$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json) Hash identifier: LbNJP5AXSlmt5XxXCW9SETwDAF79ds9leNiIRSUn5pc= Subject key identifier: 54:02:AD:8F:BC:D1:38:28:9B:61:FB:38:82:DF:25:8C:DE:69:02:25 Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft Manifest number: 0211 Signing time: Fri 07 Aug 2026 02:57:01 +0000 Manifest this update: Fri 07 Aug 2026 02:57:01 +0000 Manifest next update: Fri 14 Aug 2026 02:57:01 +0000 Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: mcbonSKg6Q+AmQLl6lwA3gSvQfwvaE6CElb6LU/OJro=) 2: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: 24csX/QK3Rfd0VNE+KVxc4JCo6pG7QuAjIc0XCJ9N5M=) 3: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: Pn3t7Q2xH1MHU013jHPh+VPRQQXIgRH1a2aFUOJ0g9I=) 4: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: V73rrflKLTiVNK5j3ada2jgTwgOJk55X18oFDRCNd5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 02:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: Aug 7 02:57:01 2026 GMT Not After : Aug 14 02:57:01 2026 GMT Subject: CN=6a75497d-e5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:e2:28:d2:f6:69:c3:9a:0f:cb:6f:d7:da: cb:ba:86:41:dc:b8:dd:c6:ce:bf:e5:5a:30:07:d4: 86:c3:fd:6a:95:61:2b:53:10:8e:20:7e:f5:b9:89: 39:5d:d8:c2:ee:89:de:c6:88:9f:31:f8:3e:15:bc: 11:24:bd:5a:bd:4b:c7:49:40:5f:c8:70:2d:a6:ad: 0b:bb:15:32:64:9b:a7:b3:65:27:2c:66:05:1b:0d: c3:f9:65:d2:ab:b4:57:4e:3f:d0:44:8a:36:40:d6: 95:96:da:54:a7:1c:82:63:e2:da:f6:86:ba:76:27: ef:a0:4f:58:c5:0b:b1:27:87:d1:ae:54:8c:4f:75: a7:be:78:01:b6:6f:74:ef:de:af:9f:73:36:c5:d9: 02:c7:33:61:e0:4d:5e:b6:de:ab:6a:dd:cf:7b:7f: 01:1f:29:05:6d:5a:51:ba:a4:cf:1b:c2:4f:13:75: 56:bf:d7:5b:64:b3:8b:2b:12:62:b6:78:03:12:e4: cc:c8:4d:84:b3:9c:d5:59:8f:e9:31:b8:a1:ef:d6: 35:10:50:f7:37:a3:41:1a:2e:7d:a6:c9:54:b0:bf: d1:ec:40:80:7f:c9:d6:d1:1f:2a:d7:b1:47:c9:34: e7:a8:fd:05:7a:a5:c3:c5:9b:18:44:60:47:e6:6a: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:02:AD:8F:BC:D1:38:28:9B:61:FB:38:82:DF:25:8C:DE:69:02:25 X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:22:07:1f:10:6e:d2:72:da:b9:6d:8e:08:8c:98:25:1f:c3: 51:7a:c2:4d:d4:fa:ab:b2:35:1b:97:a8:14:7e:68:d5:58:65: f5:90:e1:30:43:06:d5:68:6e:0a:4a:54:a4:d7:12:bf:fe:70: 8c:b3:cf:8e:fe:1e:f9:91:84:6d:c5:d4:2b:ce:c5:ef:08:4a: f3:8c:fb:c5:16:8c:8d:6c:e0:a6:c1:07:d7:a5:f1:01:cb:e1: f9:5e:12:3c:da:95:d8:d6:8e:97:29:c3:91:61:15:8b:cf:e2: c1:1e:1d:52:6e:2d:89:d3:ea:95:02:c8:40:6e:ae:5e:3d:32: 1f:34:03:d0:c2:2d:70:04:29:0d:71:65:20:92:da:9e:cd:ca: 2f:b4:f4:32:cb:92:f4:4a:f9:d8:22:3a:6d:ac:f9:72:3c:11: 62:9b:33:20:4d:47:6d:32:da:b5:22:94:58:d1:1d:fc:bf:73: b3:02:3e:21:da:13:d0:c9:de:95:e7:be:fd:8b:53:cb:b1:44: 4d:9a:84:61:33:0d:ff:ca:da:44:8b:c0:53:a5:09:37:ed:63: 82:a9:b7:b2:2b:a7:31:23:1e:01:e4:09:f3:17:58:b8:e5:da: f9:bd:24:f0:5f:bf:eb:8d:c4:b7:89:9c:fb:f0:6d:03:43:e8: 04:08:83:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5 MDJGMERFOEIwHhcNMjYwODA3MDI1NzAxWhcNMjYwODE0MDI1NzAxWjAYMRYwFAYD VQQDEw02YTc1NDk3ZC1lNWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQbiKNL2acOaD8tv19rLuoZB3Ljdxs6/5VowB9SGw/1qlWErUxCOIH71uYk5 XdjC7onexoifMfg+FbwRJL1avUvHSUBfyHAtpq0LuxUyZJuns2UnLGYFGw3D+WXS q7RXTj/QRIo2QNaVltpUpxyCY+La9oa6difvoE9YxQuxJ4fRrlSMT3WnvngBtm90 796vn3M2xdkCxzNh4E1ett6rat3Pe38BHykFbVpRuqTPG8JPE3VWv9dbZLOLKxJi tngDEuTMyE2Es5zVWY/pMbih79Y1EFD3N6NBGi59pslUsL/R7ECAf8nW0R8q17FH yTTnqP0FeqXDxZsYRGBH5mrjKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQCrY+8 0Tgom2H7OILfJYzeaQIlMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4 NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYyMC8wRTkxOTkzNDg4NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52 UnpKSkJha1lyeVNRTHczb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqyIHHxBu0nLauW2OCIyYJR/DUXrCTdT6q7I1G5eoFH5o1Vhl9ZDhMEMG1Whu CkpUpNcSv/5wjLPPjv4e+ZGEbcXUK87F7whK84z7xRaMjWzgpsEH16XxAcvh+V4S PNqV2NaOlynDkWEVi8/iwR4dUm4tidPqlQLIQG6uXj0yHzQD0MItcAQpDXFlIJLa ns3KL7T0MsuS9Er52CI6baz5cjwRYpszIE1HbTLatSKUWNEd/L9zswI+IdoT0Mne lee+/YtTy7FETZqEYTMN/8raRIvAU6UJN+1jgqm3siunMSMeAeQJ8xdYuOXa+b0k 8F+/643Et4mc+/BtA0PoBAiD0Q== -----END CERTIFICATE-----Generated at Fri Aug 7 11:39:26 2026 by rpki-client