$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json) Hash identifier: lDp3aruQzkYpEkrWDXYhfebJoasmJPEgIkc/z08w6xQ= Subject key identifier: 7F:04:E1:9A:7D:E6:19:90:14:C7:CE:90:D5:E7:4B:B3:21:2D:EB:91 Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft Manifest number: D8 Signing time: Thu 03 Sep 2026 06:51:32 +0000 Manifest this update: Thu 03 Sep 2026 06:51:31 +0000 Manifest next update: Thu 10 Sep 2026 06:51:31 +0000 Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: 6BxN+500stMPC3DIwL3sSnD0/sRjrVdKDGmK9XjcHn4=) 2: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: znQCSmWYjAzJ99g/MnFKRiPRCuuveVvzPYPlkOv1NBM=) 3: 21C5B04263A311F096468248C4F9AE02.roa (hash: ZAT1gq4fsyyEvWAh5Wb9WrqtHt9uUHF0Lm9+fNRhxOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Validity Not Before: Sep 3 06:51:31 2026 GMT Not After : Sep 10 06:51:31 2026 GMT Subject: CN=6a9918f4-95bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ee:a8:7f:21:cc:63:51:30:3f:93:6d:fa:35: 52:33:43:bc:f9:ec:26:24:aa:83:ba:fe:54:93:4a: d6:e7:a8:a9:c7:7e:d9:a7:9b:cc:b4:da:4e:a6:93: 54:d8:ef:2c:3b:33:9a:73:ec:45:b3:44:a7:b6:11: 6a:bd:77:b6:b8:d6:a9:39:1b:47:d7:f8:58:ee:bb: 42:8b:50:68:be:d9:dc:16:5d:7d:53:e7:39:66:ff: ee:a2:cc:e7:1b:01:65:4c:5e:14:55:5e:12:eb:95: 39:9a:49:69:ea:33:0a:b3:75:d0:b9:99:d8:6f:08: da:cf:d9:57:d5:55:92:5d:95:ee:bd:3e:98:68:7f: a6:74:ee:be:72:a6:0b:88:a2:9b:22:9f:59:53:22: 80:98:37:f1:e4:84:38:5b:a2:dc:e9:f4:34:b7:36: 4f:42:d5:cf:7e:d0:63:49:89:d2:88:40:35:96:41: be:be:43:4f:50:70:6d:02:62:be:09:ff:14:c0:57: f5:20:6c:34:82:1a:4b:14:33:f7:01:f9:53:bb:ab: 87:80:9c:91:70:39:d9:7c:dd:64:af:f9:48:4b:e7: 79:84:99:d4:3e:1f:44:85:fb:04:fe:d4:9a:09:dc: fc:4d:a6:94:b1:da:47:d9:60:ec:5f:01:40:02:05: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:04:E1:9A:7D:E6:19:90:14:C7:CE:90:D5:E7:4B:B3:21:2D:EB:91 X509v3 Authority Key Identifier: keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c2:87:8b:4d:26:cf:71:11:63:5e:f5:02:95:fc:43:58:b9: a0:8d:73:b5:37:7c:ae:fb:6d:43:20:08:98:fb:da:7a:64:95: f7:9b:94:fc:7e:4a:6d:42:be:9c:38:c5:38:83:87:13:d6:88: 1b:32:ea:3d:42:5b:c5:d9:31:bd:1b:5e:d0:28:da:5b:50:95: e8:69:01:13:8b:19:51:24:a0:5f:e0:ff:99:55:6e:d9:a1:4f: c5:b7:cd:af:25:ab:c8:1a:81:34:d7:02:99:7a:12:a0:13:8e: 25:93:e3:72:68:7f:05:4c:22:6e:bc:34:b9:2b:7b:d1:ab:0f: 32:4a:57:89:43:12:64:83:b7:48:a3:ad:a5:03:82:66:6e:e9: 84:79:cc:03:5a:73:98:eb:ee:21:6d:a1:81:b0:2e:17:12:03: 91:5e:34:07:11:07:cf:cd:92:9e:cd:5f:40:44:26:1e:32:4a: 8e:8a:e8:ee:66:a8:94:91:12:de:33:12:31:79:f4:7e:7f:81: fc:1f:48:71:a5:a3:52:79:b5:fd:77:be:c2:4a:68:1a:e1:c2: a0:7f:fd:7e:7a:4d:27:7f:4e:a8:4b:7b:98:22:a2:9a:47:34: 40:5d:05:2e:a8:97:1b:94:94:13:67:29:03:b9:50:4b:e3:6c: ac:36:b4:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkzMDkxMTAvBgNVBAUTKDdEOEZBMEJFRjZBRUY3MUJERjg4Mzg1OEY3MzYxOUQz QjU5RTI3NzcwHhcNMjYwOTAzMDY1MTMxWhcNMjYwOTEwMDY1MTMxWjAYMRYwFAYD VQQDEw02YTk5MThmNC05NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmO6ofyHMY1EwP5Nt+jVSM0O8+ewmJKqDuv5Uk0rW56ipx37Zp5vMtNpOppNU 2O8sOzOac+xFs0SnthFqvXe2uNapORtH1/hY7rtCi1BovtncFl19U+c5Zv/uoszn GwFlTF4UVV4S65U5mklp6jMKs3XQuZnYbwjaz9lX1VWSXZXuvT6YaH+mdO6+cqYL iKKbIp9ZUyKAmDfx5IQ4W6Lc6fQ0tzZPQtXPftBjSYnSiEA1lkG+vkNPUHBtAmK+ Cf8UwFf1IGw0ghpLFDP3AflTu6uHgJyRcDnZfN1kr/lIS+d5hJnUPh9EhfsE/tSa Cdz8TaaUsdpH2WDsXwFAAgUn7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8E4Zp9 5hmQFMfOkNXnS7MhLeuRMB8GA1UdIwQYMBaAFH2PoL72rvcb34g4WPc2GdO1nid3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTMwOS85ODkxRTkyRTYx M0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9mWS1ndnZhdTl4dmZpRGhZOXpZWjA3V2VK M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUozYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTMwOS85ODkxRTkyRTYxM0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9mWS1ndnZhdTl4 dmZpRGhZOXpZWjA3V2VKM2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXsKHi00mz3ERY171ApX8Q1i5oI1ztTd8rvttQyAImPvaemSV95uU/H5KbUK+ nDjFOIOHE9aIGzLqPUJbxdkxvRte0CjaW1CV6GkBE4sZUSSgX+D/mVVu2aFPxbfN ryWryBqBNNcCmXoSoBOOJZPjcmh/BUwibrw0uSt70asPMkpXiUMSZIO3SKOtpQOC Zm7phHnMA1pzmOvuIW2hgbAuFxIDkV40BxEHz82Sns1fQEQmHjJKjoro7maolJES 3jMSMXn0fn+B/B9IcaWjUnm1/Xe+wkpoGuHCoH/9fnpNJ39OqEt7mCKimkc0QF0F LqiXG5SUE2cpA7lQS+NsrDa0sg== -----END CERTIFICATE-----Generated at Sat Sep 5 02:07:46 2026 by rpki-client