$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json) Hash identifier: DzdzH/HC+rDTU0+zMo9aOqyw0BIUMZ6Qz1EMtHHnaIU= Subject key identifier: 28:8E:3B:45:DB:16:69:69:30:9B:45:59:89:72:02:12:49:2F:4F:A7 Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft Manifest number: 0252 Signing time: Tue 25 Aug 2026 02:21:32 +0000 Manifest this update: Tue 25 Aug 2026 02:21:31 +0000 Manifest next update: Tue 01 Sep 2026 02:21:31 +0000 Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: 14MGEBBPYa5StcTh18pEHVfS/zGBlbIne26RCyD8ifU=) 2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: EE6FTPnh4wUv97NTDYcBFnZ/udD1NXZ1iG/5blsmOmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 02:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Validity Not Before: Aug 25 02:21:31 2026 GMT Not After : Sep 1 02:21:31 2026 GMT Subject: CN=6a8cfc2c-bee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:12:a7:a2:2d:eb:d6:8a:00:66:62:27:1c: af:36:99:51:28:82:67:db:6d:20:a1:21:95:65:98: 74:cd:b4:db:08:3c:63:8f:67:22:4f:50:38:d2:c6: 6b:cb:9a:c6:a3:c6:bd:e8:4f:af:db:28:50:3a:ff: e8:87:93:e2:b6:4d:2b:69:6e:86:1e:77:de:d9:6e: 7c:e4:3f:35:58:76:4d:bd:92:c9:52:88:20:42:be: 18:86:22:93:b4:73:da:42:65:c7:c4:62:12:1e:7b: ec:db:c4:9a:ea:2e:48:5f:c7:a4:ae:6d:43:75:b5: 08:46:90:3d:97:3d:91:43:62:ca:a7:49:c3:25:9a: 0f:db:d2:43:75:34:a6:dc:4b:b7:68:ff:ab:ee:c6: 55:18:b5:54:81:8d:45:00:58:05:cd:8d:12:84:22: 81:de:09:1d:93:c4:67:4f:14:c6:72:ed:29:55:ad: 35:e8:fc:c4:4e:33:d3:26:87:3f:1d:c5:5b:e0:08: 0d:54:73:b1:a6:99:3c:82:07:32:51:4d:12:3f:94: ef:c2:11:1f:44:75:e7:86:7c:32:d3:69:09:d4:75: 67:5c:fe:b5:39:90:60:1f:35:a2:e7:bb:c0:4b:0a: a6:74:07:00:d0:a1:e1:b3:2c:d4:a0:e0:de:ef:5b: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8E:3B:45:DB:16:69:69:30:9B:45:59:89:72:02:12:49:2F:4F:A7 X509v3 Authority Key Identifier: keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:40:31:08:a0:bf:c6:3a:5d:92:25:20:69:4f:e6:ef:04:93: e1:8a:c8:9e:a5:b1:fa:e1:81:40:00:b3:28:a8:16:b6:88:31: ed:0f:74:2b:20:a4:21:49:15:1a:6a:65:e0:f8:7c:af:af:8f: cc:41:50:e5:50:92:f1:a1:e1:d5:fb:a4:d5:78:dc:f8:48:45: e8:8e:24:cd:40:e6:e3:18:ad:a4:35:c7:62:a5:2d:1a:0a:f2: 50:4a:6c:cf:99:5d:82:dc:87:43:87:2f:a2:8e:ca:64:0c:71: cb:c5:14:2b:bb:4f:75:ea:3b:09:a5:24:10:99:d5:78:78:ca: b1:41:88:8d:89:d8:93:96:4c:ec:64:62:14:a6:30:bf:9a:74: 46:66:0f:21:1b:8f:89:bd:5e:44:96:1a:53:62:40:95:8f:bf: 94:41:ee:0c:32:4c:cb:3c:c6:3c:96:37:a3:62:0d:6c:4e:a0: 45:54:a3:a3:a5:8b:d7:d2:c0:2c:13:a7:c0:13:b3:7e:76:e7: e7:12:9f:9f:33:e3:71:b6:99:f5:11:86:ba:94:66:43:c9:9a: a2:e2:74:05:7a:5b:c6:10:d4:76:11:3b:da:d5:dc:cb:fd:ef: e8:c6:d0:81:26:7a:5b:fb:f9:23:4f:68:f5:43:0c:8f:fe:3e: 37:e0:52:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMjgxMTAvBgNVBAUTKEJCNTc1NTVGODJBQTIwQTUxQzFCNDhGN0IyNkMzNTY3 RjVBMUU3QkIwHhcNMjYwODI1MDIyMTMxWhcNMjYwOTAxMDIyMTMxWjAYMRYwFAYD VQQDEw02YThjZmMyYy1iZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFYSp6It69aKAGZiJxyvNplRKIJn220goSGVZZh0zbTbCDxjj2ciT1A40sZr y5rGo8a96E+v2yhQOv/oh5Pitk0raW6GHnfe2W585D81WHZNvZLJUoggQr4YhiKT tHPaQmXHxGISHnvs28Sa6i5IX8ekrm1DdbUIRpA9lz2RQ2LKp0nDJZoP29JDdTSm 3Eu3aP+r7sZVGLVUgY1FAFgFzY0ShCKB3gkdk8RnTxTGcu0pVa016PzETjPTJoc/ HcVb4AgNVHOxppk8ggcyUU0SP5TvwhEfRHXnhnwy02kJ1HVnXP61OZBgHzWi57vA SwqmdAcA0KHhsyzUoODe71uzywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiOO0Xb FmlpMJtFWYlyAhJJL0+nMB8GA1UdIwQYMBaAFLtXVV+CqiClHBtI97JsNWf1oee7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQyOC9BRjkzRDE2MjIy MjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlLVWNHMGozc213MVpfV2g1 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxZFZYNEtxSUtVY0cwajNzbXcxWl9XaDU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQyOC9BRjkzRDE2MjIyMjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlL VWNHMGozc213MVpfV2g1N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATUAxCKC/xjpdkiUgaU/m7wST4YrInqWx+uGBQACzKKgWtogx7Q90KyCkIUkV Gmpl4Ph8r6+PzEFQ5VCS8aHh1fuk1Xjc+EhF6I4kzUDm4xitpDXHYqUtGgryUEps z5ldgtyHQ4cvoo7KZAxxy8UUK7tPdeo7CaUkEJnVeHjKsUGIjYnYk5ZM7GRiFKYw v5p0RmYPIRuPib1eRJYaU2JAlY+/lEHuDDJMyzzGPJY3o2INbE6gRVSjo6WL19LA LBOnwBOzfnbn5xKfnzPjcbaZ9RGGupRmQ8maouJ0BXpbxhDUdhE72tXcy/3v6MbQ gSZ6W/v5I09o9UMMj/4+N+BSRA== -----END CERTIFICATE-----Generated at Thu Aug 27 02:09:46 2026 by rpki-client