:99:32:6e:e5:c6:61:3e:57:3c:51: 2a:9e:62:12:63:70:4d:91:0d:e9:54:a0:0c:51:25: 14:64:18:f0:49:6c:77:5b:58:5a:65:e7:94:aa:b9: 5c:bf:c2:b6:b8:6f:6b:75:97:01:0a:2a:13:19:64: ad:8f:c5:d4:54:7d:9b:33:d6:ea:42:e2:5e:a1:7b: b6:2d:c6:d0:a9:f2:db:fc:c4:96:d1:7c:1b:d9:cd: 44:e0:7c:6d:41:26:20:9e:7b:ab:a3:cd:76:23:c1: c1:dd:7b:6b:4d:70:42:10:e9:6e:34:06:b7:20:6c: 12:50:b1:24:72:be:ed:88:cb:27:17:64:f7:dd:d2: 32:28:b7:55:2c:2e:1e:6d:35:c8:de:40:bd:e1:6c: 5f:32:75:e1:0d:20:67:db:1b:41:ee:4a:b9:6d:ac: 83:11:67:f8:62:eb:a4:dc:9e:8c:18:b8:cd:11:2f: 9e:1f:17:a4:be:99:a7:8f:d0:16:64:a6:14:b3:29: 6d:ab:f7:96:b9:e8:f5:d5:f9:49:92:e0:87:2d:fa: 5d:24:1f:c9:06:53:68:67:3d:a5:89:ae:12:2f:d5: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0B:76:50:BC:E6:29:49:B2:54:7F:D6:D8:3E:05:50:B0:DB:17:2D X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:78:0b:af:bb:ef:57:e9:9e:49:29:a9:91:8a:e3:58:15:a3: 88:b0:27:db:e3:9d:9d:d5:48:8a:75:82:ec:48:eb:35:80:fd: fc:88:4c:a2:b5:c5:1e:e0:b6:90:5d:df:b3:75:75:e9:8f:02: fe:f8:ea:06:ea:f8:1a:b4:70:6a:02:9c:50:af:55:16:bc:60: 04:60:11:fd:00:fb:fa:a6:56:92:9a:5d:8f:1a:3b:6c:34:20: f9:84:5c:35:c9:4b:2e:01:07:bc:18:6b:36:3f:04:fe:b7:cd: d4:44:ef:bf:c1:97:fa:02:94:b6:39:b5:c8:8d:5e:e5:99:f2: 3a:ec:b5:74:6e:22:d9:6b:26:1c:9b:d3:68:8f:b4:8c:d2:59: 1e:7c:04:3f:b5:8f:28:c3:3b:e8:1f:05:cd:29:a0:28:c8:20: c8:04:30:a6:fd:c4:ec:79:8c:c5:5b:7c:54:21:20:c5:1d:18: 9b:5f:0c:8e:2b:bb:e2:18:88:c1:d7:10:3a:b6:91:67:9d:43: 2b:ce:06:3b:b3:a8:0f:ea:49:2e:a2:f9:db:62:49:c6:fa:8e: c4:31:79:42:7a:b3:23:f4:5c:ac:3b:d4:6c:e2:3b:f9:fe:22: e0:f8:9c:62:09:ea:cd:d4:c3:45:b0:c8:73:31:de:bc:31:08: 2e:19:18:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjYwODI3MDIxNTAxWhcNMjYwOTAzMDIxNTAxWjAYMRYwFAYD VQQDEw02YThmOWRhNi1hZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDkpV4kzU9mcN3GTVjtgpUTNgjFfc+6sjnAmBUcrMFL5PJkybuXGYT5XPFEq nmISY3BNkQ3pVKAMUSUUZBjwSWx3W1haZeeUqrlcv8K2uG9rdZcBCioTGWStj8XU VH2bM9bqQuJeoXu2LcbQqfLb/MSW0Xwb2c1E4HxtQSYgnnuro812I8HB3XtrTXBC EOluNAa3IGwSULEkcr7tiMsnF2T33dIyKLdVLC4ebTXI3kC94WxfMnXhDSBn2xtB 7kq5bayDEWf4Yuuk3J6MGLjNES+eHxekvpmnj9AWZKYUsyltq/eWuej11flJkuCH LfpdJB/JBlNoZz2lia4SL9XR1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMLdlC8 5ilJslR/1tg+BVCw2xctMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIngLr7vvV+meSSmpkYrjWBWjiLAn2+OdndVIinWC7EjrNYD9/IhMorXFHuC2 kF3fs3V16Y8C/vjqBur4GrRwagKcUK9VFrxgBGAR/QD7+qZWkppdjxo7bDQg+YRc NclLLgEHvBhrNj8E/rfN1ETvv8GX+gKUtjm1yI1e5ZnyOuy1dG4i2WsmHJvTaI+0 jNJZHnwEP7WPKMM76B8FzSmgKMggyAQwpv3E7HmMxVt8VCEgxR0Ym18Mjiu74hiI wdcQOraRZ51DK84GO7OoD+pJLqL522JJxvqOxDF5QnqzI/RcrDvUbOI7+f4i4Pic YgnqzdTDRbDIczHevDEILhkY2A== -----END CERTIFICATE-----Generated at Thu Aug 27 05:40:40 2026 by rpki-client