$ rpki-client -vvvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json) Hash identifier: kxZWalDsrUPrWNhrE1FED+DEfprB51xe1ItTWRYLlX4= Subject key identifier: 40:AB:3A:93:B6:A9:40:EC:47:68:1C:B8:CA:D5:5C:A0:EF:E0:22:72 Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Certificate serial: 21B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft Manifest number: 21A8 Signing time: Wed 26 Aug 2026 15:52:41 +0000 Manifest this update: Wed 26 Aug 2026 15:52:41 +0000 Manifest next update: Wed 02 Sep 2026 15:52:41 +0000 Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: NFJ4fAl7I91S/p+98NK5mRKK+AeQn9Bij6GJ8dIJlr0=) 2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: q6obv3XbPXxFh/9pkLqSgiabaqoDxZSpOGQbzF+b7F4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 15:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8625 (0x21b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Validity Not Before: Aug 26 15:52:41 2026 GMT Not After : Sep 2 15:52:41 2026 GMT Subject: CN=6a8f0bc9-d3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:9a:d9:fc:44:2b:f2:73:54:9b:cd:fe:e5: c0:db:0f:ac:1d:15:03:60:bc:60:49:66:fa:e8:d3: ab:09:53:12:57:a6:87:38:f4:87:a6:be:a0:e7:37: d4:fe:7d:af:6c:0d:d1:d4:b2:c1:ed:3d:f0:37:c0: 53:99:9b:c7:05:ea:2f:76:90:90:bf:e4:6c:02:e2: c5:58:77:ed:85:b1:98:0e:0b:69:c5:99:35:9d:26: 33:4c:47:e3:25:47:bb:57:14:1e:7d:a5:05:f6:48: 7b:89:0f:a6:b5:26:b8:55:75:83:2e:80:fb:75:02: 78:7b:b7:48:31:bc:c9:6d:42:60:ba:d2:27:a4:0c: e9:cf:4f:c4:93:c0:70:e7:6d:6f:90:c1:10:dc:55: 01:4c:2f:b8:ec:fc:bd:35:10:d0:4b:d9:e1:ef:5c: 63:fd:97:cf:dd:33:32:20:2d:e0:12:dd:be:d3:9c: 0b:b4:ff:05:5d:08:10:33:96:cc:e9:41:87:75:76: 55:a2:41:c5:54:fc:29:4b:65:cd:78:f7:2b:ea:61: 6b:31:e0:da:e4:a1:b2:b9:c1:3a:71:88:f6:de:72: 6e:ac:95:25:84:6b:14:c8:3e:c7:1d:3d:22:c3:28: 92:70:c8:37:a3:a4:8c:39:bf:66:92:2f:6d:2d:9b: 62:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AB:3A:93:B6:A9:40:EC:47:68:1C:B8:CA:D5:5C:A0:EF:E0:22:72 X509v3 Authority Key Identifier: keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:90:bd:66:5a:89:83:c4:df:83:f6:8f:0f:42:1b:e3:5b:f8: f2:9f:66:a2:e6:0e:05:96:08:c1:d5:4f:94:8d:d9:5a:4e:88: cd:78:02:2e:7a:2a:53:e7:dd:3c:15:d8:e2:97:b9:14:3a:94: 6e:82:35:90:c1:8b:5b:28:1e:19:7b:4b:90:b3:96:1e:7c:96: 5d:13:8c:e3:99:21:9b:ac:4f:0a:66:f5:c2:70:a5:47:89:78: 5d:9b:9b:b2:61:23:b6:7d:e0:66:f6:1b:0d:c3:03:e9:18:aa: 0c:b9:a5:34:55:f0:47:1e:a5:c5:f0:55:12:49:1b:1d:e7:d0: e7:21:48:60:20:3c:9f:5c:3b:bb:08:c0:fd:b0:9b:e4:ab:00: 54:e4:6b:a8:7f:d2:f3:7a:56:eb:1e:d0:80:d4:b2:08:13:24: cc:53:16:c8:07:b5:8d:de:2a:3c:27:eb:5c:08:5c:c5:cf:23: 94:0d:27:7e:6d:9a:c3:2a:a9:d3:80:e3:c5:e7:b9:6b:97:34: 06:93:f4:4f:3d:2c:39:85:e2:4a:2b:89:2a:df:e9:18:75:ed: e8:94:09:fd:2c:4f:51:ba:a6:bf:05:a8:58:b4:59:48:90:5c: 67:ba:be:74:a2:52:0c:d4:40:bb:7d:86:2d:11:d2:40:7d:c9: f3:1b:77:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5MEQxMTAvBgNVBAUTKDhEMzc4OTRCMDk0MUVDRkQ0RDZCMDVFMUUxNENBQjg1 Njk4N0IwNUQwHhcNMjYwODI2MTU1MjQxWhcNMjYwOTAyMTU1MjQxWjAYMRYwFAYD VQQDEw02YThmMGJjOS1kM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybma2fxEK/JzVJvN/uXA2w+sHRUDYLxgSWb66NOrCVMSV6aHOPSHpr6g5zfU /n2vbA3R1LLB7T3wN8BTmZvHBeovdpCQv+RsAuLFWHfthbGYDgtpxZk1nSYzTEfj JUe7VxQefaUF9kh7iQ+mtSa4VXWDLoD7dQJ4e7dIMbzJbUJgutInpAzpz0/Ek8Bw 521vkMEQ3FUBTC+47Py9NRDQS9nh71xj/ZfP3TMyIC3gEt2+05wLtP8FXQgQM5bM 6UGHdXZVokHFVPwpS2XNePcr6mFrMeDa5KGyucE6cYj23nJurJUlhGsUyD7HHT0i wyiScMg3o6SMOb9mki9tLZtiGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECrOpO2 qUDsR2gcuMrVXKDv4CJyMB8GA1UdIwQYMBaAFI03iUsJQez9TWsF4eFMq4Vph7Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODkwRC8yMUI3QTgwRUZG RkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQMU5hd1hoNFV5cmhXbUhz RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pUZUpTd2xCN1AxTmF3WGg0VXlyaFdtSHNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODkwRC8yMUI3QTgwRUZGRkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQ MU5hd1hoNFV5cmhXbUhzRjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv5C9ZlqJg8Tfg/aPD0Ib41v48p9mouYOBZYIwdVPlI3ZWk6IzXgCLnoqU+fd PBXY4pe5FDqUboI1kMGLWygeGXtLkLOWHnyWXROM45khm6xPCmb1wnClR4l4XZub smEjtn3gZvYbDcMD6RiqDLmlNFXwRx6lxfBVEkkbHefQ5yFIYCA8n1w7uwjA/bCb 5KsAVORrqH/S83pW6x7QgNSyCBMkzFMWyAe1jd4qPCfrXAhcxc8jlA0nfm2awyqp 04Djxee5a5c0BpP0Tz0sOYXiSiuJKt/pGHXt6JQJ/SxPUbqmvwWoWLRZSJBcZ7q+ dKJSDNRAu32GLRHSQH3J8xt3Pg== -----END CERTIFICATE-----Generated at Thu Aug 27 03:19:53 2026 by rpki-client