$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: kottv4feVhPpZ2nnteGpkvQIZkxK1extxhE1ZV8rpKo= Subject key identifier: F1:1E:1D:E9:E6:2E:1C:40:65:19:91:B5:DF:1A:77:16:71:24:DD:1A Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 0236 Signing time: Wed 19 Aug 2026 04:31:34 +0000 Manifest this update: Wed 19 Aug 2026 04:31:34 +0000 Manifest next update: Wed 26 Aug 2026 04:31:34 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: lI7wlX3OgkRUO8o78mA7RrGJEmDiCQ1m1WEoX/HdgP8=) 2: 60DB5E40835411F1B1AB651362A30FBC.roa (hash: QiwTuqsF+q6i3OyITXNa/EMVWTHfVE3WCTSJ5Pst84Y=) 3: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=) 4: D1825C02598911F0848EA472C4F9AE02.roa (hash: CUOq2X8+vITfDwz6mE6or7uSGRdgPeqxHhbop7FI1TQ=) 5: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: 9Jrx3qrMFzNo/lB3LiTCYLW9XLrSZZ7Ujo7GQB5e2RA=) 6: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: bcfWStaDkSnD357hl7rZFTlwGUAyZayAa1ff5ptiPEI=) 7: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: tA+MS9ET05/iZeHgTRlJycvW9Ul+BWr2CDynCJcX8xA=) 8: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc=) 9: 9ADAB6A4835411F18D13EB1962A30FBC.roa (hash: RcYGheWGYiRTsVY9x6EMArDSWaBIhGM9FHGfaEWR5rU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Aug 19 04:31:34 2026 GMT Not After : Aug 26 04:31:34 2026 GMT Subject: CN=6a8531a6-c104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:f5:7d:d3:4b:c6:1a:4f:b5:fc:5d:69:1b: 9b:8a:19:b8:3c:5b:15:6c:95:66:3b:7f:c6:5e:56: 2d:bf:af:ba:6a:d9:3f:b9:d9:33:56:42:12:67:0e: 01:e7:21:55:1a:80:b3:76:a6:04:f7:a2:79:af:a6: 31:42:b8:fc:bc:ef:74:7e:e5:01:ed:27:5d:70:10: b6:87:f2:2c:90:39:aa:44:83:40:28:c4:a0:e4:1c: 76:28:51:e0:a6:21:b3:05:01:5e:9c:eb:00:7e:f2: 4a:d4:a9:0f:87:90:96:d2:87:f1:e4:b2:1f:fd:14: 3d:69:0f:65:1f:e9:62:c7:41:22:b6:70:47:c3:75: 0f:de:a9:8c:fb:3d:1b:1f:03:cc:ec:8b:de:e8:bc: 72:b8:8f:03:e9:4d:c7:93:30:67:33:64:7d:d4:e8: 91:7e:aa:ff:7c:f6:eb:53:21:d9:80:22:75:a1:1e: b1:c9:a5:ec:3a:6f:3b:e1:ef:f0:fe:6f:8d:7f:1a: 56:8c:84:74:36:eb:da:bf:97:2e:be:7d:28:83:9d: 5a:e5:23:3e:18:c3:ce:cf:54:20:60:ab:de:c6:f3: ab:98:5d:78:37:ce:97:00:56:59:52:f3:8e:19:92: 5f:bf:62:0c:fb:e7:46:99:67:8c:2f:ae:0d:ac:11: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1E:1D:E9:E6:2E:1C:40:65:19:91:B5:DF:1A:77:16:71:24:DD:1A X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:1b:be:2b:57:ef:e5:94:8f:d8:f9:0b:5b:8b:19:82:ba:f3: 17:57:48:e0:06:af:28:3e:d7:97:9f:48:c2:0f:53:31:ab:ef: ee:62:6e:6f:db:27:71:5a:65:e0:3a:83:18:a2:91:c2:fd:92: 3a:bf:d2:19:d5:e4:1c:75:6e:8d:2c:4b:7f:f7:35:33:0a:e7: 23:db:07:db:dc:af:4c:f8:9d:d1:07:af:5e:65:90:be:c5:c8: bd:a7:ac:51:ed:8e:41:71:86:5e:b5:a8:97:29:67:8e:cf:b5: 77:a2:38:20:14:a7:37:35:08:d4:26:86:27:00:a7:88:a5:e4: dc:32:0d:28:df:9a:4e:51:b9:ed:f7:1a:9a:f3:85:41:9e:2a: ad:82:5c:47:26:36:ab:2b:be:a3:64:4e:c0:3e:fb:ca:97:ac: 4c:68:00:f4:9c:0f:1d:cb:dc:45:07:44:e3:4f:15:43:6c:16: 2a:28:5d:a2:b5:8f:54:ed:b0:44:17:77:11:3a:33:22:25:51: c0:8b:80:ac:71:5e:f6:b1:41:f1:de:e0:16:ac:41:4b:fa:9f: 7c:c5:ea:ec:38:90:90:71:81:1b:a7:47:09:5e:df:f1:8b:c8: e8:e2:30:8c:36:5e:91:bb:c7:a7:a0:dd:e6:f3:9a:3e:a2:bc: 58:a1:32:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjYwODE5MDQzMTM0WhcNMjYwODI2MDQzMTM0WjAYMRYwFAYD VQQDEw02YTg1MzFhNi1jMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyn1fdNLxhpPtfxdaRubihm4PFsVbJVmO3/GXlYtv6+6atk/udkzVkISZw4B 5yFVGoCzdqYE96J5r6YxQrj8vO90fuUB7SddcBC2h/IskDmqRINAKMSg5Bx2KFHg piGzBQFenOsAfvJK1KkPh5CW0ofx5LIf/RQ9aQ9lH+lix0EitnBHw3UP3qmM+z0b HwPM7Ive6LxyuI8D6U3HkzBnM2R91OiRfqr/fPbrUyHZgCJ1oR6xyaXsOm874e/w /m+NfxpWjIR0Nuvav5cuvn0og51a5SM+GMPOz1QgYKvexvOrmF14N86XAFZZUvOO GZJfv2IM++dGmWeML64NrBGx2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEeHenm LhxAZRmRtd8adxZxJN0aMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAURu+K1fv5ZSP2PkLW4sZgrrzF1dI4AavKD7Xl59Iwg9TMavv7mJub9sncVpl 4DqDGKKRwv2SOr/SGdXkHHVujSxLf/c1MwrnI9sH29yvTPid0QevXmWQvsXIvaes Ue2OQXGGXrWolylnjs+1d6I4IBSnNzUI1CaGJwCniKXk3DINKN+aTlG57fcamvOF QZ4qrYJcRyY2qyu+o2ROwD77ypesTGgA9JwPHcvcRQdE408VQ2wWKihdorWPVO2w RBd3ETozIiVRwIuArHFe9rFB8d7gFqxBS/qffMXq7DiQkHGBG6dHCV7f8YvI6OIw jDZekbvHp6Dd5vOaPqK8WKEyEQ== -----END CERTIFICATE-----Generated at Wed Aug 19 16:52:35 2026 by rpki-client