$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: Rffel3dsqyWP8PjoTzrgUxGFsBXRK71YH5bkRJpmqbM= Subject key identifier: 6A:E1:C8:FD:62:09:97:B8:E1:C9:4D:72:9D:1E:C5:F4:5B:01:EC:C2 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 0261 Signing time: Thu 27 Aug 2026 02:00:57 +0000 Manifest this update: Thu 27 Aug 2026 02:00:57 +0000 Manifest next update: Thu 03 Sep 2026 02:00:57 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: oNTdqJkSq9yVPEadtizOoLC/UkYTWkJ9+69OhrIt6nk=) 2: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=) 3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=) 4: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: TVUqImfkH05qiQ19RCKAlmLm+qu0pav08yARc+QiM3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Aug 27 02:00:57 2026 GMT Not After : Sep 3 02:00:57 2026 GMT Subject: CN=6a8f9a59-2b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:12:89:8a:12:a4:4c:9e:ed:42:33:8f:5f: 41:8b:70:3b:26:34:0f:8d:4a:da:61:8e:c9:fb:a4: 87:54:c4:59:57:ee:1e:35:6e:95:2e:28:f8:2c:85: 23:f9:59:47:80:12:57:4d:19:06:21:f4:42:76:c2: 54:8e:37:68:21:8c:98:b4:03:80:72:88:7d:d4:c5: b9:08:d5:30:fe:ab:70:1b:c4:1c:9b:f3:34:9a:ff: 27:cc:77:66:7e:b9:65:b1:a1:30:87:39:9a:f2:4b: 15:4b:b7:02:01:ee:b9:23:d7:4a:1b:30:e1:7a:b2: f7:99:70:d6:51:44:c7:b0:bb:a4:57:85:8f:53:af: 8a:1d:36:07:49:c9:ba:6a:d7:36:08:73:93:82:f0: a9:dd:07:bb:a0:1c:e5:ed:fd:d5:e9:c5:1a:d9:69: d0:b3:a9:96:f9:98:98:3f:8b:cc:77:bc:ef:80:a6: 61:9e:a6:6e:c2:6a:a2:d6:0b:34:6c:c8:6e:17:02: 8d:c2:48:7b:bf:8e:47:bb:b9:4d:f5:ee:41:d4:4c: 7b:73:5d:f1:da:bc:3c:8b:1d:ea:8f:d1:02:fb:27: 52:bd:12:d0:5a:df:5a:20:d2:59:de:19:a2:4f:89: 11:a1:8f:48:47:cd:e6:9f:b3:99:4d:a4:04:4f:6c: f9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E1:C8:FD:62:09:97:B8:E1:C9:4D:72:9D:1E:C5:F4:5B:01:EC:C2 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:de:f6:b6:73:df:75:dd:ce:a8:9a:01:6b:dc:85:07:e1:43: 51:5e:8f:2d:83:20:6c:93:e7:fb:e8:9c:24:83:2c:2a:bc:4c: e1:c8:99:87:8f:4c:83:74:b4:78:2a:d5:b9:1e:47:c3:94:0d: 00:4f:49:cb:8c:74:1d:27:b8:4b:3b:49:fe:4d:8d:54:97:e2: 68:25:47:44:c9:8a:06:e9:44:b3:bb:33:dd:ef:e2:82:ac:5f: 12:9f:08:a0:fa:d8:33:2c:05:3d:97:6f:93:4a:56:18:f8:9b: 9a:52:4a:f3:e0:b9:43:33:4c:fa:0a:3a:7a:bb:53:70:64:a5: 58:0d:d0:af:7c:f6:53:75:2d:2f:88:b5:19:30:15:cc:a4:3e: 8e:c4:4e:54:37:1b:5f:cc:7e:9b:33:91:b0:63:8e:96:18:67: 41:a1:6d:f2:03:9b:74:b3:4a:56:2b:03:bb:55:34:f5:8d:3b: 35:23:7b:86:46:1d:22:7b:e5:be:6f:5c:97:96:7d:0d:ac:e2: a2:f0:f7:e1:7d:95:f9:db:d6:e4:af:ce:83:58:f0:68:9d:2e: 73:43:75:9a:cb:a6:7c:a6:a8:c0:61:52:1b:44:cf:8a:ab:7d: 24:2c:53:f5:4c:fe:61:40:07:70:46:bf:dc:60:05:27:88:55: 6d:d1:03:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYwODI3MDIwMDU3WhcNMjYwOTAzMDIwMDU3WjAYMRYwFAYD VQQDEw02YThmOWE1OS0yYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvMSiYoSpEye7UIzj19Bi3A7JjQPjUraYY7J+6SHVMRZV+4eNW6VLij4LIUj +VlHgBJXTRkGIfRCdsJUjjdoIYyYtAOAcoh91MW5CNUw/qtwG8Qcm/M0mv8nzHdm frllsaEwhzma8ksVS7cCAe65I9dKGzDherL3mXDWUUTHsLukV4WPU6+KHTYHScm6 atc2CHOTgvCp3Qe7oBzl7f3V6cUa2WnQs6mW+ZiYP4vMd7zvgKZhnqZuwmqi1gs0 bMhuFwKNwkh7v45Hu7lN9e5B1Ex7c13x2rw8ix3qj9EC+ydSvRLQWt9aINJZ3hmi T4kRoY9IR83mn7OZTaQET2z5bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrhyP1i CZe44clNcp0exfRbAezCMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw972tnPfdd3OqJoBa9yFB+FDUV6PLYMgbJPn++icJIMsKrxM4ciZh49Mg3S0 eCrVuR5Hw5QNAE9Jy4x0HSe4SztJ/k2NVJfiaCVHRMmKBulEs7sz3e/igqxfEp8I oPrYMywFPZdvk0pWGPibmlJK8+C5QzNM+go6ertTcGSlWA3Qr3z2U3UtL4i1GTAV zKQ+jsROVDcbX8x+mzORsGOOlhhnQaFt8gObdLNKVisDu1U09Y07NSN7hkYdInvl vm9cl5Z9DaziovD34X2V+dvW5K/Og1jwaJ0uc0N1msumfKaowGFSG0TPiqt9JCxT 9Uz+YUAHcEa/3GAFJ4hVbdEDjA== -----END CERTIFICATE-----Generated at Fri Aug 28 05:38:03 2026 by rpki-client