$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json) Hash identifier: 6UTB8x0db+oCGHnYYgZT642DY5rWnndnZAdFIjJ8FEo= Subject key identifier: 17:D2:53:DF:A5:14:37:B3:62:F4:44:D3:D8:81:FB:23:C5:25:E1:04 Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft Manifest number: 02D6 Signing time: Thu 03 Sep 2026 01:15:33 +0000 Manifest this update: Thu 03 Sep 2026 01:15:33 +0000 Manifest next update: Thu 10 Sep 2026 01:15:33 +0000 Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: kQ94zxit4MVzH2/kghCfeOt455VkOBAndTr+R+ERNuk=) 2: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: 18O7Lp0T09zqzj1uz2UvboEJEAG8f//RjAML5YNM31g=) 3: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: mF+0oU+0n20Cgq5ko570coLg0lSVzI4jtUFqm1rkd8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 01:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Validity Not Before: Sep 3 01:15:33 2026 GMT Not After : Sep 10 01:15:33 2026 GMT Subject: CN=6a98ca35-fa3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:e7:17:fe:58:f6:f1:4a:1b:19:d5:e2:24: 96:67:33:7c:a2:35:5d:c0:77:3a:15:29:a2:44:52: 7e:dd:4b:41:05:60:91:64:9a:17:78:c7:d4:7d:df: b3:cf:1b:8d:7b:af:c0:4f:4e:79:e8:ce:d0:90:3f: e0:87:d0:43:9b:a8:1c:14:a4:c2:71:db:bb:e4:2a: f0:da:72:e7:72:f3:e1:68:43:5d:d2:9d:96:83:5d: 72:df:4e:35:34:ed:2d:ca:5b:39:8d:ae:55:8b:f3: 3f:31:2e:7f:d9:63:43:55:9b:65:48:1a:29:a2:6c: 39:f0:b8:4f:25:5d:13:8b:b3:51:72:f5:0e:c9:f1: 4c:67:0c:99:22:08:f3:61:4a:ec:b5:ff:81:e9:96: 17:85:c7:5d:fd:ca:be:61:45:93:28:a5:bc:03:02: 1b:78:7c:8f:70:70:8c:87:25:1c:bc:c3:ea:e4:e2: 87:36:a9:08:ee:cb:8e:cc:33:f9:db:3c:0c:36:3e: 2b:07:c6:d0:41:8d:d0:ca:cf:b5:3b:d3:89:44:78: e7:7f:e3:00:aa:24:f9:03:14:2a:48:46:1d:55:ed: ad:1a:c6:d6:32:3b:38:dd:e8:72:37:11:be:ef:e6: e6:c0:16:eb:a4:a3:33:51:7a:e9:95:eb:a3:51:91: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D2:53:DF:A5:14:37:B3:62:F4:44:D3:D8:81:FB:23:C5:25:E1:04 X509v3 Authority Key Identifier: keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:14:9c:28:15:52:64:95:6a:42:e6:4e:9a:38:d8:71:bc:0d: 42:57:44:cc:5d:af:1e:5f:76:5f:f8:c5:23:f8:fb:fd:f2:d0: 21:e4:cb:61:10:1c:9f:d2:93:f9:9a:f0:a8:17:8b:7d:ec:de: 83:70:bf:75:a9:e8:9f:0a:b0:09:0b:29:52:1c:e5:6c:b0:68: e1:f5:be:26:91:d7:34:83:ca:dd:0d:92:6d:8a:a3:55:98:47: f7:64:94:96:d5:c9:c5:63:5e:a5:dc:48:ff:bc:5f:e6:e5:9c: 1a:65:bb:d4:bf:00:86:90:1a:a8:22:81:9c:a6:8f:a0:14:65: 46:78:dc:e0:60:f1:d6:64:c7:d8:fe:e7:12:bd:d1:7c:ef:16: 92:66:58:a2:57:05:62:6c:a2:9f:40:95:cd:0f:0c:db:83:55: d8:36:56:b4:81:18:99:56:18:ad:e0:98:03:bc:6c:9b:81:98: 8d:dd:78:ee:35:ea:05:52:0a:7f:85:53:57:2f:05:55:13:3a: c9:4a:a4:fc:ca:e0:5f:a6:28:5a:d1:ec:b3:6b:43:df:18:f9: 4e:e1:be:fe:3c:63:4c:e9:91:3a:ee:87:5d:d9:f1:0f:a7:2b: ce:94:97:ca:6f:95:93:35:ef:35:e0:cd:44:52:5e:46:0a:a5: 5c:bd:dc:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx NTAwQURDNzYwHhcNMjYwOTAzMDExNTMzWhcNMjYwOTEwMDExNTMzWjAYMRYwFAYD VQQDEw02YTk4Y2EzNS1mYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv//nF/5Y9vFKGxnV4iSWZzN8ojVdwHc6FSmiRFJ+3UtBBWCRZJoXeMfUfd+z zxuNe6/AT0556M7QkD/gh9BDm6gcFKTCcdu75Crw2nLncvPhaENd0p2Wg11y3041 NO0tyls5ja5Vi/M/MS5/2WNDVZtlSBopomw58LhPJV0Ti7NRcvUOyfFMZwyZIgjz YUrstf+B6ZYXhcdd/cq+YUWTKKW8AwIbeHyPcHCMhyUcvMPq5OKHNqkI7suOzDP5 2zwMNj4rB8bQQY3Qys+1O9OJRHjnf+MAqiT5AxQqSEYdVe2tGsbWMjs43ehyNxG+ 7+bmwBbrpKMzUXrpleujUZEe3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfSU9+l FDezYvRE09iB+yPFJeEEMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRB SXhzc1N4TklHLUVWQUszSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPhScKBVSZJVqQuZOmjjYcbwNQldEzF2vHl92X/jFI/j7/fLQIeTLYRAcn9KT +ZrwqBeLfezeg3C/danonwqwCQspUhzlbLBo4fW+JpHXNIPK3Q2SbYqjVZhH92SU ltXJxWNepdxI/7xf5uWcGmW71L8AhpAaqCKBnKaPoBRlRnjc4GDx1mTH2P7nEr3R fO8WkmZYolcFYmyin0CVzQ8M24NV2DZWtIEYmVYYreCYA7xsm4GYjd147jXqBVIK f4VTVy8FVRM6yUqk/MrgX6YoWtHss2tD3xj5TuG+/jxjTOmROu6HXdnxD6crzpSX ym+VkzXvNeDNRFJeRgqlXL3cLA== -----END CERTIFICATE-----Generated at Sat Sep 5 00:57:23 2026 by rpki-client