$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: JNIwepoAkRIRG4lo/mI/BwsFay2t6BUcEKCUgqUOHZM= Subject key identifier: 5E:84:28:F1:39:D9:80:0F:B0:81:FC:4A:0D:08:61:A4:E8:AA:7C:87 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 05DC Signing time: Mon 31 Aug 2026 23:00:56 +0000 Manifest this update: Mon 31 Aug 2026 23:00:56 +0000 Manifest next update: Mon 07 Sep 2026 23:00:56 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: IaGh+uU2phIe0AvCveK7CgRzPJWRqXJ3+GOTrQpdRQw=) 2: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=) 3: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Aug 31 23:00:56 2026 GMT Not After : Sep 7 23:00:56 2026 GMT Subject: CN=6a9607a8-c98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:95:15:ca:0d:02:c8:6c:94:ac:dd:f7:25: 2b:4d:64:1f:42:3f:17:f6:bd:5f:13:b0:6f:82:bd: 68:0d:8a:93:3c:53:51:68:2f:c2:e9:44:63:e6:96: a0:49:20:ef:d6:71:4b:7e:da:c8:04:94:3e:d8:ca: 32:fc:fb:ca:c2:cd:e8:d0:c5:34:da:e1:d9:e9:08: e8:45:b8:b8:86:68:70:37:d8:49:83:87:2a:9b:ac: f5:eb:98:d3:94:16:0c:6c:cf:13:84:db:55:a3:d8: 9a:4b:26:a2:39:41:33:30:a3:8c:aa:1c:4b:1a:3b: 24:ef:11:f2:4b:1b:f3:b5:59:78:75:ba:2e:50:47: 9a:76:71:e6:bc:fc:10:ce:64:82:07:00:d5:30:1f: ab:09:40:6d:a6:9c:41:b5:b5:a8:76:ba:20:e0:b8: ea:43:d0:56:9a:ab:9a:40:3b:c5:d0:69:dc:9a:58: 53:dc:0c:88:b8:30:6f:a8:3d:bd:89:f8:23:fc:07: d3:77:89:aa:2a:4a:17:1e:ab:f5:4a:85:ec:e2:6c: f2:df:61:89:2b:2a:30:24:9a:fa:5c:73:f5:67:f1: e4:56:f2:23:05:58:66:1a:17:9d:ea:d2:64:fc:58: b5:99:28:84:05:87:dc:4f:36:e5:42:f7:c2:92:90: dd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:84:28:F1:39:D9:80:0F:B0:81:FC:4A:0D:08:61:A4:E8:AA:7C:87 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6e:9c:fe:d4:d6:50:a9:f9:42:e5:6e:05:ad:60:bc:be:8e: 43:4f:e5:a4:94:81:8b:1e:c6:7f:93:fb:8a:12:fd:a7:d0:2e: 09:16:98:32:c0:02:2f:98:8d:9a:bc:bc:b1:7a:6e:9b:b4:5c: f2:00:ee:99:bb:4a:1f:89:af:10:90:cb:59:ed:ef:9a:ba:d1: e5:19:fb:e7:cf:0b:95:36:8f:fd:d7:d0:3f:a1:63:33:28:ef: fa:03:b2:e7:75:c5:59:9c:b6:40:a0:28:fd:fa:b8:d2:dd:3d: 0c:d1:d8:2f:65:84:a1:1a:a5:6d:0e:82:fc:14:85:8e:5d:a4: ab:53:04:8c:35:8e:2e:f1:d2:1d:a7:90:ff:05:ed:fc:35:fd: 3d:3c:f3:c9:9f:fb:aa:a1:78:f8:67:b8:76:80:63:79:49:da: 51:ff:aa:d2:21:58:9e:b6:2f:37:6c:e2:ec:34:65:41:4d:25: 2d:6e:05:e2:ec:bd:35:18:b6:95:fa:7a:f9:4d:d4:d0:8b:67: ee:ee:67:fd:70:da:d2:be:89:8a:7b:dd:57:22:cd:19:e1:95: e5:b2:5d:a3:0b:60:ba:2e:49:ee:af:f1:e6:21:2c:cc:c8:af: 13:9f:73:13:5c:b1:2d:08:02:08:a3:49:87:76:6a:09:5e:b1: 95:5a:73:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjYwODMxMjMwMDU2WhcNMjYwOTA3MjMwMDU2WjAYMRYwFAYD VQQDEw02YTk2MDdhOC1jOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt92VFcoNAshslKzd9yUrTWQfQj8X9r1fE7Bvgr1oDYqTPFNRaC/C6URj5pag SSDv1nFLftrIBJQ+2Moy/PvKws3o0MU02uHZ6QjoRbi4hmhwN9hJg4cqm6z165jT lBYMbM8ThNtVo9iaSyaiOUEzMKOMqhxLGjsk7xHySxvztVl4dbouUEeadnHmvPwQ zmSCBwDVMB+rCUBtppxBtbWodrog4LjqQ9BWmquaQDvF0GncmlhT3AyIuDBvqD29 ifgj/AfTd4mqKkoXHqv1SoXs4mzy32GJKyowJJr6XHP1Z/HkVvIjBVhmGhed6tJk /Fi1mSiEBYfcTzblQvfCkpDdiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6EKPE5 2YAPsIH8Sg0IYaToqnyHMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI26c/tTWUKn5QuVuBa1gvL6OQ0/lpJSBix7Gf5P7ihL9p9AuCRaYMsACL5iN mry8sXpum7Rc8gDumbtKH4mvEJDLWe3vmrrR5Rn7588LlTaP/dfQP6FjMyjv+gOy 53XFWZy2QKAo/fq40t09DNHYL2WEoRqlbQ6C/BSFjl2kq1MEjDWOLvHSHaeQ/wXt /DX9PTzzyZ/7qqF4+Ge4doBjeUnaUf+q0iFYnrYvN2zi7DRlQU0lLW4F4uy9NRi2 lfp6+U3U0Itn7u5n/XDa0r6JinvdVyLNGeGV5bJdowtgui5J7q/x5iEszMivE59z E1yxLQgCCKNJh3ZqCV6xlVpzkA== -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:19 2026 by rpki-client