$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft File: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json) Hash identifier: sR99toOWPTMFqGaAbWLRey67EqRFiDlIqVIOmAdShLY= Subject key identifier: 55:2A:53:5D:29:A5:DB:10:CA:CF:1E:BC:E1:F6:33:B8:AD:65:AF:A6 Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft Manifest number: 89 Signing time: Thu 27 Aug 2026 07:03:29 +0000 Manifest this update: Thu 27 Aug 2026 07:03:28 +0000 Manifest next update: Thu 03 Sep 2026 07:03:28 +0000 Files and hashes: 1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: b4vDZe9NOkrN6YQXnY/duDACIHCrFFT+M2Fkgeq4uaw=) 2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: FWaWZRn2VagzBM02EknVAFE8HgmoQjfzWkVbJA60FRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 06:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Validity Not Before: Aug 27 07:03:28 2026 GMT Not After : Sep 3 07:03:28 2026 GMT Subject: CN=6a8fe141-a194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:15:2b:95:98:84:a7:df:08:46:33:28:3f:18: e2:e9:47:0f:28:9e:db:c6:50:8e:e6:3f:f0:ef:e3: 25:78:be:37:c0:9c:9e:4e:4b:51:bf:da:9d:ef:0d: 02:e2:0e:ba:a1:98:98:0a:90:1f:38:10:e2:53:7d: a8:98:cf:9d:55:02:15:de:cb:30:85:99:cb:42:29: 28:b6:2f:ff:eb:fb:39:fe:89:8f:dd:a1:07:ea:f0: da:70:7c:e4:51:41:76:a0:7a:fd:03:ed:5b:f7:3f: 15:51:e7:ef:6e:12:4e:70:97:73:1c:55:77:3b:4c: 83:5d:a1:ce:a6:d2:7d:d6:b8:f7:57:05:3b:3f:da: 57:f5:91:0c:25:47:1b:69:35:3e:43:7c:67:34:e6: 6a:17:fb:38:5a:ac:80:5f:64:42:0b:b8:d1:c0:6e: ed:08:bd:45:00:d2:e6:fa:cd:99:6c:8c:50:ef:30: f1:15:e3:aa:cc:68:5e:da:d7:16:f4:d8:19:41:11: 6c:cb:60:5b:cd:2f:a8:be:4b:69:27:a1:2b:5e:25: 0f:e7:b5:77:1d:13:a0:2c:8a:b6:28:18:e2:87:e7: d8:5c:07:50:23:e8:e5:30:dc:d9:57:0f:3e:db:4f: 9f:0a:89:dd:da:92:10:51:b4:58:ac:9c:c5:e5:41: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2A:53:5D:29:A5:DB:10:CA:CF:1E:BC:E1:F6:33:B8:AD:65:AF:A6 X509v3 Authority Key Identifier: keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:38:91:83:79:ba:e1:46:05:5d:05:be:83:9e:e4:85:6f:ee: 6e:b0:9d:be:55:f2:4c:1f:09:71:53:be:13:6f:53:7c:a4:82: 31:19:96:d8:ab:d8:2f:76:59:50:8a:3b:36:29:7a:eb:24:7c: ad:f5:8b:9f:ad:5e:3a:34:7e:bc:a4:2a:ec:26:9f:51:22:b6: ad:d2:74:3c:57:68:23:1d:66:bf:1c:e5:85:7d:1e:b4:2a:8f: fd:59:f7:67:8d:64:3e:3c:72:3c:10:7c:1d:64:62:51:c3:1c: 9e:98:ed:b9:09:e6:74:59:d5:2d:aa:42:c5:bd:e6:01:a2:46: 8b:0b:ac:ca:24:20:29:b8:99:74:46:0f:1b:fc:a6:c6:37:55: 3f:06:80:72:3c:1a:e7:b1:c5:15:bc:5d:52:92:cb:33:5f:7e: 98:ea:e5:77:57:60:c1:27:c2:01:04:06:b6:76:8f:51:6e:60: 08:5e:5b:b0:d1:3e:81:db:7d:c3:e6:4f:6b:e4:76:85:e2:5f: 6c:53:04:0d:a5:82:f1:3f:8f:1e:7a:3c:7a:d6:7e:f0:5a:c5: 4d:0b:1a:86:d3:55:a9:16:00:c0:81:84:61:b8:2c:c4:a7:c5: 89:07:fc:00:4c:07:3b:4e:b1:85:e1:75:79:17:57:fe:52:84: 12:32:5e:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2ODIxMTAvBgNVBAUTKDIzRTFFNDI1OUZBQkNENDlGRDU4Q0NENDZDRjIwMENE MTIxRTJFQUMwHhcNMjYwODI3MDcwMzI4WhcNMjYwOTAzMDcwMzI4WjAYMRYwFAYD VQQDEw02YThmZTE0MS1hMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BUrlZiEp98IRjMoPxji6UcPKJ7bxlCO5j/w7+MleL43wJyeTktRv9qd7w0C 4g66oZiYCpAfOBDiU32omM+dVQIV3sswhZnLQikoti//6/s5/omP3aEH6vDacHzk UUF2oHr9A+1b9z8VUefvbhJOcJdzHFV3O0yDXaHOptJ91rj3VwU7P9pX9ZEMJUcb aTU+Q3xnNOZqF/s4WqyAX2RCC7jRwG7tCL1FANLm+s2ZbIxQ7zDxFeOqzGhe2tcW 9NgZQRFsy2BbzS+ovktpJ6ErXiUP57V3HROgLIq2KBjih+fYXAdQI+jlMNzZVw8+ 20+fCond2pIQUbRYrJzF5UEf0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUqU10p pdsQys8evOH2M7itZa+mMB8GA1UdIwQYMBaAFCPh5CWfq81J/VjM1GzyAM0SHi6s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY4Mi8wNzI5REQyRUQ1 QkExMUYwQUI5MERBN0NDNEY5QUUwMi9JLUhrSlotcnpVbjlXTXpVYlBJQXpSSWVM cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktSGtKWi1yelVuOVdNelViUElBelJJZUxxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY4Mi8wNzI5REQyRUQ1QkExMUYwQUI5MERBN0NDNEY5QUUwMi9JLUhrSlotcnpV bjlXTXpVYlBJQXpSSWVMcXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdziRg3m64UYFXQW+g57khW/ubrCdvlXyTB8JcVO+E29TfKSCMRmW2KvYL3ZZ UIo7Nil66yR8rfWLn61eOjR+vKQq7CafUSK2rdJ0PFdoIx1mvxzlhX0etCqP/Vn3 Z41kPjxyPBB8HWRiUcMcnpjtuQnmdFnVLapCxb3mAaJGiwusyiQgKbiZdEYPG/ym xjdVPwaAcjwa57HFFbxdUpLLM19+mOrld1dgwSfCAQQGtnaPUW5gCF5bsNE+gdt9 w+ZPa+R2heJfbFMEDaWC8T+PHno8etZ+8FrFTQsahtNVqRYAwIGEYbgsxKfFiQf8 AEwHO06xheF1eRdX/lKEEjJeCA== -----END CERTIFICATE-----Generated at Thu Aug 27 09:44:37 2026 by rpki-client